ulekmayang.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ulekmayang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Jan 2023 11:10:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 18 Jan 2023 12:10:22 GMT
Location: https://ulekmayang.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z39%2FjzOHjHr4Z8aMPWTBjWCPufKBeVNdbq%2F9ZKEMbSbmmrOhiqJl%2BfCxvzx329xPXNhs%2F2LnuPTnJNJyC8OXhnz2wXIzNAws8a0j%2F%2FSBBMWSa7KYvTKsAHKjbDOaGNZJww%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6e2401a6cb529-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b8b051d555b46b1e9e64faebf91b4ab
bdab7f1f4146f0e7c16665692e4f1edd83c10a24
e069730519f658e767ec8edb57edd8e2b1ccb18d4f0ade0920654eac18f83456
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E069730519F658E767EC8EDB57EDD8E2B1CCB18D4F0ADE0920654EAC18F83456"
Last-Modified: Tue, 17 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10425
Expires: Wed, 18 Jan 2023 14:04:07 GMT
Date: Wed, 18 Jan 2023 11:10:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb0c8d0984a1f09a012961a54cda03c6
1a8ad450a0241554ee4fc7d02fac7b83529e60f6
eee3ca879a67cc25ea89cb83de9521eea1b82845705c3e82169d4787ecb7dd3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE3CA879A67CC25EA89CB83DE9521EEA1B82845705C3E82169D4787ECB7DD3A"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11519
Expires: Wed, 18 Jan 2023 14:22:21 GMT
Date: Wed, 18 Jan 2023 11:10:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10258
Expires: Wed, 18 Jan 2023 14:01:20 GMT
Date: Wed, 18 Jan 2023 11:10:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 10:49:19 GMT
content-type: application/json
age: 1263
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MgKd9ak3ZZMJUONYvj2sU8L6NZHOxI2OBVaLlu8uiv8zK2ViFaj3X7RFGKOiSb46bpDGD7dOWA8=
x-amz-request-id: XZS64GNKAETET5FH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 10:45:22 GMT
age: 1500
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:22 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 9843870780f17d902d9752a483e9f91e
d6db66109b369b8f2962d3b241de5f6beb777790
3305f021dc4b83194298bab420df46088535ed48fa4cd541ff48087707e4fefd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "3305F021DC4B83194298BAB420DF46088535ED48FA4CD541FF48087707E4FEFD"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21540
Expires: Wed, 18 Jan 2023 17:09:23 GMT
Date: Wed, 18 Jan 2023 11:10:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 18 Jan 2023 10:17:25 GMT
age: 3178
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 79af32d8e279b4cfec147ab51cb6fcb3
d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6
bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 945
Cache-Control: max-age=166330
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:23 GMT
Etag: "63c7b6a8-1d7"
Expires: Fri, 20 Jan 2023 09:22:33 GMT
Last-Modified: Wed, 18 Jan 2023 09:06:48 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: x+4N1AL+0mYvP5XEzjop4Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XPrTo9BEvBLlWtqy+Zwr1M6qZY8=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8732
Expires: Wed, 18 Jan 2023 13:35:57 GMT
Date: Wed, 18 Jan 2023 11:10:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8732
Expires: Wed, 18 Jan 2023 13:35:57 GMT
Date: Wed, 18 Jan 2023 11:10:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8732
Expires: Wed, 18 Jan 2023 13:35:57 GMT
Date: Wed, 18 Jan 2023 11:10:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8732
Expires: Wed, 18 Jan 2023 13:35:57 GMT
Date: Wed, 18 Jan 2023 11:10:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8732
Expires: Wed, 18 Jan 2023 13:35:57 GMT
Date: Wed, 18 Jan 2023 11:10:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc498ee0b-a2b9-47cf-8161-03c86caa8c9f.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc498ee0b-a2b9-47cf-8161-03c86caa8c9f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 822378a3438fdf79b5ae81c485cf9a9c
7e7c3f015d1478c7dc0c108fc0bf6e74cb00d37a
345345df1e67f4700a81059901cc4050196910c9dd2f635197301c21e420eee4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc498ee0b-a2b9-47cf-8161-03c86caa8c9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5213
x-amzn-requestid: 324586fa-41fa-4995-a9d9-3bfbddea69f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LSaEdgIAMFnjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf42-51c2249d0761a5146a8d20fb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:06:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LXZFvt44IpTLZioHxzJ4q7GakB_10TdOSufsVcm0dY9LBgOoDQtmYg==
via: 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:50:29 GMT
age: 22796
etag: "7e7c3f015d1478c7dc0c108fc0bf6e74cb00d37a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2d78c9-2134-471e-bdb1-875c1b61ff8b.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2d78c9-2134-471e-bdb1-875c1b61ff8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ec6c49f056e786896d54fe22c242391
cc6b64ff3f09853843b62e555456a1ad9f0909fb
42f0571efba18630c8deee17e98c6939a7050b04f613ad10515caf503e496b4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2d78c9-2134-471e-bdb1-875c1b61ff8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5663
x-amzn-requestid: 9a1c75a4-1c8d-4bd2-b6ca-7fccb8b43c12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A0gF5goAMFveA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714e9-1d274e8074771db651e80979;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sAxuQECVKx0dfc2UM_E_70nKN8za1SBN4opMWr_74gT5ScurgZGVLw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:10:07 GMT
age: 46818
etag: "cc6b64ff3f09853843b62e555456a1ad9f0909fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 928e970121a035e9f8d537e4bfe6bf5c
ce4aadc6b3500508d1c4b42b76f09be4414b6eee
2da1438b17cf05aed64e565350dcc706420f2bae7e8c5e36d1b5bad38248c275
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3599
x-amzn-requestid: 5b743b27-b6d4-4d98-9984-3a5e17cb28e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1xH8BIAMFuZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f1-2f1031db0871abae4760d5b6;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: smM0mXHWYzOZzuSEzRIAzz6WEJEFNI0ysTBFSz1P_gcZMdEwfxSEYA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:52:59 GMT
age: 47846
etag: "ce4aadc6b3500508d1c4b42b76f09be4414b6eee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 015e1f23253643036d718d5a785be61b
55b5ce93ba3ab53b227aa1fdb60b6062d35ae2f0
78045e55e5e9966b1fddb9e3f734972611ea78e7cb78b92beb2e4adf56f724ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8939
x-amzn-requestid: 5fbb2a5d-5731-4fb0-8b95-cc59338862de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1nGMvoAMFrQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f0-14de6c94416a9ced1c284d5b;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xtPNgaK-8fYccAq_D-bA7rVmM2tq5-prvjbnn2yhlOVr_yT9uxYxdg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:10:07 GMT
age: 46818
etag: "55b5ce93ba3ab53b227aa1fdb60b6062d35ae2f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6543a616-79f5-4c5d-8f34-be53cb4c622d.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6543a616-79f5-4c5d-8f34-be53cb4c622d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d134f7ac9a5ca8ab7a9461bd20706bb7
aa47af3e7517390d10e89f0f18237cfdcc63cbed
3431c8027f09bb284fe48ef8e4458fd43d8cc961250601b3028b83a7ba19f6ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6543a616-79f5-4c5d-8f34-be53cb4c622d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13111
x-amzn-requestid: 7a9bb405-c68d-496f-b608-e9d295c44c50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0MStGBBIAMFXag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4c0dd-75d87c0d763744951f13febd;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:13:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jkIL919Q7OFO6bACXTrDan0f9D9rgrN0DJMQv1DYPLeWqT1CywCAEg==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 03:29:16 GMT
age: 27669
etag: "aa47af3e7517390d10e89f0f18237cfdcc63cbed"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f112ea3865f38cbbcc8400b58320fa0
dacc584338546bf60f26b2a0bec48e9b584640dc
7feb3c0691f40354701d1cb0bf3c834d1eeead4a7297fac3afc0f4a7ca2c94cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8853
x-amzn-requestid: ff98ec33-294a-4a13-b064-3cd4744cd2b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LLKHPnIAMF0vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf14-233cbc6407c6b138144d7abb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:05:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QZZaGtGl3Z-4G4DxO4R_gjfDdQVgJc30Ur9EyLAvbGFhv4LfaXziPQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:21:58 GMT
etag: "dacc584338546bf60f26b2a0bec48e9b584640dc"
content-type: image/jpeg
age: 46107
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 9843870780f17d902d9752a483e9f91e
d6db66109b369b8f2962d3b241de5f6beb777790
3305f021dc4b83194298bab420df46088535ed48fa4cd541ff48087707e4fefd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "3305F021DC4B83194298BAB420DF46088535ED48FA4CD541FF48087707E4FEFD"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21537
Expires: Wed, 18 Jan 2023 17:09:23 GMT
Date: Wed, 18 Jan 2023 11:10:26 GMT
Connection: keep-alive
c0.wp.com/c/6.1.1/wp-includes/css/classic-themes.min.css
200 OK 217 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/classic-themes.min.css
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /c/6.1.1/wp-includes/css/classic-themes.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: text/css
content-length: 217
last-modified: Tue, 25 Oct 2022 13:45:16 GMT
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.wp.com/p/jetpack/11.7.1/css/jetpack.css
200 OK 16 kB URL HTTP/2 c0.wp.com/p/jetpack/11.7.1/css/jetpack.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 4eb4f0672274feab8ff0a5bda50430b4
5a937bcc1255f0e62da97af8fc46266ec4854653
ca1577ee0c28f8c2492d64ecf3238a0294ada964287f1a6ec37850cb0a303c23
GET /p/jetpack/11.7.1/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 16 Jan 2023 17:26:50 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
200 OK 12 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
IP
File type ASCII text, with very long lines (47826)
Hash 1842a55ba6302c19e58646fa6ba008ff
6979e02a8d3641418440030ac49cca20d76e89f0
0c5964d78b5ea7781b087a0d9f539472728dad88f3a0e3d3324f5c34f785beb5
GET /c/6.1.1/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 11 Nov 2022 14:56:45 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-auto-ads-0.1.js
200 OK 7.6 kB URL HTTP/2 cdn.ampproject.org/v0/amp-auto-ads-0.1.js
IP
File type ASCII text, with very long lines (24963)
Hash 538b4aabc809bb622c2146109069e1c7
7c955b27860215682338ff5429363f1a7a69c332
bbf2da7e58baf03b23d74c91e7e554e913a4709184623b91f722677c16a4c701
GET /v0/amp-auto-ads-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 7579
date: Wed, 18 Jan 2023 11:10:26 GMT
expires: Wed, 18 Jan 2023 11:10:26 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "4d9ea421b078c4d3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-ad-0.1.js
200 OK 23 kB URL HTTP/2 cdn.ampproject.org/v0/amp-ad-0.1.js
IP
File type ASCII text, with very long lines (65534)
Hash 38deb46df1a77bb97f57fe219908cd5e
4c6a00f6a90b929d2efa13c9af5fdc4c34c4cf6a
bdfe09382df8a83afa21a81cd301be5dfb8d4a1e67edf3107e895e5a30e82aaa
GET /v0/amp-ad-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 23107
date: Wed, 18 Jan 2023 11:10:26 GMT
expires: Wed, 18 Jan 2023 11:10:26 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "231c19d46b5a5f26"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700%7CDomine%3A400%7CEuphoria+Script%3A400&display=swap&ver=11.5.1
200 OK 1.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700%7CDomine%3A400%7CEuphoria+Script%3A400&display=swap&ver=11.5.1
IP
Hash 1a17e4cd941067563a52b452e1528972
2efcb55dc8b3b4736529eb9277a58a59aad550d4
e582acf91ad5c8d3570c67c3b2029e1ccbf1cac2e49bf7d884d01ac259522484
GET /css?family=Open+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700%7CDomine%3A400%7CEuphoria+Script%3A400&display=swap&ver=11.5.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulekmayang.com
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 18 Jan 2023 11:10:26 GMT
date: Wed, 18 Jan 2023 11:10:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 966d8aba454b1398d8ad99c64904b557
f0cf08590a30e59bae466f4692c084270336c23e
8fd993d641b86056c1a1cb8e49fc92ef491ad33cf35ced8f1fd0919dd94e9d1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d3f3e6bea438b0206b5bd1218809e36c
09d71c4a81e59b878672653f58c861e019c99d58
c3e415af201ed439abdde79475e83af12c42f1fd3c2c53f12d3f0578a503e4fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C3E415AF201ED439ABDDE79475E83AF12C42F1FD3C2C53F12D3F0578A503E4FE"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7219
Expires: Wed, 18 Jan 2023 13:10:45 GMT
Date: Wed, 18 Jan 2023 11:10:26 GMT
Connection: keep-alive
c0.wp.com/c/6.1.1/wp-includes/js/comment-reply.min.js
200 OK 1.7 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/comment-reply.min.js
IP
File type ASCII text, with very long lines (2946)
Hash 4acb767788198d5cd6aa96d2a08baac2
4514cb14199285ba46c21697d70d28a11c478aa2
1caf55feec6642658afb38a81a7523c7a87170209bfbb3f5927c6614c3134645
GET /c/6.1.1/wp-includes/js/comment-reply.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
track.violetlovelines.com/src/jack.js?v=2.0.5
200 OK 2.5 kB URL HTTP/1.1 track.violetlovelines.com/src/jack.js?v=2.0.5
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (7297), with no line terminators
Hash 8ab6c39a47c349eb66cfb5ca4935b33a
2545dddb8819b4adf36aefda1b7f1d7aebec7e8d
d9de964a6e25fcaecf28bd7ddfe47204369fe3289590a6e7ed557ff1277047b2
GET /src/jack.js?v=2.0.5 HTTP/1.1
Host: track.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 11:10:26 GMT
Content-Type: application/javascript
Last-Modified: Tue, 17 Jan 2023 09:36:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63c66c0e-1c81"
Expires: Sat, 28 Jan 2023 11:10:26 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
way.specialblueitems.com/src/main.js?v=7.2.2
200 OK 2.5 kB URL HTTP/1.1 way.specialblueitems.com/src/main.js?v=7.2.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2461), with no line terminators
Hash d7e0500e7bb22b8c5bb130e431edec48
04255bae091b82fdeae138378966a827af1b601c
a33c56f5e58f4353d56d77fc020a92fbb8dd9c6e8aa001bf6a05dbfb9a013d8c
Analyzer Verdict Alert fortinet Malware
GET /src/main.js?v=7.2.2 HTTP/1.1
Host: way.specialblueitems.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 11:10:26 GMT
Content-Type: application/javascript
Content-Length: 2461
Last-Modified: Fri, 09 Dec 2022 11:45:49 GMT
Connection: keep-alive
ETag: "63931fed-99d"
Expires: Sat, 28 Jan 2023 11:10:26 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
track.violetlovelines.com/k5PvHT?&se_referrer=&default_keyword=Home%20-%20UekMayang.com&&frm6393271e20c24=script6393271e20c28&_cid=c173b3d5-aa0c-8a4c-da69-bf2ee86a79cd
200 OK 2.2 kB URL HTTP/1.1 track.violetlovelines.com/k5PvHT?&se_referrer=&default_keyword=Home%20-%20UekMayang.com&&frm6393271e20c24=script6393271e20c28&_cid=c173b3d5-aa0c-8a4c-da69-bf2ee86a79cd
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6306), with no line terminators
Hash dceb34d649d0b126c6c2e6c6b62b89e7
79d406cc2188238a62f37feed4051315c43ff404
79a8cb811766c414273334873da12e5c6e0a00c6963741ccd39a8108b35e8b86
GET /k5PvHT?&se_referrer=&default_keyword=Home%20-%20UekMayang.com&&frm6393271e20c24=script6393271e20c28&_cid=c173b3d5-aa0c-8a4c-da69-bf2ee86a79cd HTTP/1.1
Host: track.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 11:10:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa2jc8s5;Expires=Saturday, 18-Feb-2023 11:10:26 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI1XCI6MTY3NDA0MDIyNn0sXCJjYW1wYWlnbnNcIjp7XCI3XCI6MTY3NDA0MDIyNn0sXCJ0aW1lXCI6MTY3NDA0MDIyNn0ifQ.nKMxhNUObO7cxDORUQz63oa4jWOhaDzy3tKDThLQ1Zo;Expires=Wednesday, 05-Feb-2076 22:20:52 GMT;Max-Age=1674126626;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
template.interestmoments.com/bl-way.php?id=67567-88-5796795&pid=35&zid=9956
302 Found 0 B URL HTTP/2 template.interestmoments.com/bl-way.php?id=67567-88-5796795&pid=35&zid=9956
IP
ASN #2856 British Telecommunications PLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bl-way.php?id=67567-88-5796795&pid=35&zid=9956 HTTP/1.1
Host: template.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 18 Jan 2023 11:10:27 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://template.interestmoments.com/bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=KookSpook
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
template.interestmoments.com/bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=KookSpook
200 OK 466 B URL HTTP/2 template.interestmoments.com/bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=KookSpook
IP
ASN #2856 British Telecommunications PLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 306afffee717b7a0e72d04cca3d8ff4d
62ac06b90fee85214952171704583f3c78834efe
320484281ec578f2c4196bc7de37fc52da165f11e1c0b58cd11a2b842bdbacf4
GET /bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=KookSpook HTTP/1.1
Host: template.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ulekmayang.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:27 GMT
content-type: text/html; charset=UTF-8
content-length: 466
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5fe85a1451d4795012a5974dcaa8e15f
76f495057978cb59d15a1d9ea9dd6a91794cfd43
b15f2c8db537584b119182b1ce35cfb1ca5548d7f157d75870073fe95d2badf3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 18 Jan 2023 11:10:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 17 Jan 2023 21:56:40 GMT
Expires: Wed, 18 Jan 2023 21:56:40 GMT
ETag: "76f495057978cb59d15a1d9ea9dd6a91794cfd43"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
track.wg-aff.com/click?pid=1287&offer_id=67&ref_id=i3t7odd6gxufiq8r6o67&sub1=E2PKPGBJ6R
302 Found 0 B URL HTTP/2 track.wg-aff.com/click?pid=1287&offer_id=67&ref_id=i3t7odd6gxufiq8r6o67&sub1=E2PKPGBJ6R
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=1287&offer_id=67&ref_id=i3t7odd6gxufiq8r6o67&sub1=E2PKPGBJ6R HTTP/1.1
Host: track.wg-aff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-length: 0
location: https://trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63c7d3a42aba9c0001d42194; expires=Thu, 18 Jan 2024 11:10:28 GMT; secure; SameSite=None
afoffers={"67":1674040228}; expires=Thu, 18 Jan 2024 11:10:28 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8c6dc2c671c560841c8fc27f4cef196d
d7f2402db14964de6a71b8b84dd32925a327988d
1872a9b73ecf7ff53a0951627b8e82e7db9df29d3f242b79de04b292d309d4d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4590
Cache-Control: max-age=85744
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:28 GMT
Etag: "63c66da6-1d7"
Expires: Thu, 19 Jan 2023 10:59:32 GMT
Last-Modified: Tue, 17 Jan 2023 09:43:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=
301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /e2ncihl0/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 18 Jan 2023 11:10:28 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A&enctid=cpv9qg8z9kft&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674040228606893333&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
Set-Cookie: STIDREFERRAL=SID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=cpv9qg8z9kft; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1674040228606893333; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f718c840dd85c21e1fc964e036fa0815
1dd567382423635bfec3b616c299891f476d5d61
4dbeb36a4b3af783ee08644a5ebca50d4686c0d732c4c5b33d62583c588b2297
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4DBEB36A4B3AF783EE08644A5EBCA50D4686C0D732C4C5B33D62583C588B2297"
Last-Modified: Mon, 16 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5943
Expires: Wed, 18 Jan 2023 12:49:31 GMT
Date: Wed, 18 Jan 2023 11:10:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c58ef5b3702db94dcfbfe232c542af03
63f6c71543a4b5fd443554454c4511879e6227bd
d2e4831d7e551290b3117d6a1d818f3bee35366cc4ce0155cb621977cbdcd724
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2E4831D7E551290B3117D6A1D818F3BEE35366CC4CE0155CB621977CBDCD724"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5003
Expires: Wed, 18 Jan 2023 12:33:51 GMT
Date: Wed, 18 Jan 2023 11:10:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c58ef5b3702db94dcfbfe232c542af03
63f6c71543a4b5fd443554454c4511879e6227bd
d2e4831d7e551290b3117d6a1d818f3bee35366cc4ce0155cb621977cbdcd724
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2E4831D7E551290B3117D6A1D818F3BEE35366CC4CE0155CB621977CBDCD724"
Last-Modified: Mon, 16 Jan 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5003
Expires: Wed, 18 Jan 2023 12:33:51 GMT
Date: Wed, 18 Jan 2023 11:10:28 GMT
Connection: keep-alive
promo-cdn.worldofwarships.com/glows-37602/src/images/wowsl_logo.png
200 OK 10 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/wowsl_logo.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Hash 4d9371a87a4f9a0d6a8792e0397aa303
1308b49f8614f0ab05e81698daf5bfc4a2498bf0
68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
GET /glows-37602/src/images/wowsl_logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/png
content-length: 10514
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx000000000000000481454-0063c1a343-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/prem-ship.png
200 OK 53 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/prem-ship.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 24af85f4d83908010a8767dd766b20bd
5d134c6da618d2462f30398290cdbb0125a55aa0
8b1e8ec476107a88e815452f885b3b0ceb380add0bf8fc324b88f78c53198649
GET /glows-37602/src/images/prem-ship.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/png
content-length: 52609
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "24af85f4d83908010a8767dd766b20bd"
x-amz-request-id: tx000000000000000482043-0063c1a343-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/prem-icon.png
200 OK 62 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/prem-icon.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 8782ba37be835d15f1baadc4a39e5506
1a4e79d68766262525605e528f25cf77a9fe3229
5aa7576e1679ee8aab7fae60c8862b811466708bf8e281a33a2b9633ee583dd0
GET /glows-37602/src/images/prem-icon.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/png
content-length: 62427
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "8782ba37be835d15f1baadc4a39e5506"
x-amz-request-id: tx000000000000000480d03-0063c1a343-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8c6dc2c671c560841c8fc27f4cef196d
d7f2402db14964de6a71b8b84dd32925a327988d
1872a9b73ecf7ff53a0951627b8e82e7db9df29d3f242b79de04b292d309d4d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4590
Cache-Control: max-age=85744
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:28 GMT
Etag: "63c66da6-1d7"
Expires: Thu, 19 Jan 2023 10:59:32 GMT
Last-Modified: Tue, 17 Jan 2023 09:43:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
200 OK 3.8 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
IP
ASN #58286 Electric-IT Business S.R.L.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (835)
Hash 5155c3c283ffe7c64fd714fb793a93b0
ebd496d3d85a1d02e158221ca861a3c7a7e096e9
dd0896c091ccffed02a797469c69bd2701cf43f1bb02018b37c1d09c70e8f168
GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx000000000000000301a4c-0063c150d2-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:39:36+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/libs/oneTrustBanner.js
200 OK 12 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/libs/oneTrustBanner.js
IP
ASN #58286 Electric-IT Business S.R.L.
File type ASCII text, with very long lines (34224)
Hash 5927836a4eb883a6f7c73885ed215b69
bd76d981c283b67016377aa2d9726efe1bb21e4b
bc878df567271b96b5260faec032fa36474817a9c044745500f6530cba24e642
GET /glows-37602/src/libs/oneTrustBanner.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"9a2978c60dfa952243b458458bd6fe95"
x-amz-request-id: tx000000000000000480cef-0063c1a342-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tenor.wargaming.net/assets/campaigns/static/campaign_data_gtm_sender.js
200 OK 6.6 kB URL HTTP/1.1 tenor.wargaming.net/assets/campaigns/static/campaign_data_gtm_sender.js
IP
ASN #199524 G-Core Labs S.A.
File type HTML document, ASCII text, with very long lines (7249)
Hash 51b44a9f232d5cec869a12623ae6dbfd
19305e6be93c7944f3e4cd68d778a73bf4a03031
32d957fdbd3debc51e0df55c6af4dbf747c501d19fafdd75731cb9a02cc68107
GET /assets/campaigns/static/campaign_data_gtm_sender.js HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 18 Jan 2023 11:10:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Thu, 12 Jan 2023 09:09:33 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63bfce4d-4ced"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 773596e36fe4af70225f1ee08e977461
5595433fd09a22008b2c739f6626aef116ad5285
fb18080471e9a54e7d1c060d2e26b023f09c135e0d195e48917cd064549d7fdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A&enctid=cpv9qg8z9kft&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674040228606893333&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
200 OK 13 kB URL HTTP/2 promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A&enctid=cpv9qg8z9kft&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674040228606893333&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 13bd5437e4ad994e80c0bc225a7f4d09
64908227b988ddff6b5f9bfdbe589458adbdcda8
a109188674cd1dd4afc773c533845f4b36322e13e1a8be7aef3107f0d3ef96f3
GET /glows-37602/eu-no/?t=1&pub_id=1287&xid=63c7d3a42aba9c0001d42194&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A&enctid=cpv9qg8z9kft&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674040228606893333&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287 HTTP/1.1
Host: promo.worldofwarships.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"e33d014eb7accd282861240782267878"
x-amz-request-id: tx00000000000000030cc19-0063c15315-1dbc2cc6-ed1
cache: HIT
x-cached-since: 2023-01-17T12:49:03+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
200 OK 1.9 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
IP
File type JSON data\012- , ASCII text, with very long lines (5875), with no line terminators
Hash 23b49030e418c340a4d3b3c510f6558d
fd7f8e05f97e7bf21c83782409f6972b172121f1
0f1e442050ca65df6cbaa0371a5097b75cb8bd93d0a7df66dfb88c249ed86b71
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: application/x-javascript
content-length: 1898
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: I7SQMOQYw0Ck07PFEPZVjQ==
last-modified: Fri, 25 Nov 2022 10:09:39 GMT
etag: 0x8DACECD29F68FC0
x-ms-request-id: 22332b09-f01e-0147-73b6-0041d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 84511
expires: Thu, 19 Jan 2023 11:10:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e266cbebb4f4-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/Back.jpg
200 OK 554 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/Back.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 554 kB (554306 bytes)
Hash 5b1143e3f10fd52adf017a8c52710246
0eb93a177d800fd1c5498ab56ab2c3dbeffb1604
3f79426bfdbb1b3dd81395847178e30ca89e488ab1a55d8c9385eda70e459536
GET /glows-37602/src/images/Back.jpg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/jpeg
content-length: 554306
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: "5b1143e3f10fd52adf017a8c52710246"
x-amz-request-id: tx0000000000000004819bd-0063c1a343-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
200 OK 123 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
IP
File type ASCII text, with very long lines (40521)
Size 123 kB (122715 bytes)
Hash c3d49c2b28cbaf5b24570e0052e74e7b
2bde99aba048c07dc1280fb19f03a64ba0ec20c9
934b3e65ad6815a463ceb8e313c47e1864d2f6486384cb9fb686c6832eb57df2
GET /gtm.js?id=GTM-58Z37MT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 18 Jan 2023 11:10:28 GMT
expires: Wed, 18 Jan 2023 11:10:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 122715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 773596e36fe4af70225f1ee08e977461
5595433fd09a22008b2c739f6626aef116ad5285
fb18080471e9a54e7d1c060d2e26b023f09c135e0d195e48917cd064549d7fdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Roboto+Condensed:wght@400;700&display=swap
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto+Condensed:wght@400;700&display=swap
IP
File type ASCII text, with very long lines (937)
Hash 29aa33e6d80f4ae5e750283c0b175444
748693c658e2c97add3f08a8ff3b15b82fbe8e2e
696bf5e1d8eab07fcadc7d00dced1eef5e6bbff96f346b20fba6cb418508cd6a
GET /css2?family=Roboto+Condensed:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 18 Jan 2023 11:10:28 GMT
date: Wed, 18 Jan 2023 11:10:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wholegrady.com/bK3EVB0YP.3jpuv/b/m/VZJJZ/DJ0O0PNkjSEmzSOqD/UUziLBTYQT2SMWTFMu4SN/T/Q-
200 OK 1.0 kB URL HTTP/2 wholegrady.com/bK3EVB0YP.3jpuv/b/m/VZJJZ/DJ0O0PNkjSEmzSOqD/UUziLBTYQT2SMWTFMu4SN/T/Q-
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (357)
Hash 471e519a0eb59bfc3328c5162504a01b
9e52cca7c9b586c141493889d4faf64605b9788b
48870f6fdbbf38bc2085d3a98fbaa94df9ca1e9287597d15237cae30f16fd8b2
GET /bK3EVB0YP.3jpuv/b/m/VZJJZ/DJ0O0PNkjSEmzSOqD/UUziLBTYQT2SMWTFMu4SN/T/Q- HTTP/1.1
Host: wholegrady.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://template.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:27 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Wed, 18 Jan 2023 11:10:27 GMT
set-cookie: kadCCap=220790:1:1668460505;222582:1:1674025811;223255:1:1670393482;215297:1:1671843330;194136:1:1673252766;220335:1:1670435916;199455:1:1668245056;223454:1:1673698373;219047:1:1667194435;132751:1:1674019592;171526:1:1673628579;218693:1:1669515516;219484:1:1667715065;212269:1:1667199062;218665:1:1673777741;184246:1:1673859446;221352:1:1670163762;221398:1:1673858145;219652:1:1669330335;222775:1:1671023864;222555:1:1671433227;79610:1:1673775102;222513:1:1671568408;101716:1:1672946010; max-age=1705576227; path=/
kadACap=446714:1:1671329420;404163:1:1673226439;419299:1:1670986713;320498:1:1673937516;445788:1:1669918420;458498:1:1672536671;398832:1:1672025828;401659:1:1674026335;424445:1:1673960337;424441:1:1673840980;444748:1:1669841678;449523:1:1670210030;450649:1:1674026353;446498:1:1671420411;407100:1:1668246232;417177:1:1673939512;346327:1:1674025548;453839:1:1674033658;446718:1:1674025918;419293:1:1671780919;453850:1:1671627132;445506:1:1669286676;454815:1:1673736038;424443:1:1674032841;445735:1:1669286676;458045:1:1670528140;419297:1:1670740668;460522:1:1673770212;456883:1:1671781891;383700:1:1674037209;445081:1:1671894608;441369:1:1671297690;451724:1:1669565807;419321:1:1674026043;458041:1:1670526590;419323:1:1674028005;406293:1:1673859446;462327:1:1673736144;419301:1:1674011097;389299:1:1673726804;446013:1:1668228435;446720:1:1673953397;272913:1:1673716337;410256:1:1674039938;445499:1:1670164226;419303:1:1673768004;419291:1:1673753909;346329:1:1670226206;190964:1:1673775102;446716:1:1673941249;410252:1:1674040227;444785:1:1671894608;451139:1:1673951585;442019:1:1673927198;453831:1:1673739571;419295:1:1674030439;451147:1:1674036929;446531:1:1669270846;410254:1:1673953106; max-age=1705576227; path=/
kadCSCap=222582:1:1674025811;132751:1:1674019592; path=/
kadASCap=419323:1:1674028005;419295:1:1674030439;410256:1:1674039938;419301:1:1674011097;424443:1:1674032841;419321:1:1674026043;401659:1:1674026335;453839:1:1674033658;410252:1:1674040227;346327:1:1674025548;451147:1:1674036929;383700:1:1674037209;446718:1:1674025918;424445:1:1673960337;450649:1:1674026353; path=/
kadRPixJ=bnVsbA==; max-age=1705576227; path=/
kadUnP3=CBAQiIaengYaDQjzwZkBEAEYzLSengYaDQjgrZgCEAQY2cOdngYaDQjdzZkCEAoY07aengYaDQirgJoCEAIYwY2fngYiCggDEBAYiIaengYqDAiMvRIQARjMtJ6eBioMCIqpKBAEGNnDnZ4GKgwI4rwoEAoY07aengYqDAjIwigQAhjBjZ+eBg==; max-age=1705576227; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 545 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Hash 9c7e2acdb9ff9dae9fce6df19d8dcc67
05698c3f7e72dce15d516b1b2c5d419eeea7b104
80a7a6a438281a02b27de7b9422e41378821a98408b040ae6967dad7b1a12617
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78b6e267784bb517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 19:33:54 GMT
expires: Thu, 11 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 574595
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 15:42:33 GMT
expires: Wed, 17 Jan 2024 15:42:33 GMT
cache-control: public, max-age=31536000
age: 70076
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
200 OK 34 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Hash c314ccbd8193ed6ba0de0fa350cf4ee7
6811102520cec627a8b45025762435c1aba93152
46990a595936e9eadc23430a047c905f3fbf0ae8717e0ead065a52601d516ce9
GET /global_static/age_ratings/v2/pegi_ext-violence.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"9a3e2c35d77bd8b96138310eeb6b7f7b"
x-amz-request-id: tx000000000000000301ef3-0063c150d2-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:39:36+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/favicon/v2/apple-touch-icon-180x180.png
200 OK 2.3 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/apple-touch-icon-180x180.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 687168d21b7e78dfb6175de97ae3d045
78081e22c1ea9e51a6cac8910d7ce01c319132e1
49f69cf7e37fda7051cd440048ecd5b2ab0973f106dc6e669959ee453b03e5d1
GET /global_static/favicon/v2/apple-touch-icon-180x180.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: image/png
content-length: 2326
last-modified: Mon, 05 Sep 2022 07:56:20 GMT
etag: "687168d21b7e78dfb6175de97ae3d045"
x-amz-request-id: tx00000000000000030cbd5-0063c15314-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:59:00+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
200 OK 1.2 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash de30b29e8bbc72b7828734d5d781b9eb
9d5fb51148291180b45d9481b756eb7fc2d4a352
e47efd1c616db1a5564776f4be806183ee085c80d2d3722d3f8d5a06115e46ee
GET /global_static/favicon/v2/favicon-64x64.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: image/png
content-length: 1198
last-modified: Mon, 05 Sep 2022 07:56:21 GMT
etag: "de30b29e8bbc72b7828734d5d781b9eb"
x-amz-request-id: tx00000000000000030430d-0063c15167-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:43:54+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 19e9c21f1e72949764d8ffcb5747bec5
65af9cb30aa7959c39889fd28d3f870dbbf896cd
3deb58a447d7318ef995f772ea43eeb2af3eaca23f96e68638d2303bbbb65108
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
200 OK 94 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65451)
Hash f6a491be9dc7f6ba1271f4faa9753179
e11e8e291ca6548f4933103088b8acd15af84191
6cf04708cbb25e9b7144e865deebd75bd4b2d42fa703299ba303a084d457b081
GET /scripttemplates/202211.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: application/javascript
content-length: 93485
content-encoding: gzip
content-md5: 9qSRvp3H9roScfT6qXUxeQ==
last-modified: Thu, 15 Dec 2022 13:30:03 GMT
etag: 0x8DADEA07933BD54
x-ms-request-id: e3dbcf52-f01e-014c-2807-1159ac000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 63021
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e2699ff4b4f4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f96ac6d23518cd0485e1d41d276d8184
58de3ad32744f1f92b86e9f60c29094c7ba5b115
a1b6546dc485dbbfc652a64b11655450987e9a391e44b05a6eb20b323ede242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f96ac6d23518cd0485e1d41d276d8184
58de3ad32744f1f92b86e9f60c29094c7ba5b115
a1b6546dc485dbbfc652a64b11655450987e9a391e44b05a6eb20b323ede242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promo-cdn.worldofwarships.com/glows-37602/src/images/loader/anchor.svg
200 OK 1.2 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/loader/anchor.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 975cd00efb329469a20f756999f3dd86
ea753a5386e602444d64885b5473902b6ccb2a9d
7eb948583ae5ef9407cfd7f0a6e71799704b7ba4faa72ca9e1d7072fe2591066
GET /glows-37602/src/images/loader/anchor.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"4c1b50010445879a6da944e80fde178a"
x-amz-request-id: tx000000000000000481462-0063c1a343-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1bb28c60b5e0748ccfa440a7a233ce7f
96cd58658227b534177b6daa9513ea407e3a8c38
a03ecc4b8b43ed81f30d0358f3174141f0b358dce75ef43c7390f0942ed914e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A03ECC4B8B43ED81F30D0358F3174141F0B358DCE75EF43C7390F0942ED914E2"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11070
Expires: Wed, 18 Jan 2023 14:14:59 GMT
Date: Wed, 18 Jan 2023 11:10:29 GMT
Connection: keep-alive
www.redditstatic.com/ads/pixel.js
200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 18 Jan 2023 11:10:29 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
200 OK 18 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Hash adde0f3c0d6eb3e94bd69cf19c8dbfef
e44eb0dbd13310365bc82a9e2dfdc0f3a5bfae72
6a286bae84ce6e74c7b48c38c70f3a42f784f3d8989e754c7ba096e27d668da6
GET /global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"635ea99325f08d75fd8f09201f998f50"
x-amz-request-id: tx00000000000000030122d-0063c150d2-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:39:36+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1674040229222&cv=11&fst=1674040229222&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=65019553.1674040229&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1674040229222&cv=11&fst=1674040229222&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=65019553.1674040229&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3227), with no line terminators
Hash b884334802c99760942dfc2af094e23d
aa796a113bffa95330010db6a02c731df112b77a
667d4b6b099bf12a281abf34589ef2d2411b599055f108af28310403c37b65a3
GET /pagead/viewthroughconversion/1006839708/?random=1674040229222&cv=11&fst=1674040229222&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=65019553.1674040229&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:10:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1285
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 18-Jan-2023 11:25:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 83f109eadd6bdbd16cfb7c84da4d0bd6
e1c6cf72afd4ab70c3df18dba2867cdef67cd023
365044f59e24fb70b64b71380dac6741d8079c96801099a2f0447d3a309efcb1
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 11:10:29 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "BCA1572BD85E315F24AEF6F1335AF308FF3DDEB9"
Expires: Wed, 18 Jan 2023 23:00:00 GMT
Last-Modified: Wed, 18 Jan 2023 11:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 490
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6e269febbb527-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1bb28c60b5e0748ccfa440a7a233ce7f
96cd58658227b534177b6daa9513ea407e3a8c38
a03ecc4b8b43ed81f30d0358f3174141f0b358dce75ef43c7390f0942ed914e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A03ECC4B8B43ED81F30D0358F3174141F0B358DCE75EF43C7390F0942ED914E2"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11070
Expires: Wed, 18 Jan 2023 14:14:59 GMT
Date: Wed, 18 Jan 2023 11:10:29 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 19e9c21f1e72949764d8ffcb5747bec5
65af9cb30aa7959c39889fd28d3f870dbbf896cd
3deb58a447d7318ef995f772ea43eeb2af3eaca23f96e68638d2303bbbb65108
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 86 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash dad70fee0d733022f201eb1d0e019097
a89684dc7f9c41239a7438380743b3ea64970444
75929b7b5ec0184b4e41d8838bd67924012010d32562a1791f3b481d4aa4c825
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.256.0
x-jsd-version-type: version
etag: W/"34df3-XhWKv4kzpcRUd663DZfMTIIt72I"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 18 Jan 2023 11:10:29 GMT
age: 17097
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1679-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85672
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f96ac6d23518cd0485e1d41d276d8184
58de3ad32744f1f92b86e9f60c29094c7ba5b115
a1b6546dc485dbbfc652a64b11655450987e9a391e44b05a6eb20b323ede242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 83f109eadd6bdbd16cfb7c84da4d0bd6
e1c6cf72afd4ab70c3df18dba2867cdef67cd023
365044f59e24fb70b64b71380dac6741d8079c96801099a2f0447d3a309efcb1
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 11:10:29 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "BCA1572BD85E315F24AEF6F1335AF308FF3DDEB9"
Expires: Wed, 18 Jan 2023 23:00:00 GMT
Last-Modified: Wed, 18 Jan 2023 11:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 490
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6e26a9f80b527-OSL
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (48198), with no line terminators
Hash b423017d2eccc05cb5e3921d36eeb535
b989dd503a71fa6a448860a5d59c28bbceee910b
b8aab8ba299a063e0e5faacea59d7cc56da466c0fd3b91a8d03480184eaf7495
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: application/x-javascript
content-length: 11485
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: tCMBfS7MwFy145IdNu61NQ==
last-modified: Fri, 25 Nov 2022 10:09:21 GMT
etag: 0x8DACECD1F1475FC
x-ms-request-id: ba3e27e9-f01e-00e9-15b6-0024e0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 84511
expires: Thu, 19 Jan 2023 11:10:29 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e26aa9afb4f4-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (50353)
Hash 0cd2fb0fd730954ef2159520d96f1934
d2656260dfdac230479c8e7dc44444e9d5c8faf2
b821093423791675ca31c2d688b528b329737cca90ef62bc44f5c5b39423c8f6
GET /scripttemplates/202211.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: application/json
content-length: 12540
content-encoding: gzip
content-md5: DNL7D9cwlU7yFZUg2W8ZNA==
last-modified: Thu, 15 Dec 2022 13:29:57 GMT
etag: 0x8DADEA0758F35B0
x-ms-request-id: 9b16e561-001e-0091-3f93-104c57000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 84511
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e26afa1ab4f4-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
200 OK 2.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
IP
File type JSON data\012- , ASCII text, with very long lines (7753)
Hash 688f5aef949a8982bda0771893cc67d3
c50441dea985350ab305848e2d87d6286adfda3c
da30c398b0e6646c44fc5a53e44371004a33267d6cd07404775ab6380979b058
GET /scripttemplates/202211.1.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: application/json
content-length: 2639
content-encoding: gzip
content-md5: aI9a75SaiYK9oHcYk8xn0w==
last-modified: Thu, 15 Dec 2022 13:29:55 GMT
etag: 0x8DADEA074AA9D35
x-ms-request-id: aa98274f-b01e-00c7-0a93-10a427000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 84511
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e26afa17b4f4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43904744042cec16f81766250b8ebf49
8393568a2e9c86dafc36563c76703704c7cd86c6
d2359c7cce5176a68cd627ba7e39dfceff78036c6840cd468994df8519f1fb27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3708139178110;gtm=2wg1a1;gcs=G111;auiddc=65019553.1674040229;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
200 OK 585 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3708139178110;gtm=2wg1a1;gcs=G111;auiddc=65019553.1674040229;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1475), with no line terminators
Hash dbd60e690b33a388aeb69e7b8eb94d7f
782e1b8b748e861f4e66181ce475ec2aee39b9c6
403e0fced566230b8ba598af2a57d8d3c2bb2f79d75a6e66c69a3fc148803b9e
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3708139178110;gtm=2wg1a1;gcs=G111;auiddc=65019553.1674040229;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:10:29 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 585
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43904744042cec16f81766250b8ebf49
8393568a2e9c86dafc36563c76703704c7cd86c6
d2359c7cce5176a68cd627ba7e39dfceff78036c6840cd468994df8519f1fb27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
200 OK 4.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
IP
Hash f9e3debc27df7f42fbde1dd284a024a0
ea8f73cb5258c8f582b68a323fcda7405829f745
d6489e42809820b54a381c44b2cd1f14422d4705a9917ff9a67db4705a5ed339
GET /scripttemplates/202211.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: text/css
content-md5: XcxlleAcPGO2n5kTZrHH2Q==
last-modified: Thu, 15 Dec 2022 13:30:09 GMT
x-ms-request-id: f62025ee-201e-0068-0993-1086b7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 84511
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e26afa1bb4f4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
200 OK 13 kB URL HTTP/2 cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
IP
File type PNG image data, 1000 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash c90475872d8975dcc4b5ed7db6cc5e28
1e5a413845f5d501c174ae4940e1329a2575067f
e79eb16948cca42e0f7884fad7637fa6ec69117a07dbc04cc8b3ea7ebeaef719
GET /logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: image/png
content-length: 13003
content-md5: yQR1hy2JddzEte19tsxeKA==
last-modified: Fri, 02 Oct 2020 14:20:55 GMT
etag: 0x8D866DE604098C2
x-ms-request-id: c476ff8b-c01e-00c3-3c6c-c451a5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37067
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e26cacb6b4f4-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash cb2d97fea2e1ea46ab1a3ef06d6c609c
e149a3ce2001b9ac402ca9643f784927bac02fce
04eeec076fc149d2616c6652ebdda58e52bf14b45a720fd5e5e9833670fb1290
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 11:10:29 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 22 Jan 2023 08:17:16 GMT
ETag: "e149a3ce2001b9ac402ca9643f784927bac02fce"
Last-Modified: Wed, 18 Jan 2023 08:17:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 772
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6e26cfb4ab527-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash cb2d97fea2e1ea46ab1a3ef06d6c609c
e149a3ce2001b9ac402ca9643f784927bac02fce
04eeec076fc149d2616c6652ebdda58e52bf14b45a720fd5e5e9833670fb1290
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 11:10:29 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 22 Jan 2023 08:17:16 GMT
ETag: "e149a3ce2001b9ac402ca9643f784927bac02fce"
Last-Modified: Wed, 18 Jan 2023 08:17:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 772
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6e26d0b5fb527-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1c7515ba5231aaae042ef63071a8562
676673d88597e11f572ac38844b18562ab57b920
002b5adabb3fb37aa6c0f18adee2f221a770e217fe95a027fcf8b8fe84794a19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/logos/static/powered_by_logo.svg
200 OK 3.3 kB URL HTTP/2 cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP
Hash ba1b383064566c9ab67e5908108930d3
35656ba7dbd25fd3b8543e959fa1a302ca48ac9d
667b6072e317a97c57f38b88a24a2c7b179cfc965d0e84afa098855878c05f5b
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Mon, 16 Jan 2023 03:33:51 GMT
x-ms-request-id: a3f96dc9-401e-003c-15e1-296c3d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 59403
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78b6e26cacb7b4f4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1674040229416
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1674040229416
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1674040229416 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 18 Jan 2023 11:10:29 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,f5211876614133d49f26852208b21fdb,10.0.0.140,52474,91.90.42.154,,95168826135,1,1674040229.936,0.003,,.,0,0,0.000,0.004,-,0,0,197,187,93,10,34729,,,,,,-,
Content-Length: 43
Connection: keep-alive
www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=1302686209.1674040229&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1a158Z37MT&auid=65019553.1674040229
302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=1302686209.1674040229&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1a158Z37MT&auid=65019553.1674040229
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=G111&rnd=1302686209.1674040229&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1a158Z37MT&auid=65019553.1674040229 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:10:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=1302686209.1674040229&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1a158Z37MT&auid=65019553.1674040229
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 898edd853a7465e3e1f0442484580a70
8890421853c2746ce3406d5dfee2bd1bdd6ff0c4
608d12b1d6d7651064578c9844583500f5ad113d87e6c7c7430324a8ace7246c
GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Wed, 18 Jan 2023 11:10:30 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 18-Jan-2023 11:10:30 GMT
last-modified: Wed, 18-Jan-2023 11:10:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash a9aceee5fef4113502875b644619f624
4d34df15990e8ac8c56155cbae9859bd54fc7aaa
f8837c4035babed6479c6f173be3283cdf5e3750b2d2257bc8fc3a2eea2bb277
GET /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Wed, 18 Jan 2023 11:10:30 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 18-Jan-2023 11:10:30 GMT
last-modified: Wed, 18-Jan-2023 11:10:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3708139178110;gtm=2wg1a1;gcs=G111;auiddc=65019553.1674040229;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3708139178110;gtm=2wg1a1;gcs=G111;auiddc=65019553.1674040229;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=3708139178110;gtm=2wg1a1;gcs=G111;auiddc=65019553.1674040229;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:10:30 GMT
expires: Wed, 18 Jan 2023 11:10:30 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash f8330738e9f1b3f63176bb0aa195a1ab
601e916e9cc521c2e027cc30d20c611cbba365ce
5a5d494735dc4248d8dd71da41a3ebd7ca83e497566370a9d9335afd82b187ae
GET /watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A164274847%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 18 Jan 2023 11:10:30 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1931868851674040230; Path=/; SameSite=None; Secure
i=Wifx2oRrwDGIqqTkHHrMXXQVccXHPf74ChGVn66rBMkAikC6aULorw0DnZhLYgLRjzuavlOZL5A+Y8bDkTHlABDIa6o=; Expires=Sat, 15-Jan-2033 11:10:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1092422601674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1092422601674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705576230.yc.1674040230#1705576230.yrts.1674040230#1705576230.yrtsi.1674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 18-Jan-2023 11:10:30 GMT
last-modified: Wed, 18-Jan-2023 11:10:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:10:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.quora.com/qevents.js
200 OK 14 kB IP
Hash 496aa1cf66ac240965666f31b51ea9bd
acb93d66d15443ab7863242dc9a37fb13f99610b
c432f1806ec151fa6fdab42f095cfaed40188d69862084131dd80108d358d7d9
GET /qevents.js HTTP/1.1
Host: a.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:29 GMT
content-type: text/plain
x-amz-id-2: jHbk68zF0oCrN99I6TpiQ8LNg0dDTKL0BkbZQKZkL1zB85BMiiIcpjSQWNebJHGDeWUqTCN88Lg=
x-amz-request-id: 4K18RXATE8CH2H8E
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 14453259
expires: Wed, 18 Jan 2023 15:10:29 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 78b6e269feb3b527-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674040230_f9d7c1af015a714307619852ee29495af634bc982bdfc8760ad58440099a355a&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111030%3Aet%3A1674040230%3Ac%3A1%3Arn%3A191205401%3Arqn%3A2%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674040230_f9d7c1af015a714307619852ee29495af634bc982bdfc8760ad58440099a355a&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111030%3Aet%3A1674040230%3Ac%3A1%3Arn%3A191205401%3Arqn%3A2%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674040230_f9d7c1af015a714307619852ee29495af634bc982bdfc8760ad58440099a355a&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111030%3Aet%3A1674040230%3Ac%3A1%3Arn%3A191205401%3Arqn%3A2%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674040230_f9d7c1af015a714307619852ee29495af634bc982bdfc8760ad58440099a355a&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A195454976271%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111030%3Aet%3A1674040230%3Ac%3A1%3Arn%3A191205401%3Arqn%3A2%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Wed, 18 Jan 2023 11:10:30 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=434242101674040230; Path=/; SameSite=None; Secure
i=2hi53KDtH/KNG4JH/yKZaOGMYzFmn3TrAIt5+8LYxWceKtoa+LoLuO5iKfosnBh5Gf439p5ta13qv5KkdfMikLgiUSU=; Expires=Sat, 15-Jan-2033 11:10:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7244465061674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7244465061674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705576230.yc.1674040230#1705576230.yrts.1674040230#1705576230.yrtsi.1674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 18-Jan-2023 11:10:30 GMT
last-modified: Wed, 18-Jan-2023 11:10:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP
File type ASCII text, with very long lines (32040), with no line terminators
Hash 365c9c596b34a4638836c22c8a5dc623
90f05e1c6c4016e5677709bb6f8f0e810b9ca58a
ecddfb33f676186b2a23f80d1d12b32bfe11d1144b1e44da0347d5ac2943b76f
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Wed, 18 Jan 2023 11:08:52 GMT
vary: Accept-Encoding
last-modified: Mon, 19 Dec 2022 01:14:54 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 98
content-length: 9788
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1006839708/?random=1674040229222&cv=11&fst=1674039600000&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=123626956&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1006839708/?random=1674040229222&cv=11&fst=1674039600000&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=123626956&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1674040229222&cv=11&fst=1674039600000&bg=ffffff&guid=ON&async=1>m=2wg1a1&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=123626956&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:10:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 6b73c16591711035f0f831449387805a
9ced28d59b6bb733eb61affa4a1813799825c5fb
882ce5914d1128850855e250a5e4e6b6d71ed5d5ba33294aebd74411dc73fd10
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73629
date: Wed, 18 Jan 2023 11:10:30 GMT
access-control-allow-origin: *
etag: "63bfb9f8-11f9d"
expires: Wed, 18 Jan 2023 12:10:30 GMT
last-modified: Thu, 12 Jan 2023 10:42:48 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 18 Jan 2023 11:10:30 GMT
access-control-allow-origin: *
etag: "63bfb9f8-2b"
expires: Wed, 18 Jan 2023 12:10:30 GMT
accept-ranges: bytes
last-modified: Thu, 12 Jan 2023 10:42:48 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1674040229408&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=f32690fc-364c-4a03-8a05-bbdf34d01642&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1674040229408&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=f32690fc-364c-4a03-8a05-bbdf34d01642&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1674040229408&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=f32690fc-364c-4a03-8a05-bbdf34d01642&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Wed, 18 Jan 2023 11:10:30 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674040230.2487562&pvid=7s00uj61uynld1kbwms&tsyjad=0&_impl=ytag
403 Forbidden 14 kB URL HTTP/2 am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674040230.2487562&pvid=7s00uj61uynld1kbwms&tsyjad=0&_impl=ytag
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674040230.2487562&pvid=7s00uj61uynld1kbwms&tsyjad=0&_impl=ytag HTTP/1.1
Host: am.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Wed, 18 Jan 2023 11:10:30 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f491398239265c63ac162d47ab006ce6
c95e1bba76e910100e86f8abf789e5b5c1a2baa6
cdada2d9608e9d3f8e03cf9ced211550b6f7c8f7e0b5ee027a96f45af38523f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F873f34de-bef8-46f1-9dc4-d277bf6c1c65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7741
x-amzn-requestid: 9af04340-5be9-42b0-96be-0264661c6dae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A6LEMtoAMFW_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c7150d-2348c8846249175e74efc226;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:37:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _7YOm38n8-T2LAL-cRA7R8KvEUBhXEM0dOXjOZ6HyPRNfMu6Z0Fh3g==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:10:03 GMT
age: 46829
etag: "c95e1bba76e910100e86f8abf789e5b5c1a2baa6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ulekmayang.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ulekmayang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.14, PleskLin
link: <https://ulekmayang.com/wp-json/>; rel="https://api.w.org/", <https://ulekmayang.com/wp-json/wp/v2/pages/766826>; rel="alternate"; type="application/json", <https://ulekmayang.com/>; rel=shortlink
vary: Accept-Encoding
strict-transport-security: max-age=15768000; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=guKq7U2COhryz%2FHGVKgkkjBhYUEyodnZAHX4BimBw0X1MuAPgTQOU0BM1kT13Atbp3XW3MyKE9PhrTk0Ckl8bZfeu03o58Bf0mgd1cXbuZIpbFSs3LJcXE8m1aU4NJrnJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78b6e242dbebb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/logo-main.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/logo-main.svg
IP
ASN #58286 Electric-IT Business S.R.L.
GET /glows-37602/src/images/logo-main.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: W/"3205035293624ac8f4502ce6c888db9e"
x-amz-request-id: tx0000000000000004819ba-0063c1a343-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A3%3Adp%3A0%3Als%3A321816546234%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A989399395%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 18 Jan 2023 11:10:30 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=215438741674040230; Path=/; SameSite=None; Secure
i=7G0ojk1xwktF662BeWWiSupG8OYAgmj3ICWe079UvduTSf5B5/yijo5ZHljdW+QJTic1/Zw/DGp7o1K1ZqBG3f3pAUU=; Expires=Sat, 15-Jan-2033 11:10:25 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=69747161674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=69747161674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705576230.yc.1674040230#1705576230.yrts.1674040230#1705576230.yrtsi.1674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 18-Jan-2023 11:10:30 GMT
last-modified: Wed, 18-Jan-2023 11:10:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
c0.wp.com/p/jetpack/11.7.1/_inc/build/photon/photon.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.7.1/_inc/build/photon/photon.min.js
IP
GET /p/jetpack/11.7.1/_inc/build/photon/photon.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
IP
GET /c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/js/main.js
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/js/main.js
IP
ASN #58286 Electric-IT Business S.R.L.
GET /glows-37602/src/js/main.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:28 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"c700e9ef6ee434ec2996a61803ea5367"
x-amz-request-id: tx000000000000000481453-0063c1a343-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T18:41:08+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP
GET /c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
IP
GET /c/6.1.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
content-encoding: br
expires: Thu, 18 Jan 2024 11:10:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/e-202303.js
200 OK 0 B IP
GET /e-202303.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulekmayang.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:10:26 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 15 Jan 2024 10:22:23 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A673543769298%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A647900244%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A673543769298%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A647900244%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A673543769298%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A647900244%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63c7d3a42aba9c0001d42194%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID7_DO3jOyuTyq--2yuuCAJRnxtEppOILZ8kqM7eVslPB-ldA13LPFTv0gJ4bQEYsjC6lPcpnzb3G8tDTZrvfc2nXA2xAeZnKY2ivvXBcRwIsEgHmkZmQ5iloqQjViPOV1OuINVGDOfnpM3A%26enctid%3Dcpv9qg8z9kft%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674040228606893333%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A987%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A2%3Adp%3A0%3Als%3A673543769298%3Ahid%3A294050557%3Az%3A0%3Ai%3A20230118111029%3Aet%3A1674040230%3Ac%3A1%3Arn%3A647900244%3Arqn%3A1%3Au%3A1674040230973084248%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A38%2C16%2C1%2C1%2C626%2C0%2C%2C130%2C2%2C1178%2C1178%2C0%2C968%3Aco%3A0%3Ans%3A1674040227916%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674040230%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 18 Jan 2023 11:10:30 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1680208281674040230; Path=/; SameSite=None; Secure
i=R+VuDpkl4jM5URI1ZJMnmd0IHgJY8IJvLhhLW6pZkHS2lr7BYU3oSQccwuf4OIw7mmYQpjIvyqQpg7J1aHbQ3aJ2V9E=; Expires=Sat, 15-Jan-2033 11:10:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6327911901674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6327911901674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705576230.yc.1674040230#1705576230.yrts.1674040230#1705576230.yrtsi.1674040230; Expires=Thu, 18-Jan-2024 11:10:30 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 18-Jan-2023 11:10:30 GMT
last-modified: Wed, 18-Jan-2023 11:10:30 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
172.67.220.69
159.69.234.10
92.223.23.231
104.18.20.226
35.204.100.195
185.244.209.62
183.79.249.252
194.135.30.40
77.88.21.119
23.36.77.32
93.184.220.29