r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5466
Expires: Sat, 28 Jan 2023 19:00:12 GMT
Date: Sat, 28 Jan 2023 17:29:06 GMT
Connection: keep-alive
www.homenomnom.fr/x882tejt/what-is-bpsk-modulation-and-demodulation
200 OK 18 kB URL HTTP/1.1 www.homenomnom.fr/x882tejt/what-is-bpsk-modulation-and-demodulation
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (29829)
Hash f81062461c8623a661cd269f9e86e399
293fd821c15f2e909cbc3ffbfa7a37ce5c470837
1e8bd922eea2768eb74ad3b67ecce2a64ef791c0795b4819d1a0e92ed333ee91
Analyzer Verdict Alert fortinet Malware
GET /x882tejt/what-is-bpsk-modulation-and-demodulation HTTP/1.1
Host: www.homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:06 GMT
content-type: text/html
content-length: 17939
server: Apache
x-powered-by: PHP/5.4
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:A4FB_D5BA2113:0050_63D55B62_5C17:8D46
x-iplb-instance: 30841
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5137
Expires: Sat, 28 Jan 2023 18:54:43 GMT
Date: Sat, 28 Jan 2023 17:29:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3829
Expires: Sat, 28 Jan 2023 18:32:55 GMT
Date: Sat, 28 Jan 2023 17:29:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 16:43:06 GMT
content-type: application/json
age: 2760
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ri7M+yE7Jy6fsqF9br4dw5i3eQAsquPAGH9T3u89cn9/wj99gJFPO1yBFfp7Vbw3KqQrKAbj2tA=
x-amz-request-id: HV86FFAXRY4PXAK7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 16:49:58 GMT
age: 2348
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:06 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Sail%7CVast+Shadow%7COld+Standard+TT%7CSpecial+Elite%7CVampiro+One
200 OK 700 B URL HTTP/1.1 fonts.googleapis.com/css?family=Sail%7CVast+Shadow%7COld+Standard+TT%7CSpecial+Elite%7CVampiro+One
IP
Hash c57b81a95c82dadc593453f5a83cc7c2
ecffb06feaa31ac07d9b0e374c9cf43539185539
a515092db2fced0ee65936798f5788b796f287dea7c2fe007b255836249c0f8a
GET /css?family=Sail%7CVast+Shadow%7COld+Standard+TT%7CSpecial+Elite%7CVampiro+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 28 Jan 2023 17:29:07 GMT
Date: Sat, 28 Jan 2023 17:29:07 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
homenomnom.fr/wp-content/plugins/twenty-eleven-theme-extensions/moztheme2011.css?ver=4.8.21
200 OK 1.1 kB URL HTTP/1.1 homenomnom.fr/wp-content/plugins/twenty-eleven-theme-extensions/moztheme2011.css?ver=4.8.21
IP
File type ASCII text, with CRLF line terminators
Hash c682eda1e7adde8f1353d55ac6e8303d
35b060679aa5a222c083bdc68d0fd9b8ee8159ab
e95fb4d6ca1b4970030f483bd36728b4f5bbbfe12f9160afe733fbfb1009b487
GET /wp-content/plugins/twenty-eleven-theme-extensions/moztheme2011.css?ver=4.8.21 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/css
content-length: 1125
server: Apache
last-modified: Sun, 22 Feb 2015 18:09:21 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:B861_D5BA2113:0050_63D55B63_49F5:8D45
x-iplb-instance: 30841
homenomnom.fr/wp-content/plugins/google-analytics-for-/assets/js/frontend.min.js?ver=6.2.4
404 Not Found 196 B URL HTTP/1.1 homenomnom.fr/wp-content/plugins/google-analytics-for-/assets/js/frontend.min.js?ver=6.2.4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /wp-content/plugins/google-analytics-for-/assets/js/frontend.min.js?ver=6.2.4 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 404 Not Found
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache
x-iplb-request-id: 5B5A2A9A:D3CB_D5BA2113:0050_63D55B63_5C93:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-content/themes/twentyeleven-child/style.css
200 OK 6.4 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 99c62ad09ee93a2ad96342f3d02dcf3e
2440b3136603a53de401a7be0983383029caab34
d8233bcacd62caa070eb09628652de47def6fa2ead16ae5bfcdda19168c97918
GET /wp-content/themes/twentyeleven-child/style.css HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/css
content-length: 6386
server: Apache
last-modified: Wed, 05 Aug 2015 10:41:56 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:0A68_D5BA2113:0050_63D55B63_7BC7:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-content/plugins/jetpack/css/jetpack.css?ver=5.4.2
200 OK 12 kB URL HTTP/1.1 homenomnom.fr/wp-content/plugins/jetpack/css/jetpack.css?ver=5.4.2
IP
File type ASCII text, with very long lines (20360)
Hash 611529e0ee13184eaee02ff35d5e38b9
65b40c5c04b9620cd2c8fb91233fbac2d7873e42
97e1e517204bceaf036a7d080c56c1c65587c727a9cd8da7836627010f05b886
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=5.4.2 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/css
content-length: 11895
server: Apache
last-modified: Thu, 03 Jun 2021 18:02:52 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:FCAE_D5BA2113:0050_63D55B63_7BC5:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-includes/js/wp-embed.min.js?ver=4.8.21
200 OK 735 B URL HTTP/1.1 homenomnom.fr/wp-includes/js/wp-embed.min.js?ver=4.8.21
IP
File type ASCII text, with very long lines (1386), with no line terminators
Hash d2b60c1231015fbb2cfb0680a4fdfc87
2964b5bc32aad38d53ba3063503711c5cb6006ed
a83053c9a437c08c7d62ae9b07cf680d43a3ad129de64633eee91a860fab7844
GET /wp-includes/js/wp-embed.min.js?ver=4.8.21 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
content-length: 735
server: Apache
last-modified: Thu, 15 Apr 2021 06:00:34 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:B861_D5BA2113:0050_63D55B63_49F6:8D45
x-iplb-instance: 30841
homenomnom.fr/wp-includes/js/comment-reply.min.js?ver=4.8.21
200 OK 580 B URL HTTP/1.1 homenomnom.fr/wp-includes/js/comment-reply.min.js?ver=4.8.21
IP
File type ASCII text, with very long lines (1076), with no line terminators
Hash 03610c833b0a8cd39a5cfd87a20dd104
038ccb657a60f77c5eaf6a707bd4d0834d08da42
9feb345568ea18a6f4cee3c910adb99c956a06161a6c75e2c3a1a916f2129baa
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js?ver=4.8.21 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
content-length: 580
server: Apache
last-modified: Thu, 15 Apr 2021 06:00:34 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:6655_D5BA2113:0050_63D55B63_1FA8:8D43
x-iplb-instance: 30841
homenomnom.fr/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
200 OK 19 kB URL HTTP/1.1 homenomnom.fr/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
IP
File type ASCII text, with very long lines (26727), with no line terminators
Hash cbddb0152679f106e9a9d091c313cffb
39e5b029eddd56cb00961241095c0c6a3481594f
570ec5773a1b02153d1f1f75685ac28812e949849c5538b2524a587f7739d25e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/css
content-length: 19000
server: Apache
last-modified: Thu, 03 Jun 2021 18:02:52 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:EF79_D5BA2113:0050_63D55B63_5C92:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-content/plugins/akismet/_inc/form.js?ver=4.0
200 OK 318 B URL HTTP/1.1 homenomnom.fr/wp-content/plugins/akismet/_inc/form.js?ver=4.0
IP
Hash 9981fd8493ac6b5c99634815c9aef030
15e922eda1c62a37bce0aea182535530889a044e
66780daa2edc073e9067f4b12f75d41c58bea33d1455d788b72b0e1853cca132
GET /wp-content/plugins/akismet/_inc/form.js?ver=4.0 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
content-length: 318
server: Apache
last-modified: Sun, 08 Oct 2017 07:11:02 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:D3CB_D5BA2113:0050_63D55B63_5C94:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.6 kB URL HTTP/1.1 homenomnom.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash a4b150fa60cca872499de5f1f1364b2d
f9f6922fcc7ae8aca53caf2222dbfb4c40a291bb
d536de09e27033eb85b81fbafd2d7ec965220fbc150b2fb27b8c036cf8d0e8b3
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
content-length: 4625
server: Apache
last-modified: Thu, 20 Oct 2022 16:56:31 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:FCAE_D5BA2113:0050_63D55B63_7BCC:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-content/plugins/jetpack/modules/sharedaddy/sharing.js?ver=5.4.2
200 OK 4.1 kB URL HTTP/1.1 homenomnom.fr/wp-content/plugins/jetpack/modules/sharedaddy/sharing.js?ver=5.4.2
IP
File type ASCII text, with very long lines (938)
Hash 5e6c9d0ddcdf33368ea6d5e3524923c8
cee0b88d56c054d2bc8473c8d45fb063146c876d
4f750d1011a6641bde9e94ee3834753273e06e063ad5c3bad985f53c3e963633
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/jetpack/modules/sharedaddy/sharing.js?ver=5.4.2 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
content-length: 4134
server: Apache
last-modified: Thu, 03 Jun 2021 18:02:54 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:B861_D5BA2113:0050_63D55B63_4A02:8D45
x-iplb-instance: 30841
homenomnom.fr/wp-includes/js/jquery/jquery.js?ver=1.12.4
200 OK 34 kB URL HTTP/1.1 homenomnom.fr/wp-includes/js/jquery/jquery.js?ver=1.12.4
IP
File type ASCII text, with very long lines (31997)
Hash 6b2ceda6218e6810713286b29db017fb
71175271d84c90ca5f05ecc04d7f7a1052873380
de7a4d9a1cb75f0d1a4bf1a71907a44b85b9356da5c4f9e7f6729b8e69a38974
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
content-length: 33776
server: Apache
last-modified: Thu, 05 Sep 2019 06:12:17 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:0A68_D5BA2113:0050_63D55B63_7BCA:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-content/themes/twentyeleven/style.css
200 OK 12 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven/style.css
IP
File type ASCII text, with very long lines (812)
Hash 5d47aa8a66ef808d96877c7bd58272f9
6fd8c6f9bf62ac6862bb51da30254bdf5d09b8dc
0ae326faed31f26f165ed6e1690d9971e03655fae88f859014ea5514034dc136
GET /wp-content/themes/twentyeleven/style.css HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://homenomnom.fr/wp-content/themes/twentyeleven-child/style.css
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/css
content-length: 11723
server: Apache
last-modified: Mon, 12 Sep 2016 10:37:32 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:EF79_D5BA2113:0050_63D55B63_5C95:8D46
x-iplb-instance: 30841
main.weatherplllatform.com/cdn.js?v=1.3.9
200 OK 890 B URL HTTP/2 main.weatherplllatform.com/cdn.js?v=1.3.9
IP
ASN #2856 British Telecommunications PLC
File type ASCII text, with very long lines (1976), with no line terminators
Hash d8ebc6d5a857aef0b27c2b3856ff16c8
30e9e1cac64fd31cc1348bcd15b78fdebc2adde2
53e18f45673566f0c9bad88e9dca44681321c8db01bedd43ae46bf560c65b67f
GET /cdn.js?v=1.3.9 HTTP/1.1
Host: main.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.homenomnom.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 890
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
homenomnom.fr/wp-content/themes/twentyeleven-child/img/hellocoton.png
200 OK 8.7 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/img/hellocoton.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, interlaced\012- data
Hash d860a39bd048e6331119b616d20129c9
e42c76880e4178919ae27fb5a99483a25e4e73de
c1b27e510735c265240ad80bafd76dd4c6494d1ccbf43d77acdd4b3022e6c30b
GET /wp-content/themes/twentyeleven-child/img/hellocoton.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 8745
server: Apache
last-modified: Wed, 25 Feb 2015 21:08:13 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:B861_D5BA2113:0050_63D55B63_4A0D:8D45
x-iplb-instance: 30841
homenomnom.fr/wp-content/uploads/2015/02/diner.png
200 OK 25 kB URL HTTP/1.1 homenomnom.fr/wp-content/uploads/2015/02/diner.png
IP
File type PNG image data, 80 x 255, 8-bit/color RGB, interlaced\012- data
Hash 71385ed783f7f3e89ab6ceace3419ae5
b07497a0319271fe70d702075e24910c653bc361
373aae14e353dbbc87f7a66a9b2345edf59d9b02cce8d255cc7999e10f4486a7
GET /wp-content/uploads/2015/02/diner.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 25114
server: Apache
last-modified: Sun, 22 Feb 2015 17:59:29 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:EF79_D5BA2113:0050_63D55B63_5CC6:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-content/themes/twentyeleven-child/img/facebook.png
200 OK 3.8 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/img/facebook.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash f7eed500f8793bb0609a086e07741114
79f24ae28bd46f95f6e4c3b575f6fc3f114aca90
89996f0f4709b9f549b16cd6736cb3101c9fdbab8d3cfe2e95cb8d12110b1e06
GET /wp-content/themes/twentyeleven-child/img/facebook.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 3844
server: Apache
last-modified: Wed, 25 Feb 2015 20:33:24 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:D3CB_D5BA2113:0050_63D55B63_5CA5:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-content/themes/twentyeleven-child/img/instagram.png
200 OK 4.7 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/img/instagram.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash c49b040ec90f04e8532b7e109865f7fe
7b2ab5938f9145db8a9111d7cb31842f4ab8d8e5
3745fa20f973b804393a0abda3d3a9bcf2bead61e8fff96c61bdb9cf6db143cc
GET /wp-content/themes/twentyeleven-child/img/instagram.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 4675
server: Apache
last-modified: Wed, 25 Feb 2015 20:33:26 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:FCAE_D5BA2113:0050_63D55B63_7BE4:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-content/themes/twentyeleven-child/img/pinterest.png
200 OK 4.6 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/img/pinterest.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 96f4cf0641321822c692c72d717c24f4
10def5e0071890aef945dba05da10c31e54c7eea
dd5e8958b9944de05d75cecc28784ea6a5d9c52080598f188535164c6ba19634
GET /wp-content/themes/twentyeleven-child/img/pinterest.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 4647
server: Apache
last-modified: Wed, 25 Feb 2015 20:33:26 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:0A68_D5BA2113:0050_63D55B63_7BE9:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-content/themes/twentyeleven-child/img/twitter.png
200 OK 4.2 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/img/twitter.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 999cf1021acc1eca05fbf252545cb269
523c7efc23c6dd37ade8169f82ae1d9f7c8219cf
6c8d849a530a6d5e5d4a662b6fec918bfd766248643e5ccb9ecb479cd6afa80a
GET /wp-content/themes/twentyeleven-child/img/twitter.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 4175
server: Apache
last-modified: Wed, 25 Feb 2015 20:33:26 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:6655_D5BA2113:0050_63D55B63_1FAA:8D43
x-iplb-instance: 30841
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 16:49:03 GMT
age: 2404
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
homenomnom.fr/wp-content/themes/twentyeleven-child/img/rss.png
200 OK 4.6 kB URL HTTP/1.1 homenomnom.fr/wp-content/themes/twentyeleven-child/img/rss.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 4b843025c74e833f3bad618acc7b3468
d996b3508ee677326a2dc2f2ab54b5c5789f6191
8e474103022e3c937d1303ebb58d0ac8e25e04115f58d8f9e92668b2a7b4379c
GET /wp-content/themes/twentyeleven-child/img/rss.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 4585
server: Apache
last-modified: Wed, 25 Feb 2015 20:33:26 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:B861_D5BA2113:0050_63D55B63_4A70:8D45
x-iplb-instance: 30841
homenomnom.fr/wp-content/uploads/2015/02/etsy.png
200 OK 51 kB URL HTTP/1.1 homenomnom.fr/wp-content/uploads/2015/02/etsy.png
IP
File type PNG image data, 219 x 210, 8-bit/color RGB, interlaced\012- data
Hash c740874d3d9eca445c1d2236203724c0
65acf01e257c4a99605e1a230125ff3d5ca53a6e
e2bf16bfb2ae6a42bed5e6c24c2fe80460f802a9d4191c69bb92b200a8a2c75b
GET /wp-content/uploads/2015/02/etsy.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 51064
server: Apache
last-modified: Sun, 22 Feb 2015 17:59:29 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:EF79_D5BA2113:0050_63D55B63_5D45:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-content/uploads/2015/02/afternoontea.png
200 OK 38 kB URL HTTP/1.1 homenomnom.fr/wp-content/uploads/2015/02/afternoontea.png
IP
File type PNG image data, 275 x 163, 8-bit/color RGB, interlaced\012- data
Hash ead3b4417b3d6932206d65692f40a587
829c8ff676adbef053707c73aaf294f2a55ce617
f7b3c5fe8f811a0c8498015e8372529ce387bf70fcff68e96dbdd40927117fbe
GET /wp-content/uploads/2015/02/afternoontea.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 38138
server: Apache
last-modified: Sun, 22 Feb 2015 17:59:28 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:FCAE_D5BA2113:0050_63D55B63_7CB0:8D48
x-iplb-instance: 30841
homenomnom.fr/wp-content/uploads/2015/02/cropped-header_reduit1.png
200 OK 78 kB URL HTTP/1.1 homenomnom.fr/wp-content/uploads/2015/02/cropped-header_reduit1.png
IP
File type PNG image data, 1200 x 288, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c879f4b620968814cb8c86c7778c23a
773eb6ca3d277320bcb29626e750a5cd33d8e018
3e2022d87ae9de6c873900715f136ef12e4d632ef3c89e9fc9d5e3ec4cf11df8
GET /wp-content/uploads/2015/02/cropped-header_reduit1.png HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: image/png
content-length: 77910
server: Apache
last-modified: Sun, 22 Feb 2015 18:04:40 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Sat, 28 Jan 2023 17:44:07 GMT
x-iplb-request-id: 5B5A2A9A:D3CB_D5BA2113:0050_63D55B63_5D44:8D46
x-iplb-instance: 30841
homenomnom.fr/wp-content/plugins/google-analytics-for-/assets/js/frontend.min.js?ver=6.2.4
404 Not Found 196 B URL HTTP/1.1 homenomnom.fr/wp-content/plugins/google-analytics-for-/assets/js/frontend.min.js?ver=6.2.4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /wp-content/plugins/google-analytics-for-/assets/js/frontend.min.js?ver=6.2.4 HTTP/1.1
Host: homenomnom.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 404 Not Found
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache
x-iplb-request-id: 5B5A2A9A:EF79_D5BA2113:0050_63D55B63_5D50:8D46
x-iplb-instance: 30841
main.weatherplllatform.com/webcdn.js?v=0.4.9
200 OK 890 B URL HTTP/2 main.weatherplllatform.com/webcdn.js?v=0.4.9
IP
ASN #2856 British Telecommunications PLC
File type ASCII text, with very long lines (1976), with no line terminators
Hash d8ebc6d5a857aef0b27c2b3856ff16c8
30e9e1cac64fd31cc1348bcd15b78fdebc2adde2
53e18f45673566f0c9bad88e9dca44681321c8db01bedd43ae46bf560c65b67f
GET /webcdn.js?v=0.4.9 HTTP/1.1
Host: main.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.homenomnom.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 890
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18195
Expires: Sat, 28 Jan 2023 22:32:22 GMT
Date: Sat, 28 Jan 2023 17:29:07 GMT
Connection: keep-alive
fonts.gstatic.com/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22840, version 1.0\012- data
Hash a02a7db3964dbc06013e1343042c2c75
9d69b2906f9c6bcda3197e3c0ba5542b1a57aab9
b6ad8f4894150c85aa2a6158e918a26f119cba2e97ff2135a03eb1b3a4044230
GET /s/oldstandardtt/v18/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.homenomnom.fr
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22840
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 25 Jan 2023 23:15:02 GMT
Expires: Thu, 25 Jan 2024 23:15:02 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 09 May 2022 19:31:27 GMT
Content-Type: font/woff2
Age: 238445
fonts.gstatic.com/s/sail/v16/DPEjYwiBxwYJJBPJAQ.woff2
200 OK 14 kB URL HTTP/1.1 fonts.gstatic.com/s/sail/v16/DPEjYwiBxwYJJBPJAQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13592, version 1.0\012- data
Hash 8aa0af44345f634ba1d9766cd0aea94c
1ed00868eaa384eb05cc85a8cb20c6f2a69e619e
270007e3bb6bec4c57d19c3f23782f8eb13681a00a7a1fa9fbba66ae687ae21f
GET /s/sail/v16/DPEjYwiBxwYJJBPJAQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.homenomnom.fr
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 13592
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Jan 2023 00:35:13 GMT
Expires: Sat, 27 Jan 2024 00:35:13 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Apr 2022 16:16:03 GMT
Content-Type: font/woff2
Age: 147234
fonts.gstatic.com/s/vastshadow/v15/pe0qMImKOZ1V62ZwbVY9dce9I9s.woff2
200 OK 23 kB URL HTTP/1.1 fonts.gstatic.com/s/vastshadow/v15/pe0qMImKOZ1V62ZwbVY9dce9I9s.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22916, version 1.0\012- data
Hash 6bb8894ea93224bf99cbc58780b076de
ef824a7996116e9a390b554f084ab122ef67a50d
bae1dbfab505d72d9688862505e839638b4169021305679a52855867489d339f
GET /s/vastshadow/v15/pe0qMImKOZ1V62ZwbVY9dce9I9s.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.homenomnom.fr
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22916
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Jan 2023 14:20:27 GMT
Expires: Sun, 28 Jan 2024 14:20:27 GMT
Cache-Control: public, max-age=31536000
Age: 11320
Last-Modified: Wed, 27 Apr 2022 16:10:26 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/vampiroone/v18/gokqH6DoDl5yXvJytFsdLnqguPk.woff2
200 OK 14 kB URL HTTP/1.1 fonts.gstatic.com/s/vampiroone/v18/gokqH6DoDl5yXvJytFsdLnqguPk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13488, version 1.0\012- data
Hash 6777b393f766049ce77cdf1e44b3e42c
0573592d5bb94650b074bdee83140bb1dc7820ef
7eaf4d0f275656029fe32c2c150a890145d020c36d074f5a47bc4a536fb17074
GET /s/vampiroone/v18/gokqH6DoDl5yXvJytFsdLnqguPk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.homenomnom.fr
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 13488
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Jan 2023 15:20:24 GMT
Expires: Sun, 28 Jan 2024 15:20:24 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Apr 2022 17:06:17 GMT
Content-Type: font/woff2
Age: 7723
pixel.wp.com/g.gif?v=ext&j=1%3A5.4.2&blog=104723218&post=4292&tz=1&srv=homenomnom.fr&host=www.homenomnom.fr&ref=&fcp=1040&rand=0.927440692121324
200 OK 50 B URL HTTP/1.1 pixel.wp.com/g.gif?v=ext&j=1%3A5.4.2&blog=104723218&post=4292&tz=1&srv=homenomnom.fr&host=www.homenomnom.fr&ref=&fcp=1040&rand=0.927440692121324
IP
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&j=1%3A5.4.2&blog=104723218&post=4292&tz=1&srv=homenomnom.fr&host=www.homenomnom.fr&ref=&fcp=1040&rand=0.927440692121324 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 17:29:07 GMT
Content-Type: image/gif
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *
pixel.wp.com/g.gif?v=wpcom-no-pv&x_sharing-count-request=pinterest&r=0.7030574224011871
200 OK 50 B URL HTTP/1.1 pixel.wp.com/g.gif?v=wpcom-no-pv&x_sharing-count-request=pinterest&r=0.7030574224011871
IP
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=wpcom-no-pv&x_sharing-count-request=pinterest&r=0.7030574224011871 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 17:29:07 GMT
Content-Type: image/gif
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *
pixel.wp.com/g.gif?v=wpcom-no-pv&x_sharing-count-request=facebook&r=0.7541655389159829
200 OK 50 B URL HTTP/1.1 pixel.wp.com/g.gif?v=wpcom-no-pv&x_sharing-count-request=facebook&r=0.7541655389159829
IP
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=wpcom-no-pv&x_sharing-count-request=facebook&r=0.7541655389159829 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 17:29:07 GMT
Content-Type: image/gif
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a079c90e4326b7fd0d221bb157b7ea37
c310fb99df95c5c74e5b920b259559fee86f5320
e494cfc5b5a6387d66b888ec7d87d0731f660ebcd0bf0bff67b74e93ec7116fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E494CFC5B5A6387D66B888EC7D87D0731F660EBCD0BF0BFF67B74E93EC7116FB"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12696
Expires: Sat, 28 Jan 2023 21:00:43 GMT
Date: Sat, 28 Jan 2023 17:29:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a079c90e4326b7fd0d221bb157b7ea37
c310fb99df95c5c74e5b920b259559fee86f5320
e494cfc5b5a6387d66b888ec7d87d0731f660ebcd0bf0bff67b74e93ec7116fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E494CFC5B5A6387D66B888EC7D87D0731F660EBCD0BF0BFF67B74E93EC7116FB"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12696
Expires: Sat, 28 Jan 2023 21:00:43 GMT
Date: Sat, 28 Jan 2023 17:29:07 GMT
Connection: keep-alive
api.pinterest.com/v1/urls/count.json?callback=WPCOMSharing.update_pinterest_count&url=http%3A%2F%2Fhomenomnom.fr%2F%3Fp%3D4292&_=1674926951175
426 Upgrade Required 16 B URL HTTP/1.1 api.pinterest.com/v1/urls/count.json?callback=WPCOMSharing.update_pinterest_count&url=http%3A%2F%2Fhomenomnom.fr%2F%3Fp%3D4292&_=1674926951175
IP
File type ASCII text, with no line terminators
Hash 7580e1f4e34b963d5ce1bbb35001f953
e8d50714f0d06c06f26475fb748357f864e9952b
16487236d4ed74edfb51ebe50be675d723c9a26cb8cde749a5e9e62405fad183
GET /v1/urls/count.json?callback=WPCOMSharing.update_pinterest_count&url=http%3A%2F%2Fhomenomnom.fr%2F%3Fp%3D4292&_=1674926951175 HTTP/1.1
Host: api.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.homenomnom.fr/
HTTP/1.1 426 Upgrade Required
Content-Type: text/html
Content-Length: 16
Date: Sat, 28 Jan 2023 17:29:07 GMT
Connection: keep-alive
AKAMAI-GRN: 0.044f2417.1674926947.5225203f
X-CDN: akamai
Upgrade: TLS/1.2, HTTP/1.1
track.violetlovelines.com/ycYHHc?&se_referrer=&default_keyword=&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7
200 OK 1.2 kB URL HTTP/1.1 track.violetlovelines.com/ycYHHc?&se_referrer=&default_keyword=&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2961), with no line terminators
Hash d18c63330bd1530b4275e95ffb9e0dea
1fc07fb217552092eba1af32a72c2aed40937463
6d951698379dee421cd7f78c87982bbddbf85a9e43d64c3f34745c0da792dffa
GET /ycYHHc?&se_referrer=&default_keyword=&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7 HTTP/1.1
Host: track.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.homenomnom.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 17:29:07 GMT
Content-Type: application/javascript
Content-Length: 1159
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa3oo5ko;Expires=Tuesday, 28-Feb-2023 17:29:07 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMxXCI6MTY3NDkyNjk0NyxcIjQyXCI6MTY3NDkyNjk0NyxcIjQ4XCI6MTY3NDkyNjk0N30sXCJjYW1wYWlnbnNcIjp7XCI4XCI6MTY3NDkyNjk0NyxcIjdcIjoxNjc0OTI2OTQ3LFwiMTJcIjoxNjc0OTI2OTQ3fSxcInRpbWVcIjoxNjc0OTI2OTQ3fSJ9.4wiDGVFDiHgq86bH13RNqcXkK0llq18wNA4PMMAv1_8;Expires=Wednesday, 26-Feb-2076 10:58:14 GMT;Max-Age=1675013347;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QsHsXRn8binfIHHgnRDydg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lT3LxgV7Euz+PwLu6w0Dfuka400=
final.similarwebline.com/step.php?id=76664-12-58653843&pid=94&zid=347537&wid=488433
302 Found 0 B URL HTTP/2 final.similarwebline.com/step.php?id=76664-12-58653843&pid=94&zid=347537&wid=488433
IP
ASN #2856 British Telecommunications PLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /step.php?id=76664-12-58653843&pid=94&zid=347537&wid=488433 HTTP/1.1
Host: final.similarwebline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.homenomnom.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 17:29:08 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://final.similarwebline.com/step.php?id=56569-66-5569723&pid=883&zid=247&kid=794343527&from=Marc
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
final.similarwebline.com/step.php?id=56569-66-5569723&pid=883&zid=247&kid=794343527&from=Marc
200 OK 464 B URL HTTP/2 final.similarwebline.com/step.php?id=56569-66-5569723&pid=883&zid=247&kid=794343527&from=Marc
IP
ASN #2856 British Telecommunications PLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash ec7f5f602d78ea16e860067db0a79a26
36b983f544f449fa58df7f4c0eb82fb424df4ece
ec8cda85fceefa26be404368d7c3506efe825184ab62856e847dbaec476c600c
Analyzer Verdict Alert quad9 Sinkholed
GET /step.php?id=56569-66-5569723&pid=883&zid=247&kid=794343527&from=Marc HTTP/1.1
Host: final.similarwebline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.homenomnom.fr/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:08 GMT
content-type: text/html; charset=UTF-8
content-length: 464
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3669
Expires: Sat, 28 Jan 2023 18:30:18 GMT
Date: Sat, 28 Jan 2023 17:29:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3669
Expires: Sat, 28 Jan 2023 18:30:18 GMT
Date: Sat, 28 Jan 2023 17:29:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3669
Expires: Sat, 28 Jan 2023 18:30:18 GMT
Date: Sat, 28 Jan 2023 17:29:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d9747a7-0b4d-40bd-8d53-7702f8df2966.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d9747a7-0b4d-40bd-8d53-7702f8df2966.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25fd26625a6c5339389faf4f6aa8fc6a
05aed76d3966ea8a02d4bbbeff7b41c8a5aac907
9a29ad65cb7a8632a2c454a4caeb43a10c5152ccf3dbab22d584276bdeeb0dbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d9747a7-0b4d-40bd-8d53-7702f8df2966.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5746
x-amzn-requestid: 8ab00078-cdf9-465a-a493-64a488c9e634
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CwEIJIAMFutA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-3f9b5f031812e32f6625f1e6;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jUVP5rlieH6mUh_fgVz4D636AIMAo2JXJqBgzGSI_CyY2-8Pza4IKw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 70811
etag: "05aed76d3966ea8a02d4bbbeff7b41c8a5aac907"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:46:13 GMT
age: 67376
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8cRGlncOQ6qYv7qbI1HxTz-qUYJkTVa5V2qJM1C8XM5dmyXFA8qRvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 70811
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2033b2-0708-4731-82a4-5bbc9f000ae2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2033b2-0708-4731-82a4-5bbc9f000ae2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a2881cea3ae511d3dfd2f6b7cd598a4e
105d8d675aaafce5602e4015aee2d1659553d1b1
0993ef71c2af9e07ed09e0e2ba40a4d9fdd01444154c2f39f8fc48a4dfef1730
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2033b2-0708-4731-82a4-5bbc9f000ae2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10863
x-amzn-requestid: db873091-be76-4276-aa3e-f9bd44051508
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbAMbHCMoAMFsYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4471c-57f14d6a3ebcc8a1788bae80;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:50:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: S8H9sSYtUyye2ex8ulTLy6SEyqTt3xUmjRkTWL0oCEDZIDA21dnudw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:38:29 GMT
etag: "105d8d675aaafce5602e4015aee2d1659553d1b1"
content-type: image/jpeg
age: 67840
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 23:03:41 GMT
age: 66328
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 70343
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 038cf77967c28a21ac9cd34b8a9accd6
d533bb981485086bcf59c88576d8c09abaaab141
b7c59c85b12cc65df7acbc3b9ed2e1371c014c67ef13013cab168fc6597e11d4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 28 Jan 2023 17:29:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 15023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 27 Jan 2023 22:09:25 GMT
Expires: Sat, 28 Jan 2023 22:09:25 GMT
ETag: "d533bb981485086bcf59c88576d8c09abaaab141"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
track.wg-aff.com/click?pid=1287&offer_id=67&ref_id=i3t97yj5vlp7qa8ieg3o&sub1=E2Z6DGBJ6R
302 Found 0 B URL HTTP/2 track.wg-aff.com/click?pid=1287&offer_id=67&ref_id=i3t97yj5vlp7qa8ieg3o&sub1=E2Z6DGBJ6R
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=1287&offer_id=67&ref_id=i3t97yj5vlp7qa8ieg3o&sub1=E2Z6DGBJ6R HTTP/1.1
Host: track.wg-aff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 17:29:09 GMT
content-length: 0
location: https://trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63d55b65bdb77b000187ed2d; expires=Sun, 28 Jan 2024 17:29:09 GMT; secure; SameSite=None
afoffers={"67":1674926949}; expires=Sun, 28 Jan 2024 17:29:09 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8148dc0dd81d6d8932a6846c7e829419
e01e465f8fd6e9c4270816632bd79ace739afdca
6b111085a8382c29dc1d4a418fb51378439f83c64a0106acb7d1077fc7ddeeae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5954
Cache-Control: max-age=150802
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:09 GMT
Etag: "63d4ee36-1d7"
Expires: Mon, 30 Jan 2023 11:22:31 GMT
Last-Modified: Sat, 28 Jan 2023 09:43:18 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=
301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/e2ncihl0/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /e2ncihl0/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 17:29:09 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=&sid=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw&enctid=cq401ucl67yb&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674926949804380299&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
Set-Cookie: STIDREFERRAL=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=cq401ucl67yb; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1674926949804380299; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e05d959a1a747bf5a3b80d403cc19fc9
ec3f5656fc98019e07c2bb7ae9274ff32408b158
c5ccda5a16b6f0ab0a348d59929c2b45a4d62e48599854b58222b50f3c1e32a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5CCDA5A16B6F0AB0A348D59929C2B45A4D62E48599854B58222B50F3C1E32A7"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7404
Expires: Sat, 28 Jan 2023 19:32:34 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e05d959a1a747bf5a3b80d403cc19fc9
ec3f5656fc98019e07c2bb7ae9274ff32408b158
c5ccda5a16b6f0ab0a348d59929c2b45a4d62e48599854b58222b50f3c1e32a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5CCDA5A16B6F0AB0A348D59929C2B45A4D62E48599854B58222B50F3C1E32A7"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7404
Expires: Sat, 28 Jan 2023 19:32:34 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e05d959a1a747bf5a3b80d403cc19fc9
ec3f5656fc98019e07c2bb7ae9274ff32408b158
c5ccda5a16b6f0ab0a348d59929c2b45a4d62e48599854b58222b50f3c1e32a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5CCDA5A16B6F0AB0A348D59929C2B45A4D62E48599854B58222B50F3C1E32A7"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7404
Expires: Sat, 28 Jan 2023 19:32:34 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e05d959a1a747bf5a3b80d403cc19fc9
ec3f5656fc98019e07c2bb7ae9274ff32408b158
c5ccda5a16b6f0ab0a348d59929c2b45a4d62e48599854b58222b50f3c1e32a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5CCDA5A16B6F0AB0A348D59929C2B45A4D62E48599854B58222B50F3C1E32A7"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7404
Expires: Sat, 28 Jan 2023 19:32:34 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e05d959a1a747bf5a3b80d403cc19fc9
ec3f5656fc98019e07c2bb7ae9274ff32408b158
c5ccda5a16b6f0ab0a348d59929c2b45a4d62e48599854b58222b50f3c1e32a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5CCDA5A16B6F0AB0A348D59929C2B45A4D62E48599854B58222B50F3C1E32A7"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7404
Expires: Sat, 28 Jan 2023 19:32:34 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
promo-cdn.worldofwarships.com/glows-37602/src/images/wowsl_logo.png
200 OK 10 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/wowsl_logo.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Hash 4d9371a87a4f9a0d6a8792e0397aa303
1308b49f8614f0ab05e81698daf5bfc4a2498bf0
68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
GET /glows-37602/src/images/wowsl_logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/png
content-length: 10514
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx000000000000000481454-0063c1a343-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/prem-icon.png
200 OK 62 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/prem-icon.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 8782ba37be835d15f1baadc4a39e5506
1a4e79d68766262525605e528f25cf77a9fe3229
5aa7576e1679ee8aab7fae60c8862b811466708bf8e281a33a2b9633ee583dd0
GET /glows-37602/src/images/prem-icon.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/png
content-length: 62427
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "8782ba37be835d15f1baadc4a39e5506"
x-amz-request-id: tx000000000000000480d03-0063c1a343-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/prem-ship.png
200 OK 53 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/prem-ship.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 24af85f4d83908010a8767dd766b20bd
5d134c6da618d2462f30398290cdbb0125a55aa0
8b1e8ec476107a88e815452f885b3b0ceb380add0bf8fc324b88f78c53198649
GET /glows-37602/src/images/prem-ship.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/png
content-length: 52609
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: "24af85f4d83908010a8767dd766b20bd"
x-amz-request-id: tx000000000000000482043-0063c1a343-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/libs/oneTrustBanner.js
200 OK 12 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/libs/oneTrustBanner.js
IP
ASN #58286 Electric-IT Business S.R.L.
File type ASCII text, with very long lines (34224)
Hash 5927836a4eb883a6f7c73885ed215b69
bd76d981c283b67016377aa2d9726efe1bb21e4b
bc878df567271b96b5260faec032fa36474817a9c044745500f6530cba24e642
GET /glows-37602/src/libs/oneTrustBanner.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"9a2978c60dfa952243b458458bd6fe95"
x-amz-request-id: tx000000000000000480cef-0063c1a342-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=&sid=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw&enctid=cq401ucl67yb&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674926949804380299&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
200 OK 14 kB URL HTTP/2 promo.worldofwarships.eu/glows-37602/eu-no/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=&sid=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw&enctid=cq401ucl67yb&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674926949804380299&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287
IP
ASN #58286 Electric-IT Business S.R.L.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5571)
Hash 5aea84c12bfcdbb0e182a6744453d96b
29198b88163ac8a873c731802571cbbddf91092b
7fe541fb61022e172c2da7698756e4b76e3251ec8eb512025044a1b3916386c5
GET /glows-37602/eu-no/?t=1&pub_id=1287&xid=63d55b65bdb77b000187ed2d&xid_param1=E2Z6DGBJ6R&xid_param_2=&sid=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw&enctid=cq401ucl67yb&lpsn=WLAP+NEW+Test+LP+with+bonus&foris=1&teclient=1674926949804380299&utm_source=wlap&utm_medium=affiliate&utm_campaign=e2ncihl0&utm_content=1287 HTTP/1.1
Host: promo.worldofwarships.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"e33d014eb7accd282861240782267878"
x-amz-request-id: tx00000000000000030cc19-0063c15315-1dbc2cc6-ed1
cache: HIT
x-cached-since: 2023-01-25T16:42:05+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
200 OK 18 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 8dd12ba2c384b8d870c6954dfc806eae
3a410f939f0f395c4b6319a93055913d0fbcce71
1df8b9f17e7967e395193e6b7c3e591d39f1db6f418dd92aa5c35f424b50c7d5
GET /global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"635ea99325f08d75fd8f09201f998f50"
x-amz-request-id: tx00000000000000030122d-0063c150d2-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T12:40:10+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/js/main.js
200 OK 900 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/js/main.js
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 9161e273fda6f2582c7903d09dcec53b
979167b63b236d86b848ee80e041c2af332dc219
d13c3ad6b893a047d892c6a52b4dcfa2cf9118874a4524d3816df06fe8c697a7
GET /glows-37602/src/js/main.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"c700e9ef6ee434ec2996a61803ea5367"
x-amz-request-id: tx000000000000000481453-0063c1a343-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
200 OK 1.9 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json
IP
File type JSON data\012- , ASCII text, with very long lines (5875), with no line terminators
Hash 23b49030e418c340a4d3b3c510f6558d
fd7f8e05f97e7bf21c83782409f6972b172121f1
0f1e442050ca65df6cbaa0371a5097b75cb8bd93d0a7df66dfb88c249ed86b71
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/68edbfbe-e009-4939-a55b-f4c65daa640b.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: application/x-javascript
content-length: 1898
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: I7SQMOQYw0Ck07PFEPZVjQ==
last-modified: Fri, 25 Nov 2022 10:09:39 GMT
etag: 0x8DACECD29F68FC0
x-ms-request-id: 22332b09-f01e-0147-73b6-0041d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 20430
expires: Sun, 29 Jan 2023 17:29:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72deee68b517-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 8148dc0dd81d6d8932a6846c7e829419
e01e465f8fd6e9c4270816632bd79ace739afdca
6b111085a8382c29dc1d4a418fb51378439f83c64a0106acb7d1077fc7ddeeae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5955
Cache-Control: max-age=150802
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Etag: "63d4ee36-1d7"
Expires: Mon, 30 Jan 2023 11:22:32 GMT
Last-Modified: Sat, 28 Jan 2023 09:43:18 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
promo-cdn.worldofwarships.com/glows-37602/src/images/Back.jpg
200 OK 554 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/Back.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 554 kB (554306 bytes)
Hash 5b1143e3f10fd52adf017a8c52710246
0eb93a177d800fd1c5498ab56ab2c3dbeffb1604
3f79426bfdbb1b3dd81395847178e30ca89e488ab1a55d8c9385eda70e459536
GET /glows-37602/src/images/Back.jpg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/jpeg
content-length: 554306
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: "5b1143e3f10fd52adf017a8c52710246"
x-amz-request-id: tx0000000000000004819bd-0063c1a343-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:48+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
200 OK 120 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
IP
File type ASCII text, with very long lines (40521)
Size 120 kB (119679 bytes)
Hash de965c5bca917efc4ae330f6cf8369ad
7f415deee8731372c387bcd86f1bdaa94e49df92
edb4a4aae2d2ce70d1566a9e09580c03ff1e299d21a059ee556b56ec0231a738
GET /gtm.js?id=GTM-58Z37MT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 17:29:10 GMT
expires: Sat, 28 Jan 2023 17:29:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 119679
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tenor.wargaming.net/assets/campaigns/static/campaign_data_gtm_sender.js
200 OK 6.6 kB URL HTTP/1.1 tenor.wargaming.net/assets/campaigns/static/campaign_data_gtm_sender.js
IP
ASN #199524 G-Core Labs S.A.
File type HTML document, ASCII text, with very long lines (7249)
Hash 51b44a9f232d5cec869a12623ae6dbfd
19305e6be93c7944f3e4cd68d778a73bf4a03031
32d957fdbd3debc51e0df55c6af4dbf747c501d19fafdd75731cb9a02cc68107
GET /assets/campaigns/static/campaign_data_gtm_sender.js HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 28 Jan 2023 17:29:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 25 Jan 2023 10:03:41 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63d0fe7d-4ced"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 80bd38dbbba2c622765d84927f15e043
8e16e3799ed64a86d1597ae0748c050755df99bd
2b217451165991f85052d4cdfe8e1061d6eed790da3774dd0bb8794fb83fa501
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4032
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Last-Modified: Sat, 28 Jan 2023 16:21:58 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
200 OK 18 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 8cf7ae99615b2cdd6078ef20fece19fc
c6cf1497fe4362d74291e3219b5507af962f2b60
9bd9f694028256b4c59926847fda8e9a2cc8837621393af03e358d29fae9379b
GET /global_static/age_ratings/v2/pegi_ext-violence.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"9a3e2c35d77bd8b96138310eeb6b7f7b"
x-amz-request-id: tx000000000000000301ef3-0063c150d2-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T12:40:10+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Jan 2023 07:15:36 GMT
expires: Mon, 22 Jan 2024 07:15:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
age: 555214
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbe94bc7052911313fffd1cdad964a74
a96a6606f1d20baeeb4040c9ced3ba2f7bd1aada
430d90ac0a39038dbb5336cf29baf6786ac29491c5a8e4dcce04e93d9fceb5e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:12:53 GMT
expires: Fri, 26 Jan 2024 03:12:53 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
age: 224177
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:13:04 GMT
expires: Fri, 26 Jan 2024 03:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 224166
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbe94bc7052911313fffd1cdad964a74
a96a6606f1d20baeeb4040c9ced3ba2f7bd1aada
430d90ac0a39038dbb5336cf29baf6786ac29491c5a8e4dcce04e93d9fceb5e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tenor.wargaming.net/sid?include=campaign&filter[sid]=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw
200 OK 480 B URL HTTP/1.1 tenor.wargaming.net/sid?include=campaign&filter[sid]=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw
IP
ASN #199524 G-Core Labs S.A.
File type JSON data\012- , ASCII text, with very long lines (937), with no line terminators
Hash 03070a1bfc1a7015a85690b0e1da49d0
cf9c93a438b903091f60c330c46683b563255b09
04056c51aba1e81b92537328daab4c14c8d955014d49d5d8fbc27ef45ca57226
GET /sid?include=campaign&filter[sid]=SIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 28 Jan 2023 17:29:10 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Vary: Accept-Encoding
Access-Control-Expose-Headers: Date,Content-Length,Server
Access-Control-Allow-Origin: https://promo.worldofwarships.eu
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
promo-cdn.worldofwarships.com/global_static/favicon/v2/apple-touch-icon-180x180.png
200 OK 2.3 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/apple-touch-icon-180x180.png
IP
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 687168d21b7e78dfb6175de97ae3d045
78081e22c1ea9e51a6cac8910d7ce01c319132e1
49f69cf7e37fda7051cd440048ecd5b2ab0973f106dc6e669959ee453b03e5d1
GET /global_static/favicon/v2/apple-touch-icon-180x180.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/png
content-length: 2326
last-modified: Mon, 05 Sep 2022 07:56:20 GMT
etag: "687168d21b7e78dfb6175de97ae3d045"
x-amz-request-id: tx00000000000000030cbd5-0063c15314-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:17:30+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/loader/circle.svg
200 OK 1.5 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/loader/circle.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Hash 47afd8a5c8f7e472b7581b5800af67fa
3cb9137d604bb36fa795ee00e2a3e939cdb020db
987f0ec39d4e86f9f1b40b9a0d646b1c9a7bfe8bcb2cdbde088d9b0f332dbedf
GET /glows-37602/src/images/loader/circle.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"2c3f7ab695415509a360372c3e81deb8"
x-amz-request-id: tx0000000000000000f9f5e-0063c1a343-1dbe6ac5-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
200 OK 94 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65451)
Hash f6a491be9dc7f6ba1271f4faa9753179
e11e8e291ca6548f4933103088b8acd15af84191
6cf04708cbb25e9b7144e865deebd75bd4b2d42fa703299ba303a084d457b081
GET /scripttemplates/202211.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: application/javascript
content-length: 93485
content-encoding: gzip
content-md5: 9qSRvp3H9roScfT6qXUxeQ==
last-modified: Thu, 15 Dec 2022 13:30:03 GMT
etag: 0x8DADEA07933BD54
x-ms-request-id: e3dbcf52-f01e-014c-2807-1159ac000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 85732
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e0f8fbb517-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed8a8c45dceab588456b222e04775919
0242859712655caa3c3e9b936878c7c7874b7b5a
669f0691b8bf32a10fb219ce47ad69495e5cd2a11317b672aecca53f50b51de3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1674926954073&cv=11&fst=1674926954073&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=2055005001.1674926954&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1674926954073&cv=11&fst=1674926954073&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=2055005001.1674926954&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3229), with no line terminators
Hash 4c103396292f2e98686b8bfe6ce4e185
f36fa9b47e0c2a9554f03a80adb41050147d430e
61ad178d86df8ff7d344b25f18f354a124c259bb6b512c799ac3f2fd84f88a9d
GET /pagead/viewthroughconversion/1006839708/?random=1674926954073&cv=11&fst=1674926954073&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&auid=2055005001.1674926954&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1290
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 28-Jan-2023 17:44:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 28 Jan 2023 17:29:10 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 961969685ca55ea325132a6a149a5414
a6876f7463c8b3964728fb4172883f97efcc8e6b
af3fe883b26a2e64ee613d6feaba10c019b830c6d3f041ce4dd05922aa7876cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AF3FE883B26A2E64EE613D6FEABA10C019B830C6D3F041CE4DD05922AA7876CF"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7361
Expires: Sat, 28 Jan 2023 19:31:51 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 961969685ca55ea325132a6a149a5414
a6876f7463c8b3964728fb4172883f97efcc8e6b
af3fe883b26a2e64ee613d6feaba10c019b830c6d3f041ce4dd05922aa7876cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AF3FE883B26A2E64EE613D6FEABA10C019B830C6D3F041CE4DD05922AA7876CF"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7361
Expires: Sat, 28 Jan 2023 19:31:51 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
10697551.fls.doubleclick.net/activityi;src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287?
200 OK 590 B URL HTTP/2 10697551.fls.doubleclick.net/activityi;src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1478), with no line terminators
Hash a8617747cc806a54c6ee2c4fb0979a85
f2921f2e4b8fa27aebc14d69b2d7b906c03cd60e
b668752dd670b99fb748a4ca1a115d3d7dc387f76a6387010ec3d467f3835b77
GET /activityi;src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287? HTTP/1.1
Host: 10697551.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 590
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 28-Jan-2023 17:44:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (48198), with no line terminators
Hash b423017d2eccc05cb5e3921d36eeb535
b989dd503a71fa6a448860a5d59c28bbceee910b
b8aab8ba299a063e0e5faacea59d7cc56da466c0fd3b91a8d03480184eaf7495
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: application/x-javascript
content-length: 11485
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: tCMBfS7MwFy145IdNu61NQ==
last-modified: Fri, 25 Nov 2022 10:09:21 GMT
etag: 0x8DACECD1F1475FC
x-ms-request-id: ba3e27e9-f01e-00e9-15b6-0024e0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 20315
expires: Sun, 29 Jan 2023 17:29:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e1ca1ab517-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
200 OK 590 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1477), with no line terminators
Hash 42236e63f4814467b53872f79935de52
7c8c6e72923bff7caafe91549517e154b4c19065
c7831f4a1fb65107c13e907a16153d0f41524e0f11638303536e57f99f233c61
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
200 OK 2.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
IP
File type JSON data\012- , ASCII text, with very long lines (7753)
Hash 688f5aef949a8982bda0771893cc67d3
c50441dea985350ab305848e2d87d6286adfda3c
da30c398b0e6646c44fc5a53e44371004a33267d6cd07404775ab6380979b058
GET /scripttemplates/202211.1.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: application/json
content-length: 2639
content-encoding: gzip
content-md5: aI9a75SaiYK9oHcYk8xn0w==
last-modified: Thu, 15 Dec 2022 13:29:55 GMT
etag: 0x8DADEA074AA9D35
x-ms-request-id: aa98274f-b01e-00c7-0a93-10a427000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 20314
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e31bdeb517-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (50353)
Hash 0cd2fb0fd730954ef2159520d96f1934
d2656260dfdac230479c8e7dc44444e9d5c8faf2
b821093423791675ca31c2d688b528b329737cca90ef62bc44f5c5b39423c8f6
GET /scripttemplates/202211.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: application/json
content-length: 12540
content-encoding: gzip
content-md5: DNL7D9cwlU7yFZUg2W8ZNA==
last-modified: Thu, 15 Dec 2022 13:29:57 GMT
etag: 0x8DADEA0758F35B0
x-ms-request-id: 9b16e561-001e-0091-3f93-104c57000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 20314
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e31be1b517-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e4275700bdd16f2d22ed4b0d68e9034
819402bb45439629aa19b3cecd1ffd6ae9837093
cb747d95c4f32d8675a55b1175a981e7123b673be23f152daaef662119156fa1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB747D95C4F32D8675A55B1175A981E7123B673BE23F152DAAEF662119156FA1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10600
Expires: Sat, 28 Jan 2023 20:25:50 GMT
Date: Sat, 28 Jan 2023 17:29:10 GMT
Connection: keep-alive
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash b8d4e3b24798912731232fc0d4a4691c
d9a8d2abd55a6acc55e55748abd71bcdb8bfbd18
df146c6ca0e66c23bb9ce7879ccc4554876701047b65551b1fbfef67b4e39b55
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 17:29:10 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 01 Feb 2023 14:53:12 GMT
ETag: "d9a8d2abd55a6acc55e55748abd71bcdb8bfbd18"
Last-Modified: Sat, 28 Jan 2023 14:53:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1800
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790b72e35f7d0afa-OSL
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
200 OK 4.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
IP
Hash ec71462ccab21e25cd00418cd3a1e2f1
9283e7c67ffa190cdf124ec409248aa34fff445a
bb49a073651d3556c99afdb6658a9be56365e51c18bb56f74bf6ee8a63ed922c
GET /scripttemplates/202211.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: text/css
content-md5: XcxlleAcPGO2n5kTZrHH2Q==
last-modified: Thu, 15 Dec 2022 13:30:09 GMT
x-ms-request-id: f62025ee-201e-0068-0993-1086b7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 20314
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e31be2b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
200 OK 13 kB URL HTTP/2 cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
IP
File type PNG image data, 1000 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash c90475872d8975dcc4b5ed7db6cc5e28
1e5a413845f5d501c174ae4940e1329a2575067f
e79eb16948cca42e0f7884fad7637fa6ec69117a07dbc04cc8b3ea7ebeaef719
GET /logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/png
content-length: 13003
content-md5: yQR1hy2JddzEte19tsxeKA==
last-modified: Fri, 02 Oct 2020 14:20:55 GMT
etag: 0x8D866DE604098C2
x-ms-request-id: c476ff8b-c01e-00c3-3c6c-c451a5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 41722
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e37c54b517-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash b8d4e3b24798912731232fc0d4a4691c
d9a8d2abd55a6acc55e55748abd71bcdb8bfbd18
df146c6ca0e66c23bb9ce7879ccc4554876701047b65551b1fbfef67b4e39b55
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 17:29:10 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 01 Feb 2023 14:53:12 GMT
ETag: "d9a8d2abd55a6acc55e55748abd71bcdb8bfbd18"
Last-Modified: Sat, 28 Jan 2023 14:53:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1800
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790b72e39fa90afa-OSL
adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=4280712121632;gtm=2wg1p0;gcs=G111;auiddc=2055005001.1674926954;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:11 GMT
expires: Sat, 28 Jan 2023 17:29:11 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash aee230349432faca1647055c09fb83c0
d6f7a36df24329dd298d8b756424923559ff85d2
fc481e752f5f05d1cae7ff4b32d82e861907246b01662e7c19b34c1a30df85d5
GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Sat, 28 Jan 2023 17:29:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A184795016%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A184795016%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash eb6e8317616598f111450f794601664f
4e7a3a462b9d74e42cdb84a7146a6d6287bb09a2
fa4e7cbeddf3a2038e70c35513826bb62e85dd0d6849d7266d9b72ba518fb8f3
GET /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A184795016%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Sat, 28 Jan 2023 17:29:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_guard_logo.svg
200 OK 812 B URL HTTP/2 cdn.cookielaw.org/logos/static/ot_guard_logo.svg
IP
Hash f46e4923fe479356b73303ebfa4efd34
1ddebfba0adbd260f6beeff350fdb05ed0afaf16
642c0f607459bfe2329a7762b1b5de01922266e4d83d20a764e35d66dc9bd964
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:11 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Fri, 27 Jan 2023 07:38:17 GMT
x-ms-request-id: b3fc9f96-601e-00c5-305d-32a6dd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 19567
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e3acc6b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash ff4c184a3d01f269f89ec827ab52be84
a8f3dbf27b14b9bd729ed231415ed8a1d570ca92
d3f09e3e95dd66d18366d9dc67c0acd9eb063a586f6721f67c19fd9e45dea688
GET /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Sat, 28 Jan 2023 17:29:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1674926954244
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1674926954244
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tag=ViewContent&ts=1674926954244 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Sat, 28 Jan 2023 17:29:11 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,a21f9649d56c32389e06b384891d3354,10.0.0.140,32220,91.90.42.154,,97935007694,1,1674926951.068,0.003,,.,0,0,0.000,0.004,-,0,0,197,203,101,10,34729,,,,,,-,
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 622311873d3819b9911301b09bc2d43c
9f08d648e40479aa12da033da15b80a15017c739
6138674cec17da8b7bb02bf0686bf3e7aefa2bce6a5f844ebd80e10b665818b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 17:29:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=754323928.1674926954&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1p058Z37MT&auid=2055005001.1674926954
302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=754323928.1674926954&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1p058Z37MT&auid=2055005001.1674926954
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=G111&rnd=754323928.1674926954&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1p058Z37MT&auid=2055005001.1674926954 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=754323928.1674926954&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F>m=2wg1p058Z37MT&auid=2055005001.1674926954
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 28 Jan 2023 17:29:11 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_3b5aae42c54c9ee9a8a2b211764a774e12e3dd447804683d2a379b958efd6dc9&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A268814253%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_3b5aae42c54c9ee9a8a2b211764a774e12e3dd447804683d2a379b958efd6dc9&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A268814253%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_3b5aae42c54c9ee9a8a2b211764a774e12e3dd447804683d2a379b958efd6dc9&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A268814253%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71343676/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_3b5aae42c54c9ee9a8a2b211764a774e12e3dd447804683d2a379b958efd6dc9&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A268814253%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 17:29:11 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1262360841674926951; Path=/; SameSite=None; Secure
i=T/qw4Y/qOvV+he+eC7OBl60zMrlqf9REbz57CqFhoPI9OPPhHyH5/kwslUxPQ7SdhawNRQDnnar0VfBtlOFzrcyP4ZM=; Expires=Tue, 25-Jan-2033 17:29:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7700632061674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7700632061674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706462951.yc.1674926951#1706462951.yrts.1674926951#1706462951.yrtsi.1674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 87 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 4c324df2de02c1adaf5eee3d6cfb408c
9703cc9614ffda5a096808ff91cd8e14ebc39d98
dde7a390957dffc332e80bd0f12761963457a6214084913540e6dc81a94b760a
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.257.0
x-jsd-version-type: version
etag: W/"34e3a-eIUrj6hD3pmnKAQZCp7YaNtM0Rc"
x-served-by: cache-fra-eddf8230060-FRA, cache-yyz4554-YYZ
x-cache: HIT, MISS
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 13072
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oyp4KnOUnDjvJ01MRlv5yVCCVNH1mxp3uwCNMZJTZJPyfUwMTQb46ryUGbUGKzXV7L3vcCR46tSoCHOMc87N171K%2ByYWKx4vt%2FtzT5ajHkj7rIbcXQLquiHxr8sQn648WuY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790b72e14e4efac0-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1006839708/?random=1674926954073&cv=11&fst=1674925200000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=1668097563&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1006839708/?random=1674926954073&cv=11&fst=1674925200000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=1668097563&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1674926954073&cv=11&fst=1674925200000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=1668097563&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1006839708/?random=1674926954077&cv=11&fst=1674926954077&bg=ffffff&guid=ON&async=1>m=2wg1p0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=2055005001.1674926954&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1006839708/?random=1674926954077&cv=11&fst=1674926954077&bg=ffffff&guid=ON&async=1>m=2wg1p0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=2055005001.1674926954&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1006839708/?random=1674926954077&cv=11&fst=1674926954077&bg=ffffff&guid=ON&async=1>m=2wg1p0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=2055005001.1674926954&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 17:29:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73769
date: Sat, 28 Jan 2023 17:29:11 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Sat, 28 Jan 2023 18:29:11 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1674926954216&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=002a20d6-d42c-4323-9c95-e2438ba772d3&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1674926954216&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=002a20d6-d42c-4323-9c95-e2438ba772d3&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1674926954216&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=002a20d6-d42c-4323-9c95-e2438ba772d3&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Sat, 28 Jan 2023 17:29:11 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP
File type ASCII text, with very long lines (32040), with no line terminators
Hash 365c9c596b34a4638836c22c8a5dc623
90f05e1c6c4016e5677709bb6f8f0e810b9ca58a
ecddfb33f676186b2a23f80d1d12b32bfe11d1144b1e44da0347d5ac2943b76f
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 28 Jan 2023 17:24:15 GMT
vary: Accept-Encoding
last-modified: Mon, 19 Dec 2022 01:14:54 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 297
content-length: 9788
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674926955.8937097&pvid=t9wkfptknmkldg89ih9&tsyjad=0&_impl=ytag
403 Forbidden 14 kB URL HTTP/2 am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674926955.8937097&pvid=t9wkfptknmkldg89ih9&tsyjad=0&_impl=ytag
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674926955.8937097&pvid=t9wkfptknmkldg89ih9&tsyjad=0&_impl=ytag HTTP/1.1
Host: am.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 17:29:13 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed1a0bd725b2078b4cfe4ed83877901
62493ca03be9870aac2341e033611a6d56bd322a
706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
age: 70359
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A126746954893%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A686697002%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 17:29:10 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=60402651674926950; Path=/; SameSite=None; Secure
i=2pIv6KYdYK3IcsJnvx+kf6I5W8tU/wjIX/UV42sKQp8P9W8tdAspUWjTD3LJDpKDWfafnw+/3I2nfcCBcr1jO29cnaA=; Expires=Tue, 25-Jan-2033 17:29:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8666946241674926950; Expires=Sun, 28-Jan-2024 17:29:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8666946241674926950; Expires=Sun, 28-Jan-2024 17:29:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706462950.yc.1674926950#1706462950.yrts.1674926950#1706462950.yrtsi.1674926950; Expires=Sun, 28-Jan-2024 17:29:10 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:10 GMT
last-modified: Sat, 28-Jan-2023 17:29:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202245
200 OK 0 B URL HTTP/2 s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202245
IP
GET /wp-content/js/devicepx-jetpack.js?ver=202245 HTTP/1.1
Host: s0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.homenomnom.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"5bfee312-52b6"
content-encoding: br
expires: Mon, 06 Nov 2023 23:54:19 GMT
cache-control: max-age=31536000
x-ac: 4.arn _dca BYPASS
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
timing-allow-origin: *
x-nc: HIT arn 1
X-Firefox-Spdy: h2
a.quora.com/qevents.js
200 OK 0 B IP
GET /qevents.js HTTP/1.1
Host: a.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: text/plain
x-amz-id-2: Lo6V6sS9dollZm991E+r9QS5ilIWlcul705lMiga2oQnz8bnT95jaa4X7qyu2MPUU2YNcD20ek4=
x-amz-request-id: ABWFWAK2P6Z86ST7
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 830388
expires: Sat, 28 Jan 2023 21:29:10 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 790b72e15aa70b51-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto+Condensed:wght@400;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto+Condensed:wght@400;700&display=swap
IP
GET /css2?family=Roboto+Condensed:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 28 Jan 2023 17:29:10 GMT
date: Sat, 28 Jan 2023 17:29:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1018%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A459019306946%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926954%3Ac%3A1%3Arn%3A589757380%3Arqn%3A1%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A183%2C7%2C2%2C0%2C560%2C0%2C%2C151%2C2%2C1173%2C1173%2C0%2C999%3Aco%3A0%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926954%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 17:29:11 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=308835751674926951; Path=/; SameSite=None; Secure
i=GldrScxv726lYCbVDFRtP1SLcMDy2S0Fjy0rwqEps7Gs8ac24QW/jtMb42SbF9YuacaNIJ1RaErTgRVUHg/dgS4JKZ0=; Expires=Tue, 25-Jan-2033 17:29:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8016384541674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8016384541674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706462951.yc.1674926951#1706462951.yrts.1674926951#1706462951.yrtsi.1674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/logo-main.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/logo-main.svg
IP
ASN #58286 Electric-IT Business S.R.L.
GET /glows-37602/src/images/logo-main.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:58 GMT
etag: W/"3205035293624ac8f4502ce6c888db9e"
x-amz-request-id: tx0000000000000004819ba-0063c1a343-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
GET /watch/45727869?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/45727869/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-37602%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63d55b65bdb77b000187ed2d%26xid_param1%3DE2Z6DGBJ6R%26xid_param_2%3D%26sid%3DSIDbWmKSdQOS9e8F2BOkWX3eDT6R2ToT7l3TBNclpSP-xa0X-yDRBSU_7GRvFaAJZngl69-wgokHTht4RKELsUgrsYZws3W8WP_UZTa9pkq06kFEZR8CcD9AM0PAr_vpn3-_X33zVPLZADNEw%26enctid%3Dcq401ucl67yb%26lpsn%3DWLAP%2BNEW%2BTest%2BLP%2Bwith%2Bbonus%26foris%3D1%26teclient%3D1674926949804380299%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3De2ncihl0%26utm_content%3D1287&charset=utf-8&hittoken=1674926951_be9368d916964ef3a37b1bdf8d198d15c80e876177ba32d26aba61173764b0f4&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1237651828815%3Ahid%3A317538887%3Az%3A0%3Ai%3A20230128172914%3Aet%3A1674926955%3Ac%3A1%3Arn%3A820445803%3Arqn%3A2%3Au%3A16749269541019632894%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674926952827%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674926955%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 17:29:11 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=287458971674926951; Path=/; SameSite=None; Secure
i=trvfMEWw9zLfqxa/W4Xd9WrJQ3aYoNNILJkPizNEoFy1qU3bqtDcnd3U9lGf4KT0WChDDz7FqqBIlVWDtlBGXCsspo4=; Expires=Tue, 25-Jan-2033 17:29:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5378606651674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5378606651674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706462951.yc.1674926951#1706462951.yrts.1674926951#1706462951.yrtsi.1674926951; Expires=Sun, 28-Jan-2024 17:29:11 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 17:29:11 GMT
last-modified: Sat, 28-Jan-2023 17:29:11 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/powered_by_logo.svg
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Wed, 25 Jan 2023 15:15:51 GMT
x-ms-request-id: d2309c72-301e-0137-6df4-30321c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 82114
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 790b72e37c58b517-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
IP
ASN #58286 Electric-IT Business S.R.L.
GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx000000000000000301a4c-0063c150d2-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T12:40:10+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-37602/src/images/loader/anchor.svg
200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-37602/src/images/loader/anchor.svg
IP
ASN #58286 Electric-IT Business S.R.L.
GET /glows-37602/src/images/loader/anchor.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-37602/src/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:10 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 17:40:57 GMT
etag: W/"4c1b50010445879a6da944e80fde178a"
x-amz-request-id: tx000000000000000481462-0063c1a343-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T19:03:47+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
zogrepsili.com/bk3/VY0.Pw3/pivpbim/VTJrZwDg0Q0PNkjNIAwQMAziMsxOLWTcQE2yMAjmAqzjMMz-IP
200 OK 0 B URL HTTP/2 zogrepsili.com/bk3/VY0.Pw3/pivpbim/VTJrZwDg0Q0PNkjNIAwQMAziMsxOLWTcQE2yMAjmAqzjMMz-IP
IP
Analyzer Verdict Alert fortinet Malware
GET /bk3/VY0.Pw3/pivpbim/VTJrZwDg0Q0PNkjNIAwQMAziMsxOLWTcQE2yMAjmAqzjMMz-IP HTTP/1.1
Host: zogrepsili.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://final.similarwebline.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:09 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Sat, 28 Jan 2023 17:29:08 GMT
set-cookie: kadCCap=218665:1:1673777741;220335:1:1670435916;220790:1:1668460505;79610:1:1674135009;221352:1:1670163762;212269:1:1674802939;223454:1:1674804841;199455:1:1668245056;215297:1:1674141027;171526:1:1673628579;222582:1:1674318856;222555:1:1671433227;219484:1:1667715065;184246:1:1673859446;219047:1:1667194435;222775:1:1674305361;222513:1:1671568408;223255:1:1670393482;219652:1:1669330335;221398:1:1674769535;218693:1:1669515516;194136:1:1674893046;101716:1:1672946010;132751:1:1674904546;223642:1:1674763884; max-age=1706462949; path=/
kadACap=346329:1:1670226206;419297:1:1674242325;410256:1:1674039938;419303:1:1674299014;417177:1:1674123312;404163:1:1673226439;453831:1:1674872001;424441:1:1674226483;441369:1:1671297690;401659:1:1674332133;445788:1:1669918420;468607:1:1674893352;410254:1:1674926948;419293:1:1671780919;406293:1:1673859446;272913:1:1674460051;445506:1:1669286676;445735:1:1669286676;458041:1:1670526590;458045:1:1670528140;190964:1:1674135009;383700:1:1674900815;389299:1:1673726804;446714:1:1674043083;424443:1:1674359547;444748:1:1669841678;410252:1:1674308810;453850:1:1671627132;462327:1:1673736144;465201:1:1674236409;451724:1:1669565807;445499:1:1670164226;453839:1:1674268920;442019:1:1674878512;456883:1:1671781891;446718:1:1674353140;458498:1:1672536671;471728:1:1674871019;449523:1:1670210030;450649:1:1674026353;470673:1:1674289452;446498:1:1671420411;419291:1:1674154909;451139:1:1673951585;419301:1:1674188761;398832:1:1672025828;407100:1:1668246232;445081:1:1671894608;444785:1:1671894608;451147:1:1674036929;419323:1:1674028005;320498:1:1674924381;424445:1:1674263948;446716:1:1674258987;419299:1:1674258213;446531:1:1669270846;419321:1:1674357365;446720:1:1673953397;460522:1:1674470567;454815:1:1673736038;419295:1:1674030439;446013:1:1668228435;346327:1:1674855589; max-age=1706462949; path=/
kadCSCap=132751:1:1674904546;194136:1:1674893046; path=/
kadASCap=468607:1:1674893352;471728:1:1674871019;410254:1:1674926948;383700:1:1674900815;453831:1:1674872001;346327:1:1674855589;442019:1:1674878512;320498:1:1674924381; path=/
kadRPixJ=bnVsbA==; max-age=1706462949; path=/
kadUnP3=CAoQ9q3TngYaCwi1CBAFGIOe0p4GGg0I88GZARABGKWJ0Z4GGg0Ir6f+ARABGLjq054GGg0IpeeZAhABGPat054GGg0Iq4CaAhAFGKiw054GIgoIARABGLjq054GIgoIAxAJGPat054GKgwIw+kMEAEYuOrTngYqDAiMvRIQARilidGeBioLCOkCEAUYg57SngYqDAjNvygQARj2rdOeBioMCMjCKBAFGKiw054G; max-age=1706462949; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
stats.wp.com/e-202245.js
200 OK 0 B IP
GET /e-202245.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.homenomnom.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 17:29:07 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Sun, 29 Oct 2023 22:44:48 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
213.186.33.19
192.0.77.32
93.184.220.29
104.18.21.226
194.135.30.42
88.85.94.246
183.79.249.252
23.38.200.197
185.244.209.62
77.88.21.119
159.69.234.10
92.223.21.16