1d6564858f3.tcbound.com/
94.237.103.119200 OK 400 B IP 94.237.103.119:0
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash 4e83b6185ca8cee928f44aca6029d193
a0756ea6e013bdb3b19e748ccadca237c464814d
99c62e80bdd7611d4e352e84105ab4f8b7a04da564caf8591b492fbf7c297aa3
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: 1d6564858f3.tcbound.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:53:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Set-Cookie: rts-trck=1; expires=Mon, 28-Nov-2022 17:03:52 GMT; Max-Age=600; path=/; domain=1d6564858f3.tcbound.com
t-uuid=5x2abedix4kg439m71nokkw04; expires=Sun, 28-Nov-2032 16:53:52 GMT; Max-Age=315619200; path=/; domain=.tcbound.com
rts-trck=1; expires=Mon, 28-Nov-2022 17:03:52 GMT; Max-Age=600; path=/; domain=1d6564858f3.tcbound.com
traffic-back=ok; expires=Mon, 28-Nov-2022 16:54:22 GMT; Max-Age=30; path=/; domain=.tcbound.com
Last-Modified: Mon, 28 Nov 2022 16:53:52 GMT
Expires: Mon, 28 Nov 2022 16:53:52 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7814
Expires: Mon, 28 Nov 2022 19:04:06 GMT
Date: Mon, 28 Nov 2022 16:53:52 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3361
Cache-Control: max-age=153210
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:52 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:27:22 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 16:17:48 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2164
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10014
Expires: Mon, 28 Nov 2022 19:40:46 GMT
Date: Mon, 28 Nov 2022 16:53:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +Ibv618H1K300mITWSDNIv8imUZ9FWAqYKaNEpfdSwfJpfaDKBXWCivuYqdXurDj48SOjUSF1/4=
x-amz-request-id: SYMM9PP8ND86BSC1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 16:45:06 GMT
age: 526
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6078b527c5265cd283f16016a45ccfd5
27be72e9b40ce32d787a6bdeaa60620eba0799d6
b210a13b08406be376a409141a07d039330c8b5a24a594cacb621eef1b42ecff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B210A13B08406BE376A409141A07D039330C8B5A24A594CACB621EEF1B42ECFF"
Last-Modified: Sun, 27 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5009
Expires: Mon, 28 Nov 2022 18:17:22 GMT
Date: Mon, 28 Nov 2022 16:53:53 GMT
Connection: keep-alive
f7a35c2ee.srtrak.com/163-922-3-2583?external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5,
91.132.60.212301 Moved Permanently 162 B URL HTTP/2 f7a35c2ee.srtrak.com/163-922-3-2583?external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5,
IP 91.132.60.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /163-922-3-2583?external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5, HTTP/1.1
Host: f7a35c2ee.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 28 Nov 2022 16:53:53 GMT
content-type: text/html
content-length: 162
location: https://f7a35c2ee.srtrak.com/promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5,
x-robots-tag: noindex, nofollow, nosnippet, noarchive
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 16:11:12 GMT
cache-control: public,max-age=3600
age: 2561
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5824
Cache-Control: max-age=150606
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:53 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:43:59 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.149.219.22101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.219.22:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nVrnr8aPZIHMQAMZ7u9QeQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: w59SGTJIB1sMb16rMBP0e+5R9m8=
f7a35c2ee.srtrak.com/promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5,
91.132.60.212301 Moved Permanently 0 B URL HTTP/2 f7a35c2ee.srtrak.com/promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5,
IP 91.132.60.212:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5, HTTP/1.1
Host: f7a35c2ee.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 28 Nov 2022 16:53:53 GMT
content-type: text/html; charset=UTF-8
location: https://1d91e8e66.srtrak.com/promo-tools/direct-offers/mainstream/games/caliber/?idev_id=163&set=3&link=2583&page=922&external_clickid=5x2abediqakq25bokk88oo4s0,16704017,5,&clickid=3566cb0474349ab49b3a5679c8823aec90dd0d67001ed05f08eb4ece8ac211d6
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: _s=s57ot7p44ov9s73dq5e32nhpu3; path=/; HttpOnly
sr=163--3-2583-------https%3A%2F%2F1d91e8e66.srtrak.com%2Fpromo-tools%2Fdirect-offers%2Fmainstream%2Fgames%2Fcaliber%2F; expires=Tue, 15-Nov-2072 16:53:53 GMT; Max-Age=1576800000; path=/; domain=.srtrak.com
referrer-policy: no-referrer
x-robots-tag: noindex, nofollow, nosnippet, noarchive
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bd2897c82c183ba2556c82e075eb7002
b15517523e6cdba6631a11cb20e398c61e2868d4
c440cfcf0b0313f9fa8bf82b160c849a85a6268d90b76b35524a6645f416015c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4391
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:54 GMT
Last-Modified: Mon, 28 Nov 2022 15:40:43 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/aly9ipyd/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2=
92.223.23.231301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/aly9ipyd/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2=
IP 92.223.23.231:0
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /aly9ipyd/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 28 Nov 2022 16:53:54 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://join.worldoftanks.eu/1600946604/no/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2=&sid=SID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w&enctid=coo33mcw3a52&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669654434719739100&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869
Set-Cookie: STIDREFERRAL=SID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=coo33mcw3a52; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1669654434719739100; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 34edaf309ab20335070f506f3985b604
1535164620fe9b562e8972c2e91458a5f6b9a728
2d2c9f483fb86761b8c8737cf7caa86df3a3186a44c804a78b4934f017619505
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2161
Cache-Control: max-age=159885
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:54 GMT
Etag: "6384acbe-1d7"
Expires: Wed, 30 Nov 2022 13:18:39 GMT
Last-Modified: Mon, 28 Nov 2022 12:42:38 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
join.worldoftanks.eu/1600946604/no/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2=&sid=SID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w&enctid=coo33mcw3a52&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669654434719739100&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869
92.223.51.163200 OK 16 kB URL HTTP/1.1 join.worldoftanks.eu/1600946604/no/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2=&sid=SID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w&enctid=coo33mcw3a52&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669654434719739100&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869
IP 92.223.51.163:0
ASN #199524 G-Core Labs S.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (51156)
Hash 76d6249792ec3ed63f71341dce79d771
f9bfaf0fbf9f93f8ca4587bb5844ee6f7036d0c8
d70c54e44582c3c51947bd25e6644906d4acd66d0e09b59cc7d78ffad22b47d4
GET /1600946604/no/?t=1&pub_id=869&xid=6384e7a28957c80001a1a618&xid_param1=163&xid_param_2=&sid=SID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w&enctid=coo33mcw3a52&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669654434719739100&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869 HTTP/1.1
Host: join.worldoftanks.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 16:53:54 GMT
Content-Type: text/html
Last-Modified: Fri, 01 Jul 2022 12:11:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62bee46c-10101"
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b9aa93cac77367cc9b8afec665990557
82805dfd3d3079ec183d5c9c9f3d7bf8043298bd
e93663abc007fc71724a3f19e6edd14668bebb116f5137e5cc1c5652a35e7c0c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2756
Cache-Control: max-age=143965
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Etag: "63846c3c-1d7"
Expires: Wed, 30 Nov 2022 08:53:20 GMT
Last-Modified: Mon, 28 Nov 2022 08:07:24 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b9aa93cac77367cc9b8afec665990557
82805dfd3d3079ec183d5c9c9f3d7bf8043298bd
e93663abc007fc71724a3f19e6edd14668bebb116f5137e5cc1c5652a35e7c0c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2756
Cache-Control: max-age=143965
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Etag: "63846c3c-1d7"
Expires: Wed, 30 Nov 2022 08:53:20 GMT
Last-Modified: Mon, 28 Nov 2022 08:07:24 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5967
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:53:55 GMT
Connection: keep-alive
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/2aef0c94f5bc198cba6f45ee06d503a0_1639484015.png
92.223.84.84200 OK 29 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/2aef0c94f5bc198cba6f45ee06d503a0_1639484015.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 1174 x 363, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ce0d2852121a1cd85a26c2426a40dae
474a69d1816e7d29cea432b640e43e5acff39450
07871f75a6f4007f7f7d9adf5382f953c1dce8407149662dd88617a1d8d4055a
GET /videoback-ongoing-eu-wothq-1691/2aef0c94f5bc198cba6f45ee06d503a0_1639484015.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/png
content-length: 29062
last-modified: Tue, 14 Dec 2021 12:13:35 GMT
etag: "61b88a6f-7186"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:54+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/518e6d6bd45d6086554daa0295291ee1_1639483949.png
92.223.84.84200 OK 3.0 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/518e6d6bd45d6086554daa0295291ee1_1639483949.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 123 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b1962befd8938b36c48ed62ca7c04f5
4e3e0524f822003a2567d04501b9d5e7d55d7d06
cd2a2481818213f1c1b4e065ead65f83ff50d25a5b63a4a8cf515614f3ad05cf
GET /videoback-ongoing-eu-wothq-1691/518e6d6bd45d6086554daa0295291ee1_1639483949.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/png
content-length: 2976
last-modified: Tue, 14 Dec 2021 12:12:29 GMT
etag: "61b88a2d-ba0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:44:31+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5967
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:53:55 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b9aa93cac77367cc9b8afec665990557
82805dfd3d3079ec183d5c9c9f3d7bf8043298bd
e93663abc007fc71724a3f19e6edd14668bebb116f5137e5cc1c5652a35e7c0c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2756
Cache-Control: max-age=143965
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Etag: "63846c3c-1d7"
Expires: Wed, 30 Nov 2022 08:53:20 GMT
Last-Modified: Mon, 28 Nov 2022 08:07:24 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/ba06c381ed267fb7dfd6b007931ed0bf_1639483823.png
92.223.84.84200 OK 30 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/ba06c381ed267fb7dfd6b007931ed0bf_1639483823.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 219 x 220, 8-bit grayscale, non-interlaced\012- data
Hash e15fed82b2db8b2e31de05ab2a5601f4
405cbff152f965bdbf3a72faabbff5cafa4bcc14
549b0b011eb72bfb724708d7caeb637c1411be84c32ccbb5a9d7a76afc8b30bd
GET /videoback-ongoing-eu-wothq-1691/ba06c381ed267fb7dfd6b007931ed0bf_1639483823.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/png
content-length: 30233
last-modified: Tue, 14 Dec 2021 12:10:23 GMT
etag: "61b889af-7619"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:44:31+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png
92.223.84.84200 OK 6.7 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 248 x 110, 8-bit colormap, non-interlaced\012- data
Hash 91f01fe893320cb394fc52461a1b24a5
f43616cd9e85af6a2a73a914a44085662d123807
3038bb7d8adebbe73e330bbea5739b04efe6b04d5a1d81db314bd29251813967
GET /videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/png
content-length: 6662
last-modified: Thu, 24 Sep 2020 11:28:54 GMT
etag: "5f6c82f6-1a06"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:54+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/f649b2f12a074726bf8db29fe5633628_1639483774.png
92.223.84.84200 OK 14 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/f649b2f12a074726bf8db29fe5633628_1639483774.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 208x208, components 3\012- data
Hash 87d3c37b826fc0c8237c8e716934f6b2
79632ce4b4f0f1cbe6a0ac9081dba9924b4d0cd0
5dd52ce85650d9cc13997187633c865d7284e628f3f28af2ce38896d8d7d3da0
GET /videoback-ongoing-eu-wothq-1691/f649b2f12a074726bf8db29fe5633628_1639483774.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/png
content-length: 13892
last-modified: Tue, 14 Dec 2021 12:09:34 GMT
etag: "61b8897e-3644"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:44:31+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png
92.223.84.84200 OK 1.6 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 26 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 65952e9526844e297b5ed12b51af3073
ab06c5be859a20aea602c95a592d366152f66fda
0eb8340c0b3fc3e36cd816cb9ce8e819b64b40ded2504741eb4662bb10eea015
GET /videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/png
content-length: 1572
last-modified: Thu, 24 Sep 2020 11:34:43 GMT
etag: "5f6c8453-624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:54+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZJu4cMNnQTavxqB1MnRFluzfZC59BcUnIHgXh9h6LJWYgsFL83rHoQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 16:15:25 GMT
age: 2310
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/a3c86a67f4c5bb1c6cdb50b1092c0761_1600946860.jpg
92.223.84.84200 OK 373 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/a3c86a67f4c5bb1c6cdb50b1092c0761_1600946860.jpg
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 373 kB (373020 bytes)
Hash 6baad877e262149d8eea54bb33563765
e4584c51785969af9c25718cff399e0e444af9a9
f6a40920a81d3a3489189bbb747f7d3e1b2a87f7568361e4872353bc2cb082b2
GET /videoback-ongoing-eu-wothq-1691/a3c86a67f4c5bb1c6cdb50b1092c0761_1600946860.jpg HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: image/jpeg
content-length: 373020
last-modified: Thu, 24 Sep 2020 11:27:40 GMT
etag: "5f6c82ac-5b11c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:46+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:43 GMT
age: 68532
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a6e5f60b87d3879606a6707feb37a73
373c96c2e0006d70954d4b4ebd850f62f558e92c
1ae48f692f44d357e21eec708b46f22c36a3de21be8d0f1c2035d197e0aa89de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9546
x-amzn-requestid: 60e352b5-ab38-4975-bf26-500f0a639a2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFfulExwIAMFzQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637edff6-1364912f7fd292da6453a83e;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 03:07:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qtRAIXoswvTgNWZzaQE1WHZQXoJRtK9nKpusFtXH3pDRHH_DZtsLFw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 11:59:09 GMT
age: 17686
etag: "373c96c2e0006d70954d4b4ebd850f62f558e92c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 67959
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 67949
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:11:39 GMT
age: 31336
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58QVDL8
142.250.74.168200 OK 108 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58QVDL8
IP 142.250.74.168:0
File type ASCII text, with very long lines (46280)
Size 108 kB (107564 bytes)
Hash 302b2ac2eb02d36f910820e4e7abee80
e3c2fd50100721210c23a498a5d9c12b15f27fe8
c0a178a4f8f5f69e0bf27a82328087eb819ac613203b123335eae6097c37729f
GET /gtm.js?id=GTM-58QVDL8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 16:53:55 GMT
expires: Mon, 28 Nov 2022 16:53:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107564
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:17:43 GMT
expires: Wed, 22 Nov 2023 22:17:43 GMT
cache-control: public, max-age=31536000
age: 498972
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2
216.58.207.195200 OK 7.1 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 7120, version 1.0\012- data
Hash 1e58a6b01c300f7c84abdacf53503eaf
ed6f0d2f1564e5d763e07a8fde2f16c5e911f32f
85f70e68e3ba976fbfee39a96c5275550eb881f302c7dedf91aa7d0a802ba5f6
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:24:28 GMT
expires: Fri, 24 Nov 2023 17:24:28 GMT
cache-control: public, max-age=31536000
age: 343767
last-modified: Tue, 19 Apr 2022 18:54:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
216.58.207.195200 OK 9.7 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 9692, version 1.0\012- data
Hash d572b531f0823555818998b466028e08
788073fb7656c7b44a3d67468fc355ceb618290e
bddd7c9debeee9bccc8d6a0f0990743d3db200fe23fc08dbad9e60a007e52919
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9692
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 23:14:31 GMT
expires: Wed, 22 Nov 2023 23:14:31 GMT
cache-control: public, max-age=31536000
age: 495564
last-modified: Tue, 19 Apr 2022 18:44:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:51 GMT
expires: Thu, 23 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
age: 424924
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2
216.58.207.195200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 11816, version 1.0\012- data
Hash 7fa68490a833a8fa395e5f3bffafc052
1880e3743548106319713b937e7769eee6b1ce21
30fa70635379ae1b58491bc41572760c1f3c8445265436a5fec4c36a197e4121
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 01:25:32 GMT
expires: Wed, 22 Nov 2023 01:25:32 GMT
cache-control: public, max-age=31536000
age: 574103
last-modified: Tue, 19 Apr 2022 18:52:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2wotcom.gcdn.co/promo_web/WOT/March2019/WOT_New_videoback_v3.webm
92.223.84.84206 Partial Content 7.7 MB URL HTTP/2 cdn2wotcom.gcdn.co/promo_web/WOT/March2019/WOT_New_videoback_v3.webm
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 7.7 MB (7678225 bytes)
Hash 276c4475cdb31241611170b2fb686f5b
a2cda0beddd67a47b423d798f6f48a59a12a366d
333a1356229544852de21506199e090e01791081b4b32e3a5d7864506a07eeb9
GET /promo_web/WOT/March2019/WOT_New_videoback_v3.webm HTTP/1.1
Host: cdn2wotcom.gcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: video/webm
content-length: 7678225
last-modified: Tue, 12 Mar 2019 07:13:16 GMT
etag: "752911-583e06c461b00"
cache-control: max-age=290304000, public
expires: Fri, 22 Sep 2023 18:22:54 GMT
cache: HIT
x-cached-since: 2022-09-22T18:22:54+00:00
x-id: sto5-up-gc14
content-range: bytes 0-7678224/7678225
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash fa923299c257674b1028c3415a04b7c6
ac8eb45129630cbdfd442060768c9cb246d8552c
a48ca92b40cbd626057aa4e6332467ae3929e984cad20bcbe90544a5b31d0d2e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 16:53:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 21:42:46 GMT
Expires: Mon, 28 Nov 2022 21:42:46 GMT
ETag: "ac8eb45129630cbdfd442060768c9cb246d8552c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
lms-static.wgcdn.co/1600946604/dist/landing/videoback/eval.js
92.223.84.84200 OK 177 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/eval.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
Hash ab56a375dc50a8ab25c09dd2116ebcd0
19ee177c451c354bedf9d355a34476134464d0be
a6b484f867056eb70f872f3e159a26591e2c653581553f9667946642f1c0759a
GET /1600946604/dist/landing/videoback/eval.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: application/javascript
content-length: 177
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
etag: "62bee464-b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:37:09+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png
92.223.84.84200 OK 5.1 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash c28eb738166485ff11b13d9e74a52be8
dd161225ce2e844e2d6f05753e5210d922934ec6
2e9c3e61433c5952bd3b7d963ae90d9789c262a67411447bbaa1b598f53c2411
GET /videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:56 GMT
content-type: image/png
content-length: 5124
last-modified: Thu, 24 Sep 2020 11:22:45 GMT
etag: "5f6c8185-1404"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:37:06+00:00
x-id: sto5-up-gc12
accept-ranges: bytes
X-Firefox-Spdy: h2
tenor.wargaming.net/assets/device/static/collect.js
92.223.21.23200 OK 5.4 kB URL HTTP/1.1 tenor.wargaming.net/assets/device/static/collect.js
IP 92.223.21.23:0
ASN #199524 G-Core Labs S.A.
File type HTML document, ASCII text, with very long lines (7249)
Hash 026f62fad760986ddac0bb642b46db1d
934e6b4936e4c044e0e68ebe8243a3c38a2763ca
76c6cf4c397fcca4cf8000908a09bae78997b814b1a3b345279bc8e178aa2900
GET /assets/device/static/collect.js HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 28 Nov 2022 16:53:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 09 Nov 2022 09:49:54 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"636b77c2-3ac2"
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5403
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Last-Modified: Mon, 28 Nov 2022 15:23:53 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 16:41:08 GMT
expires: Mon, 28 Nov 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 768
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 4lFjpt+ta7ns2GvRey7Rn6MmVcYkvfPQ/PHIAp7ViKwNkNVjenXLf7l5/4I8ZypmaH7MPuXHNK/7F4YOM3yfvA==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Mon, 28 Nov 2022 16:53:56 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.9ad664eb.css
92.223.84.84200 OK 37 kB URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.9ad664eb.css
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (3532)
Hash 2b551bb93e626e4f8772f63abcec901f
8e378686a33604e49a9948010d0df5cde28f21ae
6b5ea80114faf8f42bf123980eee509261fae82634620fef005bb70f081d39bb
GET /1600946604/dist/landing/videoback/app.9ad664eb.css HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: text/css
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-15b6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:37:18+00:00
x-id: sto5-up-gc12
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5403
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Last-Modified: Mon, 28 Nov 2022 15:23:53 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1669654434978&cv=11&fst=1669654434978&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=623637340.1669654435&rfmt=3&fmt=4
142.250.74.66200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1669654434978&cv=11&fst=1669654434978&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=623637340.1669654435&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2971), with no line terminators
Hash a7e1f738a2f59dc22fcceaefaa0c7ecf
aaffdd11951367ce6e2dfb7a5b462f7370aab99f
36c5a099f7e5cb5c7467c3b3f9227f5c28da6e4a27e84744a575e5c32bb7dd98
GET /pagead/viewthroughconversion/1006839708/?random=1669654434978&cv=11&fst=1669654434978&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=623637340.1669654435&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1251
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 28-Nov-2022 17:08:56 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 879cba431d8b6f2717a750acd5ca7156
1d4eb23583d48dd6801a104aa20046b34acd0efe
31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=170512643.1669654436>m=2oeb90&aip=1&z=1869273354
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=170512643.1669654436>m=2oeb90&aip=1&z=1869273354
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=170512643.1669654436>m=2oeb90&aip=1&z=1869273354 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b3b2c7f77d21f4f3c942fb3357e9fa83
d82fbb7c5ecaed601c4c6c927150531d6bb4e793
4a9731627b28cc01d199f0362ad58487eb7391f26d348c0454ec96f32004f78e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.e97d588e.js
92.223.84.84200 OK 18 kB URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.e97d588e.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
Hash 166c9d37e5baa33bd7d1a5c058f1ccf0
c8c313c0d9cb29414f8a4238647b6189414cd090
2f997e197f8e28efbf770c48ee6045b6d6ef19e341777b76f041c4948dbc6d81
GET /1600946604/dist/landing/videoback/app.e97d588e.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-14229"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:36:54+00:00
x-id: sto5-up-gc12
X-Firefox-Spdy: h2
ad.doubleclick.net/ddm/activity/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829
142.250.74.102302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829
IP 142.250.74.102:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829;~oref=https://join.worldoftanks.eu/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 28-Nov-2022 17:08:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4dc8061e012690f41cc8e3b60e976494
6e3f3e9a22bf7348c5ecb244cceec16cfcd86cf5
b74d15f2e5d547246f74a267925085cd15fac8a259b0a91029b189c8f24b1b6d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6056
Cache-Control: max-age=102930
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Etag: "6383bf0e-1d7"
Expires: Tue, 29 Nov 2022 21:29:26 GMT
Last-Modified: Sun, 27 Nov 2022 19:48:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b3b2c7f77d21f4f3c942fb3357e9fa83
d82fbb7c5ecaed601c4c6c927150531d6bb4e793
4a9731627b28cc01d199f0362ad58487eb7391f26d348c0454ec96f32004f78e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tenor.wargaming.net/cf
92.223.21.23200 OK 0 B IP 92.223.21.23:0
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /cf HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://join.worldoftanks.eu/
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 28 Nov 2022 16:53:56 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=200
Access-Control-Allow-Origin: https://join.worldoftanks.eu
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: CONTENT-TYPE
www.redditstatic.com/ads/pixel.js
151.101.85.140200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.85.140:0
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:53:56 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
tenor.wargaming.net/cf
92.223.21.23204 No Content 0 B IP 92.223.21.23:0
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cf HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Content-Type: application/json
Origin: https://join.worldoftanks.eu
Content-Length: 311
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Mon, 28 Nov 2022 16:53:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: keep-alive
Keep-Alive: timeout=200
Access-Control-Expose-Headers: Date,Server,Content-Length
Access-Control-Allow-Origin: https://join.worldoftanks.eu
Access-Control-Allow-Credentials: true
bat.bing.com/p/action/26043906.js
204.79.197.200200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/26043906.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 5ccab94753771a3d9f34c937a0edda89
0e4f16622e090eaa09fc6c910fbe979ca4fb0a65
2f60750d4aadf9925d7d1a28a1c94ffb13c7e6a851af89805440b7d57a5832aa
GET /p/action/26043906.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=1E02F3233DAE60330764E1493C5B6195; domain=.bing.com; expires=Sat, 23-Dec-2023 16:53:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6A7F2998F73A4D04854CAF36CE6B18EC Ref B: OSL30EDGE0113 Ref C: 2022-11-28T16:53:56Z
date: Mon, 28 Nov 2022 16:53:56 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=26043906&tm=gtm002&Ver=2&mid=a6ee288c-a1e1-4e56-a398-c388a6332a74&sid=3ee502206f3d11eda77a6f713f12dc86&vid=3ee51aa06f3d11edaf1f173cbf649907&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&r=<=2754&evt=pageLoad&sv=1&rn=867837
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=26043906&tm=gtm002&Ver=2&mid=a6ee288c-a1e1-4e56-a398-c388a6332a74&sid=3ee502206f3d11eda77a6f713f12dc86&vid=3ee51aa06f3d11edaf1f173cbf649907&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&r=<=2754&evt=pageLoad&sv=1&rn=867837
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=26043906&tm=gtm002&Ver=2&mid=a6ee288c-a1e1-4e56-a398-c388a6332a74&sid=3ee502206f3d11eda77a6f713f12dc86&vid=3ee51aa06f3d11edaf1f173cbf649907&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&r=<=2754&evt=pageLoad&sv=1&rn=867837 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2D770C8642506813148D1EEC43A569FA; domain=.bing.com; expires=Sat, 23-Dec-2023 16:53:56 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7627E6468172497D81BF1642A1E9EB3A Ref B: OSL30EDGE0113 Ref C: 2022-11-28T16:53:56Z
date: Mon, 28 Nov 2022 16:53:56 GMT
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10180089.json
188.125.94.206200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10180089.json
IP 188.125.94.206:0
File type JSON data\012- , ASCII text, with no line terminators
Hash c6ded5892a90c67512603a071c819e4e
b0db884308ecef9f44d5c38bacf96702096d5830
c63fe9a284f1b9cfd799a123c1a92a566f22bd5cd0be03d5af3a3fbf0936e226
GET /wi/config/10180089.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qRBNuvM2P0uxRdVEz0SXkCHPRPyvzTXn2Z/TGYZQzZadit6+Fv51nekWQdCMt/z0fs4uTYiuxbQ=
x-amz-request-id: ZC6C4M7D3Q6CKJST
date: Mon, 28 Nov 2022 06:35:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 16 Mar 2022 15:56:22 GMT
x-amz-expiration: expiry-date="Fri, 21 Apr 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "c6ded5892a90c67512603a071c819e4e"
x-amz-server-side-encryption: AES256
x-amz-version-id: hucc9FIkp5UShj6EZB33GhrqRv4Mo1tn
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 37135
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 03ad9fc0b00b5df3165dc2fb1e3b0a3e
f8243335a8bc24d989bddd346048a055e1d0bdeb
366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/1006839708/?random=1669654434978&cv=11&fst=1669651200000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=2847450962&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1006839708/?random=1669654434978&cv=11&fst=1669651200000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=2847450962&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1669654434978&cv=11&fst=1669651200000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=2847450962&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 11b6b91126d74e2499068a555fd36c7e
67f2cc439bfa8f3d5c1e7bfd885186d7512d59ef
e0a0e355fc504f2e47a2fe27010a9788cf56c96512a1ebf69690884788423cd4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3615
Cache-Control: max-age=94387
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Etag: "6383a738-1d7"
Expires: Tue, 29 Nov 2022 19:07:03 GMT
Last-Modified: Sun, 27 Nov 2022 18:06:48 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=170512643.1669654436&jid=718867846&gjid=1874977393&_gid=1430610557.1669654436&_u=YChACEAABAAAACAEO~&z=50165883
142.251.1.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=170512643.1669654436&jid=718867846&gjid=1874977393&_gid=1430610557.1669654436&_u=YChACEAABAAAACAEO~&z=50165883
IP 142.251.1.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=170512643.1669654436&jid=718867846&gjid=1874977393&_gid=1430610557.1669654436&_u=YChACEAABAAAACAEO~&z=50165883 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.206200 OK 5.9 kB IP 188.125.94.206:0
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2M7Ly2R1Sq9lQIpd7W2UyTHpgC8jb7x6zwM9i6OBNcc7rNHX5Nxc6qz5clI25QPayf0ufAMe5Ak=
x-amz-request-id: Q0DHTA1T3SEZEGNR
date: Mon, 28 Nov 2022 16:26:23 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1654
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=170512643.1669654436&jid=2119075419&gjid=754785384&_gid=1011503609.1669654436&_u=YChACEABBAAAACAFO~&z=1565338775
142.251.1.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=170512643.1669654436&jid=2119075419&gjid=754785384&_gid=1011503609.1669654436&_u=YChACEABBAAAACAFO~&z=1565338775
IP 142.251.1.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=170512643.1669654436&jid=2119075419&gjid=754785384&_gid=1011503609.1669654436&_u=YChACEABBAAAACAFO~&z=1565338775 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=170512643.1669654436&jid=1575439146&gjid=229942494&_gid=516838115.1669654436&_u=YChACEABBAAAACAEO~&z=910404766
142.251.1.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=170512643.1669654436&jid=1575439146&gjid=229942494&_gid=516838115.1669654436&_u=YChACEABBAAAACAEO~&z=910404766
IP 142.251.1.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=170512643.1669654436&jid=1575439146&gjid=229942494&_gid=516838115.1669654436&_u=YChACEABBAAAACAEO~&z=910404766 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-150089307-8&cid=170512643.1669654436&jid=718867846&_u=YChACEAABAAAACAEO~&z=1534644148
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-150089307-8&cid=170512643.1669654436&jid=718867846&_u=YChACEAABAAAACAEO~&z=1534644148
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-150089307-8&cid=170512643.1669654436&jid=718867846&_u=YChACEAABAAAACAEO~&z=1534644148 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:53:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.5.142200 OK 196 B URL HTTP/2 a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.5.142:0
File type ASCII text, with CRLF line terminators
Hash 0ede06ce62bcf9e842e1b0f3313e6f83
a1a6675d17c5e308cbf033eb3d53fd8d12272be4
b453c48d135033a9f54030c39d0241419c85531378e79ef47a5991ab5d418a97
GET /Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:56 GMT
content-type: text/javascript; charset=utf-8
content-length: 196
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&rl=&if=false&ts=1669654435924&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669654435923.1852430197&it=1669654435701&coo=false&tm=1&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&rl=&if=false&ts=1669654435924&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669654435923.1852430197&it=1669654435701&coo=false&tm=1&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&rl=&if=false&ts=1669654435924&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669654435923.1852430197&it=1669654435701&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 28 Nov 2022 16:53:56 GMT
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-150089307-6&cid=170512643.1669654436&jid=1575439146&_u=YChACEABBAAAACAEO~&z=953179444
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-150089307-6&cid=170512643.1669654436&jid=1575439146&_u=YChACEABBAAAACAEO~&z=953179444
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-150089307-6&cid=170512643.1669654436&jid=1575439146&_u=YChACEABBAAAACAEO~&z=953179444 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
91.228.74.200200 OK 10 kB URL HTTP/2 secure.quantserve.com/quant.js
IP 91.228.74.200:0
Hash 075113df42f876f16de56f8268b6ebb6
2f97bbb5eefa92df9bea7b3c02637b08e7207b44
fa26683c00b70c337dc2af7b9f7b804c04ed3b877e5573d0fc7a6297cb4e8172
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 16:53:56 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Mon, 05 Dec 2022 16:53:56 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-40205758-4&cid=170512643.1669654436&jid=2119075419&_u=YChACEABBAAAACAFO~&z=1932024617
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-40205758-4&cid=170512643.1669654436&jid=2119075419&_u=YChACEABBAAAACAFO~&z=1932024617
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-40205758-4&cid=170512643.1669654436&jid=2119075419&_u=YChACEABBAAAACAFO~&z=1932024617 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829;~oref=https://join.worldoftanks.eu/
142.250.74.162200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829;~oref=https://join.worldoftanks.eu/
IP 142.250.74.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669654434719739100;u7=undefined;match_id=1669654434719739100;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1314848829;~oref=https://join.worldoftanks.eu/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-UH9pPWqqbvvtC.js
54.230.111.33200 OK 222 B URL HTTP/2 rules.quantcount.com/rules-p-UH9pPWqqbvvtC.js
IP 54.230.111.33:0
Hash 1fc3544f525a98ae3bb01abe95ecbd2b
9a9379f992c3660aec966f7fccb478ec0796b0af
fe56ee11ce8e8046f4e968b897e8a013642cb70381a7e8b7ca51d21f2d19ec42
GET /rules-p-UH9pPWqqbvvtC.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 222
last-modified: Thu, 13 Oct 2022 14:48:45 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Mon, 28 Nov 2022 16:25:55 GMT
cache-control: max-age=3600
etag: "1fc3544f525a98ae3bb01abe95ecbd2b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SVx8d0JGvcVz-7EbIobQh5SDgxS0yaI81Vlsl5vmuoKNfWr26ZFapw==
age: 1683
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1669654435801&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=ea509ef2-4599-4c2b-a2c2-d65fe9cdb997&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
151.101.85.140200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1669654435801&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=ea509ef2-4599-4c2b-a2c2-d65fe9cdb997&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP 151.101.85.140:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1669654435801&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=ea509ef2-4599-4c2b-a2c2-d65fe9cdb997&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:53:56 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2028%20Nov%202022%2016%3A53%3A55%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2028%20Nov%202022%2016%3A53%3A55%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2028%20Nov%202022%2016%3A53%3A55%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 16:53:56 GMT
expires: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBKTnhGMCEKOxPj0Ns_tiwejPavPVFDwFEgEBAQE5hmOOYwAAAAAA_eMAAA&S=AQAAAiS0-XnaS_RG9EchUpCxFF4; Expires=Tue, 28 Nov 2023 22:53:56 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=916791451;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869;uht=2;fpan=1;fpa=P0-1649021619-1669654435967;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669654436051;tzo=0;ogl=;ses=7c8ea370-08f7-4e10-a380-6d52d86d1011
91.228.74.200200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=916791451;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869;uht=2;fpan=1;fpa=P0-1649021619-1669654435967;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669654436051;tzo=0;ogl=;ses=7c8ea370-08f7-4e10-a380-6d52d86d1011
IP 91.228.74.200:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=916791451;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869;uht=2;fpan=1;fpa=P0-1649021619-1669654435967;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669654436051;tzo=0;ogl=;ses=7c8ea370-08f7-4e10-a380-6d52d86d1011 HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 16:53:56 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=6384e7a4-abc57-83fca-e0843; expires=Fri, 29-Dec-2023 16:53:56 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 16:53:56 GMT
expires: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBKTnhGMCEIsvfKZneHu87P85IGQ_VM8FEgEBAQE5hmOOYwAAAAAA_eMAAA&S=AQAAAj_t11Xg90B7NjXpm6WIAsA; Expires=Tue, 28 Nov 2023 22:53:56 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
13.107.219.53200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP 13.107.219.53:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d9026a431ead4c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0pOeEYwAAAAAJrU9avjLaRIW8YmB61BBOT1NMMjMxMDUwMjAzMDE5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Mon, 28 Nov 2022 16:53:55 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&RedC=c.clarity.ms&MXFR=3D04202556C66A0438EE324F52C66489
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3D04202556C66A0438EE324F52C66489; domain=.clarity.ms; expires=Sat, 23-Dec-2023 16:53:56 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Mon, 28 Nov 2022 16:53:56 GMT
content-length: 0
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=2072436687&_gaz=1&gcs=G1--&cid=170512643.1669654436&ul=en-us&sr=1280x1024&_s=1&sid=1669654435&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FWOTHQ-1691%2FACQ%2Freg-wg
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=2072436687&_gaz=1&gcs=G1--&cid=170512643.1669654436&ul=en-us&sr=1280x1024&_s=1&sid=1669654435&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FWOTHQ-1691%2FACQ%2Freg-wg
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=2072436687&_gaz=1&gcs=G1--&cid=170512643.1669654436&ul=en-us&sr=1280x1024&_s=1&sid=1669654435&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSID-PpcPPlM9tjgYJoximrg3zSR69mHFwXhLJPBUw5BsrJ7efRExP7TqECp6WEaOoVnHYaAVhhT8tDexg-1VgVtZJjewRrLWh617FPIGIQNuZWyPYP_YUIklD5Sxp4sAzjUOS5FmHcedGSD8w%26enctid%3Dcoo33mcw3a52%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669654434719739100%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FWOTHQ-1691%2FACQ%2Freg-wg HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://join.worldoftanks.eu
date: Mon, 28 Nov 2022 16:53:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&RedC=c.clarity.ms&MXFR=3D04202556C66A0438EE324F52C66489
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&RedC=c.clarity.ms&MXFR=3D04202556C66A0438EE324F52C66489
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&RedC=c.clarity.ms&MXFR=3D04202556C66A0438EE324F52C66489 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&MUID=0EB3D04BCE9B67181F0AC221CF6E6619
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0EB3D04BCE9B67181F0AC221CF6E6619; domain=c.bing.com; expires=Sat, 23-Dec-2023 16:53:56 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CE37884F57CF4B728A4A39A08A406297 Ref B: OSL30EDGE0113 Ref C: 2022-11-28T16:53:56Z
date: Mon, 28 Nov 2022 16:53:56 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&MUID=0EB3D04BCE9B67181F0AC221CF6E6619
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&MUID=0EB3D04BCE9B67181F0AC221CF6E6619
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=8534296B92FF4120969FE0BE0A9773C1&MUID=0EB3D04BCE9B67181F0AC221CF6E6619 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 28-Nov-2022 17:03:56 GMT; path=/; SameSite=None; Secure;
date: Mon, 28 Nov 2022 16:53:56 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1855
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://join.worldoftanks.eu
access-control-allow-credentials: true
date: Mon, 28 Nov 2022 16:53:56 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b0bd385532089b45a14e461abbecc1af
3da359b1ba09138a425094715b9f3a2f8d0257fe
803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:20:34 GMT
age: 66807
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
37.157.5.73200 OK 0 B URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP 37.157.5.73:0
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:56 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 05 Oct 2022 12:23:24 GMT
x-rgw-object-type: Normal
etag: W/"4cb8e818a3c8dda5fd80d6d9a55d958d"
x-amz-request-id: tx0000027115d092da12af8-0063765ffa-3293aae9-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/riddler.js
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/riddler.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/riddler.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-4391"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:37:09+00:00
x-id: sto5-up-gc12
X-Firefox-Spdy: h2
a1.adform.net/Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.5.142302 Found 0 B URL HTTP/2 a1.adform.net/Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.5.142:0
GET /Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 16:53:56 GMT
content-type: text/html; charset=utf-8
location: https://a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=583867952852&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D6384e7a28957c80001a1a618%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Wed, 28-Dec-2022 16:53:56 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese
IP 142.250.74.10:0
GET /css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 16:53:55 GMT
date: Mon, 28 Nov 2022 16:53:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/vendors~app.97349e52.js
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/vendors~app.97349e52.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/vendors~app.97349e52.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-2e3df"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:36:54+00:00
x-id: sto5-up-gc12
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/sha3.js
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/sha3.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/sha3.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:53:55 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-1704"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:40:40+00:00
x-id: sto5-up-gc12
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/26043906
13.107.219.53200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/26043906
IP 13.107.219.53:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/26043906 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=1356c8ea27794435ba43691822a289f7.20221128.20231128; expires=Tue, 28 Nov 2023 16:53:56 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3d284f99-f285-495c-ac33-dedd7ecf1ac8
x-cache: CONFIG_NOCACHE
x-azure-ref: 0pOeEYwAAAADTrmnwlt16SaPmw544sHH2T1NMMjMxMDUwMjAzMDE5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Mon, 28 Nov 2022 16:53:55 GMT
X-Firefox-Spdy: h2