camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
213.186.33.87200 OK 15 kB URL HTTP/1.1 camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
IP 213.186.33.87:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (20799)
Hash afc2822d53839c891eea0d2e14436ba0
04116c8e79200173ea7ef8111b1f4ee0749ec535
2b0ac4fb29f4468cf79a00e9646ba874c310faef5015587d4ecae2bb5b84df54
Analyzer Verdict Alert fortinet Malware
GET /klyqyio/how-to-cover-brick-walls-inside-house HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:30 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
server: Apache
x-powered-by: PHP/7.4
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:49DD_D5BA2157:0050_63CB2722_B72A:26150
x-iplb-instance: 29585
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4070
Expires: Sat, 21 Jan 2023 00:51:21 GMT
Date: Fri, 20 Jan 2023 23:43:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b36ef73c20dffb6bc10194bbd2d0dcfa
a67a4023dc8b4944debaeb92f3ba0f1402c079a6
05a7a4d832cf9e593ca44efea309edcbd80734583bada15fda3e740612eff991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05A7A4D832CF9E593CA44EFEA309EDCBD80734583BADA15FDA3E740612EFF991"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14759
Expires: Sat, 21 Jan 2023 03:49:30 GMT
Date: Fri, 20 Jan 2023 23:43:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 20 Jan 2023 23:34:38 GMT
content-type: application/json
age: 533
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2488
Expires: Sat, 21 Jan 2023 00:24:59 GMT
Date: Fri, 20 Jan 2023 23:43:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Nozm6aLQ0chTTm1VW0bZDGjkYGY4roawIZ1KnmmG4dP2r0auK+HrP+qszUP9ZmtivUkvZlQsLfhCJI/KfXtyRQ==
x-amz-request-id: TRD01F84G8FHAABB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 20 Jan 2023 23:17:47 GMT
age: 1544
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
camilleflorence.fr/wp-content/plugins/compact-wp-audio-player/css/flashblock.css?ver=6.0.3
213.186.33.87200 OK 1.3 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/compact-wp-audio-player/css/flashblock.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with CRLF line terminators
Hash d227bec64165da6357f3b3cd9645a6fd
f2f98ab4b539d2dbc96f0cb670c533067a594822
4a140963fcbe291f9d6b24e2a81f3d14d66beb6eef59080deb510f222834262c
GET /wp-content/plugins/compact-wp-audio-player/css/flashblock.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 1276
server: Apache
last-modified: Sun, 15 May 2022 14:15:09 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:49DD_D5BA2157:0050_63CB2722_B72D:26150
x-iplb-instance: 29585
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
camilleflorence.fr/wp-content/plugins/compact-wp-audio-player/css/player.css?ver=6.0.3
213.186.33.87200 OK 311 B URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/compact-wp-audio-player/css/player.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with CRLF line terminators
Hash 2c616618af82a5c2c61ab6bbae350bce
db29652273f62b41ae15b909a51137e1fee417c3
08ae007ba503fafd95e50e510474da034cd2f20c7735425222ee151bd855ea64
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/compact-wp-audio-player/css/player.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 311
server: Apache
last-modified: Sun, 15 May 2022 14:15:09 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:F22B_D5BA2157:0050_63CB2723_109A9:1E0C5
x-iplb-instance: 29603
camilleflorence.fr/wp-content/themes/qi/style.css?ver=6.0.3
213.186.33.87200 OK 1.2 kB URL HTTP/1.1 camilleflorence.fr/wp-content/themes/qi/style.css?ver=6.0.3
IP 213.186.33.87:0
File type Unicode text, UTF-8 text, with very long lines (1365)
Hash e27f590e13a50997446ddef5135ecbb7
2d7560a6c9d3153f9d779c8718fab06ba4cafaea
c36e10e642666888ece25ed06ea3b2ed58f43c2c0c73957d71d976fb28c20feb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/qi/style.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 1204
server: Apache
last-modified: Wed, 08 Jun 2022 23:18:24 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:DAB7_D5BA2157:0050_63CB2723_128DE:9F12
x-iplb-instance: 29655
camilleflorence.fr/wp-content/plugins/compact-wp-audio-player/js/soundmanager2-nodebug-jsmin.js?ver=6.0.3
213.186.33.87200 OK 12 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/compact-wp-audio-player/js/soundmanager2-nodebug-jsmin.js?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (542), with CRLF, LF line terminators
Hash 8af7e959ee52cc2a73190a9a0925d714
fab88f2d5093614850170edb8f5ac903f6effe26
0e599a4005acc231c9afc46c128981b4baed62c90e09c93e721bf04fc601caa4
GET /wp-content/plugins/compact-wp-audio-player/js/soundmanager2-nodebug-jsmin.js?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 12440
server: Apache
last-modified: Sun, 15 May 2022 14:15:09 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:49DD_D5BA2157:0050_63CB2723_B745:26150
x-iplb-instance: 29585
camilleflorence.fr/wp-content/themes/qi/assets/css/grid.min.css?ver=6.0.3
213.186.33.87200 OK 1.9 kB URL HTTP/1.1 camilleflorence.fr/wp-content/themes/qi/assets/css/grid.min.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (30947), with no line terminators
Hash 447605bd3f0844c69de16e48e9257155
80b84679bf2c45a1da7b7bd18b104675bd17d2f8
9c7a68af02da385bde90146c876b0f57ae1c0a48fad820ece52b2bbd65a0ee3b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/qi/assets/css/grid.min.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 1861
server: Apache
last-modified: Wed, 08 Jun 2022 23:18:24 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:AF06_D5BA2157:0050_63CB2723_10E9D:23D53
x-iplb-instance: 29652
camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/css/main.min.css?ver=6.0.3
213.186.33.87200 OK 16 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/css/main.min.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 76b0d96c559f7f2df894a8d67106bf85
445db95c0be609c5d8b7f0c34fba5a1ce754cf10
1becd947126948b720297e89f4f4aae00822546cc2bd2bea98f04e5ed310f957
GET /wp-content/plugins/qode-essential-addons/assets/css/main.min.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 16155
server: Apache
last-modified: Sat, 18 Jun 2022 12:17:30 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3872_D5BA2157:0050_63CB2723_64C2:131A1
x-iplb-instance: 29653
camilleflorence.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
213.186.33.87200 OK 5.0 kB URL HTTP/1.1 camilleflorence.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 213.186.33.87:0
File type ASCII text, with very long lines (11126)
Hash 35701118b896d972ba4d2f7b72ae9186
8c043f7b905f7421308e2408ce6a4d41637ad2c1
b501796f9c54a9a866a60e22d074c16a50f45c01ad31e25245ed19e9fd9b15ae
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 4971
server: Apache
last-modified: Fri, 20 Jan 2023 08:59:35 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:DAB7_D5BA2157:0050_63CB2723_128DF:9F12
x-iplb-instance: 29655
camilleflorence.fr/wp-content/themes/qi/assets/css/main.min.css?ver=6.0.3
213.186.33.87200 OK 23 kB URL HTTP/1.1 camilleflorence.fr/wp-content/themes/qi/assets/css/main.min.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash aef8aab5426d0b1b797f57ad364298de
80045afec87645e94ffd6a41f2ec31443aeb28d8
81b95ee1683db02a1cbfeabdb0736ba76dc0d4da8cd1cf63889d4f1a0576b9ad
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/qi/assets/css/main.min.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 23387
server: Apache
last-modified: Wed, 08 Jun 2022 23:18:24 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:87F5_D5BA2157:0050_63CB2723_91CD:9F0F
x-iplb-instance: 29655
camilleflorence.fr/wp-content/plugins/gallery-by-supsystic/src/GridGallery/Colorbox/jquery-colorbox/jquery.colorbox.js?ver=1.15.9
213.186.33.87200 OK 10 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/gallery-by-supsystic/src/GridGallery/Colorbox/jquery-colorbox/jquery.colorbox.js?ver=1.15.9
IP 213.186.33.87:0
File type ASCII text, with CRLF line terminators
Hash 0ffa44f4456f1a6743d736c45dba3d5e
f41619de1a7ff02e807d2e08b0cea3048efb8347
4ddc2181cf9a868614fd932c5b17d01c667613c5660aa49ec9aabce88857f080
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Colorbox/jquery-colorbox/jquery.colorbox.js?ver=1.15.9 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 10114
server: Apache
last-modified: Mon, 15 Aug 2022 21:33:11 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:49DD_D5BA2157:0050_63CB2723_B74B:26150
x-iplb-instance: 29585
camilleflorence.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
213.186.33.87200 OK 32 kB URL HTTP/1.1 camilleflorence.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 213.186.33.87:0
File type ASCII text, with very long lines (62895)
Hash 1d94b3550396b5661b62dda4493ab0c7
4a6a1905af56cb9f0b8af016b4e961abc039809b
b347435c8ac6ef4044c3db410669b9c5e5e3756e59d7b4e1a4301236af8e2045
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 31522
server: Apache
last-modified: Fri, 04 Nov 2022 18:05:57 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:F22B_D5BA2157:0050_63CB2723_109AA:1E0C5
x-iplb-instance: 29603
camilleflorence.fr/wp-content/plugins/gallery-by-supsystic/src/GridGallery/Colorbox/jquery-colorbox/i18n/jquery.colorbox-fr.js?ver=1.15.9
213.186.33.87200 OK 292 B URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/gallery-by-supsystic/src/GridGallery/Colorbox/jquery-colorbox/i18n/jquery.colorbox-fr.js?ver=1.15.9
IP 213.186.33.87:0
File type ASCII text, with CRLF line terminators
Hash 507c5e40742ca6365c0e17beafa90dae
4f2c4b82b298f6eefa7434a1e98bbdefa1765fb8
0e5068786f814cf54609c057fb9389e49a2f950243e2703884f5aa035440658d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/gallery-by-supsystic/src/GridGallery/Colorbox/jquery-colorbox/i18n/jquery.colorbox-fr.js?ver=1.15.9 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 292
server: Apache
last-modified: Mon, 15 Aug 2022 21:33:11 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:AF06_D5BA2157:0050_63CB2723_10E9F:23D53
x-iplb-instance: 29652
camilleflorence.fr/wp-includes/js/hoverIntent.min.js?ver=1.10.2
213.186.33.87200 OK 706 B URL HTTP/1.1 camilleflorence.fr/wp-includes/js/hoverIntent.min.js?ver=1.10.2
IP 213.186.33.87:0
File type ASCII text, with very long lines (1464)
Hash e26e2ba5d82da6211e981bf0e962fe00
ca7358efdb6852cfb78ec32383eaef15ac6cb61b
400f6ae8a00e7eabb07284d8cd8715579e9a3721fa463e508b5d40b83cde1447
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 706
server: Apache
last-modified: Thu, 20 Oct 2022 18:14:01 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3872_D5BA2157:0050_63CB2723_64C3:131A1
x-iplb-instance: 29653
camilleflorence.fr/wp-content/themes/qi/assets/js/main.min.js?ver=6.0.3
213.186.33.87200 OK 1.3 kB URL HTTP/1.1 camilleflorence.fr/wp-content/themes/qi/assets/js/main.min.js?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (4498), with no line terminators
Hash 5896dd418bc951aa0d4ee193e0ebf3f7
ab04449af56d647e6d43007d24c4b56fc6c693d3
3dea1833278f590ff16574e8b8bc88d8732596fc9b6493148a44d32738c73a2b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/qi/assets/js/main.min.js?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 1293
server: Apache
last-modified: Wed, 08 Jun 2022 23:18:24 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3872_D5BA2157:0050_63CB2723_64C4:131A1
x-iplb-instance: 29653
camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/plugins/swiper/swiper.min.js?ver=6.0.3
213.186.33.87200 OK 36 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/plugins/swiper/swiper.min.js?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (65284)
Hash 38f3f409f16a3356d274bff5a601d218
60c90d19a859aedbed08f4dbf803db91c10caa73
e012a06e7ac058601225d00590e42f95260e31508e1b2f34caf0ab8fc0dd655d
GET /wp-content/plugins/qode-essential-addons/assets/plugins/swiper/swiper.min.js?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 35859
server: Apache
last-modified: Sat, 18 Jun 2022 12:17:30 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:F22B_D5BA2157:0050_63CB2723_109AC:1E0C5
x-iplb-instance: 29603
camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/js/main.min.js?ver=6.0.3
213.186.33.87200 OK 5.3 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/js/main.min.js?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (20554), with no line terminators
Hash e8bf9e0bf2418e0b3c48440a203f3b93
560bee3f9b582f0021959e4549a47b0eea7757ce
deb4bc8d5c39375ff677acde9a730ab675f38206fc96b23deb9a0e8805323bc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/qode-essential-addons/assets/js/main.min.js?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 5288
server: Apache
last-modified: Sat, 18 Jun 2022 12:17:30 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:AF06_D5BA2157:0050_63CB2723_10EA0:23D53
x-iplb-instance: 29652
camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/plugins/modernizr/modernizr.js?ver=6.0.3
213.186.33.87200 OK 1.3 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/plugins/modernizr/modernizr.js?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (2623)
Hash 7cd5095e9b8225adf52a8b95cce6897c
9f4525658b947e9af104c7e7a3a930d90ed84fec
b0124a13c221408df3459bdef04ba068dfb8a542194e988f04628af05dc157a5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/qode-essential-addons/assets/plugins/modernizr/modernizr.js?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 1327
server: Apache
last-modified: Sat, 18 Jun 2022 12:17:30 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:87F5_D5BA2157:0050_63CB2723_91CF:9F0F
x-iplb-instance: 29655
camilleflorence.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
213.186.33.87200 OK 6.9 kB URL HTTP/1.1 camilleflorence.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP 213.186.33.87:0
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 7e2b78a6e8a9b90385330755ee1cf3e5
684c325f39d45e42ae44a9e42f5e9fe4fb0b909c
43f124dabb4bc663cc1cc8d3161c1e6365cf8445d873ed5d69bbfdb507cf24a9
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: application/javascript
content-length: 6914
server: Apache
last-modified: Thu, 20 Oct 2022 18:14:01 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:DAB7_D5BA2157:0050_63CB2723_128E1:9F12
x-iplb-instance: 29655
camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/plugins/swiper/swiper.min.css?ver=6.0.3
213.186.33.87200 OK 4.1 kB URL HTTP/1.1 camilleflorence.fr/wp-content/plugins/qode-essential-addons/assets/plugins/swiper/swiper.min.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (13425)
Hash 2ec7ece30dda93a2d14d1ed843f4b3c5
89d84d855611737d321b93a2e0df89531f395af4
16511d9ea995f8da4aabf354894b8fe67aec40f57b197d554e598535d007b45c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/qode-essential-addons/assets/plugins/swiper/swiper.min.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 4131
server: Apache
last-modified: Sat, 18 Jun 2022 12:17:30 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3872_D5BA2157:0050_63CB2723_64C7:131A1
x-iplb-instance: 29653
camilleflorence.fr/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
213.186.33.87200 OK 12 kB URL HTTP/1.1 camilleflorence.fr/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:31 GMT
content-type: text/css
content-length: 11681
server: Apache
last-modified: Thu, 20 Oct 2022 18:14:01 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:31 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:49DD_D5BA2157:0050_63CB2723_B752:26150
x-iplb-instance: 29585
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5422c49666fc195ae94aa0f5cf837bfc
e0f1dd926cd9328ccf9cc99389337056c62f1043
f639aad2dc85708fa922b793660f13ae597f275a8ebf61e7e72fb2bce257cc76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 20 Jan 2023 23:17:28 GMT
age: 1563
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 256c9a54e41ead84df4b6cb7dd121a20
42200b026ba3a25adf5e95989d4c594e06b3efc7
59502673657acdab920a956f54a06cf25eb4bfd07ed2474ff2c6e6bf2f893258
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59502673657ACDAB920A956F54A06CF25EB4BFD07ED2474FF2C6E6BF2F893258"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5621
Expires: Sat, 21 Jan 2023 01:17:13 GMT
Date: Fri, 20 Jan 2023 23:43:32 GMT
Connection: keep-alive
cdn.violetlovelines.com/scripts/global.js?v=2.0.5
159.69.234.10200 OK 2.7 kB URL HTTP/1.1 cdn.violetlovelines.com/scripts/global.js?v=2.0.5
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (7274), with CRLF line terminators
Hash 753c44865e5a13a93cff3bb1eacf0419
b3bac47beae3aa90dfd296d876535494212cccb3
ea907393c02eade1509882872cd1a0ef354749954fa1be070efef51d62b8f2fa
GET /scripts/global.js?v=2.0.5 HTTP/1.1
Host: cdn.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jan 2023 23:43:32 GMT
Content-Type: application/javascript
Last-Modified: Wed, 18 Jan 2023 18:30:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63c83ad9-1e58"
Expires: Mon, 30 Jan 2023 23:43:32 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bdb8a13dfce39d6e151a9ef185a772a1
037a680510f9dbce3c7cc3c0f9115fd587dbcd1d
98c8b7f269b9aad73b73fd946788ebfd7a4d7afbdd5347b56c67f73b947f5ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1129
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:32 GMT
Last-Modified: Fri, 20 Jan 2023 23:24:43 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
cdn.violetlovelines.com/scripts/one.js?&default_keyword=&&frm6393271e20c24=script6393271e20c28&_cid=c173b3d5-aa0c-8a4c-da69-bf2ee86a79cd
159.69.234.10200 OK 0 B URL HTTP/1.1 cdn.violetlovelines.com/scripts/one.js?&default_keyword=&&frm6393271e20c24=script6393271e20c28&_cid=c173b3d5-aa0c-8a4c-da69-bf2ee86a79cd
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/one.js?&default_keyword=&&frm6393271e20c24=script6393271e20c28&_cid=c173b3d5-aa0c-8a4c-da69-bf2ee86a79cd HTTP/1.1
Host: cdn.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jan 2023 23:43:32 GMT
Content-Type: application/javascript
Content-Length: 0
Last-Modified: Wed, 18 Jan 2023 18:27:06 GMT
Connection: keep-alive
ETag: "63c839fa-0"
Expires: Mon, 30 Jan 2023 23:43:32 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
cdn.matomo.cloud/tohup.matomo.cloud/matomo.js
54.230.111.91200 OK 40 kB URL HTTP/1.1 cdn.matomo.cloud/tohup.matomo.cloud/matomo.js
IP 54.230.111.91:0
File type ASCII text, with very long lines (1601)
Hash 603424cbbcafea9a64d92b7fa61e1554
8b2f50d87aa9265d5b4ed1e9773fea339360c78d
5785e4a4fba0a9caf90d10c0e0f2700c89b91e875cdb2bf997dcaf5767e13b35
GET /tohup.matomo.cloud/matomo.js HTTP/1.1
Host: cdn.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 20 Jan 2023 18:02:52 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Sat, 14 Jan 2023 16:33:22 GMT
ETag: W/"df630c016b0a1d6d650d8d6a411f9d56"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=691200
x-amz-version-id: WyoXOfgl4AaBk5xQewSwsJpWwGAiuTim
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lB8tQmNNMZPs96Jc49OteVj85KHrz4HJgG4IlrPtZEr9mHlvSKyw6w==
Age: 20440
main.weatherplllatform.com/cdn.js?v=1.11.1
194.135.30.42200 OK 890 B URL HTTP/2 main.weatherplllatform.com/cdn.js?v=1.11.1
IP 194.135.30.42:0
ASN #2856 British Telecommunications PLC
File type ASCII text, with very long lines (1976), with no line terminators
Hash d8ebc6d5a857aef0b27c2b3856ff16c8
30e9e1cac64fd31cc1348bcd15b78fdebc2adde2
53e18f45673566f0c9bad88e9dca44681321c8db01bedd43ae46bf560c65b67f
GET /cdn.js?v=1.11.1 HTTP/1.1
Host: main.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 890
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
camilleflorence.fr/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
213.186.33.87200 OK 5.8 kB URL HTTP/1.1 camilleflorence.fr/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP 213.186.33.87:0
File type ASCII text, with very long lines (15660)
Hash 2b48e4ed293501ee65bcb07b2ab115df
fc86f745bcc6bc9162418c5c912b31f6bca7146b
4a7d68f6bc5fcd2fd19c401fee5acde7cb40c4255b0f64cc329aa86f2c2ad203
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
Cookie: _pk_id.1.8be1=0cac902ee07d0eea.1674258211.; _pk_ses.1.8be1=1
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:32 GMT
content-type: application/javascript
content-length: 5751
server: Apache
last-modified: Fri, 20 Jan 2023 08:59:35 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:32 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:F22B_D5BA2157:0050_63CB2723_109AF:1E0C5
x-iplb-instance: 29603
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5923ff25ba4307fc44691f277fcf515a
61655812f69b90a64d27e2712f3bbd09990f1b7e
f76a7aa756c5444a86b8c4b6a1a4cde65a70bf39732142a571e5c666e91d00a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F76A7AA756C5444A86B8C4B6A1A4CDE65A70BF39732142A571E5C666E91D00A7"
Last-Modified: Wed, 18 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13639
Expires: Sat, 21 Jan 2023 03:30:51 GMT
Date: Fri, 20 Jan 2023 23:43:32 GMT
Connection: keep-alive
cdn.violetlovelines.com/scripts/global.js?ver=2.0.1
159.69.234.10200 OK 2.7 kB URL HTTP/1.1 cdn.violetlovelines.com/scripts/global.js?ver=2.0.1
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (7274), with CRLF line terminators
Hash 753c44865e5a13a93cff3bb1eacf0419
b3bac47beae3aa90dfd296d876535494212cccb3
ea907393c02eade1509882872cd1a0ef354749954fa1be070efef51d62b8f2fa
GET /scripts/global.js?ver=2.0.1 HTTP/1.1
Host: cdn.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jan 2023 23:43:32 GMT
Content-Type: application/javascript
Last-Modified: Wed, 18 Jan 2023 18:30:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63c83ad9-1e58"
Expires: Mon, 30 Jan 2023 23:43:32 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
push.services.mozilla.com/
44.242.3.166101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.242.3.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: R65HSdQDaI+z1qlSvy8ygw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ODwFItWmo1oH1ih/P8B9a5f7CrM=
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash f9e61ad7e3883803bbd5b2351f9ea4c0
de4199dfc3ef5ae3d4affdd3736bac47b0ff7673
b0f72e40b0b13d886a8f5818ae15bf5641ef93535a52f9324079b8ada8a3f8ca
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=145930
Date: Fri, 20 Jan 2023 23:43:32 GMT
Etag: "63cab7fb-1d7"
Expires: Sun, 22 Jan 2023 16:15:42 GMT
Last-Modified: Fri, 20 Jan 2023 15:49:15 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fUED3kfibmOJMDervW2QrVAdjaE_zjdyV1kGZa8-V1OJLAFdlE5PrQ==
Age: 1587
track.violetlovelines.com/ycYHHc?&se_referrer=&default_keyword=&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7
159.69.234.10200 OK 2.2 kB URL HTTP/1.1 track.violetlovelines.com/ycYHHc?&se_referrer=&default_keyword=&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7
IP 159.69.234.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6306), with no line terminators
Hash dceb34d649d0b126c6c2e6c6b62b89e7
79d406cc2188238a62f37feed4051315c43ff404
79a8cb811766c414273334873da12e5c6e0a00c6963741ccd39a8108b35e8b86
GET /ycYHHc?&se_referrer=&default_keyword=&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7 HTTP/1.1
Host: track.violetlovelines.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jan 2023 23:43:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa2qei6f;Expires=Monday, 20-Feb-2023 23:43:32 GMT;Max-Age=2678400;Path=/
674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMxXCI6MTY3NDI1ODIxMixcIjI1XCI6MTY3NDI1ODIxMn0sXCJjYW1wYWlnbnNcIjp7XCI4XCI6MTY3NDI1ODIxMixcIjdcIjoxNjc0MjU4MjEyfSxcInRpbWVcIjoxNjc0MjU4MjEyfSJ9.VAjy0ZgE-JjAaDK48pu7zcbWiBDjP8W7ohpD8k6h4EI;Expires=Monday, 10-Feb-2076 23:27:04 GMT;Max-Age=1674344612;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash e6d21eff1927f7a74984663b16cfe21a
b747f7d42cdf7cfea6900348cd257066b2634222
a4343acb5bda29aa0d6d64bbefd6bc07a1c5e0166646171be74f4a1d266e3c92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash e6d21eff1927f7a74984663b16cfe21a
b747f7d42cdf7cfea6900348cd257066b2634222
a4343acb5bda29aa0d6d64bbefd6bc07a1c5e0166646171be74f4a1d266e3c92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tohup.matomo.cloud/matomo.php?action_name=&idsite=1&rec=1&r=510049&h=23&m=43&s=31&url=http%3A%2F%2Fcamilleflorence.fr%2Fklyqyio%2Fhow-to-cover-brick-walls-inside-house&_id=0cac902ee07d0eea&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=TSPmDg&pf_net=31&pf_srv=35&pf_tfr=28&uadata=%7B%7D
18.195.235.189204 No Content 0 B URL HTTP/2 tohup.matomo.cloud/matomo.php?action_name=&idsite=1&rec=1&r=510049&h=23&m=43&s=31&url=http%3A%2F%2Fcamilleflorence.fr%2Fklyqyio%2Fhow-to-cover-brick-walls-inside-house&_id=0cac902ee07d0eea&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=TSPmDg&pf_net=31&pf_srv=35&pf_tfr=28&uadata=%7B%7D
IP 18.195.235.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=&idsite=1&rec=1&r=510049&h=23&m=43&s=31&url=http%3A%2F%2Fcamilleflorence.fr%2Fklyqyio%2Fhow-to-cover-brick-walls-inside-house&_id=0cac902ee07d0eea&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=TSPmDg&pf_net=31&pf_srv=35&pf_tfr=28&uadata=%7B%7D HTTP/1.1
Host: tohup.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: http://camilleflorence.fr
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 20 Jan 2023 23:43:32 GMT
server: Apache
access-control-allow-origin: http://camilleflorence.fr
access-control-allow-credentials: true
vary: X-Forwarded-Port-Override,X-Forwarded-Proto-Override,User-Agent
X-Firefox-Spdy: h2
camilleflorence.fr/wp-content/uploads/2022/06/cropped-cropped-logo-1.jpg
213.186.33.87200 OK 114 kB URL HTTP/1.1 camilleflorence.fr/wp-content/uploads/2022/06/cropped-cropped-logo-1.jpg
IP 213.186.33.87:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:06:16 15:48:16], baseline, precision 8, 644x402, components 3\012- data
Size 114 kB (113770 bytes)
Hash 07b3359ddea9a2c68f15f27943d8da55
96b305d0efc3e382db876e15aa9aa87b39484660
fbf77772a9ffd16fb1fb5b8974c2f16344f6463e8af61dfaa50a8d498f0bc500
GET /wp-content/uploads/2022/06/cropped-cropped-logo-1.jpg HTTP/1.1
Host: camilleflorence.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://camilleflorence.fr/klyqyio/how-to-cover-brick-walls-inside-house
Cookie: _pk_id.1.8be1=0cac902ee07d0eea.1674258211.; _pk_ses.1.8be1=1
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 23:43:32 GMT
content-type: image/jpeg
content-length: 113770
server: Apache
last-modified: Tue, 05 Jul 2022 00:57:19 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 20 Jan 2023 23:58:32 GMT
x-iplb-request-id: 5B5A2A9A:F22B_D5BA2157:0050_63CB2724_109C6:1E0C5
x-iplb-instance: 29603
tohup.matomo.cloud/matomo.php?action_name=&idsite=1&rec=1&r=198732&h=23&m=43&s=31&url=http%3A%2F%2Fcamilleflorence.fr%2Fklyqyio%2Fhow-to-cover-brick-walls-inside-house&_id=0cac902ee07d0eea&_idn=0&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=XkPJRI&pf_net=31&pf_srv=35&pf_tfr=28&pf_dm1=1178&uadata=%7B%7D
18.195.235.189204 No Content 0 B URL HTTP/2 tohup.matomo.cloud/matomo.php?action_name=&idsite=1&rec=1&r=198732&h=23&m=43&s=31&url=http%3A%2F%2Fcamilleflorence.fr%2Fklyqyio%2Fhow-to-cover-brick-walls-inside-house&_id=0cac902ee07d0eea&_idn=0&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=XkPJRI&pf_net=31&pf_srv=35&pf_tfr=28&pf_dm1=1178&uadata=%7B%7D
IP 18.195.235.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=&idsite=1&rec=1&r=198732&h=23&m=43&s=31&url=http%3A%2F%2Fcamilleflorence.fr%2Fklyqyio%2Fhow-to-cover-brick-walls-inside-house&_id=0cac902ee07d0eea&_idn=0&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=XkPJRI&pf_net=31&pf_srv=35&pf_tfr=28&pf_dm1=1178&uadata=%7B%7D HTTP/1.1
Host: tohup.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: http://camilleflorence.fr
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 20 Jan 2023 23:43:33 GMT
server: Apache
access-control-allow-origin: http://camilleflorence.fr
access-control-allow-credentials: true
vary: X-Forwarded-Port-Override,X-Forwarded-Proto-Override,User-Agent
X-Firefox-Spdy: h2
template.interestmoments.com/bl-way.php?id=67567-88-5796795&pid=35&zid=9956
194.135.30.40302 Found 0 B URL HTTP/2 template.interestmoments.com/bl-way.php?id=67567-88-5796795&pid=35&zid=9956
IP 194.135.30.40:0
ASN #2856 British Telecommunications PLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bl-way.php?id=67567-88-5796795&pid=35&zid=9956 HTTP/1.1
Host: template.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 20 Jan 2023 23:43:33 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://template.interestmoments.com/bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=Mildewed
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
template.interestmoments.com/bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=Mildewed
194.135.30.40200 OK 466 B URL HTTP/2 template.interestmoments.com/bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=Mildewed
IP 194.135.30.40:0
ASN #2856 British Telecommunications PLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 306afffee717b7a0e72d04cca3d8ff4d
62ac06b90fee85214952171704583f3c78834efe
320484281ec578f2c4196bc7de37fc52da165f11e1c0b58cd11a2b842bdbacf4
GET /bl-way.php?id=856756-23-584324238&pid=367&zid=796&kid=45709543&from=Mildewed HTTP/1.1
Host: template.interestmoments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://camilleflorence.fr/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:33 GMT
content-type: text/html; charset=UTF-8
content-length: 466
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11982
Expires: Sat, 21 Jan 2023 03:03:15 GMT
Date: Fri, 20 Jan 2023 23:43:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11982
Expires: Sat, 21 Jan 2023 03:03:15 GMT
Date: Fri, 20 Jan 2023 23:43:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11982
Expires: Sat, 21 Jan 2023 03:03:15 GMT
Date: Fri, 20 Jan 2023 23:43:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d59b0db3cc1f31f9154d32804a8e3940
498c310e0f4a84c1350bae55aec0d2a0192f8dda
14a2b4e9763a62478015d8f61bf9e44eb67dfe08a58cc94dc836dc8ff3f1b6cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7014
x-amzn-requestid: 689ad8b2-4ec8-4f61-a31e-7813c9143f9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e-EyFHmEIAMFsHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8b4d9-7ce5fef1456ecc73690eff07;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lVC3DrO-Bce6RI2oNTZLaI0n9f8OxeryVME2InWadZ_P67jstzXEPw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 03:29:01 GMT
age: 72872
etag: "498c310e0f4a84c1350bae55aec0d2a0192f8dda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4966b3e0-0dd9-425f-b043-9f48251ef941.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4966b3e0-0dd9-425f-b043-9f48251ef941.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0bd80a52a49f916a7ba75d61cb77c0a5
9ebbe2c9efd7f08a9f413830a4640e17c62e483e
8317d34c1187dff14b91cc68d3706033fc45f917381d0811cff48c47c80df6a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4966b3e0-0dd9-425f-b043-9f48251ef941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9027
x-amzn-requestid: b7f942f0-4ce5-415a-b6eb-4e9bf51906c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e-EyBHOMoAMFuXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8b4d9-24485f4b1ce0e6b71d102ebe;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ejx8hYDPDWtoTEZQ6qv_SUvGy8GdzavJRU5HrMv4i8CCRrAMSqfP8w==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 04:59:12 GMT
age: 67461
etag: "9ebbe2c9efd7f08a9f413830a4640e17c62e483e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F128df721-be42-4d48-ad3c-42bf5352ec7b.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F128df721-be42-4d48-ad3c-42bf5352ec7b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 332e9c85e1817bc0290eb274b63041a1
fa714e6e92bc9af7b1af52322d1f83ed6aa13694
071a92737a107f3d1bd447239236a8f61a2db0fecf9a02458acfa92b01669546
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F128df721-be42-4d48-ad3c-42bf5352ec7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7158
x-amzn-requestid: 8c56873f-f2b3-486c-9591-02f6aacf4cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: euIysGYsoAMFvJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c254dd-5b15feba47bb8d704428a26a;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 07:08:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ylyM3aRR-xpoakz1Yciy7EOyzRBg7tPUCRavAkav6KfweW5WBF9FpA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 14:18:12 GMT
age: 33921
etag: "fa714e6e92bc9af7b1af52322d1f83ed6aa13694"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7616632f-cfb4-4f45-819d-1970213c1ca5.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7616632f-cfb4-4f45-819d-1970213c1ca5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62d64384cabb3ee773d9baa88c9fa9f5
3457882213a7c2d2ec863d75cf629ae4fe320092
7adc5cd3cc8a30b5c45c2995b27daf66fcf95280a4f5feaa46e559da464c75be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7616632f-cfb4-4f45-819d-1970213c1ca5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9669
x-amzn-requestid: d57517dd-07b7-4477-996d-5cb159f1e608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: euIvoHVNIAMFVWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c254ca-2737608463cd6cd160497e42;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 07:07:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: q29sVPPuKPCG6Q6jhlrnm79kQvNCAC2u36O1eNorlq8sGf7WoZYRRw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 23:33:45 GMT
age: 588
etag: "3457882213a7c2d2ec863d75cf629ae4fe320092"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385e5d7b-4f16-45a4-88c5-4be5cf466dc4.png
34.120.237.76200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385e5d7b-4f16-45a4-88c5-4be5cf466dc4.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88ce2ee581e7de15d22f970712c19697
f4613423c66d24c5b2f0fb89166bce2a1a1e28d9
a09f389c010877312b475a22863b08c01be546bce497bfbd2f012c0bdd19170c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385e5d7b-4f16-45a4-88c5-4be5cf466dc4.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 17445
x-amzn-requestid: ff6693f5-3723-4e54-af83-f67c8f473b6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: euIOEGZDIAMF9cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c253f3-433fb73d65e113f24f4c2f31;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 07:04:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6XsM6RBpGgUthvRkAw1zsjq_dkbC3H2n5YNwkG1GLR_KTce_TCPvXA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 18:31:07 GMT
age: 18746
etag: "f4613423c66d24c5b2f0fb89166bce2a1a1e28d9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc231c80e-1faf-4bd6-8ed6-fb607db0086d.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc231c80e-1faf-4bd6-8ed6-fb607db0086d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a1b8f3e0407b4d6e24afea546ca274e1
d8a70b23dba532ff8a44ebe4e12890efb5e0c584
24cb3abc9ffe27836d8e0bf2a1eff295d504e09b02237dc4dda938e012c49425
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc231c80e-1faf-4bd6-8ed6-fb607db0086d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6377
x-amzn-requestid: 065663fc-8bc2-4b83-a7e3-ad4e24f895f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e-EzgHCHIAMFvqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8b4e3-6bbc3fe80ba4a7de13b99982;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -mkifCnUT7O_yZUfHIFdGexUiYGMk8s_Whsfey8PcmGBUWygX-cnjQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 05:31:48 GMT
age: 65505
etag: "d8a70b23dba532ff8a44ebe4e12890efb5e0c584"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 38d2cb0dc4da47f8afdee53b24b42d79
1a17959ea0b1fe0d457b97f3fb32c203c66d0d46
a76e24c313ed8b038171b48688ff403d2f3913781f8513f83b0552835cc323ed
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 23:43:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 20 Jan 2023 22:00:29 GMT
Expires: Sat, 21 Jan 2023 22:00:29 GMT
ETag: "1a17959ea0b1fe0d457b97f3fb32c203c66d0d46"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
track.wg-aff.com/click?pid=1287&offer_id=73&ref_id=i0tha25j362n4bs47ik9&sub1=E2PKPGBJ6R
35.204.100.195302 Found 0 B URL HTTP/2 track.wg-aff.com/click?pid=1287&offer_id=73&ref_id=i0tha25j362n4bs47ik9&sub1=E2PKPGBJ6R
IP 35.204.100.195:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=1287&offer_id=73&ref_id=i0tha25j362n4bs47ik9&sub1=E2PKPGBJ6R HTTP/1.1
Host: track.wg-aff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 20 Jan 2023 23:43:34 GMT
content-length: 0
location: https://trck.wargaming.net/nfj3bltq/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=63cb27261baa890001b60701; expires=Sat, 20 Jan 2024 23:43:34 GMT; secure; SameSite=None
afoffers={"73":1674258214}; expires=Sat, 20 Jan 2024 23:43:34 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 612a9006f45e67a979040012823c53a7
a45915e872cb2e869fb8b8f7f3324d3b8b7acc07
6638d5af5e20320782f1854a322ec1bb89454444e11c14bce34de3bd781b1c8c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6051
Cache-Control: max-age=128432
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:35 GMT
Etag: "63ca6234-1d7"
Expires: Sun, 22 Jan 2023 11:24:07 GMT
Last-Modified: Fri, 20 Jan 2023 09:43:16 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/nfj3bltq/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=
92.223.23.230301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/nfj3bltq/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=
IP 92.223.23.230:0
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /nfj3bltq/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 20 Jan 2023 23:43:35 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://promo.worldofwarships.eu/glows-46780/eu-no/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE&enctid=cpxf05u7svr9&lpsn=WOWS+template1+new+animated+lp-v1&foris=1&teclient=1674258215057264358&utm_source=wlap&utm_medium=affiliate&utm_campaign=nfj3bltq&utm_content=1287
Set-Cookie: STIDREFERRAL=SID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=cpxf05u7svr9; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1674258215057264358; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c44c3f32190ff10e2ec6f3d8e0550ab
7bacc57ab7e79bedcdac30148977a9e7369a1a51
bb72bd0cd1ac5bca8923639a334da77ac7fd941b862dfbaae5da6ef236e24a5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB72BD0CD1AC5BCA8923639A334DA77AC7FD941B862DFBAAE5DA6EF236E24A5B"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2849
Expires: Sat, 21 Jan 2023 00:31:04 GMT
Date: Fri, 20 Jan 2023 23:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c44c3f32190ff10e2ec6f3d8e0550ab
7bacc57ab7e79bedcdac30148977a9e7369a1a51
bb72bd0cd1ac5bca8923639a334da77ac7fd941b862dfbaae5da6ef236e24a5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB72BD0CD1AC5BCA8923639A334DA77AC7FD941B862DFBAAE5DA6EF236E24A5B"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2849
Expires: Sat, 21 Jan 2023 00:31:04 GMT
Date: Fri, 20 Jan 2023 23:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c44c3f32190ff10e2ec6f3d8e0550ab
7bacc57ab7e79bedcdac30148977a9e7369a1a51
bb72bd0cd1ac5bca8923639a334da77ac7fd941b862dfbaae5da6ef236e24a5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB72BD0CD1AC5BCA8923639A334DA77AC7FD941B862DFBAAE5DA6EF236E24A5B"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2849
Expires: Sat, 21 Jan 2023 00:31:04 GMT
Date: Fri, 20 Jan 2023 23:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c44c3f32190ff10e2ec6f3d8e0550ab
7bacc57ab7e79bedcdac30148977a9e7369a1a51
bb72bd0cd1ac5bca8923639a334da77ac7fd941b862dfbaae5da6ef236e24a5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB72BD0CD1AC5BCA8923639A334DA77AC7FD941B862DFBAAE5DA6EF236E24A5B"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2849
Expires: Sat, 21 Jan 2023 00:31:04 GMT
Date: Fri, 20 Jan 2023 23:43:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c44c3f32190ff10e2ec6f3d8e0550ab
7bacc57ab7e79bedcdac30148977a9e7369a1a51
bb72bd0cd1ac5bca8923639a334da77ac7fd941b862dfbaae5da6ef236e24a5b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB72BD0CD1AC5BCA8923639A334DA77AC7FD941B862DFBAAE5DA6EF236E24A5B"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2849
Expires: Sat, 21 Jan 2023 00:31:04 GMT
Date: Fri, 20 Jan 2023 23:43:35 GMT
Connection: keep-alive
promo-cdn.worldofwarships.com/glows-46780/src/images/wowsl_logo.png
185.244.209.62200 OK 10 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/images/wowsl_logo.png
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Hash 4d9371a87a4f9a0d6a8792e0397aa303
1308b49f8614f0ab05e81698daf5bfc4a2498bf0
68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
GET /glows-46780/src/images/wowsl_logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/png
content-length: 10514
last-modified: Thu, 17 Nov 2022 14:17:13 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx0000000000000003019c7-0063c150d0-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/images/footer-logo.png
185.244.209.62200 OK 1.9 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/images/footer-logo.png
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 275 x 63, 8-bit colormap, non-interlaced\012- data
Hash 7ce94cd1324102c254e60ced58661dc3
b76e3b4e14cf98aa766788bc8cf4fbc97058fec0
fdd269a537d61d3fafbef167c6c7e22ae7707217427b506674f5f0d2f3caed48
GET /glows-46780/src/images/footer-logo.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/png
content-length: 1939
last-modified: Thu, 17 Nov 2022 14:17:13 GMT
etag: "7ce94cd1324102c254e60ced58661dc3"
x-amz-request-id: tx000000000000000301e8c-0063c150d1-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/video/background.jpg
185.244.209.62200 OK 1.6 MB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/video/background.jpg
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, software=Adobe Photoshop 22.5 (20210825.orig.371 f9e5e2d) (Windows), datetime=2022:03:02 12:36:32], baseline, precision 8, 1920x1080, components 3\012- data
Size 1.6 MB (1600607 bytes)
Hash 7ca3ab71bce37ba721e6df5793aec7db
58d9843017d1de2e184947c3c245cd68993ed254
789b592e823e380c8c974b0dd2a5893b250ddb06d1e08f70ad3e19aca54b0cac
GET /glows-46780/src/video/background.jpg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/jpeg
content-length: 1600607
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: "7ca3ab71bce37ba721e6df5793aec7db"
x-amz-request-id: tx000000000000000301e1b-0063c150d0-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/libs/jquery.fullpage.js
185.244.209.62200 OK 122 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/libs/jquery.fullpage.js
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
Size 122 kB (121999 bytes)
Hash 01787cba5d898e26cc13b518431f7122
ae5468c68fe0023718f746f80fb7c8e9fbe99ba0
b185d259f4a9050fb55bfb0ba13e2da2f1bf6dca531554ebb68137c042d38e64
GET /glows-46780/src/libs/jquery.fullpage.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"3dda1cb6b7c3b1c0f3eb0c52633455bf"
x-amz-request-id: tx0000000000000003019c9-0063c150ce-1cc4459e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/libs/aos.js
185.244.209.62200 OK 98 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/libs/aos.js
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
Hash 071ab2422efd46497284489850c6e186
69628075ef8140ad69a79e26d1b10714843d0d90
eb5346b222813d6d300887b88c029fba66503c689f456933630e914aad33b4c8
GET /glows-46780/src/libs/aos.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"e3b9e99ad931c062d98830bc140e2eac"
x-amz-request-id: tx000000000000000301653-0063c150ce-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/libs/jquery.fullpage.min.css
185.244.209.62200 OK 9.5 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/libs/jquery.fullpage.min.css
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type ASCII text, with very long lines (24742)
Hash 2a07734bd486c2415366fcc613dbe169
c2c90c51b046198637a247a0a55ea8b8e85a09cf
50cc9ea6e153ab0aed6e5b3f80fd2557226c152a728d0378146cddd5c4f073dc
GET /glows-46780/src/libs/jquery.fullpage.min.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"5325456f69c244978fdc17e4a370d845"
x-amz-request-id: tx000000000000000301626-0063c150cd-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
185.244.209.62200 OK 18 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
Hash a09ef1a6a83b482d88e5f4f8316c1765
f8ff63ef18ec7fe4aa918d3dd924725f4c3a2ecf
2161bc5fddfe84d5bd78e2b57224af0d0be68189fb43f50ce2433f96f4fd24a2
GET /global_static/age_ratings/v2/pegi_ext-in-game-purchases.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"635ea99325f08d75fd8f09201f998f50"
x-amz-request-id: tx00000000000000030122d-0063c150d2-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:39:36+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/OtAutoBlock.js
104.16.149.64200 OK 1.9 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/OtAutoBlock.js
IP 104.16.149.64:0
File type ASCII text, with very long lines (835)
Hash b00b992406de0267439d1368c0f3f2a3
82fca6bb4bb2c006415fdc311dad9681e73bda74
700beb542a377941732a2680ca40673c81c44667edbddf7b042190eb82a975ab
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/OtAutoBlock.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: application/x-javascript
content-length: 1931
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: sAuZJAbeAmdDnRNowPPyow==
last-modified: Fri, 25 Nov 2022 10:09:35 GMT
etag: 0x8DACECD27C13A68
x-ms-request-id: d93dc5c4-001e-00f7-5cb6-00fe0d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 44669
expires: Sat, 21 Jan 2023 23:43:35 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac565d00b4f7-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
185.244.209.62200 OK 4.1 MB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_rating.svg
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
Size 4.1 MB (4079905 bytes)
Hash 382ca5f02e0dd5ffb8f93af35fa60706
8615ea2bd7f5311668e1d65cce7c76d476a0f2e5
5cf8c0fba83033e03aa8e98041a90c383385afb87e380d227464a13f193faa07
GET /global_static/age_ratings/v2/pegi_rating.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:21 GMT
etag: W/"207ef7e145ba483b342b96f8c2fbf72a"
x-amz-request-id: tx000000000000000301a4c-0063c150d2-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:39:36+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/images/logo-main.svg
185.244.209.62200 OK 4.1 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/images/logo-main.svg
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
Hash c0c878fb0796fb58a652d2723a8a733d
69080f2f748363dd8d48836a219e0655c9beb816
b9c32a9c0712eccfbd81507a6b3dcfc2c839258886ac08896c633a3359c182dd
GET /glows-46780/src/images/logo-main.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 14:17:13 GMT
etag: W/"3205035293624ac8f4502ce6c888db9e"
x-amz-request-id: tx000000000000000301688-0063c150cf-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
185.244.209.62200 OK 1.2 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash de30b29e8bbc72b7828734d5d781b9eb
9d5fb51148291180b45d9481b756eb7fc2d4a352
e47efd1c616db1a5564776f4be806183ee085c80d2d3722d3f8d5a06115e46ee
GET /global_static/favicon/v2/favicon-64x64.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: image/png
content-length: 1198
last-modified: Mon, 05 Sep 2022 07:56:21 GMT
etag: "de30b29e8bbc72b7828734d5d781b9eb"
x-amz-request-id: tx00000000000000030430d-0063c15167-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:43:54+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/styles/style.css
185.244.209.62200 OK 7.3 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/styles/style.css
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type ASCII text, with very long lines (5875)
Hash 1d4c07c2f2a650693a8f3b6111b82bdd
4ebbde5fa005902e23b7fd3d3ca10b11ae9feccd
deec1ee2c28aae1d38bb5eaa556adf377ecb1bfa47e3a94ebe0479a3090fb161
GET /glows-46780/src/styles/style.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"1b60b9684b13c04d6b5a1d0f84017275"
x-amz-request-id: tx000000000000000301948-0063c150ce-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
142.250.74.40200 OK 120 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
IP 142.250.74.40:0
File type ASCII text, with very long lines (40521)
Size 120 kB (119583 bytes)
Hash d14c82274fdf84c6d530f9359f4b5ee4
d43208311d3c3d48a2b6065caebb0a4a596babdd
3844da5ca76470119691b357f47cb9e89aac6e6f3359e81ddead4cc975c08a37
GET /gtm.js?id=GTM-58Z37MT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 20 Jan 2023 23:43:35 GMT
expires: Fri, 20 Jan 2023 23:43:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 119583
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promo.worldofwarships.eu/glows-46780/eu-no/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE&enctid=cpxf05u7svr9&lpsn=WOWS+template1+new+animated+lp-v1&foris=1&teclient=1674258215057264358&utm_source=wlap&utm_medium=affiliate&utm_campaign=nfj3bltq&utm_content=1287
185.244.209.62200 OK 5.9 kB URL HTTP/2 promo.worldofwarships.eu/glows-46780/eu-no/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE&enctid=cpxf05u7svr9&lpsn=WOWS+template1+new+animated+lp-v1&foris=1&teclient=1674258215057264358&utm_source=wlap&utm_medium=affiliate&utm_campaign=nfj3bltq&utm_content=1287
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
Hash 5c9a3f39a553045b69dd0e3411d10a77
505735c14b116b71c99a6a57ad82a2d4265308da
cc6f8a6b6abefcdb52995391a58b7e55f4fe72ace2d4fd61669ef1138db76fda
GET /glows-46780/eu-no/?t=1&pub_id=1287&xid=63cb27261baa890001b60701&xid_param1=E2PKPGBJ6R&xid_param_2=&sid=SID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE&enctid=cpxf05u7svr9&lpsn=WOWS+template1+new+animated+lp-v1&foris=1&teclient=1674258215057264358&utm_source=wlap&utm_medium=affiliate&utm_campaign=nfj3bltq&utm_content=1287 HTTP/1.1
Host: promo.worldofwarships.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"61b4af1bae2756b26cc69495654416d7"
x-amz-request-id: tx000000000000000301ce2-0063c150ca-1da6e21f-ed1
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
104.16.149.64200 OK 94 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/otBannerSdk.js
IP 104.16.149.64:0
File type ASCII text, with very long lines (65451)
Hash f6a491be9dc7f6ba1271f4faa9753179
e11e8e291ca6548f4933103088b8acd15af84191
6cf04708cbb25e9b7144e865deebd75bd4b2d42fa703299ba303a084d457b081
GET /scripttemplates/202211.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: application/javascript
content-length: 93485
content-encoding: gzip
content-md5: 9qSRvp3H9roScfT6qXUxeQ==
last-modified: Thu, 15 Dec 2022 13:30:03 GMT
etag: 0x8DADEA07933BD54
x-ms-request-id: e3dbcf52-f01e-014c-2807-1159ac000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 21805
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5c29f9b4f7-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 17f5ba39b1f66e39ad760d8e85018d79
7f21e8b294282191409297adeaace6be817f39f3
3a1bab6643c631b02d842788328cf1417059c4beb1b274e684253c7201ee18d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.redditstatic.com/ads/pixel.js
151.101.1.140200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.1.140:0
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 20 Jan 2023 23:43:36 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
10697551.fls.doubleclick.net/activityi;src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287?
142.250.74.70200 OK 589 B URL HTTP/2 10697551.fls.doubleclick.net/activityi;src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1487), with no line terminators
Hash 00e540c9bcd26ed7929b95d09e05beef
112b23c6bf58f62f9be0a0cb51866fbde60ced0c
b4ef5f08dbef627d1d9304fe0d9e74ad85faab1c082ec40b3249a6a8ba50580a
GET /activityi;src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287? HTTP/1.1
Host: 10697551.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 589
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 23:58:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.quora.com/qevents.js
162.159.152.17200 OK 15 kB IP 162.159.152.17:0
Hash 5cc019c3779cab08b0f3e44892318938
649dc63f628e35e72018b8fe34f27472726b1c65
bbbcc29dc93226f17e4c0bc0b2539617af0baec9e45b23dd1a9fbfe712647a78
GET /qevents.js HTTP/1.1
Host: a.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: text/plain
x-amz-id-2: Lo6V6sS9dollZm991E+r9QS5ilIWlcul705lMiga2oQnz8bnT95jaa4X7qyu2MPUU2YNcD20ek4=
x-amz-request-id: ABWFWAK2P6Z86ST7
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 161654
expires: Sat, 21 Jan 2023 03:43:36 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 78cbac5c887eb4ed-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 17f5ba39b1f66e39ad760d8e85018d79
7f21e8b294282191409297adeaace6be817f39f3
3a1bab6643c631b02d842788328cf1417059c4beb1b274e684253c7201ee18d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
104.16.149.64200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
IP 104.16.149.64:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (48198), with no line terminators
Hash b423017d2eccc05cb5e3921d36eeb535
b989dd503a71fa6a448860a5d59c28bbceee910b
b8aab8ba299a063e0e5faacea59d7cc56da466c0fd3b91a8d03480184eaf7495
GET /consent/68edbfbe-e009-4939-a55b-f4c65daa640b/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: application/x-javascript
content-length: 11485
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: tCMBfS7MwFy145IdNu61NQ==
last-modified: Fri, 25 Nov 2022 10:09:21 GMT
etag: 0x8DACECD1F1475FC
x-ms-request-id: ba3e27e9-f01e-00e9-15b6-0024e0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 43072
expires: Sat, 21 Jan 2023 23:43:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5ceaa8b4f7-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
104.16.149.64200 OK 2.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCenterRounded.json
IP 104.16.149.64:0
File type JSON data\012- , ASCII text, with very long lines (7753)
Hash 688f5aef949a8982bda0771893cc67d3
c50441dea985350ab305848e2d87d6286adfda3c
da30c398b0e6646c44fc5a53e44371004a33267d6cd07404775ab6380979b058
GET /scripttemplates/202211.1.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: application/json
content-length: 2639
content-encoding: gzip
content-md5: aI9a75SaiYK9oHcYk8xn0w==
last-modified: Thu, 15 Dec 2022 13:29:55 GMT
etag: 0x8DADEA074AA9D35
x-ms-request-id: aa98274f-b01e-00c7-0a93-10a427000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 43072
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5d2af5b4f7-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
104.16.149.64200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/v2/otPcCenter.json
IP 104.16.149.64:0
File type JSON data\012- , ASCII text, with very long lines (50353)
Hash 0cd2fb0fd730954ef2159520d96f1934
d2656260dfdac230479c8e7dc44444e9d5c8faf2
b821093423791675ca31c2d688b528b329737cca90ef62bc44f5c5b39423c8f6
GET /scripttemplates/202211.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: application/json
content-length: 12540
content-encoding: gzip
content-md5: DNL7D9cwlU7yFZUg2W8ZNA==
last-modified: Thu, 15 Dec 2022 13:29:57 GMT
etag: 0x8DADEA0758F35B0
x-ms-request-id: 9b16e561-001e-0091-3f93-104c57000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 43072
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5d2af6b4f7-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 9046bdd3634f2cfb8ace7c326c4af05f
d92d1610bbcc211f0648ec87b5aee6a562f606db
eea88fe2aaabd085058e3cf139e8780e1ddeff62e4fb94d6eeabe512a309d8ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287
142.250.74.162200 OK 590 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1486), with no line terminators
Hash f2d7d2eadf0a4fab48e5b704c8a5ccea
acc5edd6d30a05f9e0092b6de04dccf680dd8b7f
1ecd1d57e799495712a98d7fa37a8bf11ba896f193123c63bf48acd038da34cf
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wholegrady.com/bK3EVB0YP.3jpuv/b/m/VZJJZ/DJ0O0PNkjSEmzSOqD/UUziLBTYQT2SMWTFMu4SN/T/Q-
88.85.94.246200 OK 86 kB URL HTTP/2 wholegrady.com/bK3EVB0YP.3jpuv/b/m/VZJJZ/DJ0O0PNkjSEmzSOqD/UUziLBTYQT2SMWTFMu4SN/T/Q-
IP 88.85.94.246:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (357)
Hash c15c738749511d79b58f24237644dc1b
0981010f6b017b4bd25f0984256ce0ee2fcd1a84
a783e7f67aa4ad4c25c1bff14997fd1eb34f58ed996c11b736e082dbbea39457
GET /bK3EVB0YP.3jpuv/b/m/VZJJZ/DJ0O0PNkjSEmzSOqD/UUziLBTYQT2SMWTFMu4SN/T/Q- HTTP/1.1
Host: wholegrady.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://template.interestmoments.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:34 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-frame-options: DENY
referrer-policy: no-referrer
p3p: CP="CUR ADM OUR NOR STA NID"
last-modified: Fri, 20 Jan 2023 23:43:33 GMT
set-cookie: kadCCap=220335:1:1670435916;221352:1:1670163762;215297:1:1674141027;223255:1:1670393482;199455:1:1668245056;218665:1:1673777741;222555:1:1671433227;221398:1:1673858145;223454:1:1673698373;222775:1:1671023864;101716:1:1672946010;194136:1:1673252766;212269:1:1667199062;171526:1:1673628579;219484:1:1667715065;184246:1:1673859446;222513:1:1671568408;219047:1:1667194435;132751:1:1674218753;79610:1:1674135009;219652:1:1669330335;220790:1:1668460505;222582:1:1674224437;218693:1:1669515516; max-age=1705794214; path=/
kadACap=424445:1:1673960337;419301:1:1674188761;389299:1:1673726804;451724:1:1669565807;419299:1:1674258213;410252:1:1674040227;419321:1:1674190162;446498:1:1671420411;454815:1:1673736038;465201:1:1674236409;445735:1:1669286676;444785:1:1671894608;417177:1:1674123312;446531:1:1669270846;451139:1:1673951585;407100:1:1668246232;458498:1:1672536671;424443:1:1674152018;445506:1:1669286676;445788:1:1669918420;410256:1:1674039938;346327:1:1674253588;446716:1:1673941249;446013:1:1668228435;320498:1:1673937516;272913:1:1673716337;453850:1:1671627132;398832:1:1672025828;456883:1:1671781891;449523:1:1670210030;424441:1:1674226483;419323:1:1674028005;419303:1:1673768004;453839:1:1674033658;419293:1:1671780919;445499:1:1670164226;404163:1:1673226439;453831:1:1674041217;460522:1:1674247080;441369:1:1671297690;446718:1:1674025918;190964:1:1674135009;458041:1:1670526590;383700:1:1674247077;468607:1:1674212528;450649:1:1674026353;446720:1:1673953397;444748:1:1669841678;442019:1:1674044815;401659:1:1674179110;445081:1:1671894608;419291:1:1674154909;346329:1:1670226206;419295:1:1674030439;410254:1:1674192100;419297:1:1674242325;462327:1:1673736144;406293:1:1673859446;458045:1:1670528140;451147:1:1674036929;446714:1:1674043083; max-age=1705794214; path=/
kadCSCap=222582:1:1674224437;132751:1:1674218753; path=/
kadASCap=419299:1:1674258213;410254:1:1674192100;465201:1:1674236409;468607:1:1674212528;419297:1:1674242325;424441:1:1674226483;383700:1:1674247077;401659:1:1674179110;460522:1:1674247080;419321:1:1674190162;346327:1:1674253588;419301:1:1674188761; path=/
kadRPixJ=bnVsbA==; max-age=1705794214; path=/
kadUnP3=CA4QsOmpngYaDQjm1JgCEAEY+aOrngYaDQj9yZkCEAEY0rqongYaDQjdzZkCEAMYtcaqngYaDQix9ZkCEAEYldKrngYaDQirgJoCEAUYgZqqngYaDQjzwZkBEAEYlKqsngYaDQiLjqIBEAEYsIWsngYaDQj2iP8BEAEYqIWsngYiCggOEAEY+aOrngYiCggDEA0YsOmpngYqDAiuwSgQARiV0queBioMCMjCKBAFGIGaqp4GKgwIjL0SEAEYlKqsngYqDAiB3RMQARiwhayeBioMCObBJBABGPmjq54GKgwIuI4lEAEYqIWsngYqDAigvCgQARjSuqieBioMCOK8KBADGLXGqp4G; max-age=1705794214; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
104.16.149.64200 OK 13 kB URL HTTP/2 cdn.cookielaw.org/logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png
IP 104.16.149.64:0
File type PNG image data, 1000 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash c90475872d8975dcc4b5ed7db6cc5e28
1e5a413845f5d501c174ae4940e1329a2575067f
e79eb16948cca42e0f7884fad7637fa6ec69117a07dbc04cc8b3ea7ebeaef719
GET /logos/04fe1919-d767-41dc-abd4-f409a111f829/d0c760aa-d1b6-44a8-964c-9ae294f365f3/40885536-3b1f-4688-b7c1-39913d45a61e/wg_logo_secondversion_white1r.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: image/png
content-length: 13003
content-md5: yQR1hy2JddzEte19tsxeKA==
last-modified: Fri, 02 Oct 2020 14:20:55 GMT
etag: 0x8D866DE604098C2
x-ms-request-id: c476ff8b-c01e-00c3-3c6c-c451a5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 65021
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5d9b75b4f7-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.20.226:0
Hash 300adf2df8d75d87283694dce657c7b9
30c781d9ebcab79bf7b38a83252662df9974ad80
b19fc1cc42ad1094e7b4a871fcb2d5ab219ed467fb18deb01ebadabc974fedfb
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 23:43:36 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D7F5914CDA3E19CD32CB7D876788CFC9709A935F"
Expires: Sat, 21 Jan 2023 10:00:00 GMT
Last-Modified: Fri, 20 Jan 2023 22:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1198
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78cbac5d9c52b52d-OSL
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 9046bdd3634f2cfb8ace7c326c4af05f
d92d1610bbcc211f0648ec87b5aee6a562f606db
eea88fe2aaabd085058e3cf139e8780e1ddeff62e4fb94d6eeabe512a309d8ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 15cd0e3deb183c7e1dbf3c8b8640f11a
3a71e3bf1324814250fa2ceafadde2d0c464ea07
a939697e5630d84e408608f6fdac253a7789e035ec355833d95ffec619a2ff2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A939697E5630D84E408608F6FDAC253A7789E035EC355833D95FFEC619A2FF2A"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2106
Expires: Sat, 21 Jan 2023 00:18:42 GMT
Date: Fri, 20 Jan 2023 23:43:36 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3c232c19f3fc429b50b4b21d042ea2d1
232ff9e14ff2bd70e2c058c139e3694cc8c45f25
dfdf4248506d908ca817562e74c64bdb1a192c61c6d1f2f2f66db045bc1e3575
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287
216.58.207.226200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287
IP 216.58.207.226:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=2496232226362;gtm=2wg1i0;gcs=G111;auiddc=118071114.1674258216;u1=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287;~oref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:36 GMT
expires: Fri, 20 Jan 2023 23:43:36 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3c232c19f3fc429b50b4b21d042ea2d1
232ff9e14ff2bd70e2c058c139e3694cc8c45f25
dfdf4248506d908ca817562e74c64bdb1a192c61c6d1f2f2f66db045bc1e3575
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tag=ViewContent&ts=1674258215703
34.235.194.220200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tag=ViewContent&ts=1674258215703
IP 34.235.194.220:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/e4652778ed5c49c1b1a36d8c41a61ba9/pixel?j=1&u=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tag=ViewContent&ts=1674258215703 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Fri, 20 Jan 2023 23:43:36 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,689404b76723d21784700b8c115c96ec,10.0.0.220,40574,91.90.42.154,,95102704423,1,1674258216.826,0.002,,.,0,0,0.000,0.004,-,0,0,197,180,90,10,35796,,,,,,-,
Content-Length: 43
Connection: keep-alive
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 8f207c904ebaf35e604f74b32e51c5ca
3f3429ade03f0ceb3b3ada6b89132c5ba6ab4ea8
3134862aafd6d3e725692a70a48ea59bd40bca5807807dcbb1a9965af05a7e63
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 23:43:36 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Tue, 24 Jan 2023 21:27:14 GMT
ETag: "3f3429ade03f0ceb3b3ada6b89132c5ba6ab4ea8"
Last-Modified: Fri, 20 Jan 2023 21:27:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2560
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78cbac5fedc1b52d-OSL
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 8f207c904ebaf35e604f74b32e51c5ca
3f3429ade03f0ceb3b3ada6b89132c5ba6ab4ea8
3134862aafd6d3e725692a70a48ea59bd40bca5807807dcbb1a9965af05a7e63
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 23:43:36 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Tue, 24 Jan 2023 21:27:14 GMT
ETag: "3f3429ade03f0ceb3b3ada6b89132c5ba6ab4ea8"
Last-Modified: Fri, 20 Jan 2023 21:27:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2560
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78cbac5ffdc4b52d-OSL
cdn.cookielaw.org/logos/static/powered_by_logo.svg
104.16.149.64200 OK 2.5 kB URL HTTP/2 cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP 104.16.149.64:0
Hash 769031eb8e558d188ecec8bc3d40a299
a3b46f243b4c3e8feae69e755714059f539859b1
28ab5bca5e674b4858312589e57b220d1ee09b83833b97af5a3e298f5f11d295
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Thu, 19 Jan 2023 03:33:41 GMT
x-ms-request-id: 13ad5685-601e-006f-083d-2c7032000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 18187
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5d9b76b4f7-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216
142.250.74.164302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A627202370913%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A890068554%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
93.158.134.119302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A627202370913%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A890068554%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 7ad0a8185f190c405798664f819caa08
ee27ba39b1926f8e0e1efa060cf182628524ec04
491cb9def61ebaa36564d51900840a3dca091c42cf1da88819c2f14cef18611e
GET /watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A627202370913%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A890068554%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A627202370913%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A890068554%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 20 Jan 2023 23:43:36 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=2059208621674258216; Path=/; SameSite=None; Secure
i=KAnYBB0/hdTH+WqOHG7CYmoa9c4N6f/q0vhwJ9tP18cUkLUZ3hfLtCYhVnejiNTsKUKG2iJ8R9EHjEYTPXHne3DBhec=; Expires=Mon, 17-Jan-2033 23:42:47 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6716694631674258216; Expires=Sat, 20-Jan-2024 23:43:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6716694631674258216; Expires=Sat, 20-Jan-2024 23:43:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705794216.yc.1674258216#1705794216.yrts.1674258216#1705794216.yrtsi.1674258216; Expires=Sat, 20-Jan-2024 23:43:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 20-Jan-2023 23:43:36 GMT
last-modified: Fri, 20-Jan-2023 23:43:36 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A772295618%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
93.158.134.119302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A772295618%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash b2b3ec2d412e21f8859d454317ae9a95
df55a2e6908655570675506282a7f7668bf5c2e1
3b10a57eb79e2f15753f3e2edccd2dd0f028718d425d81bf23087e8648768f12
GET /watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A772295618%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A772295618%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 20 Jan 2023 23:43:37 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=2133374401674258217; Path=/; SameSite=None; Secure
i=luy9aQe7m8hAzJ+eKl02fcnoTnqOcpE+Ss8NbCyaq75gTmNhMhyI5rFcPfSGvjoTOKwLOPX449Twy64q+7d6oaXQXZI=; Expires=Mon, 17-Jan-2033 23:43:30 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3122932581674258217; Expires=Sat, 20-Jan-2024 23:43:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3122932581674258217; Expires=Sat, 20-Jan-2024 23:43:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705794217.yc.1674258217#1705794217.yrts.1674258217#1705794217.yrtsi.1674258217; Expires=Sat, 20-Jan-2024 23:43:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 20-Jan-2023 23:43:37 GMT
last-modified: Fri, 20-Jan-2023 23:43:37 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
93.158.134.119200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash a1338fc6d6081bb79840a09f9fa4860d
5a08efb0d44ea09b63b99817503352bd059aa09d
4ea067cfdb87e2c5c5335f3af065f46b931ff2f70223669255efc6988df351d3
GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Fri, 20 Jan 2023 23:43:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.eu
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 20-Jan-2023 23:43:37 GMT
last-modified: Fri, 20-Jan-2023 23:43:37 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 875fc1415608498b67d609fd3b7335ae
463aca613dcdfc3446e7c7f4663d9577ef92f94e
fcb4c1657bc5afb8c1adfbec67198211be206ff61b5cc7c13565d5ce492de66e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216
216.58.211.2200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216
IP 216.58.211.2:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/landing?gcs=G111&gcd=G111&rnd=1842978783.1674258216&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F>m=2wg1i058Z37MT&auid=118071114.1674258216 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 23:58:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 875fc1415608498b67d609fd3b7335ae
463aca613dcdfc3446e7c7f4663d9577ef92f94e
fcb4c1657bc5afb8c1adfbec67198211be206ff61b5cc7c13565d5ce492de66e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 23:43:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
93.158.134.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1286%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A689346866292%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A974448044%3Arqn%3A1%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A36%2C9%2C1%2C1%2C966%2C0%2C%2C279%2C47%2C2126%2C2126%2C1%2C1314%3Aco%3A0%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 20 Jan 2023 23:43:36 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1115619651674258216; Path=/; SameSite=None; Secure
i=ogCV/mptK6qWndiGPyq63Z/SiScZuOdVxGoyXNZf2NA1D+n5QmxDsYuCGKeQJ6h/WDT98nCL31rIXZ8sBhgD/A1ONm4=; Expires=Mon, 17-Jan-2033 23:43:13 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=2271284631674258216; Expires=Sat, 20-Jan-2024 23:43:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2271284631674258216; Expires=Sat, 20-Jan-2024 23:43:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705794216.yc.1674258216#1705794216.yrts.1674258216#1705794216.yrtsi.1674258216; Expires=Sat, 20-Jan-2024 23:43:36 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 20-Jan-2023 23:43:36 GMT
last-modified: Fri, 20-Jan-2023 23:43:36 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&hittoken=1674258217_f57ed5d42e6380baac924e4087f6b87473355547d57587383cd1bca578a2c4af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A328103041%3Arqn%3A2%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
93.158.134.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&hittoken=1674258217_f57ed5d42e6380baac924e4087f6b87473355547d57587383cd1bca578a2c4af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A328103041%3Arqn%3A2%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&hittoken=1674258217_f57ed5d42e6380baac924e4087f6b87473355547d57587383cd1bca578a2c4af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A328103041%3Arqn%3A2%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71343676/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.eu%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&charset=utf-8&hittoken=1674258217_f57ed5d42e6380baac924e4087f6b87473355547d57587383cd1bca578a2c4af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A991604338641%3Ahid%3A241399279%3Az%3A0%3Ai%3A20230120234336%3Aet%3A1674258216%3Ac%3A1%3Arn%3A328103041%3Arqn%3A2%3Au%3A1674258216497279099%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Aeu%3A1%3Ans%3A1674258213383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674258216%3At%3AWorld%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high%C2%A0seas.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Fri, 20 Jan 2023 23:43:37 GMT
access-control-allow-origin: https://promo.worldofwarships.eu
set-cookie: yabs-sid=1669238161674258217; Path=/; SameSite=None; Secure
i=ItzqBuJWiCDGaUXpuCKaA3AP8WPNShdBTnChaS8cEY5zbxEgKwDkwb3iuBdJfA0rF52G/iWHeRBarziWe/XznqtOFzk=; Expires=Mon, 17-Jan-2033 23:43:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3372157271674258217; Expires=Sat, 20-Jan-2024 23:43:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3372157271674258217; Expires=Sat, 20-Jan-2024 23:43:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705794217.yc.1674258217#1705794217.yrts.1674258217#1705794217.yrtsi.1674258217; Expires=Sat, 20-Jan-2024 23:43:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 20-Jan-2023 23:43:37 GMT
last-modified: Fri, 20-Jan-2023 23:43:37 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 20 Jan 2023 23:43:37 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sat, 21 Jan 2023 00:43:37 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
93.158.134.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73769
date: Fri, 20 Jan 2023 23:43:37 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Sat, 21 Jan 2023 00:43:37 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1674258215706&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=6f15b8b2-99b3-48cc-b2c6-505e4b122b3e&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
151.101.193.140200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1674258215706&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=6f15b8b2-99b3-48cc-b2c6-505e4b122b3e&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP 151.101.193.140:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1674258215706&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=6f15b8b2-99b3-48cc-b2c6-505e4b122b3e&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Fri, 20 Jan 2023 23:43:37 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1006839708/?random=1674258215579&cv=11&fst=1674255600000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=1621738570&rmt_tld=1&ipr=y
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1006839708/?random=1674258215579&cv=11&fst=1674255600000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=1621738570&rmt_tld=1&ipr=y
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1674258215579&cv=11&fst=1674255600000&bg=ffffff&guid=ON&async=1>m=2wg1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&fmt=3&is_vtc=1&random=1621738570&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1006839708/?random=1674258215583&cv=11&fst=1674258215583&bg=ffffff&guid=ON&async=1>m=2wg1i0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=118071114.1674258216&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
142.250.74.163200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1006839708/?random=1674258215583&cv=11&fst=1674258215583&bg=ffffff&guid=ON&async=1>m=2wg1i0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=118071114.1674258216&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP 142.250.74.163:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1006839708/?random=1674258215583&cv=11&fst=1674258215583&bg=ffffff&guid=ON&async=1>m=2wg1i0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&tiba=World%C2%A0of%C2%A0Warships%E2%80%94massive%C2%A0naval%C2%A0clashes.%C2%A0Take%C2%A0command%C2%A0of%C2%A0legendary%C2%A0vessels%C2%A0from%C2%A0the%C2%A0early%C2%A020th%C2%A0century%C2%A0and%C2%A0fight%C2%A0for%C2%A0domination%C2%A0on%C2%A0the%C2%A0high&value=0&bttype=purchase&auid=118071114.1674258216&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 23:43:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
182.22.24.124200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP 182.22.24.124:0
ASN #23816 Yahoo Japan Corporation
File type ASCII text, with very long lines (32040), with no line terminators
Hash 365c9c596b34a4638836c22c8a5dc623
90f05e1c6c4016e5677709bb6f8f0e810b9ca58a
ecddfb33f676186b2a23f80d1d12b32bfe11d1144b1e44da0347d5ac2943b76f
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 20 Jan 2023 23:39:50 GMT
vary: Accept-Encoding
last-modified: Mon, 19 Dec 2022 01:14:54 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 227
content-length: 9788
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674258217.7498226&pvid=bnmyyxpcdfld5644d6&tsyjad=0&_impl=ytag
182.22.24.124403 Forbidden 14 kB URL HTTP/2 am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674258217.7498226&pvid=bnmyyxpcdfld5644d6&tsyjad=0&_impl=ytag
IP 182.22.24.124:0
ASN #23816 Yahoo Japan Corporation
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.eu%2Fglows-46780%2Feu-no%2F%3Ft%3D1%26pub_id%3D1287%26xid%3D63cb27261baa890001b60701%26xid_param1%3DE2PKPGBJ6R%26xid_param_2%3D%26sid%3DSID9vqU4e-DiolMNLj9n0wqykn_t0qZTNjzifyzqwgWXMK0muD2TDP44kmQ4Cd6Uf5F7oS-uuKaAVmX6gThZeQpzt4iLvET0rddCbBLJGuL0mQpUxfl2FeKc9grOAQbi-zWw9AEGe1sdEnbWlE%26enctid%3Dcpxf05u7svr9%26lpsn%3DWOWS%2Btemplate1%2Bnew%2Banimated%2Blp-v1%26foris%3D1%26teclient%3D1674258215057264358%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Dnfj3bltq%26utm_content%3D1287&rref=&pt=home&item=&cat=&price=&quantity=&r=1674258217.7498226&pvid=bnmyyxpcdfld5644d6&tsyjad=0&_impl=ytag HTTP/1.1
Host: am.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Fri, 20 Jan 2023 23:43:38 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b5b95d-798c-4d73-bd79-8e3c092be9b0.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b5b95d-798c-4d73-bd79-8e3c092be9b0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4b8e05930ca3ed03e20300b36819b1a
90645bb11f3788a9a03ad1756de541fea594fb15
0530c3fd68291836e997842e3e4b5bbef6086e89686f786dbda059143a5a8b5d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b5b95d-798c-4d73-bd79-8e3c092be9b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5081
x-amzn-requestid: 56788104-29ed-4ff9-b9c5-58b83e53d169
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: etktlF50oAMFwNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c21b23-1dafe7e12dbeee0e3318ccdc;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 03:01:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 886cYViC-eBqAPpavmVYF0Jxqhsk8VQc8O1KPpTGM1yFpjrs-IxFVw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 11:59:42 GMT
age: 42238
etag: "90645bb11f3788a9a03ad1756de541fea594fb15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wargaming-privacy.my.onetrust.com/request/v1/consentreceipts
104.18.27.85201 Created 0 B URL HTTP/2 wargaming-privacy.my.onetrust.com/request/v1/consentreceipts
IP 104.18.27.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /request/v1/consentreceipts HTTP/1.1
Host: wargaming-privacy.my.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7899
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Fri, 20 Jan 2023 23:43:40 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78cbac76da2fb524-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/scripts/script.js
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/scripts/script.js
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-46780/src/scripts/script.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 14:17:13 GMT
etag: W/"3cb68d72abbc3f8b97d1514fb13f5b88"
x-amz-request-id: tx000000000000000301dfd-0063c150cf-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:40+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/images/logo-hor.svg
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/images/logo-hor.svg
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-46780/src/images/logo-hor.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/svg+xml
last-modified: Thu, 17 Nov 2022 14:17:13 GMT
etag: W/"f37677b980c03bd3f2537e0ab36aa703"
x-amz-request-id: tx000000000000000301699-0063c150d0-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/global_static/age_ratings/v2/pegi_ext-violence.svg
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /global_static/age_ratings/v2/pegi_ext-violence.svg HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Feb 2022 22:01:20 GMT
etag: W/"9a3e2c35d77bd8b96138310eeb6b7f7b"
x-amz-request-id: tx000000000000000301ef3-0063c150d2-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T12:39:36+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=DM+Sans%3A400%2C500%2C600%2C700&subset=latin-ext&display=swap&ver=1.0.0
142.250.74.138200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=DM+Sans%3A400%2C500%2C600%2C700&subset=latin-ext&display=swap&ver=1.0.0
IP 142.250.74.138:0
GET /css?family=DM+Sans%3A400%2C500%2C600%2C700&subset=latin-ext&display=swap&ver=1.0.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://camilleflorence.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 20 Jan 2023 23:43:31 GMT
date: Fri, 20 Jan 2023 23:43:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_guard_logo.svg
104.16.149.64200 OK 0 B URL HTTP/2 cdn.cookielaw.org/logos/static/ot_guard_logo.svg
IP 104.16.149.64:0
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Thu, 19 Jan 2023 03:33:40 GMT
x-ms-request-id: c6cac671-c01e-016d-1114-2c349d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 43072
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5dab7db4f7-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
104.18.26.85200 OK 0 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP 104.18.26.85:0
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78cbac5afa49b523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
104.16.149.64200 OK 0 B URL HTTP/2 cdn.cookielaw.org/scripttemplates/202211.1.0/assets/otCommonStyles.css
IP 104.16.149.64:0
GET /scripttemplates/202211.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.eu/
Origin: https://promo.worldofwarships.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 23:43:36 GMT
content-type: text/css
content-md5: XcxlleAcPGO2n5kTZrHH2Q==
last-modified: Thu, 15 Dec 2022 13:30:09 GMT
x-ms-request-id: f62025ee-201e-0068-0993-1086b7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 43072
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 78cbac5d2af7b4f7-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/libs/oneTrustBanner.js
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/libs/oneTrustBanner.js
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-46780/src/libs/oneTrustBanner.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"7ec3b6015c5487eb301fa7c905ea3f70"
x-amz-request-id: tx00000000000000030199c-0063c150cd-1cc4459e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/libs/jquery.min.js
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/libs/jquery.min.js
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-46780/src/libs/jquery.min.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"8c92b37b8bd194a02ac7fc497b72b27a"
x-amz-request-id: tx00000000000000030194c-0063c150ce-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:41+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-46780/src/libs/aos.css
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-46780/src/libs/aos.css
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-46780/src/libs/aos.css HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 23:43:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 17 Nov 2022 14:17:12 GMT
etag: W/"a6f0a9b1aea9999df9ed749e34d9430c"
x-amz-request-id: tx000000000000000301930-0063c150cd-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-17T13:03:40+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2