promo.worldofwarships.asia/glows-58347/asia-fil/
185.244.209.62301 Moved Permanently 162 B URL HTTP/1.1 promo.worldofwarships.asia/glows-58347/asia-fil/
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.asia domain
GET /glows-58347/asia-fil/ HTTP/1.1
Host: promo.worldofwarships.asia
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 07:54:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://promo.worldofwarships.asia/glows-58347/asia-fil/
X-ID: osix-up-gc4
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15909
Expires: Sat, 28 Jan 2023 12:19:42 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12827
Expires: Sat, 28 Jan 2023 11:28:20 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 07:35:29 GMT
content-type: application/json
age: 1144
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10154
Expires: Sat, 28 Jan 2023 10:43:47 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6aYQ61Y9Vvw5aq4lI9jh80ctdnhEXSat5t+9hXdjwJAo7xj5zpbykSLGUhzmB8nQ/T+utQaLzp0=
x-amz-request-id: GTZN8016G6EZ14G2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 07:20:53 GMT
age: 2020
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb4e9accc5cc7782c3cffb2e59f926c3
bac8295028033839649bb3bd701ec06ae62abaae
8c8d5ac91a7465bdcdabf8970775801520d8dd1b6333438b9a987596429a8031
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C8D5AC91A7465BDCDABF8970775801520D8DD1B6333438B9A987596429A8031"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16145
Expires: Sat, 28 Jan 2023 12:23:38 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb4e9accc5cc7782c3cffb2e59f926c3
bac8295028033839649bb3bd701ec06ae62abaae
8c8d5ac91a7465bdcdabf8970775801520d8dd1b6333438b9a987596429a8031
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C8D5AC91A7465BDCDABF8970775801520D8DD1B6333438B9A987596429A8031"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16145
Expires: Sat, 28 Jan 2023 12:23:38 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb4e9accc5cc7782c3cffb2e59f926c3
bac8295028033839649bb3bd701ec06ae62abaae
8c8d5ac91a7465bdcdabf8970775801520d8dd1b6333438b9a987596429a8031
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C8D5AC91A7465BDCDABF8970775801520D8DD1B6333438B9A987596429A8031"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16145
Expires: Sat, 28 Jan 2023 12:23:38 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb4e9accc5cc7782c3cffb2e59f926c3
bac8295028033839649bb3bd701ec06ae62abaae
8c8d5ac91a7465bdcdabf8970775801520d8dd1b6333438b9a987596429a8031
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C8D5AC91A7465BDCDABF8970775801520D8DD1B6333438B9A987596429A8031"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16145
Expires: Sat, 28 Jan 2023 12:23:38 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb4e9accc5cc7782c3cffb2e59f926c3
bac8295028033839649bb3bd701ec06ae62abaae
8c8d5ac91a7465bdcdabf8970775801520d8dd1b6333438b9a987596429a8031
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C8D5AC91A7465BDCDABF8970775801520D8DD1B6333438B9A987596429A8031"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16145
Expires: Sat, 28 Jan 2023 12:23:38 GMT
Date: Sat, 28 Jan 2023 07:54:33 GMT
Connection: keep-alive
promo-cdn.worldofwarships.com/glows-58347/src/images/credits.png?v=20194b50
185.244.209.62200 OK 101 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/credits.png?v=20194b50
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 101 kB (101094 bytes)
Hash c39225e2517e3a77044074780c1d48cb
9b8f3dd18481b1e55e7543e14fa003a321fdb519
ec51cb694edaf7de2754d43f96dc24b7de7b1d4a1cbca8cacdf95a2dbbf1d1b9
GET /glows-58347/src/images/credits.png?v=20194b50 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 101094
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "c39225e2517e3a77044074780c1d48cb"
x-amz-request-id: tx00000000000000030dbfc-0063c1533b-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/camo-winter-strands.png?v=9377cdf3
185.244.209.62200 OK 94 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/camo-winter-strands.png?v=9377cdf3
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 27eb749de8d2e13ea9c69dada3aa5b75
bac9bed29da27cbc8abee673178af3b98cd4b105
df2d7d24512af99adb2e7f5ca9bce469b34a4debecab2a65c956981588f36d2b
GET /glows-58347/src/images/camo-winter-strands.png?v=9377cdf3 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 93874
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "27eb749de8d2e13ea9c69dada3aa5b75"
x-amz-request-id: tx00000000000000030dbfd-0063c1533b-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/camo-frosty-fir-tree.png?v=a91dceb8
185.244.209.62200 OK 92 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/camo-frosty-fir-tree.png?v=a91dceb8
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 2d705ff6e198c1e169b5659f4dd0c2cc
eeee95e651ccdc581ea5fad46847f9843313f48c
1ab5fdb48ebe55165f22a7a3e5da3af1b3e43abde579b30ef5902ef069d62544
GET /glows-58347/src/images/camo-frosty-fir-tree.png?v=a91dceb8 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 92230
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "2d705ff6e198c1e169b5659f4dd0c2cc"
x-amz-request-id: tx00000000000000030d8c0-0063c1533b-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/ship.png?v=5ae0f1a8
185.244.209.62200 OK 107 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/ship.png?v=5ae0f1a8
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 107 kB (106781 bytes)
Hash b07446d72b042e93c026fa12d12ea195
d75fce69216ce8f4fc5b951cd8d0ee12f90fb7b2
74b746d11367ef63e6effa13c821916c1c431afa17451c1af065e6833e8d646c
GET /glows-58347/src/images/ship.png?v=5ae0f1a8 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 106781
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "b07446d72b042e93c026fa12d12ea195"
x-amz-request-id: tx00000000000000030d39f-0063c1533b-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/logo-loader.png?v=28be1634
185.244.209.62200 OK 105 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/logo-loader.png?v=28be1634
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 105 kB (104832 bytes)
Hash f56aa460f22e1825faf33ee1334593ae
1729ee5dad0837d041a9bcdf04c8b7b00f621483
d7bc835e31f50fdce8607d60ff11a50eadaaedd4ac2d29c6d689cff82431f296
GET /glows-58347/src/images/logo-loader.png?v=28be1634 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 104832
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "f56aa460f22e1825faf33ee1334593ae"
x-amz-request-id: tx00000000000000030dc0c-0063c1533b-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/light.png?v=d4a9d77e
185.244.209.62200 OK 156 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/light.png?v=d4a9d77e
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 1000 x 834, 8-bit colormap, non-interlaced\012- data
Size 156 kB (155450 bytes)
Hash 2c19945cfae19b4d426f11a817860b6e
9294a449853d73d5846326b348f6e98c781b15be
1ff144a36d854088e2a54f8f80ec7e94757e70b35d6a52920fb25f8302b313ba
GET /glows-58347/src/images/light.png?v=d4a9d77e HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 155450
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "2c19945cfae19b4d426f11a817860b6e"
x-amz-request-id: tx00000000000000030dc76-0063c1533b-1cc4459e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/wowsl_logo.png?v=f3ccf21f
185.244.209.62200 OK 10 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/wowsl_logo.png?v=f3ccf21f
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 749 x 299, 8-bit colormap, non-interlaced\012- data
Hash 4d9371a87a4f9a0d6a8792e0397aa303
1308b49f8614f0ab05e81698daf5bfc4a2498bf0
68ddcc9fad945493001c241d8de6fb9acdd436bc82bff503302dbffa64f4f5ed
GET /glows-58347/src/images/wowsl_logo.png?v=f3ccf21f HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 10514
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "4d9371a87a4f9a0d6a8792e0397aa303"
x-amz-request-id: tx00000000000000030d8d2-0063c1533b-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/doubloons.png?v=78089d83
185.244.209.62200 OK 99 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/doubloons.png?v=78089d83
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Hash 79165325cd6804531abc26041f31d670
73387fc56586cf1993fe33864cd6fa7e497f8588
714905dc55a0d04f909a552278cfeb44b73e1935019639a5e883b29799088574
GET /glows-58347/src/images/doubloons.png?v=78089d83 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 99362
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "79165325cd6804531abc26041f31d670"
x-amz-request-id: tx00000000000000030d8bf-0063c1533b-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/libs/oneTrustBanner.js
185.244.209.62200 OK 9.5 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/libs/oneTrustBanner.js
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type ASCII text, with very long lines (9492), with no line terminators
Hash 756187d7b894fafd3191e6683d92af26
fbb92d52bcff997b6e3a19c24f762a04d02d4c4f
7c11e7ffaf4cd13e83ddc67f605eea6d1dd24426401729523e7656ce2c9bcc95
GET /global_static/libs/oneTrustBanner.js HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: binary/octet-stream
content-length: 9492
last-modified: Mon, 14 Feb 2022 22:01:45 GMT
etag: "756187d7b894fafd3191e6683d92af26"
x-amz-request-id: tx000000000000000304153-0063c15161-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T12:45:22+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/prem.png?v=d06e78f1
185.244.209.62200 OK 101 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/prem.png?v=d06e78f1
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 500 x 500, 8-bit colormap, non-interlaced\012- data
Size 101 kB (100588 bytes)
Hash a33679ee8070b3e5062dbe0a95dc2107
ff1f23c86c7a39dd3a96f4caf0299efc73da95b1
7613ccbea847a32b2515c1437dfba2288a5698b23f4eda44e7c813996fb8f003
GET /glows-58347/src/images/prem.png?v=d06e78f1 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 100588
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "a33679ee8070b3e5062dbe0a95dc2107"
x-amz-request-id: tx00000000000000030d8db-0063c1533b-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/spinner.png?v=c2283095
185.244.209.62200 OK 459 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/spinner.png?v=c2283095
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash a3c98cc37c8955fbbf1a05d9c92bf044
578a284774a61ae05234e045179a1c4f42bac9a0
8f640d64d55e2e0aae14308e3a8ceae33fe1debb99b56bd948914c1a3f7746e6
GET /glows-58347/src/images/spinner.png?v=c2283095 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-58347/src/styles/styles.css?v=2008cc64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 459
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "a3c98cc37c8955fbbf1a05d9c92bf044"
x-amz-request-id: tx00000000000000030dd24-0063c1533d-1cc4459e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/back.jpg?v=8ba2ce9c
185.244.209.62200 OK 270 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/back.jpg?v=8ba2ce9c
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x2187, components 3\012- data
Size 270 kB (270093 bytes)
Hash 32d29e87f52c5274705130e4173d4886
5a2ee3d3ebd8ed2cdb6864b73b0ae65792e717ac
8cc74389924b8489f0f96cff96681fb50062ef2498e8d6b16cb1fa1ab3e825c4
GET /glows-58347/src/images/back.jpg?v=8ba2ce9c HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-58347/src/styles/styles.css?v=2008cc64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/jpeg
content-length: 270093
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "32d29e87f52c5274705130e4173d4886"
x-amz-request-id: tx00000000000000030e148-0063c1533d-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:05:39+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/back-left.png?v=69f1872b
185.244.209.62200 OK 302 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/back-left.png?v=69f1872b
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 1920 x 2187, 8-bit colormap, non-interlaced\012- data
Size 302 kB (301945 bytes)
Hash ae9612a983ebe06368504b13152a9f60
4ccbcaa11b4227b84110809532c74c98ae030980
f139e9a0e591c92b0a83f29c1a0646b88e83a9e75add8535e44a551434705fef
GET /glows-58347/src/images/back-left.png?v=69f1872b HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-58347/src/styles/styles.css?v=2008cc64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 301945
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "ae9612a983ebe06368504b13152a9f60"
x-amz-request-id: tx00000000000000030dcc0-0063c1533d-1da6e216-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:05:39+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/back-right.png?v=29286272
185.244.209.62200 OK 338 kB URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/back-right.png?v=29286272
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 1920 x 2187, 8-bit colormap, non-interlaced\012- data
Size 338 kB (338022 bytes)
Hash 73244dc4810d7adc2e4e075c5d165818
c7efcab9fc1d16b77821d7134cfa6f43da81ec44
55e23879f4c560fd54d17326c183ef18d0bce2bc3771f228da26372665a67805
GET /glows-58347/src/images/back-right.png?v=29286272 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/glows-58347/src/styles/styles.css?v=2008cc64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 338022
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: "73244dc4810d7adc2e4e075c5d165818"
x-amz-request-id: tx00000000000000030d99b-0063c1533d-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:05:39+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-700.woff2
185.244.209.62200 OK 51 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-700.woff2
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type Web Open Font Format (Version 2), TrueType, length 50804, version 1.0\012- data
Hash 22898c3b19e2f0bd46fcfef9d88a47e6
4b8c0ac521f165a7e4b62af431cf8f1f1e78ea19
6db76515ba91d77318f17a2a287b14026e277145497ba9915b1a30acf4338858
GET /global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-700.woff2 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: binary/octet-stream
content-length: 50804
last-modified: Mon, 14 Feb 2022 22:01:30 GMT
etag: "22898c3b19e2f0bd46fcfef9d88a47e6"
x-amz-request-id: tx00000000000000030d987-0063c1533d-1da6e207-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
104.16.148.64200 OK 8.1 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP 104.16.148.64:0
File type ASCII text, with very long lines (24742)
Hash 59d0843ea535a679e836bfdc4fd847c9
8c8938ff086a2b05eb9e431cb8ff7150f50c7b48
6f5b514345f75508ac2e5827b6e50c804a3d5ec2aa44975ec6a2bdfcb438fd17
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: application/javascript
content-length: 8053
content-encoding: gzip
content-md5: WdCEPqU1pnnoNr/cT9hHyQ==
last-modified: Wed, 25 Jan 2023 15:15:48 GMT
etag: 0x8DAFEE709BC346E
x-ms-request-id: 85e8490b-e01e-017a-6c1a-31f4fe000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 47769
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79082929192fb4f4-OSL
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-regular.woff2
185.244.209.62200 OK 51 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-regular.woff2
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type Web Open Font Format (Version 2), TrueType, length 51016, version 1.0\012- data
Hash b01fe2aa282b2e998a5871916b81c995
abb7fdb290c0c9f6bb0fc5d1b73a0a4c054b9c7f
a6211f1400be78ad64995ab928393338f085bf30d2ca27e25dc576e6accb8851
GET /global_static/fonts/roboto-condensed-v18-latin-ext_latin_cyrillic-ext_cyrillic-regular.woff2 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo-cdn.worldofwarships.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: binary/octet-stream
content-length: 51016
last-modified: Mon, 14 Feb 2022 22:01:34 GMT
etag: "b01fe2aa282b2e998a5871916b81c995"
x-amz-request-id: tx00000000000000030e14a-0063c1533d-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:09:19+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/OtAutoBlock.js
104.16.148.64200 OK 2.1 kB URL HTTP/2 cdn.cookielaw.org/consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/OtAutoBlock.js
IP 104.16.148.64:0
File type ASCII text, with very long lines (2848)
Hash 5324bc18db9b0e6b0cffaa856366edd0
8f17cba187d0fa9dbfb0789d00663307e488e594
096024c9bdce7f82a76b2dc86cf70a74a06d564fe03fcec6ceeb0552e58f0811
GET /consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/OtAutoBlock.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: application/x-javascript
content-length: 2106
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: UyS8GNubDmsM/6qFY2bt0A==
last-modified: Mon, 11 Jul 2022 09:26:26 GMT
etag: 0x8DA631F6DCF4C44
x-ms-request-id: cba877c8-801e-016a-6413-95c218000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 71800
expires: Sun, 29 Jan 2023 07:54:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79082929192cb4f4-OSL
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 07:49:03 GMT
age: 330
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/aab2c316-f0e0-44cb-9618-565bbaa16ee9.json
104.16.148.64200 OK 1.8 kB URL HTTP/2 cdn.cookielaw.org/consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/aab2c316-f0e0-44cb-9618-565bbaa16ee9.json
IP 104.16.148.64:0
File type JSON data\012- , ASCII text, with very long lines (5708), with no line terminators
Hash e3a6e889a28857444f6369f09bfde92b
7fb309c8e8d98bfb6fcba2e6b71bce760319597b
75ea7c222551c0066791932a5654a344ca79fd728416bd90f82831f4349c141c
GET /consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/aab2c316-f0e0-44cb-9618-565bbaa16ee9.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: application/x-javascript
content-length: 1846
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: 46boiaKIV0RPY2nwm/3pKw==
last-modified: Mon, 11 Jul 2022 09:26:26 GMT
etag: 0x8DA631F6DD16ED8
x-ms-request-id: 8479e7fe-401e-011a-5d19-95b1dc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 71799
expires: Sun, 29 Jan 2023 07:54:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79082929e9bfb4f4-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
142.250.74.40200 OK 120 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58Z37MT
IP 142.250.74.40:0
File type ASCII text, with very long lines (40521)
Size 120 kB (119624 bytes)
Hash 7ad713d999bfbacff068774c31196a80
e74bb31c2f65ec606fd4f92a893048557eafa729
a5e396449d1be434c445cefe673d0da472d72c69594b66e01a8edf59c16a738c
GET /gtm.js?id=GTM-58Z37MT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 07:54:33 GMT
expires: Sat, 28 Jan 2023 07:54:33 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 119624
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
185.244.209.62200 OK 1.2 kB URL HTTP/2 promo-cdn.worldofwarships.com/global_static/favicon/v2/favicon-64x64.png
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash de30b29e8bbc72b7828734d5d781b9eb
9d5fb51148291180b45d9481b756eb7fc2d4a352
e47efd1c616db1a5564776f4be806183ee085c80d2d3722d3f8d5a06115e46ee
GET /global_static/favicon/v2/favicon-64x64.png HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/png
content-length: 1198
last-modified: Mon, 05 Sep 2022 07:56:21 GMT
etag: "de30b29e8bbc72b7828734d5d781b9eb"
x-amz-request-id: tx00000000000000030430d-0063c15167-1dbc2cc6-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T12:47:28+00:00
x-id: osix-up-gc4
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 80bd38dbbba2c622765d84927f15e043
8e16e3799ed64a86d1597ae0748c050755df99bd
2b217451165991f85052d4cdfe8e1061d6eed790da3774dd0bb8794fb83fa501
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5720
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Last-Modified: Sat, 28 Jan 2023 06:19:14 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13692
Expires: Sat, 28 Jan 2023 11:42:46 GMT
Date: Sat, 28 Jan 2023 07:54:34 GMT
Connection: keep-alive
cdn.cookielaw.org/scripttemplates/6.19.0/otBannerSdk.js
104.16.148.64200 OK 86 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.19.0/otBannerSdk.js
IP 104.16.148.64:0
File type ASCII text, with very long lines (65455)
Hash f879ece1a075bf3eee65df31b0e11bf9
8f16b2a067723d26bcca8815a18232065e034f00
33701f227dc019963daa750be752b382b764b4a4c137f0d998593ca5134a1235
GET /scripttemplates/6.19.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:34 GMT
content-type: application/javascript
content-length: 85963
content-encoding: gzip
content-md5: +Hns4aB1vz7uZd8xsOEb+Q==
last-modified: Wed, 07 Jul 2021 06:39:42 GMT
etag: 0x8D941120097E0CB
x-ms-request-id: 132ec10d-c01e-0040-166c-c4f108000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 19589
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7908292b6b65b4f4-OSL
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
151.101.65.140200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.65.140:0
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 28 Jan 2023 07:54:34 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
151.101.193.229200 OK 86 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP 151.101.193.229:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash ddf45926107f7a74103f5d00d3bf564c
03c2b22623ccf1d593513956829f891ff07f3169
c709076ef37b9b1720b78c124e329645762b476d566ed204a23cadd762e9c580
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.257.0
x-jsd-version-type: version
etag: W/"34e3a-eIUrj6hD3pmnKAQZCp7YaNtM0Rc"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 28 Jan 2023 07:54:34 GMT
age: 22689
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1626-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85751
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
10697551.fls.doubleclick.net/activityi;src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F?
142.250.74.134200 OK 267 B URL HTTP/2 10697551.fls.doubleclick.net/activityi;src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F?
IP 142.250.74.134:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (563), with no line terminators
Hash 06c23940383a7c40b41b01ae4c9d5c88
d45ce26d0f6692155f11f945749a225b65a4b30a
505229855aa7de5596fd4d2332b6327cde48182fae4a46f5206dbd9d559bf9ad
GET /activityi;src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F? HTTP/1.1
Host: 10697551.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:34 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 267
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 28-Jan-2023 08:09:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
104.16.148.64200 OK 17 kB URL HTTP/2 cdn.cookielaw.org/consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json
IP 104.16.148.64:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash 391ab67fcbed6ab12cd596e200c9b2cc
15eea1683890f4821fab82ef27db50e82421821f
be8eb21143c08ca4c94f759f7c4a5d8c6f1aeb8ba03affee4b020e1228772cfd
GET /consent/aab2c316-f0e0-44cb-9618-565bbaa16ee9/ad5c42f4-14cd-4309-be4a-e049aeb7b78d/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.asia/
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:34 GMT
content-type: application/x-javascript
content-length: 16824
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: ORq2f8vtarEs1ZbiAMmyzA==
last-modified: Mon, 11 Jul 2022 09:26:33 GMT
etag: 0x8DA631F71C59BAB
x-ms-request-id: 1da4aef3-001e-0170-501c-95ed77000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
expires: Sun, 29 Jan 2023 07:54:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7908292bfbf4b4f4-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 64bff53da5fa166ce2e4330a1a0bae25
1a88e9f727cf5c16030f3dd993f2726e7b538390
4e24f4ac111282930b1af1a97f3c81b518c0eff34ab1f5ca37345f35431154cb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3598
Cache-Control: max-age=137881
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Etag: "63d43e46-1d7"
Expires: Sun, 29 Jan 2023 22:12:35 GMT
Last-Modified: Fri, 27 Jan 2023 21:12:38 GMT
Server: ECS (amb/6B9C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash af1c521d29c662e208d80836c19fa58a
64e18dcf8f3ea43f6aeb1c66299bd37121cdfe14
57fe9c6dbb637c6090c7110234fb9d3aadb75850d6d5ed5c668376ebd121c1f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trj.valuecommerce.com/vclp.js
18.155.145.37200 OK 3.9 kB URL HTTP/2 trj.valuecommerce.com/vclp.js
IP 18.155.145.37:0
File type ASCII text, with very long lines (554)
Hash 90241fd0ec265afac7c4b391e1f82aab
678b610ebe22abb2de7cd4fcd81c2da3554778cd
7fb587c59b0120a6d8ff5d5e6b710c6afcb3b668495988f1e9c66626ea26c9cd
GET /vclp.js HTTP/1.1
Host: trj.valuecommerce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 3874
x-guploader-uploadid: ADPycdvC0vhqEO9_YI2-dTxfFWtizVy2nz-ccrNujw8tdbxIxBdofJFDqYy7Hh_o13JFfcrE7tPEodiyoCvxUV5ScUVUDg
x-goog-generation: 1642403212642544
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3874
x-goog-hash: crc32c=OgAn0A==, md5=kCQf0OwmWvrHxLOR4fgqqw==
x-goog-storage-class: REGIONAL
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Type,Content-Range,x-goog-resumable
server: UploadServer
last-modified: Mon, 17 Jan 2022 07:06:52 GMT
date: Sat, 28 Jan 2023 07:53:22 GMT
cache-control: max-age=300
expires: Sat, 28 Jan 2023 07:56:51 GMT
etag: "90241fd0ec265afac7c4b391e1f82aab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ebfd02322356b60fe506d9cd1ca49956.cloudfront.net (CloudFront)
x-amz-cf-pop: HAM50-P1
x-amz-cf-id: IioyFkRiBn7eFQJyDWjS4feMJkwRY9T0Du-2sonwGcPrW5slivxVvg==
age: 163
X-Firefox-Spdy: h2
push.services.mozilla.com/
44.235.159.98101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.235.159.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: O/LG2lSJTKtw97i5G5q6TA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rCai2Bg/TzU/psxtr2XrGIgQyjw=
cdn.cookielaw.org/scripttemplates/6.19.0/assets/v2/otPcCenter.json
104.16.148.64200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.19.0/assets/v2/otPcCenter.json
IP 104.16.148.64:0
File type JSON data\012- , ASCII text, with very long lines (37251)
Hash 0e62c0f8db66dd472e2c5a527ebc92f8
0dbeae7213aa2ec3d6afe85f454acd424449129e
c0d1bb0cb14eabeb0deb0ae363ddb957f5a7bd974e7811879461b5dfa8a0eb53
GET /scripttemplates/6.19.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.asia/
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:34 GMT
content-type: application/json
content-length: 11530
content-encoding: gzip
content-md5: DmLA+Ntm3UcuLFpSfryS+A==
last-modified: Wed, 07 Jul 2021 06:39:37 GMT
etag: 0x8D94111FD7F62F3
x-ms-request-id: bd6c1935-801e-002a-0678-c9ada3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 71799
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7908292d8d7bb4f4-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.19.0/assets/otCenterRounded.json
104.16.148.64200 OK 2.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.19.0/assets/otCenterRounded.json
IP 104.16.148.64:0
File type JSON data\012- , ASCII text, with very long lines (7547)
Hash 8cda3a8c95a2a2f6a1a3558459cadc53
95c29661bab271196810b334fb607c4e45df75a6
505d8a10c5116cd627ec4ddf7fecc423ac36c2b7ed27ad86c9c7749fea9a42a5
GET /scripttemplates/6.19.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.asia/
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:34 GMT
content-type: application/json
content-length: 2571
content-encoding: gzip
content-md5: jNo6jJWiovaho1WEWcrcUw==
last-modified: Wed, 07 Jul 2021 06:39:36 GMT
etag: 0x8D94111FD23EBEB
x-ms-request-id: 5e4f5737-501e-00a0-6a31-561780000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 71799
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7908292d7d78b4f4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 8958007dbb0db467cfc8f9ae79f7d2dc
01873aa58550177560b78f3463506781f15eb007
fd59498f2a1d2ed4735f258a482f7a2e0fb9dc226a242bd8f1816ceae0685b54
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:54:34 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 01 Feb 2023 03:50:12 GMT
ETag: "01873aa58550177560b78f3463506781f15eb007"
Last-Modified: Sat, 28 Jan 2023 03:50:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3350
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7908292de81fb4eb-OSL
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 8958007dbb0db467cfc8f9ae79f7d2dc
01873aa58550177560b78f3463506781f15eb007
fd59498f2a1d2ed4735f258a482f7a2e0fb9dc226a242bd8f1816ceae0685b54
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:54:34 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 01 Feb 2023 03:50:12 GMT
ETag: "01873aa58550177560b78f3463506781f15eb007"
Last-Modified: Sat, 28 Jan 2023 03:50:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3350
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7908292de82bb4eb-OSL
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 8958007dbb0db467cfc8f9ae79f7d2dc
01873aa58550177560b78f3463506781f15eb007
fd59498f2a1d2ed4735f258a482f7a2e0fb9dc226a242bd8f1816ceae0685b54
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:54:34 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 01 Feb 2023 03:50:12 GMT
ETag: "01873aa58550177560b78f3463506781f15eb007"
Last-Modified: Sat, 28 Jan 2023 03:50:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3350
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7908292dee4cb518-OSL
adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F
142.250.74.2200 OK 267 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F
IP 142.250.74.2:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (562), with no line terminators
Hash ce76bd9517853747fc6522b12c3bb750
5c0b8528912742e3afce329987653ba0c86f1bf7
b49846b4e6e0f88ac231f76066fbdb77a7f74a1bb6ce0c67e18ae87d7422a84f
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10697551.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:34 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 267
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ab04da9bc46246cc0001464e7f6b5e19
01ce4f7004aec7a24d4545a1e742ab6a1e639b48
22e519a39cb2e7e5f6da23d35f4498aa7a2d00e06613fd3bbf8de8a62ed2d354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.251.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 8544060c6ad031ac4d26817dfd541611
0d50459fbff09489366251892c168716c7cbf9db
f55aa1648c83256badd836b5005e521624f8e0192e55b500b51ed1294a32c01f
GET /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Referer: https://promo.worldofwarships.asia/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Sat, 28 Jan 2023 07:54:34 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.asia
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.251.119200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 47905fd0f0e3ec99a9c8d05b446e2b26
c7e82afa06e468813a7e8b599e9cce026fdc15fe
71205bec72f5a1da54916276176ca9af9cb62a6fd0c526b586b0a0ef5c382df8
GET /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Referer: https://promo.worldofwarships.asia/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Sat, 28 Jan 2023 07:54:34 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.asia
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.251.119200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash bd2c60a40f2152cc0738f48af0b2fd5c
f09e4282840520d100c90a5d0316b6d244a7373b
7afa326c55e258e07f35ca99a666525972e193b0ec08fb0d1f1a826a4689e0d8
GET /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Referer: https://promo.worldofwarships.asia/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Sat, 28 Jan 2023 07:54:34 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promo.worldofwarships.asia
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F
142.250.74.162200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=10697551;type=pagev0;cat=allvi0;ord=5007968082229;gtm=2wg1p0;gcs=G111;auiddc=507164446.1674892476;u1=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F;~oref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:34 GMT
expires: Sat, 28 Jan 2023 07:54:34 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 622311873d3819b9911301b09bc2d43c
9f08d648e40479aa12da033da15b80a15017c739
6138674cec17da8b7bb02bf0686bf3e7aefa2bce6a5f844ebd80e10b665818b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.asia%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&hittoken=1674892474_62403b25ffbdfed9d3795586ec0499037c641931cce9b1db9b3b18f3327538af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A733010846%3Arqn%3A2%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
87.250.251.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.asia%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&hittoken=1674892474_62403b25ffbdfed9d3795586ec0499037c641931cce9b1db9b3b18f3327538af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A733010846%3Arqn%3A2%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/71343676?page-url=goal%3A%2F%2Fpromo.worldofwarships.asia%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&hittoken=1674892474_62403b25ffbdfed9d3795586ec0499037c641931cce9b1db9b3b18f3327538af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A733010846%3Arqn%3A2%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71343676/1?page-url=goal%3A%2F%2Fpromo.worldofwarships.asia%2FWOWS_All-visitors_LP_set&page-ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&hittoken=1674892474_62403b25ffbdfed9d3795586ec0499037c641931cce9b1db9b3b18f3327538af&browser-info=ar%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A733010846%3Arqn%3A2%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 07:54:34 GMT
access-control-allow-origin: https://promo.worldofwarships.asia
set-cookie: yabs-sid=670589891674892474; Path=/; SameSite=None; Secure
i=SwUVJp8rwsEtWX0dGWYJHjIpZkdz3rmO60dc8e6P4BBt3fnzTjo35mV9wX9E6OJ1RwdAUdKZVZ9XFWCXf2PG5+jhgZk=; Expires=Tue, 25-Jan-2033 07:54:34 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5739253641674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5739253641674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706428474.yc.1674892474#1706428474.yrts.1674892474#1706428474.yrtsi.1674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476
142.250.74.132302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476
IP 142.250.74.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/14976586?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/14976586/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A80514697448%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A672092635%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29mc%28g-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 07:54:34 GMT
access-control-allow-origin: https://promo.worldofwarships.asia
set-cookie: yabs-sid=1862503381674892474; Path=/; SameSite=None; Secure
i=qbdabH2Vwp+Kivm2gaVlwb+pxrXJXk+d++NdO7Y9e4IhbUBfOlXE6t6DZjIEQM4fbxFHp8om5+DvtpvQGB4DlssGkoM=; Expires=Tue, 25-Jan-2033 07:54:30 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6803734231674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6803734231674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706428474.yc.1674892474#1706428474.yrts.1674892474#1706428474.yrtsi.1674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476
142.250.74.66200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476
IP 142.250.74.66:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/landing?gcs=G111&gcd=G111&rnd=307566993.1674892476&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F>m=2wg1p058Z37MT&auid=507164446.1674892476 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.asia/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 28-Jan-2023 08:09:34 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash 78f5b75f296821e64522f149b117703d
50c90cd6be31eb15cd029ba7c5becb1398990acf
ae253263ba926df2dcac73a36306421502e01e0637acdf55b38745419a6f7234
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:54:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 01 Feb 2023 05:24:19 GMT
ETag: "50c90cd6be31eb15cd029ba7c5becb1398990acf"
Last-Modified: Sat, 28 Jan 2023 05:24:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2371
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79082930bb58b505-OSL
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 28 Jan 2023 07:54:35 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sat, 28 Jan 2023 08:54:35 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1674892475909&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=cb3b5533-9c79-44cd-9f87-b9c934620095&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
151.101.193.140200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1674892475909&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=cb3b5533-9c79-44cd-9f87-b9c934620095&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP 151.101.193.140:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1674892475909&id=t2_3dbm3hwf&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=cb3b5533-9c79-44cd-9f87-b9c934620095&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Sat, 28 Jan 2023 07:54:35 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9417
Expires: Sat, 28 Jan 2023 10:31:32 GMT
Date: Sat, 28 Jan 2023 07:54:35 GMT
Connection: keep-alive
pixel.coccoc.com/js
123.30.175.95200 OK 9.0 kB IP 123.30.175.95:0
File type ASCII text, with very long lines (9002), with no line terminators
Hash c1714395e46acd14a20375fb138b7166
6d1d31a9ad4ebdcae80643e6e6e5724ac5e7a182
031297b233e53fbd5fc7b93bf81447ee805a1d9d89f7f50ecd4ea9e439999175
GET /js HTTP/1.1
Host: pixel.coccoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:54:35 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9417
Expires: Sat, 28 Jan 2023 10:31:32 GMT
Date: Sat, 28 Jan 2023 07:54:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:46:13 GMT
age: 32902
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 35869
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 23:03:41 GMT
age: 31854
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: M4VR-I89SGD0-FLzHhZ88PJJJmdWTEi0UrBnAmCBCQAdjRsssqnSzw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:49:06 GMT
age: 36329
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8cRGlncOQ6qYv7qbI1HxTz-qUYJkTVa5V2qJM1C8XM5dmyXFA8qRvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 36337
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f185f0b4f90d06dbb397b44ed9c73dbe
a48e2c369a048447e0e25e4791eb603859391c1c
b466060fc132cc8d23fcb83001206606e2d5502118c65e9f55795b5adbff2fa6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9364
x-amzn-requestid: e556be7b-567a-4c9a-931e-ff6fee42d3a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T8GbFoAMFySg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-6f4476e9388c77a057153277;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LPkLrx7l9Qf_GKdtJq_77RUkvgnKZlCaDN34xsB5bEO8c9VQEJPAew==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:38 GMT
etag: "a48e2c369a048447e0e25e4791eb603859391c1c"
content-type: image/jpeg
age: 35877
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
183.79.249.252200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP 183.79.249.252:0
File type ASCII text, with very long lines (32040), with no line terminators
Hash 365c9c596b34a4638836c22c8a5dc623
90f05e1c6c4016e5677709bb6f8f0e810b9ca58a
ecddfb33f676186b2a23f80d1d12b32bfe11d1144b1e44da0347d5ac2943b76f
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 28 Jan 2023 07:53:18 GMT
vary: Accept-Encoding
last-modified: Mon, 19 Dec 2022 01:14:54 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch
permissions-policy: ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform-version=*, ch-ua-arch=*
age: 77
content-length: 9788
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a699a4395f23db5a59481285d5da3797
4a76f220fcbcdaa6de719208ff400d351f5696cf
3d4b58e8b6bae029599a6be6eda011660deac9f177aa43a186de982b7b006c27
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:35 GMT
Etag: "63d34581-1d7"
Server: ECS (amb/6BA7)
Content-Length: 471
www.google.no/pagead/1p-user-list/1006839708/?random=1674892475793&cv=11&fst=1674889200000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&tiba=World%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&fmt=3&is_vtc=1&random=1934092439&rmt_tld=1&ipr=y
142.250.74.67200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1006839708/?random=1674892475793&cv=11&fst=1674889200000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&tiba=World%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&fmt=3&is_vtc=1&random=1934092439&rmt_tld=1&ipr=y
IP 142.250.74.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1674892475793&cv=11&fst=1674889200000&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&tiba=World%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&fmt=3&is_vtc=1&random=1934092439&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1006839708/?random=1674892475796&cv=11&fst=1674892475796&bg=ffffff&guid=ON&async=1>m=2wg1p0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&tiba=World%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&value=0&bttype=purchase&auid=507164446.1674892476&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
142.250.74.67200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1006839708/?random=1674892475796&cv=11&fst=1674892475796&bg=ffffff&guid=ON&async=1>m=2wg1p0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&tiba=World%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&value=0&bttype=purchase&auid=507164446.1674892476&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP 142.250.74.67:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1006839708/?random=1674892475796&cv=11&fst=1674892475796&bg=ffffff&guid=ON&async=1>m=2wg1p0&gcs=G111&gcd=G111&u_w=1280&u_h=1024&label=H356CMb80IcDEJzPjOAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&tiba=World%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&value=0&bttype=purchase&auid=507164446.1674892476&data=ads_data_redaction%3Dtrue&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.worldofwarships.asia/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 07:54:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&rref=&pt=home&item=&cat=&price=&quantity=&r=1674892477.9480226&pvid=lng8gv628f9ldfnqiou&tsyjad=0&_impl=ytag
183.79.249.252403 Forbidden 14 kB URL HTTP/2 am.yahoo.co.jp/rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&rref=&pt=home&item=&cat=&price=&quantity=&r=1674892477.9480226&pvid=lng8gv628f9ldfnqiou&tsyjad=0&_impl=ytag
IP 183.79.249.252:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (486)
Hash e986e7a04549f3bef16fe1bb24e61acd
b3ec35460824fae12cf6342ae42d27597ec94fb7
e8b72fe96bc96ffcfef2cdf8ebb503ac854e5c2997ae389b96d04bf78f478edd
GET /rt/?p=26NUFXJP68&label=&ref=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&rref=&pt=home&item=&cat=&price=&quantity=&r=1674892477.9480226&pvid=lng8gv628f9ldfnqiou&tsyjad=0&_impl=ytag HTTP/1.1
Host: am.yahoo.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Sat, 28 Jan 2023 07:54:36 GMT
server: ATS
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 14275
content-type: text/html
X-Firefox-Spdy: h2
pixel.coccoc.com/event
123.30.175.95200 OK 0 B IP 123.30.175.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event HTTP/1.1
Host: pixel.coccoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 398
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:54:36 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: vid=JQJVC9y3V3S6Jo39; Path=/; Domain=coccoc.com; Expires=Fri, 01 Jan 2100 23:55:55 GMT; Secure; SameSite=None
a.imgvc.com/i/bf.png?v=1
210.140.252.199200 OK 107 B IP 210.140.252.199:0
ASN #4694 IDC Frontier Inc.
File type PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced\012- data
Hash b7e5dc8cea9ea76a99e128bd7f0bef5b
7020df49de8381c08a70c3628cae594f8ee6fcfc
190a1c52ed59861b956787504dcd500f9f09d4135e172b6db58803f9106e66e0
GET /i/bf.png?v=1 HTTP/1.1
Host: a.imgvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:36 GMT
content-type: image/png
content-length: 107
access-control-allow-origin: *
cache-control: max-age=63072000, private
last-modified: Wed, 09 May 2018 15:00:00 GMT
expires: Mon, 27 Jan 2025 07:54:36 GMT
front-end-https: on
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a699a4395f23db5a59481285d5da3797
4a76f220fcbcdaa6de719208ff400d351f5696cf
3d4b58e8b6bae029599a6be6eda011660deac9f177aa43a186de982b7b006c27
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:35 GMT
Etag: "63d49706-1d7"
Server: ECS (amb/6B9C)
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 64a0ca678dc48c175910f1e55284859d
a5f2bbca68caba4aafb72d2661b7ae8b98b4fcfe
6f1fea52828a07ca00b3815fa4ed4f027d4d21e5d6bb449033830f47b6a30b61
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5378
Cache-Control: max-age=152984
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:54:42 GMT
Etag: "63d47258-118"
Expires: Mon, 30 Jan 2023 02:24:26 GMT
Last-Modified: Sat, 28 Jan 2023 00:54:48 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
promo-cdn.worldofwarships.com/glows-58347/src/styles/styles.css?v=2008cc64
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/styles/styles.css?v=2008cc64
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-58347/src/styles/styles.css?v=2008cc64 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: W/"ea77b311b58c772dc70ff8d22e49beb0"
x-amz-request-id: tx00000000000000030dccd-0063c1533c-1cc4459e-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
104.18.26.85200 OK 0 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP 104.18.26.85:0
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:54:34 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7908292acc690b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
GET /watch/71343676?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/71343676/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A45380549252%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A929618141%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 07:54:34 GMT
access-control-allow-origin: https://promo.worldofwarships.asia
set-cookie: yabs-sid=407627221674892474; Path=/; SameSite=None; Secure
i=sGYFhxhqZVkj+UL22glyYi7fB/sEissFZiYWmv0RS+96Aze0FQiDhFAF9FuvFigEzeOM8UE+Irx+OESHd2CGCUxrMRo=; Expires=Tue, 25-Jan-2033 07:54:33 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8037768881674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8037768881674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706428474.yc.1674892474#1706428474.yrts.1674892474#1706428474.yrtsi.1674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.251.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.251.119:0
GET /watch/45727869?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.worldofwarships.asia
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/45727869/1?wmode=7&page-url=https%3A%2F%2Fpromo.worldofwarships.asia%2Fglows-58347%2Fasia-fil%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A790%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A960308007491%3Ahid%3A255034005%3Az%3A0%3Ai%3A20230128075436%3Aet%3A1674892476%3Ac%3A1%3Arn%3A176284767%3Arqn%3A1%3Au%3A1674892476102647536%3Aw%3A1152x836%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C15%2C127%2C0%2C150%2C0%2C%2C409%2C33%2C1131%2C1131%2C0%2C820%3Aco%3A0%3Ans%3A1674892474613%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1674892476%3At%3AWorld%20of%20Warships%E2%80%94malakihang%20salpukan%20sa%20dagat.%20Gumamit%20na%20mga%20maalamat%20na%20barko%20mula%20sa%20simula%20ng%20ika-20%20siglo%20at%20lumaban%20para%20mangibabaw%20sa%20karagatan.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 28 Jan 2023 07:54:34 GMT
access-control-allow-origin: https://promo.worldofwarships.asia
set-cookie: yabs-sid=393599421674892474; Path=/; SameSite=None; Secure
i=rEp8QebDPCuS8KEylsRpWv0VLYMvroxUFNoQzYU15GoQy/LAMLSoZPFO75B0PfzF0GqqiwAqHB29Suc5GxHxaFX2tEo=; Expires=Tue, 25-Jan-2033 07:54:32 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7282488491674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7282488491674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706428474.yc.1674892474#1706428474.yrts.1674892474#1706428474.yrtsi.1674892474; Expires=Sun, 28-Jan-2024 07:54:34 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28-Jan-2023 07:54:34 GMT
last-modified: Sat, 28-Jan-2023 07:54:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/images/logo-main.svg?v=f47bf740
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/images/logo-main.svg?v=f47bf740
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-58347/src/images/logo-main.svg?v=f47bf740 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: image/svg+xml
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: W/"3205035293624ac8f4502ce6c888db9e"
x-amz-request-id: tx00000000000000030d3ad-0063c1533b-1dbc2ce4-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo.worldofwarships.asia/glows-58347/asia-fil/
185.244.209.62200 OK 0 B URL HTTP/2 promo.worldofwarships.asia/glows-58347/asia-fil/
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.asia domain
GET /glows-58347/asia-fil/ HTTP/1.1
Host: promo.worldofwarships.asia
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: W/"75e62dd6f37d462eff275a3f026554d5"
x-amz-request-id: tx0000000000000008173f6-0063d4d4b9-1cf06738-ed1
cache: MISS
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2
promo-cdn.worldofwarships.com/glows-58347/src/js/index.js?v=b7237e45
185.244.209.62200 OK 0 B URL HTTP/2 promo-cdn.worldofwarships.com/glows-58347/src/js/index.js?v=b7237e45
IP 185.244.209.62:0
ASN #58286 Electric-IT Business S.R.L.
GET /glows-58347/src/js/index.js?v=b7237e45 HTTP/1.1
Host: promo-cdn.worldofwarships.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.worldofwarships.asia/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:54:33 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 22 Dec 2022 12:14:01 GMT
etag: W/"fd5b9475c0691264f7edf14aa1406938"
x-amz-request-id: tx00000000000000030e087-0063c1533b-1da6e21f-ed1
access-control-allow-origin: *
cache: HIT
x-cached-since: 2023-01-25T13:04:24+00:00
x-id: osix-up-gc4
content-encoding: gzip
X-Firefox-Spdy: h2