www.moxoxom.com/c/659ee5a0b666a515
52.19.101.114302 Found 171 B URL HTTP/1.1 www.moxoxom.com/c/659ee5a0b666a515
IP 52.19.101.114:0
File type HTML document, ASCII text
Hash e0becd86ef6345972f83c14883381b70
07e0dacb921e274161d11a01e4f99422c9d3e522
822cd7fcca00bb97758deaa687dab2f57af9c84c004cf1712741cfb092aee017
Analyzer Verdict Alert fortinet Malware
GET /c/659ee5a0b666a515 HTTP/1.1
Host: www.moxoxom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 25 Nov 2022 10:57:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 171
Connection: keep-alive
Location: https://4704509.s3.freshingclicks.com/?campaignid=&clickid=pfghq63809fa200004d54&mob=qU4AnGgxNy1l5as_fED-Ay1y-1Ns5Amo9gq6pQonUYM&zoneid=
Set-Cookie: unique_id=63809fa2000066ab; Path=/; Expires=Tue, 24 Jan 2023 10:57:38 GMT
unique_id2=63809fa200007142; Path=/; Expires=Thu, 23 Feb 2023 10:57:38 GMT
impression=; Path=/; Expires=Fri, 25 Nov 2022 10:57:38 GMT
tid=pfghq63809fa200004d54; Path=/; Expires=Sat, 30 Oct 2027 10:57:38 GMT
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5955
Expires: Fri, 25 Nov 2022 12:36:53 GMT
Date: Fri, 25 Nov 2022 10:57:38 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6298
Cache-Control: max-age=91111
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:38 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 12:16:09 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10212
Expires: Fri, 25 Nov 2022 13:47:50 GMT
Date: Fri, 25 Nov 2022 10:57:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 10:19:05 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2313
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8o5TDLfmRTK2X4sY4gA1F098IdNXqF/RW5VFALcUeMkyNcN3C0pVDoJOzGHWT/KYFwKOsz84azs=
x-amz-request-id: NZV17TFWZQF8RAHF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 10:43:48 GMT
age: 830
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 10529dc1dea937e2417a5c4b02ffff8f
c37bc2f2a1c0838d380e6b65f40736e408c12c54
2bf5c0c8246b4c2271db4ef1c563e93dfe93d67c08794e3a7da1326f8287faaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2BF5C0C8246B4C2271DB4EF1C563E93DFE93D67C08794E3A7DA1326F8287FAAA"
Last-Modified: Thu, 24 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18820
Expires: Fri, 25 Nov 2022 16:11:18 GMT
Date: Fri, 25 Nov 2022 10:57:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 10:11:11 GMT
cache-control: public,max-age=3600
age: 2787
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
4704509.s3.freshingclicks.com/?campaignid=&clickid=pfghq63809fa200004d54&mob=qU4AnGgxNy1l5as_fED-Ay1y-1Ns5Amo9gq6pQonUYM&zoneid=
15.184.56.233200 OK 324 B URL HTTP/1.1 4704509.s3.freshingclicks.com/?campaignid=&clickid=pfghq63809fa200004d54&mob=qU4AnGgxNy1l5as_fED-Ay1y-1Ns5Amo9gq6pQonUYM&zoneid=
IP 15.184.56.233:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (324), with no line terminators
Hash 4116bb621ff8023a876e158742dd7cfa
dd7f43b3b56e5f307d8d4a545aefb0b6f556aefa
40af44bb42f08e0adb11d402550f3a5688aba45df594d1b57e3f6d9fa1e0e6a8
GET /?campaignid=&clickid=pfghq63809fa200004d54&mob=qU4AnGgxNy1l5as_fED-Ay1y-1Ns5Amo9gq6pQonUYM&zoneid= HTTP/1.1
Host: 4704509.s3.freshingclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 10:57:38 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 324
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6133
Cache-Control: max-age=85883
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:39 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:49:02 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.237.93.5101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.237.93.5:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fcTXtA8HW87Sc+wpEUpBqQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fsatIzRBLOZZHbU5DjBXQFTmz28=
go-rilla.offerstrack.net/index.php?offer_id=20272&aff_id=53&aff_sub1=m7Q2TWbvi3811OBXV0chrZ6VQBpvalew9MWZZthD-jpSrjz-tmT9YyKQHy1jMUoysuFEkwntcsmfi3XQ_Uy0mA&source_id=12544-u34j45u9gt
8.214.11.60302 Found 0 B URL HTTP/1.1 go-rilla.offerstrack.net/index.php?offer_id=20272&aff_id=53&aff_sub1=m7Q2TWbvi3811OBXV0chrZ6VQBpvalew9MWZZthD-jpSrjz-tmT9YyKQHy1jMUoysuFEkwntcsmfi3XQ_Uy0mA&source_id=12544-u34j45u9gt
IP 8.214.11.60:0
ASN #45102 Alibaba US Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?offer_id=20272&aff_id=53&aff_sub1=m7Q2TWbvi3811OBXV0chrZ6VQBpvalew9MWZZthD-jpSrjz-tmT9YyKQHy1jMUoysuFEkwntcsmfi3XQ_Uy0mA&source_id=12544-u34j45u9gt HTTP/1.1
Host: go-rilla.offerstrack.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 25 Nov 2022 10:57:39 GMT
Content-Length: 0
Connection: keep-alive
Location: https://1d6ce93c45f.terrificompany.com/?p=7871&media_type=mainstream&click_id=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c4711865a5be98cb893958bab911494c
763d08c2949dca527b013d555f640fc684bb1c85
afbc64305c8767230e21393df9b726ef3a6ea0845915e127b37c1e4f10aa5100
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AFBC64305C8767230E21393DF9B726EF3A6EA0845915E127B37C1E4F10AA5100"
Last-Modified: Thu, 24 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11138
Expires: Fri, 25 Nov 2022 14:03:18 GMT
Date: Fri, 25 Nov 2022 10:57:40 GMT
Connection: keep-alive
1d6ce93c45f.terrificompany.com/?p=7871&media_type=mainstream&click_id=
94.237.99.118200 OK 935 B URL HTTP/2 1d6ce93c45f.terrificompany.com/?p=7871&media_type=mainstream&click_id=
IP 94.237.99.118:0
Hash 69a56e215547f4af280047ebc48a5a14
55cb2da4df6da8d0760206a242418a7210afa6bd
f09d6124966e5bdfdeb7be9c25db9caf6722847f5ff55536edd4d31934d6a770
GET /?p=7871&media_type=mainstream&click_id= HTTP/1.1
Host: 1d6ce93c45f.terrificompany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: rts-trck=1; expires=Fri, 25-Nov-2022 11:07:40 GMT; Max-Age=600; path=/; domain=1d6ce93c45f.terrificompany.com
t-uuid=5x0zwxz7p63g25be5ypwkssgo; expires=Thu, 25-Nov-2032 10:57:40 GMT; Max-Age=315619200; path=/; domain=.terrificompany.com
rts-trck=1; expires=Fri, 25-Nov-2022 11:07:40 GMT; Max-Age=600; path=/; domain=1d6ce93c45f.terrificompany.com
traffic-back=ok; expires=Fri, 25-Nov-2022 10:58:10 GMT; Max-Age=30; path=/; domain=.terrificompany.com
last-modified: Fri, 25 Nov 2022 10:57:40 GMT
expires: Fri, 25 Nov 2022 10:57:40 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
f7a35c2ee.srtrak.com/163-922-3-2583?external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871
91.132.60.212301 Moved Permanently 162 B URL HTTP/2 f7a35c2ee.srtrak.com/163-922-3-2583?external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871
IP 91.132.60.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /163-922-3-2583?external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871 HTTP/1.1
Host: f7a35c2ee.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 25 Nov 2022 10:57:40 GMT
content-type: text/html
content-length: 162
location: https://f7a35c2ee.srtrak.com/promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871
x-robots-tag: noindex, nofollow, nosnippet, noarchive
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14044
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 10:57:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14044
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 10:57:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14044
Expires: Fri, 25 Nov 2022 14:51:44 GMT
Date: Fri, 25 Nov 2022 10:57:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b6ee13d43732f7c764a49500d092865
5d15fd672e968d59b541e4d5d0d01cd5e69f4075
fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: q53jN1uOtSdeThbk2_0UF6Rl3g4_-_TW7uK1_6Z5oDwSTSRk8XRjyQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:08 GMT
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
age: 48152
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8784bb7a8b88736a6016f712e3183bf3
b0ddc1555d2506177adcdcea77864d75f1245d07
8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11743
x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cICD-F7joAMFqmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:45 GMT
age: 46975
etag: "b0ddc1555d2506177adcdcea77864d75f1245d07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 8f679d7f-2ea5-4e47-b78d-79af59435a62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFPHYHkAIAMFpBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec562-26108a785e910dc3355d58f1;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NKwpIdw2RZNZNh69AF5GNvunA_QfRGClvzcRP3zYwn7c8BLBlt097g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:37:15 GMT
age: 8425
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:47:08 GMT
age: 47432
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 31812
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6292a2988fb4505d0098553b8e99ddc
9b8aafcda0e22edcc16d3048f4b88659d3b42419
16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:22:46 GMT
age: 12894
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 8817d987a454bb20bb357acb51ab78ee
8d3045d525d388588ad82ba4ad0115a188c6647e
1423e6964efb967abe0205dad856a8b737868280ef8fd0a1ff178a7b83878797
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 25 Nov 2022 10:57:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 24 Nov 2022 21:33:54 GMT
Expires: Fri, 25 Nov 2022 21:33:54 GMT
ETag: "8d3045d525d388588ad82ba4ad0115a188c6647e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
f7a35c2ee.srtrak.com/promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871
91.132.60.212301 Moved Permanently 0 B URL HTTP/2 f7a35c2ee.srtrak.com/promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871
IP 91.132.60.212:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /promo.php?id=163&page=922&set=3&link=2583&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871 HTTP/1.1
Host: f7a35c2ee.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 25 Nov 2022 10:57:40 GMT
content-type: text/html; charset=UTF-8
location: https://1d91e8e66.srtrak.com/promo-tools/direct-offers/mainstream/games/caliber/?idev_id=163&set=3&link=2583&page=922&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871&clickid=0e7baf2f4cd1385408da2f86e36e572ae963b1866e7ded3e272d132156619ddd
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: _s=h4p6a3ih2oalfu9c35edsk5aq0; path=/; HttpOnly
sr=163--3-2583-------https%3A%2F%2F1d91e8e66.srtrak.com%2Fpromo-tools%2Fdirect-offers%2Fmainstream%2Fgames%2Fcaliber%2F; expires=Sat, 12-Nov-2072 10:57:40 GMT; Max-Age=1576800000; path=/; domain=.srtrak.com
referrer-policy: no-referrer
x-robots-tag: noindex, nofollow, nosnippet, noarchive
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cfb6dfae453b6e11537bbc0b3cfd55cf
4ef51ba87aa84595517ea8c9544bd9149fdd5fec
f3de9fabcc7d81c87c2c3a2fa8753d32c94aabf439f51ede0dd406da2532dcff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2817
Cache-Control: max-age=171149
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Etag: "63808e31-1d7"
Expires: Sun, 27 Nov 2022 10:30:10 GMT
Last-Modified: Fri, 25 Nov 2022 09:43:13 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 471
trck.wargaming.net/aly9ipyd/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2=
92.223.23.230301 Moved Permanently 22 B URL HTTP/1.1 trck.wargaming.net/aly9ipyd/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2=
IP 92.223.23.230:0
ASN #199524 G-Core Labs S.A.
File type ASCII text, with no line terminators
Hash 0e0bf67572311f8a23814419ff24ee9a
78328dfc54708433cdfb3e7857e57f87ec443b08
c5f6c267ba4a2964fff5d304d4a1e79c371ce30d32eaf017b3bb40becccd58d2
GET /aly9ipyd/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2= HTTP/1.1
Host: trck.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 25 Nov 2022 10:57:41 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 22
Connection: keep-alive
Location: https://join.worldoftanks.eu/1600946604/no/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2=&sid=SIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9&enctid=colbn8r8j1ra&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669373861404717012&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869
Set-Cookie: STIDREFERRAL=SIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
enctid=colbn8r8j1ra; Domain=wargaming.net; Max-Age=2592000; Path=/; SameSite=None; Secure
teclient=1669373861404717012; Domain=wargaming.net; Max-Age=315360000; Path=/; SameSite=None; Secure
Cache-Control: no-cache
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c33f294d5e6a102529379cdbeb391230
c3363bbe676acb0dda94f072c1fe853372d5cc0f
27c95725167922b5c66e711926d9a8a05fefa456bac733ba1677ad6774c85a77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5819
Cache-Control: max-age=98508
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Etag: "637f66b6-1d7"
Expires: Sat, 26 Nov 2022 14:19:29 GMT
Last-Modified: Thu, 24 Nov 2022 12:42:30 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
join.worldoftanks.eu/1600946604/no/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2=&sid=SIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9&enctid=colbn8r8j1ra&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669373861404717012&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869
92.223.51.163200 OK 16 kB URL HTTP/1.1 join.worldoftanks.eu/1600946604/no/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2=&sid=SIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9&enctid=colbn8r8j1ra&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669373861404717012&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869
IP 92.223.51.163:0
ASN #199524 G-Core Labs S.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (51156)
Hash 76d6249792ec3ed63f71341dce79d771
f9bfaf0fbf9f93f8ca4587bb5844ee6f7036d0c8
d70c54e44582c3c51947bd25e6644906d4acd66d0e09b59cc7d78ffad22b47d4
GET /1600946604/no/?t=1&pub_id=869&xid=63809fa5b09cbb0001941a9b&xid_param1=163&xid_param_2=&sid=SIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9&enctid=colbn8r8j1ra&lpsn=WOT+ONGOING+WW+Videoback+LMS+WOTHQ-1691&foris=1&teclient=1669373861404717012&utm_source=wlap&utm_medium=affiliate&utm_campaign=aly9ipyd&utm_content=869 HTTP/1.1
Host: join.worldoftanks.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 10:57:41 GMT
Content-Type: text/html
Last-Modified: Fri, 01 Jul 2022 12:11:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62bee46c-10101"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be2d38241a9c94da1c371c9693b28eb5
0143f754af39fbb1b09474e7c34eea131d4633f9
52f2b22fc0ac012d3916543aa6c3236b1778080cd1b7bd7483c038a5c004b790
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3079
Cache-Control: max-age=165663
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Etag: "638077bd-1d7"
Expires: Sun, 27 Nov 2022 08:58:44 GMT
Last-Modified: Fri, 25 Nov 2022 08:07:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be2d38241a9c94da1c371c9693b28eb5
0143f754af39fbb1b09474e7c34eea131d4633f9
52f2b22fc0ac012d3916543aa6c3236b1778080cd1b7bd7483c038a5c004b790
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3079
Cache-Control: max-age=165663
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Etag: "638077bd-1d7"
Expires: Sun, 27 Nov 2022 08:58:44 GMT
Last-Modified: Fri, 25 Nov 2022 08:07:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be2d38241a9c94da1c371c9693b28eb5
0143f754af39fbb1b09474e7c34eea131d4633f9
52f2b22fc0ac012d3916543aa6c3236b1778080cd1b7bd7483c038a5c004b790
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4652
Cache-Control: max-age=167236
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Etag: "638077bd-1d7"
Expires: Sun, 27 Nov 2022 09:24:57 GMT
Last-Modified: Fri, 25 Nov 2022 08:07:25 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash be2d38241a9c94da1c371c9693b28eb5
0143f754af39fbb1b09474e7c34eea131d4633f9
52f2b22fc0ac012d3916543aa6c3236b1778080cd1b7bd7483c038a5c004b790
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5826
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Etag: "637f263b-1d7"
Last-Modified: Fri, 25 Nov 2022 09:20:35 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/f649b2f12a074726bf8db29fe5633628_1639483774.png
92.223.84.84200 OK 14 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/f649b2f12a074726bf8db29fe5633628_1639483774.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 208x208, components 3\012- data
Hash 87d3c37b826fc0c8237c8e716934f6b2
79632ce4b4f0f1cbe6a0ac9081dba9924b4d0cd0
5dd52ce85650d9cc13997187633c865d7284e628f3f28af2ce38896d8d7d3da0
GET /videoback-ongoing-eu-wothq-1691/f649b2f12a074726bf8db29fe5633628_1639483774.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/png
content-length: 13892
last-modified: Tue, 14 Dec 2021 12:09:34 GMT
etag: "61b8897e-3644"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png
92.223.84.84200 OK 6.7 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 248 x 110, 8-bit colormap, non-interlaced\012- data
Hash 91f01fe893320cb394fc52461a1b24a5
f43616cd9e85af6a2a73a914a44085662d123807
3038bb7d8adebbe73e330bbea5739b04efe6b04d5a1d81db314bd29251813967
GET /videoback-ongoing-eu-wothq-1691/04b0ba212e17098cc7786c56bca5d832_1600946934.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/png
content-length: 6662
last-modified: Thu, 24 Sep 2020 11:28:54 GMT
etag: "5f6c82f6-1a06"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png
92.223.84.84200 OK 1.6 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 26 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 65952e9526844e297b5ed12b51af3073
ab06c5be859a20aea602c95a592d366152f66fda
0eb8340c0b3fc3e36cd816cb9ce8e819b64b40ded2504741eb4662bb10eea015
GET /videoback-ongoing-eu-wothq-1691/9a3147f7202207fd86f303867669af7c_1600947283.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/png
content-length: 1572
last-modified: Thu, 24 Sep 2020 11:34:43 GMT
etag: "5f6c8453-624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/2aef0c94f5bc198cba6f45ee06d503a0_1639484015.png
92.223.84.84200 OK 29 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/2aef0c94f5bc198cba6f45ee06d503a0_1639484015.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 1174 x 363, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ce0d2852121a1cd85a26c2426a40dae
474a69d1816e7d29cea432b640e43e5acff39450
07871f75a6f4007f7f7d9adf5382f953c1dce8407149662dd88617a1d8d4055a
GET /videoback-ongoing-eu-wothq-1691/2aef0c94f5bc198cba6f45ee06d503a0_1639484015.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/png
content-length: 29062
last-modified: Tue, 14 Dec 2021 12:13:35 GMT
etag: "61b88a6f-7186"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/518e6d6bd45d6086554daa0295291ee1_1639483949.png
92.223.84.84200 OK 3.0 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/518e6d6bd45d6086554daa0295291ee1_1639483949.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 123 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b1962befd8938b36c48ed62ca7c04f5
4e3e0524f822003a2567d04501b9d5e7d55d7d06
cd2a2481818213f1c1b4e065ead65f83ff50d25a5b63a4a8cf515614f3ad05cf
GET /videoback-ongoing-eu-wothq-1691/518e6d6bd45d6086554daa0295291ee1_1639483949.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/png
content-length: 2976
last-modified: Tue, 14 Dec 2021 12:12:29 GMT
etag: "61b88a2d-ba0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/ba06c381ed267fb7dfd6b007931ed0bf_1639483823.png
92.223.84.84200 OK 30 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/ba06c381ed267fb7dfd6b007931ed0bf_1639483823.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 219 x 220, 8-bit grayscale, non-interlaced\012- data
Hash e15fed82b2db8b2e31de05ab2a5601f4
405cbff152f965bdbf3a72faabbff5cafa4bcc14
549b0b011eb72bfb724708d7caeb637c1411be84c32ccbb5a9d7a76afc8b30bd
GET /videoback-ongoing-eu-wothq-1691/ba06c381ed267fb7dfd6b007931ed0bf_1639483823.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/png
content-length: 30233
last-modified: Tue, 14 Dec 2021 12:10:23 GMT
etag: "61b889af-7619"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/a3c86a67f4c5bb1c6cdb50b1092c0761_1600946860.jpg
92.223.84.84200 OK 373 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/a3c86a67f4c5bb1c6cdb50b1092c0761_1600946860.jpg
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 373 kB (373020 bytes)
Hash 6baad877e262149d8eea54bb33563765
e4584c51785969af9c25718cff399e0e444af9a9
f6a40920a81d3a3489189bbb747f7d3e1b2a87f7568361e4872353bc2cb082b2
GET /videoback-ongoing-eu-wothq-1691/a3c86a67f4c5bb1c6cdb50b1092c0761_1600946860.jpg HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: image/jpeg
content-length: 373020
last-modified: Thu, 24 Sep 2020 11:27:40 GMT
etag: "5f6c82ac-5b11c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-58QVDL8
142.250.74.168200 OK 108 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-58QVDL8
IP 142.250.74.168:0
File type ASCII text, with very long lines (46280)
Size 108 kB (107564 bytes)
Hash 09d1e167331e5689aeca3d308cb23476
788d7248553b293834415e4ca1b95ceef7f1f727
f98e32ed9e8a2541f378acd345ee499fa97921f845b8998d49b986480e5a4473
GET /gtm.js?id=GTM-58QVDL8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 10:57:41 GMT
expires: Fri, 25 Nov 2022 10:57:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107564
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:51 GMT
expires: Thu, 23 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
age: 144351
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2
216.58.207.195200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 11816, version 1.0\012- data
Hash 7fa68490a833a8fa395e5f3bffafc052
1880e3743548106319713b937e7769eee6b1ce21
30fa70635379ae1b58491bc41572760c1f3c8445265436a5fec4c36a197e4121
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 01:25:32 GMT
expires: Wed, 22 Nov 2023 01:25:32 GMT
cache-control: public, max-age=31536000
age: 293530
last-modified: Tue, 19 Apr 2022 18:52:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:17:43 GMT
expires: Wed, 22 Nov 2023 22:17:43 GMT
cache-control: public, max-age=31536000
age: 218399
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.e97d588e.js
92.223.84.84200 OK 25 kB URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.e97d588e.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
Hash ab50b0bee8d80f1412af924a312a7e8d
2977e7f4cd61bb85bc1911cd5a9b74224dd68005
31c99e97d3178fc756cbdacbc6188c2e40fa0ebbdbbfd0582ed028c85f0a283f
GET /1600946604/dist/landing/videoback/app.e97d588e.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-14229"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
216.58.207.195200 OK 9.7 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 9692, version 1.0\012- data
Hash d572b531f0823555818998b466028e08
788073fb7656c7b44a3d67468fc355ceb618290e
bddd7c9debeee9bccc8d6a0f0990743d3db200fe23fc08dbad9e60a007e52919
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9692
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 23:14:31 GMT
expires: Wed, 22 Nov 2023 23:14:31 GMT
cache-control: public, max-age=31536000
age: 214991
last-modified: Tue, 19 Apr 2022 18:44:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2wotcom.gcdn.co/promo_web/WOT/March2019/WOT_New_videoback_v3.webm
92.223.84.84206 Partial Content 7.7 MB URL HTTP/2 cdn2wotcom.gcdn.co/promo_web/WOT/March2019/WOT_New_videoback_v3.webm
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 7.7 MB (7678225 bytes)
Hash 276c4475cdb31241611170b2fb686f5b
a2cda0beddd67a47b423d798f6f48a59a12a366d
333a1356229544852de21506199e090e01791081b4b32e3a5d7864506a07eeb9
GET /promo_web/WOT/March2019/WOT_New_videoback_v3.webm HTTP/1.1
Host: cdn2wotcom.gcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: video/webm
content-length: 7678225
last-modified: Tue, 12 Mar 2019 07:13:16 GMT
etag: "752911-583e06c461b00"
cache-control: max-age=290304000, public
expires: Mon, 18 Sep 2023 15:53:34 GMT
cache: HIT
x-cached-since: 2022-09-18T15:53:34+00:00
x-id: sto5-up-gc10
content-range: bytes 0-7678224/7678225
X-Firefox-Spdy: h2
lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png
92.223.84.84200 OK 5.1 kB URL HTTP/2 lms-static.wgcdn.co/videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash c28eb738166485ff11b13d9e74a52be8
dd161225ce2e844e2d6f05753e5210d922934ec6
2e9c3e61433c5952bd3b7d963ae90d9789c262a67411447bbaa1b598f53c2411
GET /videoback-ongoing-eu-wothq-1691/50e485b431d538125efcbfa8fc76a665_1600946565.png HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:42 GMT
content-type: image/png
content-length: 5124
last-modified: Thu, 24 Sep 2020 11:22:45 GMT
etag: "5f6c8185-1404"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:03+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/eval.js
92.223.84.84200 OK 177 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/eval.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
Hash ab56a375dc50a8ab25c09dd2116ebcd0
19ee177c451c354bedf9d355a34476134464d0be
a6b484f867056eb70f872f3e159a26591e2c653581553f9667946642f1c0759a
GET /1600946604/dist/landing/videoback/eval.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:42 GMT
content-type: application/javascript
content-length: 177
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
etag: "62bee464-b1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cfb6dfae453b6e11537bbc0b3cfd55cf
4ef51ba87aa84595517ea8c9544bd9149fdd5fec
f3de9fabcc7d81c87c2c3a2fa8753d32c94aabf439f51ede0dd406da2532dcff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2818
Cache-Control: max-age=171149
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Etag: "63808e31-1d7"
Expires: Sun, 27 Nov 2022 10:30:11 GMT
Last-Modified: Fri, 25 Nov 2022 09:43:13 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
tenor.wargaming.net/assets/device/static/collect.js
92.223.21.23200 OK 5.4 kB URL HTTP/1.1 tenor.wargaming.net/assets/device/static/collect.js
IP 92.223.21.23:0
ASN #199524 G-Core Labs S.A.
File type HTML document, ASCII text, with very long lines (7249)
Hash 026f62fad760986ddac0bb642b46db1d
934e6b4936e4c044e0e68ebe8243a3c38a2763ca
76c6cf4c397fcca4cf8000908a09bae78997b814b1a3b345279bc8e178aa2900
GET /assets/device/static/collect.js HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 10:57:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=200
Last-Modified: Wed, 09 Nov 2022 09:49:54 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"636b77c2-3ac2"
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4014b3f4adf5c5373118894c244afb12
1198e79d0e1e14408e3c0084a3f479122020a723
affc5983ee364e0310c082b225a90cff4ba2d01b68d2cdaf6b5ecbe780cad66d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4236
Cache-Control: max-age=155966
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Etag: "63804d58-1d7"
Expires: Sun, 27 Nov 2022 06:17:08 GMT
Last-Modified: Fri, 25 Nov 2022 05:06:32 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 10:41:08 GMT
expires: Fri, 25 Nov 2022 12:41:08 GMT
cache-control: public, max-age=7200
age: 994
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
204.79.197.200200 OK 11 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=13A3F34064556C1D3EE9E12765026D69; domain=.bing.com; expires=Wed, 20-Dec-2023 10:57:42 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 029D76E5E453476C8EC7A0EE653D9EBD Ref B: OSL30EDGE0415 Ref C: 2022-11-25T10:57:42Z
date: Fri, 25 Nov 2022 10:57:42 GMT
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.200.14200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.200.14:0
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: n7zDp3eQJtKj0azACKe4kyttiEXam4Tp0d7oxHNFIqT8mcFI04H6ksCpqzyrEkZCNO3L6iSo93xny7zlgUGBXA==
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 25 Nov 2022 10:57:42 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1669373861919&cv=11&fst=1669373861919&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=713788238.1669373862&rfmt=3&fmt=4
142.250.74.34200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1006839708/?random=1669373861919&cv=11&fst=1669373861919&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=713788238.1669373862&rfmt=3&fmt=4
IP 142.250.74.34:0
File type ASCII text, with very long lines (2967), with no line terminators
Hash 67d13b15f4fd8f358b33ffdcdf9abab1
cc18f47af727f0923c65ab2cefac9b1e0668f6a0
fe062f7ad1a1efa599ca959813c6338ed8cefc0f2ae6f3bfc0d72365307a8a5a
GET /pagead/viewthroughconversion/1006839708/?random=1669373861919&cv=11&fst=1669373861919&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&auid=713788238.1669373862&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1244
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 11:12:42 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=1461199576.1669373862>m=2oeb90&aip=1&z=1938185573
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=1461199576.1669373862>m=2oeb90&aip=1&z=1938185573
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-77NSW0BT3P&cid=1461199576.1669373862>m=2oeb90&aip=1&z=1938185573 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tenor.wargaming.net/cf
92.223.21.23200 OK 0 B IP 92.223.21.23:0
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /cf HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://join.worldoftanks.eu/
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 25 Nov 2022 10:57:43 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=200
Access-Control-Allow-Origin: https://join.worldoftanks.eu
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: CONTENT-TYPE
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.redditstatic.com/ads/pixel.js
151.101.85.140200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.85.140:0
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 25 Nov 2022 10:57:43 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
tenor.wargaming.net/cf
92.223.21.23204 No Content 0 B IP 92.223.21.23:0
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cf HTTP/1.1
Host: tenor.wargaming.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Content-Type: application/json
Origin: https://join.worldoftanks.eu
Content-Length: 311
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Fri, 25 Nov 2022 10:57:43 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: keep-alive
Keep-Alive: timeout=200
Access-Control-Expose-Headers: Date,Server,Content-Length
Access-Control-Allow-Origin: https://join.worldoftanks.eu
Access-Control-Allow-Credentials: true
bat.bing.com/p/action/26043906.js
204.79.197.200200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/26043906.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 5ccab94753771a3d9f34c937a0edda89
0e4f16622e090eaa09fc6c910fbe979ca4fb0a65
2f60750d4aadf9925d7d1a28a1c94ffb13c7e6a851af89805440b7d57a5832aa
GET /p/action/26043906.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1423
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=091638FDBDC66D59175B2A9ABC916C83; domain=.bing.com; expires=Wed, 20-Dec-2023 10:57:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 560D3F155D82458999B18ECE132F1DF8 Ref B: OSL30EDGE0415 Ref C: 2022-11-25T10:57:43Z
date: Fri, 25 Nov 2022 10:57:43 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 38a4c60ccd492f07d07cdec1b3989143
f765e9a4bd2865776288d911bf2cd262cad38c8b
846c6a519d5effaf3940585d597d52d51294bb46f003591b4eab95fe35e65b36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2860
Cache-Control: max-age=121111
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Etag: "637fca93-1d7"
Expires: Sat, 26 Nov 2022 20:36:14 GMT
Last-Modified: Thu, 24 Nov 2022 19:48:35 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
s.yimg.com/wi/config/10180089.json
188.125.94.206200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10180089.json
IP 188.125.94.206:0
File type JSON data\012- , ASCII text, with no line terminators
Hash c6ded5892a90c67512603a071c819e4e
b0db884308ecef9f44d5c38bacf96702096d5830
c63fe9a284f1b9cfd799a123c1a92a566f22bd5cd0be03d5af3a3fbf0936e226
GET /wi/config/10180089.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9HaTw7TTKNqx7uegIWDpJ11xYq18un51SbvAbU6dxULhn0EQm3JB2MmT2omCLMmyQ2Mx6tg6Ti8=
x-amz-request-id: DGM0DTGH6WPJSW3E
date: Fri, 25 Nov 2022 06:34:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 16 Mar 2022 15:56:22 GMT
x-amz-expiration: expiry-date="Fri, 21 Apr 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "c6ded5892a90c67512603a071c819e4e"
x-amz-server-side-encryption: AES256
x-amz-version-id: hucc9FIkp5UShj6EZB33GhrqRv4Mo1tn
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 15820
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a2d10df9576c631d6ae0a646998c7494
4194dac1a72b1c7d88f77864ae26ee09c64e80b3
109c6b4555d14db09e05f817143d122377d6930ce901e22198d8a7f0cc572164
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1161
Cache-Control: max-age=113309
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Etag: "637fb2bb-1d7"
Expires: Sat, 26 Nov 2022 18:26:12 GMT
Last-Modified: Thu, 24 Nov 2022 18:06:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
bat.bing.com/action/0?ti=26043906&tm=gtm002&Ver=2&mid=36af25d4-7c40-43d7-8e62-e5c280010fb1&sid=fc43db306caf11ed8a387dae9afcad4f&vid=fc43d6a06caf11eda37339b13d89801c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&r=<=2236&evt=pageLoad&sv=1&rn=40525
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=26043906&tm=gtm002&Ver=2&mid=36af25d4-7c40-43d7-8e62-e5c280010fb1&sid=fc43db306caf11ed8a387dae9afcad4f&vid=fc43d6a06caf11eda37339b13d89801c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&r=<=2236&evt=pageLoad&sv=1&rn=40525
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=26043906&tm=gtm002&Ver=2&mid=36af25d4-7c40-43d7-8e62-e5c280010fb1&sid=fc43db306caf11ed8a387dae9afcad4f&vid=fc43d6a06caf11eda37339b13d89801c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&p=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&r=<=2236&evt=pageLoad&sv=1&rn=40525 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3E8284081EA361613EA0966F1FF460A2; domain=.bing.com; expires=Wed, 20-Dec-2023 10:57:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D43D1626B7DA47899F041F1E532B6FCA Ref B: OSL30EDGE0415 Ref C: 2022-11-25T10:57:43Z
date: Fri, 25 Nov 2022 10:57:43 GMT
X-Firefox-Spdy: h2
ad.doubleclick.net/ddm/activity/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236
142.250.74.102302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236
IP 142.250.74.102:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 11:12:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/1006839708/?random=1669373861919&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=2196312533&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1006839708/?random=1669373861919&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=2196312533&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1006839708/?random=1669373861919&cv=11&fst=1669370400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&tiba=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&fmt=3&is_vtc=1&random=2196312533&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=1461199576.1669373862&jid=665012341&gjid=233195576&_gid=1794643255.1669373863&_u=YChACEABBAAAACAEO~&z=532276010
142.251.1.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=1461199576.1669373862&jid=665012341&gjid=233195576&_gid=1794643255.1669373863&_u=YChACEABBAAAACAEO~&z=532276010
IP 142.251.1.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-6&cid=1461199576.1669373862&jid=665012341&gjid=233195576&_gid=1794643255.1669373863&_u=YChACEABBAAAACAEO~&z=532276010 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=1461199576.1669373862&jid=227382125&gjid=1382189514&_gid=534317725.1669373863&_u=YChACEABBAAAACAFO~&z=236036548
142.251.1.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=1461199576.1669373862&jid=227382125&gjid=1382189514&_gid=534317725.1669373863&_u=YChACEABBAAAACAFO~&z=236036548
IP 142.251.1.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-40205758-4&cid=1461199576.1669373862&jid=227382125&gjid=1382189514&_gid=534317725.1669373863&_u=YChACEABBAAAACAFO~&z=236036548 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=1461199576.1669373862&jid=774850932&gjid=119092509&_gid=412340204.1669373862&_u=YChACEAABAAAACAEO~&z=303155927
142.251.1.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=1461199576.1669373862&jid=774850932&gjid=119092509&_gid=412340204.1669373862&_u=YChACEAABAAAACAEO~&z=303155927
IP 142.251.1.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-150089307-8&cid=1461199576.1669373862&jid=774850932&gjid=119092509&_gid=412340204.1669373862&_u=YChACEAABAAAACAEO~&z=303155927 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://join.worldoftanks.eu
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.quantserve.com/quant.js
91.228.74.244200 OK 10 kB URL HTTP/2 secure.quantserve.com/quant.js
IP 91.228.74.244:0
Hash 075113df42f876f16de56f8268b6ebb6
2f97bbb5eefa92df9bea7b3c02637b08e7207b44
fa26683c00b70c337dc2af7b9f7b804c04ed3b877e5573d0fc7a6297cb4e8172
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:43 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "nAbmxtqHqaYrwBiADJAeFg=="
expires: Fri, 02 Dec 2022 10:57:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-40205758-4&cid=1461199576.1669373862&jid=227382125&_u=YChACEABBAAAACAFO~&z=955799703
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-40205758-4&cid=1461199576.1669373862&jid=227382125&_u=YChACEABBAAAACAFO~&z=955799703
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-40205758-4&cid=1461199576.1669373862&jid=227382125&_u=YChACEABBAAAACAFO~&z=955799703 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-UH9pPWqqbvvtC.js
54.230.111.16200 OK 222 B URL HTTP/2 rules.quantcount.com/rules-p-UH9pPWqqbvvtC.js
IP 54.230.111.16:0
Hash 1fc3544f525a98ae3bb01abe95ecbd2b
9a9379f992c3660aec966f7fccb478ec0796b0af
fe56ee11ce8e8046f4e968b897e8a013642cb70381a7e8b7ca51d21f2d19ec42
GET /rules-p-UH9pPWqqbvvtC.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 222
last-modified: Thu, 13 Oct 2022 14:48:45 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Fri, 25 Nov 2022 10:26:56 GMT
cache-control: max-age=3600
etag: "1fc3544f525a98ae3bb01abe95ecbd2b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EWnaYAztEyi_p6-HCDkYwWsfK0LCi0iASyo62joYW69vRXitg7IEDg==
age: 1929
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1669373862583&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=3a0981bd-83c4-438e-9aa0-6564af40aa40&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
151.101.85.140200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1669373862583&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=3a0981bd-83c4-438e-9aa0-6564af40aa40&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8
IP 151.101.85.140:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1669373862583&id=t2_a043ik42&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=3a0981bd-83c4-438e-9aa0-6564af40aa40&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_1967aea8 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Fri, 25 Nov 2022 10:57:43 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/
142.250.74.98302 Found 0 B URL HTTP/2 adservice.google.com/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/
IP 142.250.74.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=166543881;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869;uht=2;fpan=1;fpa=P0-432317306-1669373862745;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669373862849;tzo=0;ogl=;ses=7b2dabe1-6af1-4aec-b375-3a5c1de54db5
91.228.74.244200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=166543881;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869;uht=2;fpan=1;fpa=P0-432317306-1669373862745;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669373862849;tzo=0;ogl=;ses=7b2dabe1-6af1-4aec-b375-3a5c1de54db5
IP 91.228.74.244:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=166543881;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-UH9pPWqqbvvtC;url=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869;uht=2;fpan=1;fpa=P0-432317306-1669373862745;pbc=;ns=0;ce=1;qjs=1;qv=48c6ea86-20221121114006;cm=;gdpr=0;ref=;d=worldoftanks.eu;dst=0;et=1669373862849;tzo=0;ogl=;ses=7b2dabe1-6af1-4aec-b375-3a5c1de54db5 HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:43 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=63809fa7-6b75b-fa331-cb522; expires=Tue, 26-Dec-2023 10:57:43 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.28200 OK 196 B URL HTTP/2 a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.28:0
File type ASCII text, with CRLF line terminators
Hash 0ede06ce62bcf9e842e1b0f3313e6f83
a1a6675d17c5e308cbf033eb3d53fd8d12272be4
b453c48d135033a9f54030c39d0241419c85531378e79ef47a5991ab5d418a97
GET /Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:43 GMT
content-type: text/javascript; charset=utf-8
content-length: 196
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2025%20Nov%202022%2010%3A57%3A42%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2025%20Nov%202022%2010%3A57%3A42%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2025%20Nov%202022%2010%3A57%3A42%20GMT&n=0&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:43 GMT
expires: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBKefgGMCEAx67-uolj50U1u1gQ0Fc04FEgEBAQHxgWOKYwAAAAAA_eMAAA&S=AQAAAlSsqd-T94V5Y57qOyRbuGE; Expires=Sat, 25 Nov 2023 16:57:43 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&rl=&if=false&ts=1669373862800&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669373862799.1708119331&it=1669373862552&coo=false&tm=1&rqm=GET
157.240.200.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&rl=&if=false&ts=1669373862800&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669373862799.1708119331&it=1669373862552&coo=false&tm=1&rqm=GET
IP 157.240.200.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=722630277830558&ev=PageView&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&rl=&if=false&ts=1669373862800&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1669373862799.1708119331&it=1669373862552&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 10:57:43 GMT
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&.yp=10180089&f=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&enc=UTF-8&yv=1.13.0&et=custom&ec=LP%20Interaction&ea=Page%20View&el=Landing%20Page&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:43 GMT
expires: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBKefgGMCEIMf3fZ-H5JkoGrIVODQvZ4FEgEBAQHxgWOKYwAAAAAA_eMAAA&S=AQAAAmzPsISGvKtTlFt8AXbKdGI; Expires=Sat, 25 Nov 2023 16:57:43 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/
142.250.74.162200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/
IP 142.250.74.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=9463992;type=acqpa00;cat=woteu000;u2=https://join.worldoftanks.eu/1600946604/no/;u3=WOT%20ONGOING%20WW%20Videoback%20LMS%20WOTHQ-1691;u4=affiliate;u5=aly9ipyd;u6=1669373861404717012;u7=null;match_id=1669373861404717012;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1142103236;~oref=https://join.worldoftanks.eu/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&RedC=c.clarity.ms&MXFR=338CBD1AEADD6DDD3FFCAF7DEEDD6373
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=338CBD1AEADD6DDD3FFCAF7DEEDD6373; domain=.clarity.ms; expires=Wed, 20-Dec-2023 10:57:43 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 25 Nov 2022 10:57:42 GMT
content-length: 0
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=1730755555&_gaz=1&gcs=G1--&cid=1461199576.1669373862&ul=en-us&sr=1280x1024&_s=1&sid=1669373862&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FWOTHQ-1691%2FACQ%2Freg-wg
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=1730755555&_gaz=1&gcs=G1--&cid=1461199576.1669373862&ul=en-us&sr=1280x1024&_s=1&sid=1669373862&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FWOTHQ-1691%2FACQ%2Freg-wg
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-77NSW0BT3P>m=2oeb90&_p=1730755555&_gaz=1&gcs=G1--&cid=1461199576.1669373862&ul=en-us&sr=1280x1024&_s=1&sid=1669373862&sct=1&seg=0&dl=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D163%26xid_param_2%3D%26sid%3DSIDW-2A1UTbA62w9a9WFr6--b6XT4B0GU7bp2A0BtVsAXE5QU_QHM3jKt6Nj8-t1QE5ZD7-QY60iPD65l5Jvx2uJ0jqn7kh8NWYHgI4agX55LDKHEX0Mv7-0ptDCpGHig73wGu3ITVyWpB9%26enctid%3Dcolbn8r8j1ra%26lpsn%3DWOT%2520ONGOING%2520WW%2520Videoback%2520LMS%2520WOTHQ-1691%26foris%3D1%26teclient%3D1669373861404717012%26utm_source%3Dwlap%26utm_medium%3Daffiliate%26utm_campaign%3Daly9ipyd%26utm_content%3D869&dt=World%20of%20Tanks%E2%80%94Gratis%20%C3%A5%20spille%20tanksaction%20MMO.%20Last%20ned%20n%C3%A5%20og%20spill%20gratis!&en=page_view&_fv=1&_nsi=1&_ss=1&ep.prod_name=wot&ep.prod_realm=eu&ep.prod_lang=no&ep.prod_type=lp&ep.prod_lptype=videoback%2FWOTHQ-1691%2FACQ%2Freg-wg HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://join.worldoftanks.eu
date: Fri, 25 Nov 2022 10:57:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&RedC=c.clarity.ms&MXFR=338CBD1AEADD6DDD3FFCAF7DEEDD6373
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&RedC=c.clarity.ms&MXFR=338CBD1AEADD6DDD3FFCAF7DEEDD6373
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&RedC=c.clarity.ms&MXFR=338CBD1AEADD6DDD3FFCAF7DEEDD6373 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&MUID=38A9F7F5BCEF6F252FD5E592BDB86E54
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=38A9F7F5BCEF6F252FD5E592BDB86E54; domain=c.bing.com; expires=Wed, 20-Dec-2023 10:57:43 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 45710E2F57A94AA3B21636BD99F3F99E Ref B: OSL30EDGE0415 Ref C: 2022-11-25T10:57:43Z
date: Fri, 25 Nov 2022 10:57:43 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&MUID=38A9F7F5BCEF6F252FD5E592BDB86E54
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&MUID=38A9F7F5BCEF6F252FD5E592BDB86E54
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=C4187376AC124FE3AA10F24EB43EFF1A&MUID=38A9F7F5BCEF6F252FD5E592BDB86E54 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://join.worldoftanks.eu/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 25-Nov-2022 11:07:43 GMT; path=/; SameSite=None; Secure;
date: Fri, 25 Nov 2022 10:57:42 GMT
content-length: 42
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
13.107.227.53200 OK 55 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP 13.107.227.53:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 441723b72633b1ac9757ad7c63168005
806166ca9ebb5839dd90a5e5c9335e3e0b18c169
cc8a16ce849d72f106bd67187e4b60c20da3093375202bf0b53f23e8f40a8b11
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 55116
content-type: application/javascript;charset=utf-8
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8fceb15c2864c"
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-cache: CONFIG_NOCACHE
x-azure-ref: 0p5+AYwAAAABf5XS8Ulq9R6nwfxmuo/6UT1NMMjMxMDUwMjA0MDIzADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Fri, 25 Nov 2022 10:57:43 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1744
Origin: https://join.worldoftanks.eu
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://join.worldoftanks.eu
access-control-allow-credentials: true
date: Fri, 25 Nov 2022 10:57:43 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese
IP 142.250.74.10:0
GET /css?family=Noto+Sans+KR:400,700|Roboto+Condensed:400,700&display=swap&subset=cyrillic,greek,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 10:57:41 GMT
date: Fri, 25 Nov 2022 10:57:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1d91e8e66.srtrak.com/promo-tools/direct-offers/mainstream/games/caliber/?idev_id=163&set=3&link=2583&page=922&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871&clickid=0e7baf2f4cd1385408da2f86e36e572ae963b1866e7ded3e272d132156619ddd
91.132.60.212302 Found 0 B URL HTTP/2 1d91e8e66.srtrak.com/promo-tools/direct-offers/mainstream/games/caliber/?idev_id=163&set=3&link=2583&page=922&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871&clickid=0e7baf2f4cd1385408da2f86e36e572ae963b1866e7ded3e272d132156619ddd
IP 91.132.60.212:0
GET /promo-tools/direct-offers/mainstream/games/caliber/?idev_id=163&set=3&link=2583&page=922&external_clickid=5x0zwxz7h69wfzob12gco0oc4,16704017,5,7871&clickid=0e7baf2f4cd1385408da2f86e36e572ae963b1866e7ded3e272d132156619ddd HTTP/1.1
Host: 1d91e8e66.srtrak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: sr=163--3-2583-------https%3A%2F%2F1d91e8e66.srtrak.com%2Fpromo-tools%2Fdirect-offers%2Fmainstream%2Fgames%2Fcaliber%2F
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 25 Nov 2022 10:57:40 GMT
content-type: text/html; charset=UTF-8
location: https://track.wargaming-aff.com/click?pid=869&offer_id=33&sub1=163&ref_id=0e7baf2f4cd1385408da2f86e36e572ae963b1866e7ded3e272d132156619ddd&sub3=direct-offer-fallback
set-cookie: _s=vsr9ge53fip8b1gut7u3gugd1k; path=/; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
referrer-policy: no-referrer
x-robots-tag: noindex, nofollow, nosnippet, noarchive
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.9ad664eb.css
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/app.9ad664eb.css
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/app.9ad664eb.css HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: text/css
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-15b6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:37:41+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/vendors~app.97349e52.js
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/vendors~app.97349e52.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/vendors~app.97349e52.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:41 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-2e3df"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/riddler.js
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/riddler.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/riddler.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:42 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-4391"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
lms-static.wgcdn.co/1600946604/dist/landing/videoback/sha3.js
92.223.84.84200 OK 0 B URL HTTP/2 lms-static.wgcdn.co/1600946604/dist/landing/videoback/sha3.js
IP 92.223.84.84:0
ASN #199524 G-Core Labs S.A.
GET /1600946604/dist/landing/videoback/sha3.js HTTP/1.1
Host: lms-static.wgcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:42 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 12:11:16 GMT
vary: Accept-Encoding
etag: W/"62bee464-1704"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-23T11:36:22+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.206200 OK 0 B IP 188.125.94.206:0
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fT1st0k/i2vi2y92kmOi9I3wVTHGB8sBrtHweY6pSlJNftwhcjq7mTRlGO1TFzArcQWF9Ahh2Ys=
x-amz-request-id: P4AYQ3TJRY1JN0R8
date: Fri, 25 Nov 2022 10:55:14 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 149
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/26043906
13.107.227.53200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/26043906
IP 13.107.227.53:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/26043906 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=d3e4cb1195c445bd9241a065362fe899.20221125.20231125; expires=Sat, 25 Nov 2023 10:57:43 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:67bc0b23-8423-4b52-b1ca-6a87709ceaa2
x-cache: CONFIG_NOCACHE
x-azure-ref: 0p5+AYwAAAABYrzY0uoZQT4IdhFkdghG+T1NMMjMxMDUwMjA0MDIzADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Fri, 25 Nov 2022 10:57:43 GMT
X-Firefox-Spdy: h2
a1.adform.net/Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.4.28302 Found 0 B URL HTTP/2 a1.adform.net/Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.4.28:0
GET /Serving/TrackPoint/?pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://join.worldoftanks.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 25 Nov 2022 10:57:43 GMT
content-type: text/html; charset=utf-8
location: https://a1.adform.net/Serving/TrackPoint/?CC=1&pm=2446135&ADFPageName=WOT%20-%20EU%20-%20Landing%20Page&ADFdivider=%7C&ord=575411585622&ADFtpmode=2&loc=https%3A%2F%2Fjoin.worldoftanks.eu%2F1600946604%2Fno%2F%3Ft%3D1%26pub_id%3D869%26xid%3D63809fa5b09cbb0001941a9b%26xid_param1%3D&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Sun, 25-Dec-2022 10:57:43 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2