www.pravda.com.ua/eng/news/2022/09/5/7366117/
301 Moved Permanently 162 B URL HTTP/1.1 www.pravda.com.ua/eng/news/2022/09/5/7366117/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /eng/news/2022/09/5/7366117/ HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 11 Sep 2022 07:01:53 GMT
Content-Type: text/html
Content-Length: 162
Location: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Via: 1.1 google
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 06:07:22 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HRNbH3-qUzZJAZwFhyJC68naRuFJXj6NUPxkasnjX2wfTNX2aDSEpw==
Age: 3271
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14334
Expires: Sun, 11 Sep 2022 11:00:47 GMT
Date: Sun, 11 Sep 2022 07:01:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xWZxi-_2OfGuAlyLTgj7mzW35LKXUo0hlf5RYEzYPVL4faJvVHxbBg==
age: 85481
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash 5680ad370d48362266336b58df9f5fbb
38844e85c94e74486bfe98c87aabac4f207fe19b
175f189e80a94dd60d51fa90a451e5f1073e9200e2187b4ad29e30b097f9341b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 05:04:32 GMT
Expires: Thu, 15 Sep 2022 05:04:31 GMT
Etag: "38844e85c94e74486bfe98c87aabac4f207fe19b"
Cache-Control: max-age=337957,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e36a9f0af6-OSL
www.pravda.com.ua/eng/news/2022/09/5/7366117/
200 OK 19 kB URL HTTP/2 www.pravda.com.ua/eng/news/2022/09/5/7366117/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (5128), with CRLF, LF line terminators
Hash 28dddc7adb8181fd6d45e23823e19f2f
4825992d8d23e0d398e022506da6d8c748c8b9ae
7def310e3aff546e2cde25ffc083de3e622ff5524afb00a631ac54e11471bbce
GET /eng/news/2022/09/5/7366117/ HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-encoding: br
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 07:01:31 GMT
content-type: text/html; charset=windows-1251
content-length: 18612
age: 23
cache-control: no-transform,public,max-age=86400
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/fonts/firasans-extrabold-webfont.woff2?1
200 OK 65 kB URL HTTP/2 www.pravda.com.ua/images/v6/fonts/firasans-extrabold-webfont.woff2?1
IP
File type Web Open Font Format (Version 2), TrueType, length 64904, version 1.0\012- data
Hash e71caebb37c4ebcd818042ed50fc9ba5
e9e4ca3fda58ff70fadbdad732694f77a647b6eb
009768c55260bbec207a0683d7d369513ac461c133ba9d481d8671a60a4db43c
GET /images/v6/fonts/firasans-extrabold-webfont.woff2?1 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:22:10 GMT
content-type: text/html; charset=windows-1251
content-length: 64908
age: 13184
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/fonts/firasans-regular-webfont.woff2?1
200 OK 65 kB URL HTTP/2 www.pravda.com.ua/images/v6/fonts/firasans-regular-webfont.woff2?1
IP
File type Web Open Font Format (Version 2), TrueType, length 64676, version 1.0\012- data
Hash 0a7eb1cad2e136bd84214857ed513589
42f0e56b7a89ace9e981a597f9e8a0b0629254b1
eb2acdeed90af05956b14376a25ec2249494e6f4e0848b4245c78bd2160a17a8
GET /images/v6/fonts/firasans-regular-webfont.woff2?1 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:22:10 GMT
content-type: text/html; charset=windows-1251
content-length: 64680
age: 13184
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/fonts/firasans-bold-webfont.woff2?1
200 OK 65 kB URL HTTP/2 www.pravda.com.ua/images/v6/fonts/firasans-bold-webfont.woff2?1
IP
File type Web Open Font Format (Version 2), TrueType, length 65144, version 1.0\012- data
Hash 9478a6e04033291a30733e69b0af277e
fd093225dc48c865f72ef6a59e5f04f1f6d073e6
6d1037044ed6dbc90e716d74923b63995949d21b04e3274f1a068e961a7ce4e9
GET /images/v6/fonts/firasans-bold-webfont.woff2?1 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:22:10 GMT
content-type: text/html; charset=windows-1251
content-length: 65148
age: 13184
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/index.css?29
200 OK 22 kB URL HTTP/2 www.pravda.com.ua/misc/v6/index.css?29
IP
File type ASCII text, with very long lines (651)
Hash 4bdd16b93e6a2c9cde589db7814d6d40
d2b7e37deaf4446d6c83dbebe351aba3f3d5c4ca
4a51f75ada30956bde4d628821465c8de19263a15a9e28d8915247bf868aacea
GET /misc/v6/index.css?29 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Sun, 11 Sep 2022 03:23:05 GMT
last-modified: Mon, 18 Jul 2022 13:53:28 GMT
etag: W/"62d565d8-2c19d"
content-type: text/css
content-length: 21971
age: 13129
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/jquery-1.12.4.min.js
200 OK 33 kB URL HTTP/2 www.pravda.com.ua/misc/v6/jquery-1.12.4.min.js
IP
File type ASCII text, with very long lines (32077)
Hash 18df9beb9adbb5d3623816e5c187cba6
c3d3ef99447058ff8b379b542f008ed411a95887
78e21803df2b3830b2f87a1f791d95ee48d9a8a4d91fa322f3955ea249382751
GET /misc/v6/jquery-1.12.4.min.js HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Sun, 11 Sep 2022 03:23:05 GMT
last-modified: Mon, 17 Feb 2020 12:57:31 GMT
etag: W/"5e4a8dbb-17b8b"
content-type: application/javascript; charset=windows-1251
content-length: 32724
age: 13129
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/sticky-kit.js
200 OK 1.9 kB URL HTTP/2 www.pravda.com.ua/misc/v6/sticky-kit.js
IP
Hash 29c45f26352aa37d59fb96686ea9d603
989d2795a39188ddfcb0e9b8cfbc4e30aa3dc70d
b28dd0bba77b9c217f8a506add7cb66217dd966c15f9428e5cafe051331fd1f4
GET /misc/v6/sticky-kit.js HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Sun, 11 Sep 2022 03:23:05 GMT
last-modified: Tue, 21 Mar 2017 03:30:03 GMT
etag: W/"58d09e3b-218d"
content-type: application/javascript; charset=windows-1251
content-length: 1942
age: 13129
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/common.js?8
200 OK 1.4 kB URL HTTP/2 www.pravda.com.ua/misc/v6/common.js?8
IP
File type ASCII text, with CRLF line terminators
Hash 22b0d99fa92750337b4f0c4fe1004b46
a2e04a39c475a935d7b1a0409d93d2d412371cb6
8d4541d4889eb34012d02d90ed2efaa4fb0434d5e5e2f0275e4f8bfff7109f40
GET /misc/v6/common.js?8 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Sun, 11 Sep 2022 03:22:10 GMT
last-modified: Mon, 17 Jan 2022 13:47:05 GMT
etag: W/"61e57359-1a94"
content-type: application/javascript; charset=windows-1251
content-length: 1413
age: 13184
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_eye.svg
200 OK 502 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_eye.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (439)
Hash ff97a0d3dbe4e373444557735e3193df
9fb5579d500f3c1623db469b6ad81396631e49e9
369163a2be3c3f1685f4b545199a1304a16ec3f0dc28d2b57d61e59e7584d706
GET /images/v6/ico_eye.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 502
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:24:57 GMT
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1f6"
content-type: image/svg+xml
age: 13017
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_fb.svg
200 OK 481 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_fb.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash d472732f554e8fbf41f7a54746694c87
1b3ac30c2085c5c21b791ad783de459575275aa4
a9c7d999faf52b0de946c2e264ed7e260f2a27cf086451f4b932b558b65f60a0
GET /images/v6/ico_fb.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 481
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:24:57 GMT
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1e1"
content-type: image/svg+xml
age: 13017
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_telegram.svg
200 OK 496 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_telegram.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash af584d5b32af957e44f2264d9de2a0fc
ad430281d5d2f312d47829ffb5390f5388c16a13
e9df3785c23493cb3da4e9c5ed52680fc39b7b1ccd28e904b6d422b74fb273ea
GET /images/v6/ico_telegram.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 496
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:24:57 GMT
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1f0"
content-type: image/svg+xml
age: 13017
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash 5680ad370d48362266336b58df9f5fbb
38844e85c94e74486bfe98c87aabac4f207fe19b
175f189e80a94dd60d51fa90a451e5f1073e9200e2187b4ad29e30b097f9341b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 05:04:32 GMT
Expires: Thu, 15 Sep 2022 05:04:31 GMT
Etag: "38844e85c94e74486bfe98c87aabac4f207fe19b"
Cache-Control: max-age=337956,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e51c090af6-OSL
www.pravda.com.ua/images/v6/ico_twitter.svg
200 OK 668 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_twitter.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (795), with CRLF line terminators
Hash b05ebacb0f20679bec23ad003be0aae8
a2a2f73376fa7e5a46119e305eaf48bb9be75521
702c2fd2f4058f9d408efea46e5318d2caf28f31f216d1575675ff70a5a5d8e8
GET /images/v6/ico_twitter.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 668
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:22:23 GMT
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-29c"
content-type: image/svg+xml
age: 13171
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_comments.svg
200 OK 435 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_comments.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text
Hash 484b0e05bbbee86ecad24d9473b34544
77a7ffb84c5a3c2ff0124b4c1c0280e14527db0d
06cca9461488f5db355b10b477156d0deef73ec101f12b9602763111c9e60db9
GET /images/v6/ico_comments.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 435
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 11 Sep 2022 03:24:57 GMT
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1b3"
content-type: image/svg+xml
age: 13017
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_patreon.svg
200 OK 490 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_patreon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 9b4440331817a34f6717f0ab55d385dc
6fa8305047c667d2cffff2c9a4d48ac98e7a31c2
bee5d8b92d1983ca50233cfea71aed7abcb1512367f254ee1dcae35eb3eb3046
GET /images/v6/ico_patreon.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 490
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
accept-ranges: bytes
via: 1.1 google
date: Sun, 11 Sep 2022 03:23:06 GMT
last-modified: Tue, 21 Jun 2022 11:31:09 GMT
etag: "62b1abfd-1ea"
content-type: image/svg+xml
age: 13128
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_linkedin.svg
200 OK 706 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_linkedin.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 31a07855f6bf979b4d695926bf04b15f
595d38b81d3c4707aed6b78b45a6a0948a21cdd6
29a1a191b3918703a38e5ce9bdae2ed12e62082f45b8e2407eeacc0417df9fd3
GET /images/v6/ico_linkedin.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 706
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
accept-ranges: bytes
via: 1.1 google
date: Sun, 11 Sep 2022 03:23:06 GMT
last-modified: Tue, 21 Jun 2022 11:31:09 GMT
etag: "62b1abfd-2c2"
content-type: image/svg+xml
age: 13128
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/eng/interfax.svg
200 OK 1.5 kB URL HTTP/2 www.pravda.com.ua/misc/eng/interfax.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (2095), with CRLF line terminators
Hash 2b905a9014ed12f8cd5bf387d6d8be5f
20f7563973b5c0037ec4c76ac7dab10caf1aa761
b1a8a517e4dc401c1b6f5279a73c87619aeda5e61821b3519c5d073514979974
GET /misc/eng/interfax.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding
accept-ranges: none
via: 1.1 google
content-encoding: br
date: Sun, 11 Sep 2022 03:23:06 GMT
last-modified: Fri, 13 Dec 2019 16:40:00 GMT
etag: W/"a77-5999883457800"
content-type: image/svg+xml
content-length: 1494
age: 13128
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/eng/quixote.svg
200 OK 15 kB URL HTTP/2 www.pravda.com.ua/misc/eng/quixote.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (33375), with CRLF line terminators
Hash e76a179bd84604110147e7228b986c9b
7ca3ffb4ff0e3e18af28a4d8ab9659587bb89fe1
3d32eaff2c626fcda39fffce5ddb7ad048742deb0659d46c6ce32b9825ad9d39
GET /misc/eng/quixote.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding
accept-ranges: none
via: 1.1 google
content-encoding: br
date: Sun, 11 Sep 2022 03:23:06 GMT
last-modified: Fri, 13 Dec 2019 16:40:08 GMT
etag: W/"84af-5999883bf8a00"
content-type: image/svg+xml
content-length: 14761
age: 13128
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/cabinet.js?5
200 OK 2.9 kB URL HTTP/2 www.pravda.com.ua/misc/cabinet.js?5
IP
File type HTML document, ISO-8859 text, with very long lines (1944)
Hash 98e75b97682af71c28d2b05e6e56b2fd
a15ab521a50d98d6dddce7cdca260fd20feb0f1c
2f49ec61cfc26ad90b2a8f81eab5bc00a5c0baef6c711ce735b06f24927263b5
GET /misc/cabinet.js?5 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Sun, 11 Sep 2022 03:23:06 GMT
last-modified: Mon, 22 Nov 2021 15:24:28 GMT
etag: W/"619bb62c-41f6"
content-type: application/javascript; charset=windows-1251
content-length: 2899
age: 13128
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 57b75ea93de540716c45f1397781431a
431cc2c684385c4e46facd7210b5ac49b9dd09cc
4581d7dd422dc110fa7cfe667297cdb75d92a02ce7226db6db89448befa5b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f586b81b1349ef74883152e678038739
3482dfd713c0471d36b94bb23984930a9a20453c
f0bb0bb1d52db1a53c08aa23ff7219571ab6b36c2d22159439bb0ce550a1bd6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0BB0BB1D52DB1A53C08AA23FF7219571AB6B36C2D22159439BB0CE550A1BD6F"
Last-Modified: Sun, 11 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20728
Expires: Sun, 11 Sep 2022 12:47:22 GMT
Date: Sun, 11 Sep 2022 07:01:54 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 282 B IP
Hash f71d7aca3aae6968d42c036ddcfa3ce5
d81297b5e412a02bb5e466be617711e755564e49
227ddd8e2e42638a3742be48f693308e7550a2d9fc183e5a940763dd41407a64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 11:01:16 GMT
Expires: Thu, 15 Sep 2022 11:01:15 GMT
Etag: "d81297b5e412a02bb5e466be617711e755564e49"
Cache-Control: max-age=359360,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e68d300af6-OSL
www.pravda.com.ua/counter/7366117
200 OK 42 B URL HTTP/2 www.pravda.com.ua/counter/7366117
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 0060cc426d58ea30f5099166a6452fdb
b30735b3b50864255dbe975427ee86373d876ef0
338aa77590082270f139cb5243d5dbb85989ffaa10b180c6ce8d788f47ee7c34
GET /counter/7366117 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/09/5/7366117/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: image/gif
content-length: 42
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: must-revalidate, no-transform
vary: Accept-Encoding
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 282 B IP
Hash f71d7aca3aae6968d42c036ddcfa3ce5
d81297b5e412a02bb5e466be617711e755564e49
227ddd8e2e42638a3742be48f693308e7550a2d9fc183e5a940763dd41407a64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 11:01:16 GMT
Expires: Thu, 15 Sep 2022 11:01:15 GMT
Etag: "d81297b5e412a02bb5e466be617711e755564e49"
Cache-Control: max-age=359360,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e69ffeb515-OSL
ocsp.sectigo.com/
200 OK 282 B IP
Hash f71d7aca3aae6968d42c036ddcfa3ce5
d81297b5e412a02bb5e466be617711e755564e49
227ddd8e2e42638a3742be48f693308e7550a2d9fc183e5a940763dd41407a64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 11:01:16 GMT
Expires: Thu, 15 Sep 2022 11:01:15 GMT
Etag: "d81297b5e412a02bb5e466be617711e755564e49"
Cache-Control: max-age=359360,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e6aadcb51d-OSL
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 0ccf02d52b75b85c65aa5460aa24aebf
50d1a19cb9ebbd6d42173ce2d963ea4df29e8e5a
d13778acf057777bad23fd020088463d65d2b7baff042cd4529d27faa46daf38
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1084
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Sun, 11 Sep 2022 07:01:54 GMT
Etag: "f116c7e6b28e2aebeb60ade5bdc8e2b4+gzip"
Last-Modified: Wed, 31 Aug 2022 20:41:50 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70C)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29220
www.googletagmanager.com/gtag/js?id=UA-554376-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-554376-1
IP
File type ASCII text, with very long lines (1615)
Hash 38b46b88bbabbed43593ab1db8607ae1
1d1e45086dd97af7df0dd53ca8ec856e288234db
b498415223607a7355c36123fdb48e1fd5d59111c32dbe3c37cb1e975c3aa707
GET /gtag/js?id=UA-554376-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 07:01:54 GMT
expires: Sun, 11 Sep 2022 07:01:54 GMT
cache-control: private, max-age=900
last-modified: Sun, 11 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41895
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 282 B IP
Hash f71d7aca3aae6968d42c036ddcfa3ce5
d81297b5e412a02bb5e466be617711e755564e49
227ddd8e2e42638a3742be48f693308e7550a2d9fc183e5a940763dd41407a64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 11:01:16 GMT
Expires: Thu, 15 Sep 2022 11:01:15 GMT
Etag: "d81297b5e412a02bb5e466be617711e755564e49"
Cache-Control: max-age=359360,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e6ca3e0b39-OSL
www.googletagmanager.com/gtm.js?id=GTM-WW7B57
200 OK 58 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WW7B57
IP
File type Unicode text, UTF-8 text, with very long lines (47099)
Hash ac9c7d7096702b5003d1218c1a383ac5
83ee95583bedcfebc15ae9b80793523aff643fba
4d3263cf6407447606d521eb98f726c768f4533959012c787ed35efb5663c2af
GET /gtm.js?id=GTM-WW7B57 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 07:01:54 GMT
expires: Sun, 11 Sep 2022 07:01:54 GMT
cache-control: private, max-age=900
last-modified: Sun, 11 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 57663
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img.pravda.com/images/doc/7/0/700343e-p434-original.png
200 OK 165 kB URL HTTP/2 img.pravda.com/images/doc/7/0/700343e-p434-original.png
IP
File type PNG image data, 1960 x 280, 8-bit/color RGB, non-interlaced\012- data
Size 165 kB (164727 bytes)
Hash 29395f34d908fb7f5a79f0e88427f2ad
94ff8dc7dccb484d490af3bb5712205ea76756f3
92b627801b17a9f10844ee322484af4928604a030fd390d2fd101bc510358b77
GET /images/doc/7/0/700343e-p434-original.png HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 164727
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Sat, 10 Sep 2022 14:14:03 GMT
age: 60471
last-modified: Thu, 11 Aug 2022 14:08:48 GMT
etag: "62f50d70-28377"
content-type: image/png
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c96279d592d09b0a483b1d291342af01
4c8e1007ffe0eacb0f5640372157027272584b79
e967d58643a381bef0388a67eaf9dfaca14fcda81f3e4f2ee55988e53158fb95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img.pravda.com/images/doc/9/d/9ddb9f7-irf.png
200 OK 9.4 kB URL HTTP/2 img.pravda.com/images/doc/9/d/9ddb9f7-irf.png
IP
File type PNG image data, 260 x 99, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a22546cb96e0436780a08f818691b39
22a2f41ae8b2133758d033a0888e510869d8b34b
5384a066982276b144c2b5c5167c0bd12a4193211016c6a540da791eeeb64bc8
GET /images/doc/9/d/9ddb9f7-irf.png HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9392
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Mon, 29 Aug 2022 14:22:39 GMT
last-modified: Mon, 29 Aug 2022 14:13:49 GMT
etag: "630cc99d-24b0"
content-type: image/png
age: 1096755
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img.pravda.com/images/doc/d/7/d7520c7-p451m-original.png
200 OK 80 kB URL HTTP/2 img.pravda.com/images/doc/d/7/d7520c7-p451m-original.png
IP
File type PNG image data, 640 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 12737f80e8b194bd735b25011bb3b93a
9827be4dc0f02baf6a14b8f7798e17927475db49
5833296d297e3611ee9e4c99818ae8c389c86a88593d15d875b964a69274a957
GET /images/doc/d/7/d7520c7-p451m-original.png HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 80484
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Sat, 10 Sep 2022 14:14:03 GMT
age: 60471
last-modified: Thu, 11 Aug 2022 14:10:31 GMT
etag: "62f50dd7-13a64"
content-type: image/png
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (1952)
Hash 902cfd206a78c4eae56d87bb357f427e
4ad4df5fdc5a1004a718d389a461e37780ade759
450ddee27f69db14fd541551e86634b6d829a5c4e8e6097cf1d0c7a947aaf1f1
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 11 Sep 2022 07:01:54 GMT
expires: Sun, 11 Sep 2022 07:01:54 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 16286937264090633215
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 17396
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 00fcdc1cb870688aab3b38a7a7f45c4c
bff419a79703a7fe2c21a4f408b3e4ea20135364
832d7549448f147b4d547478ea3b7492adf81e15218d6a845cf78a909064b23c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 09:57:40 GMT
Expires: Fri, 16 Sep 2022 09:57:39 GMT
Etag: "bff419a79703a7fe2c21a4f408b3e4ea20135364"
Cache-Control: max-age=441944,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e72dad0af6-OSL
img.pravda.com/images/doc/e/c/ec09590-ec20891-screenshot-530--2-.jpg
200 OK 338 kB URL HTTP/2 img.pravda.com/images/doc/e/c/ec09590-ec20891-screenshot-530--2-.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 690x387, components 3\012- data
Size 338 kB (338157 bytes)
Hash 963b0d7314bcbaf1af08998c25337a88
7bf1c35ff171039692b10d15623ce12b177d3493
667f5b5d96d6a68ce3cca20c37676bfe4ddcdbdc48b2059971919f5739ec2be4
GET /images/doc/e/c/ec09590-ec20891-screenshot-530--2-.jpg HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 338157
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Sun, 11 Sep 2022 07:01:31 GMT
last-modified: Mon, 05 Sep 2022 08:27:23 GMT
etag: "6315b2eb-528ed"
content-type: image/jpeg
age: 23
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 57b75ea93de540716c45f1397781431a
431cc2c684385c4e46facd7210b5ac49b9dd09cc
4581d7dd422dc110fa7cfe667297cdb75d92a02ce7226db6db89448befa5b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 282 B IP
Hash f71d7aca3aae6968d42c036ddcfa3ce5
d81297b5e412a02bb5e466be617711e755564e49
227ddd8e2e42638a3742be48f693308e7550a2d9fc183e5a940763dd41407a64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 11:01:16 GMT
Expires: Thu, 15 Sep 2022 11:01:15 GMT
Etag: "d81297b5e412a02bb5e466be617711e755564e49"
Cache-Control: max-age=359360,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e77902b515-OSL
cdn.onthe.io/io.js/7LWgKFUpDNmn
200 OK 17 kB URL HTTP/1.1 cdn.onthe.io/io.js/7LWgKFUpDNmn
IP
ASN #14061 DIGITALOCEAN-ASN
File type C source, ASCII text, with very long lines (53870), with no line terminators
Hash c2d800180258443036afb77b09f291fb
a2b1d608aca3c0ceaedb84361bee2690542656d6
6dc1c59a6ca1b8023956330d0f5a02c14ec3e6713d503d1557d9c8270cf2dd5e
GET /io.js/7LWgKFUpDNmn HTTP/1.1
Host: cdn.onthe.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 24 Aug 2022 13:39:35 GMT
ETag: W/"63062a17-d26e"
Expires: Mon, 12 Sep 2022 07:01:54 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
platform.twitter.com/widgets/widget_iframe.c4bdc17e77719578b594d5555bee90db.html?origin=https%3A%2F%2Fwww.pravda.com.ua
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.c4bdc17e77719578b594d5555bee90db.html?origin=https%3A%2F%2Fwww.pravda.com.ua
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash aa228863765c3263e12f1d7c71015518
619739a12e0f16eab26a43a913b35779edea57a6
cf9a241903646ee9b88b76da2bb3e11d16f36246f7bbc53bbe2c98466e5ea12a
GET /widgets/widget_iframe.c4bdc17e77719578b594d5555bee90db.html?origin=https%3A%2F%2Fwww.pravda.com.ua HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 901121
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Sun, 11 Sep 2022 07:01:54 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 31 Aug 2022 20:40:57 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F6FE)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 55d14c90ec16748861894ce8f82eafcd
f3ebe8972971c1201c1ec7c533f019f79c36cde5
fa0dc0f0a76f3407dad8dae59a4817ef6b1371fcaa930448373d64720a036698
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 11 Sep 2022 06:56:07 GMT
Cache-Control: max-age=3600
Expires: Sun, 11 Sep 2022 07:05:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jB2Xft9qG8RLMsm7k5aZf1Y1ZoqhK8yJ5ssIpvrKuJ-dsi8LzvAXrw==
Age: 347
ocsp.digicert.com/
200 OK 471 B IP
Hash 4a8b934802b39ce62326f039ac83cd96
dbfe44bfbec869b99291881ce7c2539d34d7ca9c
c1d5a7058b585d2207c7162b7d0ed62443426b9b2e1262391ad3118884bda651
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1307
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 06:40:07 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.googletagservices.com/tag/js/gpt.js
200 OK 29 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45064)
Hash 78fe8f1150881feabfab31290bd65805
40134aa20d2ece7c43f20be1fb34dc9663d9bc6f
6344416ba5ba1cd18ce272b41c66c7a431c3fba0f125eb048f99a728f1e0b126
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 28684
date: Sun, 11 Sep 2022 07:01:54 GMT
expires: Sun, 11 Sep 2022 07:01:54 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1330 / 727 of 1000 / last-modified: 1662761167"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tt.onthe.io/?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F,domain:www.pravda.com.ua,page:Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council,page_type:article,author:rpetrenko,category:No%20Category,language:en,type_article:news,reference_time:31,pub_date:Mon%2C%2005%20Sep%202022%2011%3A26%3A06%20%2B0300,user_agent:Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0,device:desktop,browser_version:Firefox%2096,browser:Firefox,depth:1,user_type:new,user_id:5205fa0d5.c6f73d882_1662879704052,session_id:6e0e827c4.e1092caf9_1662879704053,cdn_version:0]&s=587ca673994803384542e727e488bf24&1662879704059
200 OK 0 B URL HTTP/1.1 tt.onthe.io/?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F,domain:www.pravda.com.ua,page:Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council,page_type:article,author:rpetrenko,category:No%20Category,language:en,type_article:news,reference_time:31,pub_date:Mon%2C%2005%20Sep%202022%2011%3A26%3A06%20%2B0300,user_agent:Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0,device:desktop,browser_version:Firefox%2096,browser:Firefox,depth:1,user_type:new,user_id:5205fa0d5.c6f73d882_1662879704052,session_id:6e0e827c4.e1092caf9_1662879704053,cdn_version:0]&s=587ca673994803384542e727e488bf24&1662879704059
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F,domain:www.pravda.com.ua,page:Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council,page_type:article,author:rpetrenko,category:No%20Category,language:en,type_article:news,reference_time:31,pub_date:Mon%2C%2005%20Sep%202022%2011%3A26%3A06%20%2B0300,user_agent:Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0,device:desktop,browser_version:Firefox%2096,browser:Firefox,depth:1,user_type:new,user_id:5205fa0d5.c6f73d882_1662879704052,session_id:6e0e827c4.e1092caf9_1662879704053,cdn_version:0]&s=587ca673994803384542e727e488bf24&1662879704059 HTTP/1.1
Host: tt.onthe.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: text/javascript
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Pragma: no-cache
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 55d14c90ec16748861894ce8f82eafcd
f3ebe8972971c1201c1ec7c533f019f79c36cde5
fa0dc0f0a76f3407dad8dae59a4817ef6b1371fcaa930448373d64720a036698
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.membrana.media/geolocation.json
200 OK 3 B URL HTTP/2 cdn.membrana.media/geolocation.json
IP
ASN #34989 ServeTheWorld AS
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /geolocation.json HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Origin: https://www.pravda.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: text/plain
content-length: 3
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: x-ym-country, cdn-requestcountrycode
cache-control: public, max-age=86400
etag: "622b54c3-3"
last-modified: Fri, 11 Mar 2022 13:55:15 GMT
cdn-storageserver: DE-199
cdn-fileserver: 309
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 08/29/2022 19:21:02
cdn-edgestorageid: 830
x-ym-country: NO
cdn-status: 200
cdn-requestid: 5bf471a9a428f4cb4562c72470cd1a3a
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
connect.facebook.net/eng_UK/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/eng_UK/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 7a1345fd3982e51eb99550420f344137
25e61542e59560e4f9d91b4a4b46a7db901bf1d6
3b52c49a00b85ff016b7baad100c7087ada98c325476d9a943ffa14b5ac2843b
GET /eng_UK/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 2596bd0394ab58b270caafe7f69461ff
etag: "7b4fcfd8f684a25301e2456560a97697"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 11 Sep 2022 07:15:11 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: ehNF/TmC5R65lVBCDzRBNw==
x-fb-debug: +TAOWvqvwaxbIkn4CP8/C/dB4HBndg+ZoySDsQarzJqGXQVTh6dnTuh7iqyHJHc757O1WlkpDaCuuVYYPlAL0w==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Sun, 11 Sep 2022 07:01:54 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash 72fecabf41af0cb24a5b61df7a2e453b
0bb639d722febafbf0573305d37795002b217968
1bbe07f3b08e10272660c01709e6a62617418639a4c9c3b01feb571a483ee76e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 20:55:33 GMT
Expires: Sat, 17 Sep 2022 20:55:32 GMT
Etag: "0bb639d722febafbf0573305d37795002b217968"
Cache-Control: max-age=567817,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88e9483e0af6-OSL
googleads.g.doubleclick.net/pagead/viewthroughconversion/871974790/?random=1662879703995&cv=9&fst=1662879703995&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/871974790/?random=1662879703995&cv=9&fst=1662879703995&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2342), with no line terminators
Hash 3b19624d96e5d434681b3d4c22d5a694
3f19b7074329380f90030b20a443abba0a588e04
fd95ecdecf92d386d0d0cddb303fd268d64186d935bec36a8c4d7cb8e2f85922
GET /pagead/viewthroughconversion/871974790/?random=1662879703995&cv=9&fst=1662879703995&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 07:01:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1074
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 07:16:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 52e9233c492016bdd3293ee357af804f
cf48cc3be7d8b9fcd27383221432c0cad029acb2
dc1be2ddd407944bf670da8e7f0e9290c62bdb7f9c4ec22d291679614cdf03a4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5019
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 05:38:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
cdn.membrana.media/video/video.js
200 OK 114 kB URL HTTP/2 cdn.membrana.media/video/video.js
IP
ASN #34989 ServeTheWorld AS
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Size 114 kB (113539 bytes)
Hash 446c13d2e5b0898a33af4b4162637777
1d1cb681d508ee8cc62f91d67b18b521d9ab1b0f
e108aaef5064c56bd4c0088e991a4424375f659bbfeb9ea84091125d499fc091
GET /video/video.js HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: application/javascript
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"631ca3f6-36c38"
last-modified: Sat, 10 Sep 2022 14:49:26 GMT
cdn-storageserver: DE-198
cdn-fileserver: 224
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/10/2022 14:50:06
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 79e4f8890703ba3af54d34cb41cb30a0
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/xgemius.js
200 OK 16 kB URL HTTP/2 gaua.hit.gemius.pl/xgemius.js
IP
File type ASCII text, with very long lines (417)
Hash 4b60639220f7c418e237a3446692b388
e4afe036ad95942a845eb891915a92f9d9c002b5
3594080722b5ae7394efc181dc546b93a7af3652291d7d47117d211fecd9b826
GET /xgemius.js HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
expires: Sun, 11 Sep 2022 19:01:54 GMT
server: GHC
accept-ranges: none
cache-control: max-age=43200
last-modified: Wed, 07 Sep 2022 10:13:48 GMT
vary: Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 15916
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 55d14c90ec16748861894ce8f82eafcd
f3ebe8972971c1201c1ec7c533f019f79c36cde5
fa0dc0f0a76f3407dad8dae59a4817ef6b1371fcaa930448373d64720a036698
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 53499b5783c3c22faae4d3cef8e58b7e
39cfd9dbe15c1726bf7743e50c30ba3189c69c14
c3e7683dc81959a4086befc564563157e1119977db6b2ed72c4d8f70d8ebeea0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Server: ECS (amb/6BB5)
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash cb0df00793a408002f34e15d46891867
c4ff7893bd32277cedfe9686fc0c4ae2fa61a26d
b719a67d985e5c987ce4c9f193c234195a8db22be5f3f44c24a28b58019f7127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5550
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 05:29:24 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash cb0df00793a408002f34e15d46891867
c4ff7893bd32277cedfe9686fc0c4ae2fa61a26d
b719a67d985e5c987ce4c9f193c234195a8db22be5f3f44c24a28b58019f7127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5550
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 05:29:24 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 4a8b934802b39ce62326f039ac83cd96
dbfe44bfbec869b99291881ce7c2539d34d7ca9c
c1d5a7058b585d2207c7162b7d0ed62443426b9b2e1262391ad3118884bda651
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6556
Cache-Control: max-age=98666
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Etag: "631c4cb0-1d7"
Expires: Mon, 12 Sep 2022 10:26:20 GMT
Last-Modified: Sat, 10 Sep 2022 08:37:04 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash cb0df00793a408002f34e15d46891867
c4ff7893bd32277cedfe9686fc0c4ae2fa61a26d
b719a67d985e5c987ce4c9f193c234195a8db22be5f3f44c24a28b58019f7127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5550
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 05:29:24 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash fd4d7b501c1b64a13eaf5e922020838c
d0b48e2f99a1f348bd8f84e76203b94a306f1283
37779699a76d75b57f9690876e8360155462a98e1d8ea5109f604ad19dbfdc96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2674
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 06:17:20 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash fd4d7b501c1b64a13eaf5e922020838c
d0b48e2f99a1f348bd8f84e76203b94a306f1283
37779699a76d75b57f9690876e8360155462a98e1d8ea5109f604ad19dbfdc96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4268
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:54 GMT
Last-Modified: Sun, 11 Sep 2022 05:50:46 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash fd4d7b501c1b64a13eaf5e922020838c
d0b48e2f99a1f348bd8f84e76203b94a306f1283
37779699a76d75b57f9690876e8360155462a98e1d8ea5109f604ad19dbfdc96
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2675
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Last-Modified: Sun, 11 Sep 2022 06:17:20 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 312 B IP
Hash 3aee5e901977a911e809fa62ae8c22c5
8c61531d0d40684fc490000a739d2c3c398bc5f3
9fb41c8aeaffb3c4aa34987811b3083febe69e5bd98b0a6ac69a37c763e45c38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4400
Cache-Control: max-age=159832
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Etag: "631d440b-138"
Expires: Tue, 13 Sep 2022 03:25:47 GMT
Last-Modified: Sun, 11 Sep 2022 02:12:27 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 312
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=f240d735-812e-4f0e-a29b-4d23a7fb1737&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.25966707987985194
200 OK 241 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=f240d735-812e-4f0e-a29b-4d23a7fb1737&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.25966707987985194
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5be536fb62c14828b540ebf88b6ac7df
e6e27ca86a351c25d73758436aba1c70a08ceaa3
f65aa5a742daf08d5a4517710a90b0e24ec57a2be51a11f8b19083ef5614109c
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=f240d735-812e-4f0e-a29b-4d23a7fb1737&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.25966707987985194 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: application/json
Content-Length: 241
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L7WZNBUL-1-CBQ1; Domain=.rubiconproject.com; Path=/; Expires=Mon, 11-Sep-2023 07:01:55 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EjyC2VqbkhD/e9DtVM30fCggY67GPW+5Uy8uQTLhs7vkj0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 11-Sep-2023 07:01:55 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5262443625659543
200 OK 241 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5262443625659543
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7bdf7b20d6097c4a8911734afbd2e508
c9d6ea03179595328b2270ccd154bdb41c9e7a3c
17f10a64843a84e24dd6d2c72d4ff96be941f391d77d3971665963adbf0a3f10
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.5262443625659543 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: application/json
Content-Length: 241
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L7WZNBUJ-4-DGKI; Domain=.rubiconproject.com; Path=/; Expires=Mon, 11-Sep-2023 07:01:55 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qq/ks/fVKVLTe9DtVM30fCggY67GPW+5Uy8uQTLhs7vkj0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 11-Sep-2023 07:01:55 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ocsp.digicert.com/
200 OK 471 B IP
Hash 36fe04277220227ba5ecfe7d2ff1d9d9
2eb9f6560336248cc45c1cd66d87505b5ebdf5d4
94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4512
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Last-Modified: Sun, 11 Sep 2022 05:46:43 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d76fb49a6bbb0fa333a4286388016879
c7fb808ed1411eb4d768e315ea9496b04885e14e
b257258620f0c4f424161c515ce62e6e353855302a38c299762db98cd88aca77
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash dad7070cc5f79ecb7851c96f9c81b3cd
5f1aa9b5ec59b688538ff93f3466f15bcd080aa2
d72dbf253ed03d146b9fd4e4f7ed4efcd5c145ed3a95805e41fd97b4882b511d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 17:02:02 GMT
Expires: Sat, 17 Sep 2022 17:02:01 GMT
Etag: "5f1aa9b5ec59b688538ff93f3466f15bcd080aa2"
Cache-Control: max-age=553805,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88eab9670af6-OSL
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 801faaaf795eaa794e06f02ac7fd86a5
a14bec4f332ec0f2d6e87dbd2e7dc44d5b796948
a7399b009afadb86453788f6ec9ddf23bb855aabc26afe115ddee0ff1cd73208
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=33&wv=4.43.4&cb=70580200741
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=33&wv=4.43.4&cb=70580200741
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=33&wv=4.43.4&cb=70580200741 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 665
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 11 Sep 2022 07:01:54 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www.pravda.com.ua
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7409ac882f86410045166b31591c8cd5
3ffaec2d6fbcf16065d3364e46a45095972bc543
15d6f8ba89909584917dc60aa9d4b6b214a338c444fed7bf0d15665a3753fd0c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "15D6F8BA89909584917DC60AA9D4B6B214A338C444FED7BF0D15665A3753FD0C"
Last-Modified: Fri, 09 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16744
Expires: Sun, 11 Sep 2022 11:40:59 GMT
Date: Sun, 11 Sep 2022 07:01:55 GMT
Connection: keep-alive
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3303ede60b9a41cbc1ed037abd84d882
97a2eea4ba80846308430a54c8f7cb466c584b04
64ecc4edd66d8bc7425473aefebb6b31bacc700aafad65e29f71b96e35aa204e
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 53499b5783c3c22faae4d3cef8e58b7e
39cfd9dbe15c1726bf7743e50c30ba3189c69c14
c3e7683dc81959a4086befc564563157e1119977db6b2ed72c4d8f70d8ebeea0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5972
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Last-Modified: Sun, 11 Sep 2022 05:22:23 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9%22,%22sizes%22:[[300,250]],%22bidId%22:%224294efe8275843%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%2229fb7a56-8509-4f7a-b4e5-0ea94f8daaf4%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%224323438e03a5f9e8%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%22f240d735-812e-4f0e-a29b-4d23a7fb1737%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2244af191a9f6193c8%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22}
200 OK 42 B URL HTTP/1.1 inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9%22,%22sizes%22:[[300,250]],%22bidId%22:%224294efe8275843%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%2229fb7a56-8509-4f7a-b4e5-0ea94f8daaf4%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%224323438e03a5f9e8%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%22f240d735-812e-4f0e-a29b-4d23a7fb1737%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2244af191a9f6193c8%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22}
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
GET /prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9%22,%22sizes%22:[[300,250]],%22bidId%22:%224294efe8275843%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%2229fb7a56-8509-4f7a-b4e5-0ea94f8daaf4%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%224323438e03a5f9e8%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%22f240d735-812e-4f0e-a29b-4d23a7fb1737%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2244af191a9f6193c8%22,%22bidderRequestId%22:%2241d2cc26c4ec4248%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22} HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 42
Connection: keep-alive
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
X-Xss-Protection: 0
P3p: CP="NID DSP ALL COR"
Set-Cookie: am-uid=f88823b2d8fd4728a470a0614538cc23; expires=Sat, 10 Dec 2022 07:01:55 GMT; domain=.admixer.net; secure; SameSite=None
Keep-Alive: timeout=25
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash d8edcc8982d1f52eed8f2420baa5cc82
4ec36386ca97b4058c1bf69a9676b33c53a6460d
e54125ea21bfc29224a2f784639252fc5c55e0f1fa13205cd57ba9d0887e76b8
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 01:07:31 GMT
Expires: Fri, 16 Sep 2022 01:07:30 GMT
Etag: "4ec36386ca97b4058c1bf69a9676b33c53a6460d"
Cache-Control: max-age=410134,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748e88eb1fa5b505-OSL
ocsp.digicert.com/
200 OK 313 B IP
Hash 150b7efe7fe1990bbf9fa793fcb194f4
c697f99f8d1eccf4bb526c056aaa60c1f8edf7a0
ad0d036663b192347d59e8f22275ef0f7aad4fad596fe609e13340cda5046013
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3916
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Last-Modified: Sun, 11 Sep 2022 05:56:39 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9%22,%22sizes%22:[[300,250]],%22bidId%22:%2230465ce7b8145c%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%2229fb7a56-8509-4f7a-b4e5-0ea94f8daaf4%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%223195ac3318c8e958%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%22f240d735-812e-4f0e-a29b-4d23a7fb1737%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%22322296c2d182b25%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22}
200 OK 42 B URL HTTP/1.1 inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9%22,%22sizes%22:[[300,250]],%22bidId%22:%2230465ce7b8145c%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%2229fb7a56-8509-4f7a-b4e5-0ea94f8daaf4%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%223195ac3318c8e958%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%22f240d735-812e-4f0e-a29b-4d23a7fb1737%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%22322296c2d182b25%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22}
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
GET /prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22aaf4ccd5-b1bf-4ccc-abb2-e5b8943996a9%22,%22sizes%22:[[300,250]],%22bidId%22:%2230465ce7b8145c%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%2229fb7a56-8509-4f7a-b4e5-0ea94f8daaf4%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%223195ac3318c8e958%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%22f240d735-812e-4f0e-a29b-4d23a7fb1737%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%22322296c2d182b25%22,%22bidderRequestId%22:%222957154f4da94c2%22,%22auctionId%22:%2218f78aec-1832-4705-ad99-a3c5219b7066%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22} HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 42
Connection: keep-alive
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
X-Xss-Protection: 0
P3p: CP="NID DSP ALL COR"
Set-Cookie: am-uid=f88823b2d8fd4728a470a0614538cc23; expires=Sat, 10 Dec 2022 07:01:55 GMT; domain=.admixer.net; secure; SameSite=None
Keep-Alive: timeout=25
ghb.adtelligent.com/v2/auction/
200 OK 2 B URL HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 420
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sun, 11 Sep 2022 07:01:54 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 2
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=29fb7a56-8509-4f7a-b4e5-0ea94f8daaf4&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6566595843945792
200 OK 261 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=29fb7a56-8509-4f7a-b4e5-0ea94f8daaf4&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6566595843945792
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f191f0d078126c07433bf3271f1d88b1
d949e6bca3475bf291b2e7dcbedb1e8219b2af52
7b8a436a99bec90481b056f5f452d5c742097e24ecc944d3b6949816b4cc8e4b
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=29fb7a56-8509-4f7a-b4e5-0ea94f8daaf4&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6566595843945792 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: application/json
Content-Length: 261
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L7WZNBUV-1J-HC8Y; Domain=.rubiconproject.com; Path=/; Expires=Mon, 11-Sep-2023 07:01:55 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qouMd2RBuQECe9DtVM30fCggY67GPW+5Uy8uQTLhs7vkj0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Mon, 11-Sep-2023 07:01:55 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash edfdb09b7cba79b26dbf3a2d6db62913
8824f719d12ea88fd096e72024e133eb997ba392
020331cae8367f4703f5bbf34db9c904a006a488d30541c1c9839695bc275aa1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 07:01:55 GMT
Last-Modified: Sun, 11 Sep 2022 05:20:19 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VAljPs9WSbMOtyVLcxY9l0s40j2QM6RD-qElGkq9ibWj_SZvdyAHVQ==
Age: 6096
ls.hit.gemius.pl/lsget.html
200 OK 2.7 kB URL HTTP/2 ls.hit.gemius.pl/lsget.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1255)
Hash f7e6165a14c7fb59205d0d89f10de537
21860b12b9cb2de2016b994e38d4066a7b3b1a51
4367c2dbfbde2702d24b0a6a5128015be2a3f11e1e8f9757ed50a34f5439c8b4
GET /lsget.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Tue, 11 Oct 2022 07:01:55 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 2717
content-encoding: gzip
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tmax=1000
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tmax=1000
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tmax=1000 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 270
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 7.2 kB URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14406), with no line terminators
Hash 9fe0e8691449822531ee6d64be4a58d1
83faddcb2aa2f4d366003cb1bcecbf6a21f321c5
2718e503f8966d79a9d8055af8d3f7ea202dff0ad704ad5565abb02a97f6dfd2
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1046
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
AN-X-Request-Uuid: 4cedfb1b-9707-43f8-af3b-8f1d87dba270
Set-Cookie: icu=ChgIgO9-EAoYASABKAEw44_2mAY4AUABSAEQ44_2mAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 10-Dec-2022 07:01:55 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=1566122545768972126; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 10-Dec-2022 07:01:55 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
Content-Encoding: gzip
syndication.twitter.com/settings?session_id=9060355292a9070e1030dc32b86164f41b2b8996
200 OK 308 B URL HTTP/2 syndication.twitter.com/settings?session_id=9060355292a9070e1030dc32b86164f41b2b8996
IP
File type JSON data\012- , ASCII text, with very long lines (709), with no line terminators
Hash d8e2887342b363c09cd19d9b36199dbe
47c62bf9e3e60b6ab0b61eae608db43c04f7bea4
c38e646e125827b7520415ecaf228031c848266838cd894fa44a41686fedc553
GET /settings?session_id=9060355292a9070e1030dc32b86164f41b2b8996 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Sun, 11 Sep 2022 07:01:55 GMT
content-length: 308
content-encoding: gzip
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 104
x-connection-hash: 56cb68f7d7bd916108ba1142ab40b12157f37b1b255a385060f6fa21d4fbd8ed
X-Firefox-Spdy: h2
ls.hit.gemius.pl/lsset.html
200 OK 1.9 kB URL HTTP/2 ls.hit.gemius.pl/lsset.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1257)
Hash d78ff6e80272a5ff0d6c143b2b5f4f49
6a6e204a10065d7b8572ef55a25f0894f109914a
a1f465d17868dfde2d475647d8e1275730cda7da50da2352ddd2696ed0095289
GET /lsset.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Tue, 11 Oct 2022 07:01:55 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 1871
content-encoding: gzip
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hEeCJDcRDAQ6cfcJe0nAWA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: q9ZtHe/1PB2nJg4NEgipSG8G7SY=
connect.facebook.net/en_US/sdk.js?hash=2353e1be5e25953d19ffb0d1e17892ac
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=2353e1be5e25953d19ffb0d1e17892ac
IP
File type ASCII text, with very long lines (18453)
Hash 240c7a7866baf58d8bb894a18ab72404
a6595633b8a22e28bdb599d7a221eb04493fb9c3
31167870dd3fb387949dc5d4758042c7a40b0d32aa1af2d4dd41da503307ba6d
GET /en_US/sdk.js?hash=2353e1be5e25953d19ffb0d1e17892ac HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: d06abd7ea1709967ebaba555ffe3a803
etag: "2f23ae329b40c79bfe6cfd171794efa7"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 11 Sep 2023 06:55:12 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: JAx6eGa69Y2LuJShirckBA==
x-fb-debug: v0CvFvRilw4iCR7sp8TjyS7kmudyZ8pzQcsdq1+vHgyqQk49+aDKO09JRRcaBInqHKQOkQsBIFjXkA0D5aSV1A==
content-length: 87984
x-fb-trip-id: 1679558926
date: Sun, 11 Sep 2022 07:01:55 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da7b1c24eee0db0c23872933557b7521
b8bc1215b4073784c048587e51a40152bd88c8ed
6ba38b5c68971135ed3f1fbe7afa658ce883240142a4244ce7d84fa251a64c3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.pravda.com.ua&pubid=71d4b8ca-53d1-4309-a952-3306259fb046
204 No Content 0 B URL HTTP/2 c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fwww.pravda.com.ua&pubid=71d4b8ca-53d1-4309-a952-3306259fb046
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/prod/config?src=600&u=https%3A%2F%2Fwww.pravda.com.ua&pubid=71d4b8ca-53d1-4309-a952-3306259fb046 HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-credentials: true
cache-control: max-age=21550, s-maxage=21600
date: Sun, 11 Sep 2022 01:15:06 GMT
server: Server
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QFwSi2mvu3_Rzp5LJN9JdtZmiHGaCEjMX3acsa7MF-3kKE_Cte-D5Q==
age: 20808
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/fpdata.js?href=www.pravda.com.ua
200 OK 282 B URL HTTP/2 gaua.hit.gemius.pl/fpdata.js?href=www.pravda.com.ua
IP
Hash 9eb3c9a72cadd4ffe59505d85ce9efe9
d5cb886cd7b5323a873ad2801e2aef1c8654b3f7
f87e88344978204bf1d13874692f851c3efc143a4e34458d40f7034a9ccdf334
GET /fpdata.js?href=www.pravda.com.ua HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Tue, 11 Oct 2022 07:01:55 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 282
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=OPT-M5KSFRL
200 OK 42 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-M5KSFRL
IP
File type ASCII text, with very long lines (1615)
Hash a6b35f42b01ce8ef51ed12f6603654ff
90e4dd5b076d152b3bd1e4ab5c67b6b78e0d9054
be1b7366b139b1114fe322ac7fd434b71048e13d5c822cb081c36c12cf53d40f
GET /gtm/optimize.js?id=OPT-M5KSFRL HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Sun, 11 Sep 2022 07:01:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42535
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 25e12d7b35a1a6efb4bc97945209072e
72b67424bbd3042de531de92a57bfd97036e9526
3836fa49727f6b0cff300e4aaa480a76848ceda64f98d1a6e4e4986284fcd1ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/gpt/pubads_impl_2022090601.js
200 OK 133 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022090601.js
IP
File type ASCII text, with very long lines (65439)
Size 133 kB (133157 bytes)
Hash 5cb47a81c27e4ff20ef48052db7e5e4b
616440e3a906b5e8a1dfd358a2592355e9f0599c
545e74a06762dfac914f51e05ac4f30d2871e9fef8c36b708d5f182fa936a6be
GET /gpt/pubads_impl_2022090601.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 133157
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 10:04:47 GMT
expires: Sun, 10 Sep 2023 10:04:47 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 06 Sep 2022 08:35:00 GMT
content-type: text/javascript
age: 75428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&a=363712371&t=pageview&_s=1&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ul=en-us&de=windows-1251&dt=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAUABQAAAAC~&jid=420672021&gjid=15884575&cid=1912604065.1662879704&tid=UA-554376-1&_gid=90184235.1662879705&_r=1>m=2ou970&z=434550512
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=363712371&t=pageview&_s=1&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ul=en-us&de=windows-1251&dt=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAUABQAAAAC~&jid=420672021&gjid=15884575&cid=1912604065.1662879704&tid=UA-554376-1&_gid=90184235.1662879705&_r=1>m=2ou970&z=434550512
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j96&a=363712371&t=pageview&_s=1&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ul=en-us&de=windows-1251&dt=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAUABQAAAAC~&jid=420672021&gjid=15884575&cid=1912604065.1662879704&tid=UA-554376-1&_gid=90184235.1662879705&_r=1>m=2ou970&z=434550512 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.pravda.com.ua
date: Sun, 11 Sep 2022 07:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/871974790/?random=1662879703995&cv=9&fst=1662879600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2436323809&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/871974790/?random=1662879703995&cv=9&fst=1662879600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2436323809&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/871974790/?random=1662879703995&cv=9&fst=1662879600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2436323809&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 07:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=www.pravda.com.ua
200 OK 152 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=www.pravda.com.ua
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 402ba3ebcfed0a0e34ae75c339ba7e94
d044815d29dc9a75d03b3dadfd11f31cb9dc2703
bfbb42038876f2c5f64f5adb0191c3e21bff813fccd42a74948939c321d26c4c
GET /pagead/ppub_config?ippd=www.pravda.com.ua HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Sun, 11 Sep 2022 07:01:55 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 152
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 07:16:55 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/871974790/?random=1662879703995&cv=9&fst=1662879600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2436323809&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/871974790/?random=1662879703995&cv=9&fst=1662879600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2436323809&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/871974790/?random=1662879703995&cv=9&fst=1662879600000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&tiba=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2436323809&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 07:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c2fea93ba89de81c2b01aaca1a87835
0a7f50001f709285bc10f6ef044ef39a60535bff
6cae8a5f9949975a3adedc41088196b8c9dd984e4023e54bbe655800a9478349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 25e12d7b35a1a6efb4bc97945209072e
72b67424bbd3042de531de92a57bfd97036e9526
3836fa49727f6b0cff300e4aaa480a76848ceda64f98d1a6e4e4986284fcd1ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gaua.hit.gemius.pl/_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap=
301 Moved Permanently 0 B URL HTTP/2 gaua.hit.gemius.pl/_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Sat, 10 Sep 2022 07:01:55 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlSPDMaGQMGG7BE1m74_6XXissGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Sun, 18 Sep 2022 07:01:55 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
location: /__/_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap=
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&rl=&if=false&ts=1662879704958&sw=1280&sh=1024&at=
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&rl=&if=false&ts=1662879704958&sw=1280&sh=1024&at=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&rl=&if=false&ts=1662879704958&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Sun, 11 Sep 2022 07:01:55 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MRSXWZPM31>m=2oe970&_p=363712371&cid=1912604065.1662879704&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662879704&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&dt=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MRSXWZPM31>m=2oe970&_p=363712371&cid=1912604065.1662879704&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662879704&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&dt=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MRSXWZPM31>m=2oe970&_p=363712371&cid=1912604065.1662879704&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662879704&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&dt=Resistance%20grows%20in%20Mariupol%20%E2%80%93%20city%20council%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.pravda.com.ua
date: Sun, 11 Sep 2022 07:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-554376-1&cid=1912604065.1662879704&jid=420672021&gjid=15884575&_gid=90184235.1662879705&_u=YADAAUAAQAAAAC~&z=1594198073
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-554376-1&cid=1912604065.1662879704&jid=420672021&gjid=15884575&_gid=90184235.1662879705&_u=YADAAUAAQAAAAC~&z=1594198073
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-554376-1&cid=1912604065.1662879704&jid=420672021&gjid=15884575&_gid=90184235.1662879705&_u=YADAAUAAQAAAAC~&z=1594198073 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.pravda.com.ua
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 11 Sep 2022 07:01:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c2fea93ba89de81c2b01aaca1a87835
0a7f50001f709285bc10f6ef044ef39a60535bff
6cae8a5f9949975a3adedc41088196b8c9dd984e4023e54bbe655800a9478349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=www.pravda.com.ua
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.pravda.com.ua
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.pravda.com.ua HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 11 Sep 2022 07:01:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_pm-db5_rbd_smrt_cnv_sovrn_n-Outbrain
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_pm-db5_rbd_smrt_cnv_sovrn_n-Outbrain
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_pm-db5_rbd_smrt_cnv_sovrn_n-Outbrain HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Sun, 11 Sep 2022 07:01:55 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: FGHV5PKQ4T5M3HMGZT1Q
Set-Cookie: ad-id=A3d00-K_kE6AjlfF_NTvc1M|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 07:01:55 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_pm-db5_rbd_smrt_cnv_sovrn_n-Outbrain&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
adservice.google.com/adsid/integrator.js?domain=www.pravda.com.ua
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.pravda.com.ua
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.pravda.com.ua HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 11 Sep 2022 07:01:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cabinet.pravda.com.ua/images/ico_d_bookmark.svg
200 OK 311 B URL HTTP/2 cabinet.pravda.com.ua/images/ico_d_bookmark.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text
Hash b74c637b9f313664cf93610419ceffaf
d1ce7a864a0a2128199dd90ac0b6c7b1c418c6f3
04ea8a340d6a4ebc13549d5f3a475930f70b1bd639b21f5c3687919a710c2d85
GET /images/ico_d_bookmark.svg HTTP/1.1
Host: cabinet.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Cookie: yield_master_ab_upr_description_url=D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: image/svg+xml
last-modified: Wed, 17 Jun 2020 10:35:33 GMT
etag: W/"5ee9f1f5-1b4"
cf-cache-status: HIT
age: 6121
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dL3RRdMRtvf5Uv4cwdAJiqeWuRau8J2iJE2BJAL%2FQw5dcbU9IlN2vvBo6TxeGr1Zb9IFsPtqiSZ3ILwwkLnWqFJQ7m%2Be81%2FHBIf7UCCdz8RFMvhkhlUzb8xiadGkS5Fv4dTMa28uGFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 748e88eabd410b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ym-tack.b-cdn.net/page_view?UPR;desktop;D;page_desktop;7d9c4f|c53bef
200 OK 494 B URL HTTP/2 ym-tack.b-cdn.net/page_view?UPR;desktop;D;page_desktop;7d9c4f|c53bef
IP
ASN #60068 Datacamp Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (677)
Hash 73be14d2f178d079c2cb797775d95080
df7054f779aa24b88c9bf64731807d304974fd66
805cfe3e6b99d4b6a4b26ee8fce1106e9bdc8cca857b544aaef84687171a1e4b
POST /page_view?UPR;desktop;D;page_desktop;7d9c4f|c53bef HTTP/1.1
Host: ym-tack.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
content-type: text/html
vary: Accept-Encoding
server: BunnyCDN-DE-752
cdn-pullzone: 749406
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
cache-control: public, max-age=0
cdn-storageserver: DE-167
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 404
cdn-cachedat: 09/11/2022 07:01:55
cdn-edgestorageid: 755
cdn-status: 404
cdn-requestid: ed802db5934d7a9d65f82bca3835246e
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 9ae7739b5262a7c1a4e3896c343ec06e
ddd5341ea851f655f67d7b9aecfb18123dfb5176
d5948fd1d4d38eeb1d90c85b458fe312c908c8b38c64d5854383daba3b7b622c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1588
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:55 GMT
Last-Modified: Sun, 11 Sep 2022 06:35:27 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
gaua.hit.gemius.pl/__/_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap=
200 OK 169 B URL HTTP/2 gaua.hit.gemius.pl/__/_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap=
IP
Hash 2bcdbde2abd290c15e0ef3c3a75542b0
f0bf09bff63032e038a6eb51408d32bb8187297d
569bb4fa5709f97d22e73038474f068377985897cf461401bbafa3d2194c8d29
GET /__/_1662879704883/rexdot.js?l=100&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=73&fpdata=YjnX2o_utoFNhadLzejWmTX1epb5s45YHTVr4p5aaqf.B7&inner=_ver%3D329&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Sat, 10 Sep 2022 07:01:55 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlxbnRaGQMQG5uLcd7D_6XXissGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Sun, 18 Sep 2022 07:01:55 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 169
X-Firefox-Spdy: h2
a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Sun, 11 Sep 2022 07:01:55 GMT
expires: Mon, 11 Sep 2023 07:01:55 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022090601&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022090601&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14390), with no line terminators
Hash edd59489cc2d0623a5cd39ca31f856bd
95a0296f06c6666df49e5c2c274a6501750a329c
06d0edfb46ba8544b167118f677b9f8b9724ece3582ef0d8febf271cdca90105
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022090601&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 11 Sep 2022 07:01:56 GMT
server: cafe
cache-control: private
content-length: 10930
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9453c8a7d5ed756714b1216e4e2d9993
a957832f103b2daf61597f508f5c1d4035f71d37
11b2b84b427b9b4edb9f12d6fb2b48c5d8e3d904652e9eb01bf12b074ac4c452
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sun, 11 Sep 2022 07:01:56 GMT
expires: Sun, 11 Sep 2022 07:01:56 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 82d87227cf200f43e752f4a2b6e2c078
4d5c66361290448732556ad5f7c6dc46840468db
eccc7cc60b4a7ceedf1e60f6abda496233c36f6d87afcdc4d3bcaa40a0a13792
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4297
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:56 GMT
Last-Modified: Sun, 11 Sep 2022 05:50:19 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9499
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 07:01:56 GMT
Connection: keep-alive
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:56 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=tJQqT180M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRm9zQmZLbEhsZ1NKbFMwd1VYM3dXTkdHejFpWm9RM2U0VFVublpEaSUyRmhl; expires=Fri, 06 Oct 2023 07:01:56 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 241809
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9499
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 07:01:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash de6622cfd812509b317913e1a5e9cfc8
84e4a39c92ab111cc1072f898990cea6b05da6cf
6d41b564c2e15215d05ba74ba2ae08abf74f6aef9e58e808d31afc6d1ba123af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9319
x-amzn-requestid: 44d731e9-1da0-4ad0-9fbb-1b170fac3bf0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTxaFtpIAMFWAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c666f-2e155359546dae806f6dbfe2;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:10:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: a4f99UhuEWfzdGyMv22TnGq98xCUpM1at-u8BNxNrDUSNC4yfHLHVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:40:34 GMT
age: 33682
etag: "84e4a39c92ab111cc1072f898990cea6b05da6cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9499
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 07:01:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9499
Expires: Sun, 11 Sep 2022 09:40:15 GMT
Date: Sun, 11 Sep 2022 07:01:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7a9494e-0e8b-451b-806d-72da68860cab.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7a9494e-0e8b-451b-806d-72da68860cab.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c65d6ae04a64d9d01439fb4fca3f017
5ce0bc5b075b97639453d67d4f3cea61289b7698
eb48687a5974542d11882f854a86ff083528957b0fbc61c797167d8f04e0ffa9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7a9494e-0e8b-451b-806d-72da68860cab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16983
x-amzn-requestid: adf7a560-2f6c-41ba-97b2-860515511e5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YH-CxFp-oAMF9yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631976de-5f4efe0a705012957cf8bbd4;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 05:00:14 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: uoEqiA2HIn5Nbw3RBIqKrCguG-0mLFNBtkB-r3RMitCoJE3fX6wq4w==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 05:27:48 GMT
age: 5648
etag: "5ce0bc5b075b97639453d67d4f3cea61289b7698"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe41cdec0-ceff-4e9c-88a7-3a5565f1a459.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe41cdec0-ceff-4e9c-88a7-3a5565f1a459.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12666d69f9af3ceb23fdfc2100bd3226
c4d17e3ea44ef6dee9819c1586424e5f056f149c
054236a4d1f88a486f48b8f3a8ac01d21ec2179d5b1f3fc9791d0982d07a88a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe41cdec0-ceff-4e9c-88a7-3a5565f1a459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5752
x-amzn-requestid: 622ffff0-1bd5-4eb4-a9ff-eb54c5ae44a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YBrqiFiToAMF0tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6316f310-49efdcc572b4fad3543f857d;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VKsU4S6tKOso216JLUWn7b1bKDyfruIVukt98JooNCjwaXDT9bkPYQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:44:02 GMT
age: 33474
etag: "c4d17e3ea44ef6dee9819c1586424e5f056f149c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8625e0707046e7a3715a8dbb40b1cae2
0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78
abc4c12561be08897341d9c8104c30a289357c0907e55c46895f7fb6afb2f75d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13568
x-amzn-requestid: a2fadcbe-350b-4a06-9f9c-ee2da40bb285
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YEESeHA_oAMFjCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317e742-4740aa3f4ebd479e7a4886ed;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 00:35:14 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: jbF2ZaJUhIoJV-o4f6iviFyUnoDW4R0KHTfC5NySmITnsLbD5iJrPQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:40:11 GMT
age: 33705
etag: "0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ec2646c56c4c522f0744768ad20342b
ad1d9eee90556a359547dc7cbb6758aee2c804cd
0bf9eaa4420bf6290535fd23895c6c723c7de6b849995ba83774532862cfe8b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7635
x-amzn-requestid: dbd07cc7-d0f6-4500-83c6-b19fa9fa2e3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xt5xDEfUIAMFYXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630f09a0-3771b23118f3711e5caca699;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 07:11:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ILut4hEDJbs6jNr3wpPST1HgAYMabIT7cdZebRFETn8lL_QfS92KBA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:40:34 GMT
age: 33682
etag: "ad1d9eee90556a359547dc7cbb6758aee2c804cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57d797a1c3f6589746a1135bdb19f54f
7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97
ff8855ca951f53ed5f3886cc81a7f28384d41288edeca4fdc621250e4d01c6fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6889
x-amzn-requestid: c82ac543-90cd-4aeb-a65b-7e1bbbacc407
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2UEE-3IAMFYBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d0419-427a29067c9c92ec0db6567f;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:39:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mNvNO0HJjZ1zwPKcjfqiVOnCL0CYXc8BPDSFbV6MXVW71IVt-2K3mQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:46:54 GMT
age: 33302
etag: "7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/prebid-universal-creative@latest/dist/creative.js
200 OK 8.9 kB URL HTTP/2 cdn.jsdelivr.net/npm/prebid-universal-creative@latest/dist/creative.js
IP
File type ASCII text, with very long lines (26606)
Hash 77019dfea792351eb58beb264f808970
106d35ea53f5a6e4024ba9bfafe6b0bd0551771f
ca2b0e50ed967336aea35965d7a99b4986429c5c5984f8de96d92b2c573b7bef
GET /npm/prebid-universal-creative@latest/dist/creative.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.13.0
x-jsd-version-type: version
etag: W/"682b-2ihEYwqesMldd0dS8BiHEV2ELiA"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 11 Sep 2022 07:01:56 GMT
age: 35519
x-served-by: cache-fra19121-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 8874
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 5c15e4f8c21115d8bc116101695608f3
c86b13be46eecb3550f9d2fb0b26c6bea709cc7a
6c864b688d878dd6ad2de2043ba96b5eb2fdfbbef3530a08e8a2532362d6ce42
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 07:01:56 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "826740E70547A6004BE3DB7013762334B8C0D765"
Expires: Sun, 11 Sep 2022 18:00:00 GMT
Last-Modified: Sun, 11 Sep 2022 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2272
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748e88f569ecb4f3-OSL
htlb.casalemedia.com/cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213ccb680c0bbf5d%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214b4f20b6926f088%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221589a7bb80f76848%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221601467942ecff9%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221589a7bb80f76848%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221601467942ecff9%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D
200 OK 4.8 kB URL HTTP/2 htlb.casalemedia.com/cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213ccb680c0bbf5d%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214b4f20b6926f088%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221589a7bb80f76848%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221601467942ecff9%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221589a7bb80f76848%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221601467942ecff9%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (7331), with no line terminators
Hash 3acaf841b1645ad4c9bcc46ecfbea569
6939bbf96c1ebce00ffdedb485255072b6d3bbae
86da442574e9be0479889f98dff5f9fc833fb5d17672c7f7fcc1b3b14e6710fa
GET /cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213ccb680c0bbf5d%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F09%2F5%2F7366117%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214b4f20b6926f088%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221589a7bb80f76848%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221601467942ecff9%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221589a7bb80f76848%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221601467942ecff9%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: application/json
cf-ray: 748e88e9bf760b06-OSL
access-control-allow-origin: https://www.pravda.com.ua
cache-control: no-cache
expires: 0
vary: Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kvsW1LVXzBZP2qU1dBm0aDcbyEY%2BxaSIft2RPVdyWMBs1IknLfFMdtMDotlZW2H5Lk9KS%2ByY6iTnZYi9MQMney4mKcc9Im8zee29GEclfE7W4p99vP1zBGv2nAA%2BKnZNScRmZyPl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 78eed83eb25868d476c16ad2954745ee
ed58ad0750a37e2bb7fb431b308e83b1e3919191
c58d1cfbca8d710af59e06b84d97d6416918a753642d092bcbaa0537c080943c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2437
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:56 GMT
Last-Modified: Sun, 11 Sep 2022 06:21:19 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
gem.gbc.criteo.com/newidsd
200 OK 39 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash dacd12593664d32858e134da39c14073
38007562a241f9b7a809cd960641a08f03f19609
c57e44158a3087c0f0904222c11ab1663fb9f08d6d02be0a4ef567d20ec98398
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 86460
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsu1nb2kN176F57wNC9M50rn1wQTEJLrVJr_pBEVAZI4SZprsBlJplPAEeZNMcsEjhUAeLIPWdUvWvRPlHNkf7itPTFxqavPMRDxRv8zPzK4NUiFGxgIp_B6cFdgLo0JcO4N-xHwsF-Nkux5W6xNm7JF9O2ct8reVZQhN28fij9vwJ3DxmKowJweZXAqTOPZKcZBSPGyUsXgX_qfxXEq36xdf13M3Is1OdWFQaPkUfkiQ_07kpK3a1tqsY5_YOygrxFm_2Kjp_GN0pLd1kTBxCgG8h9Iffu62MYeLwsSKif7u9eVRTsoPm9ll1uFKCb96a6DrtXy&sai=AMfl-YRshnjj3FTCt0wwBScvUpghG3fvBfEpXDeNNLgnp8bELn_O4QLwQsLKo7nRSo6dYKS8uoYzZUDz0KNcld733S2TjU0GbYAckBqtbyn8py0OaYO_DB-LOaX9YSigi4lNFw&sig=Cg0ArKJSzDg1uw_2Cd_XEAE&uach_m=[UACH]&adurl=
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsu1nb2kN176F57wNC9M50rn1wQTEJLrVJr_pBEVAZI4SZprsBlJplPAEeZNMcsEjhUAeLIPWdUvWvRPlHNkf7itPTFxqavPMRDxRv8zPzK4NUiFGxgIp_B6cFdgLo0JcO4N-xHwsF-Nkux5W6xNm7JF9O2ct8reVZQhN28fij9vwJ3DxmKowJweZXAqTOPZKcZBSPGyUsXgX_qfxXEq36xdf13M3Is1OdWFQaPkUfkiQ_07kpK3a1tqsY5_YOygrxFm_2Kjp_GN0pLd1kTBxCgG8h9Iffu62MYeLwsSKif7u9eVRTsoPm9ll1uFKCb96a6DrtXy&sai=AMfl-YRshnjj3FTCt0wwBScvUpghG3fvBfEpXDeNNLgnp8bELn_O4QLwQsLKo7nRSo6dYKS8uoYzZUDz0KNcld733S2TjU0GbYAckBqtbyn8py0OaYO_DB-LOaX9YSigi4lNFw&sig=Cg0ArKJSzDg1uw_2Cd_XEAE&uach_m=[UACH]&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsu1nb2kN176F57wNC9M50rn1wQTEJLrVJr_pBEVAZI4SZprsBlJplPAEeZNMcsEjhUAeLIPWdUvWvRPlHNkf7itPTFxqavPMRDxRv8zPzK4NUiFGxgIp_B6cFdgLo0JcO4N-xHwsF-Nkux5W6xNm7JF9O2ct8reVZQhN28fij9vwJ3DxmKowJweZXAqTOPZKcZBSPGyUsXgX_qfxXEq36xdf13M3Is1OdWFQaPkUfkiQ_07kpK3a1tqsY5_YOygrxFm_2Kjp_GN0pLd1kTBxCgG8h9Iffu62MYeLwsSKif7u9eVRTsoPm9ll1uFKCb96a6DrtXy&sai=AMfl-YRshnjj3FTCt0wwBScvUpghG3fvBfEpXDeNNLgnp8bELn_O4QLwQsLKo7nRSo6dYKS8uoYzZUDz0KNcld733S2TjU0GbYAckBqtbyn8py0OaYO_DB-LOaX9YSigi4lNFw&sig=Cg0ArKJSzDg1uw_2Cd_XEAE&uach_m=[UACH]&adurl= HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Sun, 11 Sep 2022 07:01:56 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 07:16:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sun, 11 Sep 2022 07:01:56 GMT
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 3.4 kB IP
File type JSON data\012- , ASCII text, with very long lines (2396)
Hash 3681e7287d8e4ee832d2dbe82f2d7856
d0b0326255f3b3b0038c526a24fa08f63b797ba1
82954cf0543a6e7db2b2f46676e16b0d8b92214c99b65674134a9f4995f84c7d
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=tJQqT180M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRm9zQmZLbEhsZ1NKbFMwd1VYM3dXTkdHejFpWm9RM2U0VFVublpEaSUyRmhl
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=-adEu180M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRm9zQmZLbEhsZ1NKbFMwd1VYM3dXTjclMkIlMkY0SWtLSWhjNzdqUXlOVHRNbnA; expires=Fri, 06 Oct 2023 07:01:56 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 289371
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
track.adform.net/adfscript/?bn=57438426;rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0;rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1;;adxcmd=QTwuOIuaMWxxWXp_eBE_5w2;adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0;pui=2ShljixBLrber1pltXZUmg2;
200 OK 1.2 kB URL HTTP/2 track.adform.net/adfscript/?bn=57438426;rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0;rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1;;adxcmd=QTwuOIuaMWxxWXp_eBE_5w2;adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0;pui=2ShljixBLrber1pltXZUmg2;
IP
File type ASCII text, with very long lines (841), with CRLF line terminators
Hash d7516278d45e8aa7a79aba7cb61247d1
48b9846385790f68aa12c1567937b433c7656eea
20c024b8e626c5d73c91d871d92b66c1f4deee65a301955e5aaa0d3d8ad362e3
GET /adfscript/?bn=57438426;rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0;rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1;;adxcmd=QTwuOIuaMWxxWXp_eBE_5w2;adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0;pui=2ShljixBLrber1pltXZUmg2; HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: text/javascript; charset=utf-8
content-length: 1208
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Tue, 11-Oct-2022 07:01:57 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/adfserve/?CC=1&bn=57438426;rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0;rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1;;adxcmd=QTwuOIuaMWxxWXp_eBE_5w2;adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0;pui=2ShljixBLrber1pltXZUmg2;;js=1;adfxid=1x;2977;set=en-US|en-US|1280X1024|0|600|400|24|8|3|7|1|;fd=0|0&CREFURL=https%3a%2f%2fa222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com%2f
200 OK 3.4 kB URL HTTP/2 track.adform.net/adfserve/?CC=1&bn=57438426;rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0;rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1;;adxcmd=QTwuOIuaMWxxWXp_eBE_5w2;adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0;pui=2ShljixBLrber1pltXZUmg2;;js=1;adfxid=1x;2977;set=en-US|en-US|1280X1024|0|600|400|24|8|3|7|1|;fd=0|0&CREFURL=https%3a%2f%2fa222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com%2f
IP
File type ASCII text, with very long lines (5441), with CRLF line terminators
Hash 44a7cd37052c3e7fa2e5a4fd7969d5a0
1f207fdf9a1c26ef3c1242bf0e6773d8c61afe35
44a7194131aba6bb6caf65ccd56f7cea67de2c7a7e74505a52dd676c9a050284
GET /adfserve/?CC=1&bn=57438426;rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0;rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1;;adxcmd=QTwuOIuaMWxxWXp_eBE_5w2;adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0;pui=2ShljixBLrber1pltXZUmg2;;js=1;adfxid=1x;2977;set=en-US|en-US|1280X1024|0|600|400|24|8|3|7|1|;fd=0|0&CREFURL=https%3a%2f%2fa222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com%2f HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: text/javascript; charset=utf-8
content-length: 3382
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pcs/view?xai=AKAOjssivwpFVY04YUQh_Os6d01Q39sZZrkRwBjKH-L3UDEG11vC1qq9txB_Bw3acdBvmaCD23ZdLA4ENBrVCyJDBb4ioRPrzCL3844ntTLrbE5lcIODQvmgV1wSBJFmZgnMSb22QpAEa4pxyGzFoWpc5LXPoJog_yx7HR7hBM8o1JlARiv_bRt5a1V5XXr1oxRBJ06_34xTzGdr5GeKotkXHD_Go1qBTjXnYsUjhwAcYOq1zzzoJPK7glseUugbJkhrMAjE39Qpx40OlqHSMBEcCPXWGiH7jK8hxHWu6kzTRwCk98-B9E8AvdNaFAJbEytH56aUy9u2SA&sai=AMfl-YStW1vdwLa8-7YXDIrCN0T2zuP2zcE2MgDhnZ4460Z8efGPrpqpJY7xrnNyDJn6x7jaN63OGMfD5ewKswKFSd3xhcG6r41MRpZxJ2o1L5ck_IEXAtaZAxW34x64GCtgFA&sig=Cg0ArKJSzLfsm9EU98mvEAE&uach_m=[UACH]&urlfix=1&adurl=
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/pcs/view?xai=AKAOjssivwpFVY04YUQh_Os6d01Q39sZZrkRwBjKH-L3UDEG11vC1qq9txB_Bw3acdBvmaCD23ZdLA4ENBrVCyJDBb4ioRPrzCL3844ntTLrbE5lcIODQvmgV1wSBJFmZgnMSb22QpAEa4pxyGzFoWpc5LXPoJog_yx7HR7hBM8o1JlARiv_bRt5a1V5XXr1oxRBJ06_34xTzGdr5GeKotkXHD_Go1qBTjXnYsUjhwAcYOq1zzzoJPK7glseUugbJkhrMAjE39Qpx40OlqHSMBEcCPXWGiH7jK8hxHWu6kzTRwCk98-B9E8AvdNaFAJbEytH56aUy9u2SA&sai=AMfl-YStW1vdwLa8-7YXDIrCN0T2zuP2zcE2MgDhnZ4460Z8efGPrpqpJY7xrnNyDJn6x7jaN63OGMfD5ewKswKFSd3xhcG6r41MRpZxJ2o1L5ck_IEXAtaZAxW34x64GCtgFA&sig=Cg0ArKJSzLfsm9EU98mvEAE&uach_m=[UACH]&urlfix=1&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjssivwpFVY04YUQh_Os6d01Q39sZZrkRwBjKH-L3UDEG11vC1qq9txB_Bw3acdBvmaCD23ZdLA4ENBrVCyJDBb4ioRPrzCL3844ntTLrbE5lcIODQvmgV1wSBJFmZgnMSb22QpAEa4pxyGzFoWpc5LXPoJog_yx7HR7hBM8o1JlARiv_bRt5a1V5XXr1oxRBJ06_34xTzGdr5GeKotkXHD_Go1qBTjXnYsUjhwAcYOq1zzzoJPK7glseUugbJkhrMAjE39Qpx40OlqHSMBEcCPXWGiH7jK8hxHWu6kzTRwCk98-B9E8AvdNaFAJbEytH56aUy9u2SA&sai=AMfl-YStW1vdwLa8-7YXDIrCN0T2zuP2zcE2MgDhnZ4460Z8efGPrpqpJY7xrnNyDJn6x7jaN63OGMfD5ewKswKFSd3xhcG6r41MRpZxJ2o1L5ck_IEXAtaZAxW34x64GCtgFA&sig=Cg0ArKJSzLfsm9EU98mvEAE&uach_m=[UACH]&urlfix=1&adurl= HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Sun, 11 Sep 2022 07:01:57 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 07:16:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sun, 11 Sep 2022 07:01:57 GMT
X-Firefox-Spdy: h2
s1.adform.net/Banners/Elements/Files/2013940/10439973/bvpath_1025/assets/291710371bdafa1e30b01c488bda77c1.woff
200 OK 17 kB URL HTTP/2 s1.adform.net/Banners/Elements/Files/2013940/10439973/bvpath_1025/assets/291710371bdafa1e30b01c488bda77c1.woff
IP
File type Web Open Font Format, TrueType, length 17244, version 0.0\012- data
Hash 291710371bdafa1e30b01c488bda77c1
41083e07930a52df876acd3cc49f10cf55be2081
8e47d30e68ff0b4cc8da57a3bdd4006633f7e56b2a372bbb6740dab814d6375e
GET /Banners/Elements/Files/2013940/10439973/bvpath_1025/assets/291710371bdafa1e30b01c488bda77c1.woff HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: application/font-woff
content-length: 17244
last-modified: Thu, 26 May 2022 06:27:07 GMT
etag: "291710371bdafa1e30b01c488bda77c1"
x-amz-request-id: tx00000000000009cf8bf56-00631d7a9e-323350c8-default
access-control-allow-origin: *
access-control-expose-headers: Content-Range,Content-Length
cache-control: public, max-age=604800
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s1.adform.net/Banners/Elements/Files/2013940/10439973/bvpath_1025/index_7fe90d8139ead413973a.js
200 OK 34 kB URL HTTP/2 s1.adform.net/Banners/Elements/Files/2013940/10439973/bvpath_1025/index_7fe90d8139ead413973a.js
IP
Hash 494e61dc03e79f388efe7ec2d4929cf5
3f73b49c904eb49007b47259c53b8d5d079e6e5b
1bdbf02f27bf39c1792d338007386796ec0c8b5549f5d3256c543dabaf398cea
GET /Banners/Elements/Files/2013940/10439973/bvpath_1025/index_7fe90d8139ead413973a.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: application/x-javascript
vary: Accept-Encoding
last-modified: Thu, 26 May 2022 06:27:07 GMT
etag: W/"ff650a76d46846936017ae959bdf5023"
x-amz-request-id: tx00000000000009c67ac85-00631d6ca8-3233e6c5-default
access-control-allow-origin: *
access-control-expose-headers: Content-Range,Content-Length
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 07:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
track.adform.net/dco/recommendations/?aid=2013940&tid=31186&tv=1662879707247&icid=-5932061713360923821&eid=1478750&rotseqno=1&dco=2&bnrid=55114305&intid=5437669736209526253&geo=11093,11348,578&bn=57438426&gcnt=100&pgsz=2&format=json&callback=adform_com_1gd18mbtpzu
200 OK 1.8 kB URL HTTP/2 track.adform.net/dco/recommendations/?aid=2013940&tid=31186&tv=1662879707247&icid=-5932061713360923821&eid=1478750&rotseqno=1&dco=2&bnrid=55114305&intid=5437669736209526253&geo=11093,11348,578&bn=57438426&gcnt=100&pgsz=2&format=json&callback=adform_com_1gd18mbtpzu
IP
File type Unicode text, UTF-8 text, with very long lines (4000), with no line terminators
Hash d9329798f7ba8a5215e7cadc5d2ef72b
3dc537939194db953aec385a5cd8ff91b0031c11
b92bef242ca65fa214c2e02cf103dc08bd98fb631561189ccd8f61f6ce3eeee2
GET /dco/recommendations/?aid=2013940&tid=31186&tv=1662879707247&icid=-5932061713360923821&eid=1478750&rotseqno=1&dco=2&bnrid=55114305&intid=5437669736209526253&geo=11093,11348,578&bn=57438426&gcnt=100&pgsz=2&format=json&callback=adform_com_1gd18mbtpzu HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: application/javascript;charset=utf-8
content-length: 1786
correlationid: eda08641-6feb-4bcb-83e5-37fe477e8869
x-origin: dcotar002prpitx
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
s1.adform.net/Banners/Elements/Files/2013940/10439973/10439973.js?ADFassetID=10439973&bv=1025
200 OK 9.7 kB URL HTTP/2 s1.adform.net/Banners/Elements/Files/2013940/10439973/10439973.js?ADFassetID=10439973&bv=1025
IP
Hash 3384a1205aae3d167b09ac63d84d4c65
903aed74662d48b1bce0299126e2fa70de307dec
5cffc32621ef15f1460fc322d7c04b8e4a9c2e4229fe0f0094027da18a0b0f4e
GET /Banners/Elements/Files/2013940/10439973/10439973.js?ADFassetID=10439973&bv=1025 HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: application/x-javascript
vary: Accept-Encoding
last-modified: Thu, 26 May 2022 06:27:07 GMT
etag: W/"5b298d7673f38ec20a58fc0735d580c5"
x-amz-request-id: tx0000000000000eefb63c7-00631d6ca8-3233e7e3-default
access-control-allow-origin: *
access-control-expose-headers: Content-Range,Content-Length
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsujdxAqY3HmoFEClS2rrjUCGbqkou-etqBscqIfyJ0ZKRRKUhZmIlUsZusInBtiJ180mTc9tkx7FYfT77XRUWL6udmoopT4MzhgjgjWHlit8Kj163f7Sb_1Mum8shkQ-qvFn-aSNGnVn8hvJw3_CCclYkYF3H2tzJezG-EIL1Ps-u0c7wWHoIb7TEQ1fwvFmgU4m-6OTVFXD-tJf9V587uEANZ049PfYAtCSxoRL6kq2r07238vpuOEWYQLioedJdkj7a1WVjooJ_ZHIijFRbllBq6dw0Y0WICcGQsDjpDcSubXpW_B_2xYgZQAFg2p9HttWypfJ57lzqIL0ZxWn7lIL1Sp7zcKqrJrD7BcapnijENe-uco2Fza45avDWyzySJPqizQ9QAOX-OC_tHCkcUPqJEDY7HA9INo5AsRI69dN7O-YqCY-6Fb-OSGH-7TxmGrIJa4fryXCDUB3tSD43mQVGt3ZcbgdAhlEQvl89dndKucdKJNOQsuHKh7nrojUOAYs8pzFB-bNiQuDZd7Njm1CAJjxD9kZ9sGU2-UiMjqdI4ko4lNS_EuX9j8Awne4Mj3h6g7fiMMLtTFo6owg3IBbpwdDeVPMOO8lPTFMfi8Ffn3VgYkjwGqPxYA6G8Tg87QY7l1rtIPL275328gX3DobEmAC3d4EKcG-ufCfwtmrIwVVDpWwmoL5LWSO2Js7NF2Flq92MZdcYGCZNYQBeZXsliwKoLOC3wyPjyWgycy8wwh-HDMiKYREerY4k_54MMF-vAOfGkLd9rMjPOz4L1XUyssZ2VatvF9Mxgys5vweCY1AXrsLQvJ9shWijYlJiZAw0qS4MHRUHMqyeHRzkLwhcW5dSu6eB-YML3y3buTq_ZQsiRhRE7VtHhUdMDSr5UVKft4RWwknsx8IxnsSGF12_cpc4NT3dEqEmDbiiEy7EO95E1Y9liPIH3TpOVvEsiaAVBP8EkHbbFtTVeseSC-4QHDcxq9u9U94QBCmAcOJdBvHkpTAUuS7Ce9EL_YWKPwqqVxHQxgwkMCnw0GCuN0aKSVWgIuM0Kq7dDtqSPKcqMQ_V8mT7WwaoBUFso660qJuMy1_pfheHxykbNgHqdKYozhFOA8mVMN2VdmX4JLb6AyUXsNJtqvFFfFO91FKVpXh0AU0cLF8Pbr_s240nGbhIEuL7DPEccilcU8Zw&sai=AMfl-YSGuD8tX5HfBv4NshRN4Pp18ubB81psrIi6nYbwKM7-xsqzQQUG7LDAvi_KTR7odXxI9W1hbTFD5XZVFosJgbHZccRPXANOgYd8gNWs2UgMG8IAwAj_LTKFMTCfA6AfRPXBxNFin3Xr6bAM&sig=Cg0ArKJSzHSALx70hn35EAE&id=lidar2&mcvt=1000&p=282,956,882,1256&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20220907&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=2&adk=2216847732&rs=4&la=0&cr=0&vs=4&r=v&rst=1662879705717&rpt=752&isd=0&lsd=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsujdxAqY3HmoFEClS2rrjUCGbqkou-etqBscqIfyJ0ZKRRKUhZmIlUsZusInBtiJ180mTc9tkx7FYfT77XRUWL6udmoopT4MzhgjgjWHlit8Kj163f7Sb_1Mum8shkQ-qvFn-aSNGnVn8hvJw3_CCclYkYF3H2tzJezG-EIL1Ps-u0c7wWHoIb7TEQ1fwvFmgU4m-6OTVFXD-tJf9V587uEANZ049PfYAtCSxoRL6kq2r07238vpuOEWYQLioedJdkj7a1WVjooJ_ZHIijFRbllBq6dw0Y0WICcGQsDjpDcSubXpW_B_2xYgZQAFg2p9HttWypfJ57lzqIL0ZxWn7lIL1Sp7zcKqrJrD7BcapnijENe-uco2Fza45avDWyzySJPqizQ9QAOX-OC_tHCkcUPqJEDY7HA9INo5AsRI69dN7O-YqCY-6Fb-OSGH-7TxmGrIJa4fryXCDUB3tSD43mQVGt3ZcbgdAhlEQvl89dndKucdKJNOQsuHKh7nrojUOAYs8pzFB-bNiQuDZd7Njm1CAJjxD9kZ9sGU2-UiMjqdI4ko4lNS_EuX9j8Awne4Mj3h6g7fiMMLtTFo6owg3IBbpwdDeVPMOO8lPTFMfi8Ffn3VgYkjwGqPxYA6G8Tg87QY7l1rtIPL275328gX3DobEmAC3d4EKcG-ufCfwtmrIwVVDpWwmoL5LWSO2Js7NF2Flq92MZdcYGCZNYQBeZXsliwKoLOC3wyPjyWgycy8wwh-HDMiKYREerY4k_54MMF-vAOfGkLd9rMjPOz4L1XUyssZ2VatvF9Mxgys5vweCY1AXrsLQvJ9shWijYlJiZAw0qS4MHRUHMqyeHRzkLwhcW5dSu6eB-YML3y3buTq_ZQsiRhRE7VtHhUdMDSr5UVKft4RWwknsx8IxnsSGF12_cpc4NT3dEqEmDbiiEy7EO95E1Y9liPIH3TpOVvEsiaAVBP8EkHbbFtTVeseSC-4QHDcxq9u9U94QBCmAcOJdBvHkpTAUuS7Ce9EL_YWKPwqqVxHQxgwkMCnw0GCuN0aKSVWgIuM0Kq7dDtqSPKcqMQ_V8mT7WwaoBUFso660qJuMy1_pfheHxykbNgHqdKYozhFOA8mVMN2VdmX4JLb6AyUXsNJtqvFFfFO91FKVpXh0AU0cLF8Pbr_s240nGbhIEuL7DPEccilcU8Zw&sai=AMfl-YSGuD8tX5HfBv4NshRN4Pp18ubB81psrIi6nYbwKM7-xsqzQQUG7LDAvi_KTR7odXxI9W1hbTFD5XZVFosJgbHZccRPXANOgYd8gNWs2UgMG8IAwAj_LTKFMTCfA6AfRPXBxNFin3Xr6bAM&sig=Cg0ArKJSzHSALx70hn35EAE&id=lidar2&mcvt=1000&p=282,956,882,1256&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20220907&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=2&adk=2216847732&rs=4&la=0&cr=0&vs=4&r=v&rst=1662879705717&rpt=752&isd=0&lsd=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjsujdxAqY3HmoFEClS2rrjUCGbqkou-etqBscqIfyJ0ZKRRKUhZmIlUsZusInBtiJ180mTc9tkx7FYfT77XRUWL6udmoopT4MzhgjgjWHlit8Kj163f7Sb_1Mum8shkQ-qvFn-aSNGnVn8hvJw3_CCclYkYF3H2tzJezG-EIL1Ps-u0c7wWHoIb7TEQ1fwvFmgU4m-6OTVFXD-tJf9V587uEANZ049PfYAtCSxoRL6kq2r07238vpuOEWYQLioedJdkj7a1WVjooJ_ZHIijFRbllBq6dw0Y0WICcGQsDjpDcSubXpW_B_2xYgZQAFg2p9HttWypfJ57lzqIL0ZxWn7lIL1Sp7zcKqrJrD7BcapnijENe-uco2Fza45avDWyzySJPqizQ9QAOX-OC_tHCkcUPqJEDY7HA9INo5AsRI69dN7O-YqCY-6Fb-OSGH-7TxmGrIJa4fryXCDUB3tSD43mQVGt3ZcbgdAhlEQvl89dndKucdKJNOQsuHKh7nrojUOAYs8pzFB-bNiQuDZd7Njm1CAJjxD9kZ9sGU2-UiMjqdI4ko4lNS_EuX9j8Awne4Mj3h6g7fiMMLtTFo6owg3IBbpwdDeVPMOO8lPTFMfi8Ffn3VgYkjwGqPxYA6G8Tg87QY7l1rtIPL275328gX3DobEmAC3d4EKcG-ufCfwtmrIwVVDpWwmoL5LWSO2Js7NF2Flq92MZdcYGCZNYQBeZXsliwKoLOC3wyPjyWgycy8wwh-HDMiKYREerY4k_54MMF-vAOfGkLd9rMjPOz4L1XUyssZ2VatvF9Mxgys5vweCY1AXrsLQvJ9shWijYlJiZAw0qS4MHRUHMqyeHRzkLwhcW5dSu6eB-YML3y3buTq_ZQsiRhRE7VtHhUdMDSr5UVKft4RWwknsx8IxnsSGF12_cpc4NT3dEqEmDbiiEy7EO95E1Y9liPIH3TpOVvEsiaAVBP8EkHbbFtTVeseSC-4QHDcxq9u9U94QBCmAcOJdBvHkpTAUuS7Ce9EL_YWKPwqqVxHQxgwkMCnw0GCuN0aKSVWgIuM0Kq7dDtqSPKcqMQ_V8mT7WwaoBUFso660qJuMy1_pfheHxykbNgHqdKYozhFOA8mVMN2VdmX4JLb6AyUXsNJtqvFFfFO91FKVpXh0AU0cLF8Pbr_s240nGbhIEuL7DPEccilcU8Zw&sai=AMfl-YSGuD8tX5HfBv4NshRN4Pp18ubB81psrIi6nYbwKM7-xsqzQQUG7LDAvi_KTR7odXxI9W1hbTFD5XZVFosJgbHZccRPXANOgYd8gNWs2UgMG8IAwAj_LTKFMTCfA6AfRPXBxNFin3Xr6bAM&sig=Cg0ArKJSzHSALx70hn35EAE&id=lidar2&mcvt=1000&p=282,956,882,1256&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20220907&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=2&adk=2216847732&rs=4&la=0&cr=0&vs=4&r=v&rst=1662879705717&rpt=752&isd=0&lsd=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Sun, 11 Sep 2022 07:01:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
track.adform.net/dco/products/?aid=2013940&tid=31186&tv=1662879707247&icid=-5932061713360923821&eid=1478750&rotseqno=1&dco=2&bnrid=55114305&intid=5437669736209526253&geo=11093,11348,578&bn=57438426&gid=910054521245439550&format=json&callback=adform_com_um97nhhh2q
200 OK 471 B URL HTTP/2 track.adform.net/dco/products/?aid=2013940&tid=31186&tv=1662879707247&icid=-5932061713360923821&eid=1478750&rotseqno=1&dco=2&bnrid=55114305&intid=5437669736209526253&geo=11093,11348,578&bn=57438426&gid=910054521245439550&format=json&callback=adform_com_um97nhhh2q
IP
File type ASCII text, with very long lines (963), with no line terminators
Hash aa2db17aa3489eb1a3378b47eb167883
54e5584a7c87144ab8d7bf75bbf71d886ec8c3c6
d8b7c074292f6a0a192a6460856fd46e2a78ca9c723fe6d44a4f74530af79326
GET /dco/products/?aid=2013940&tid=31186&tv=1662879707247&icid=-5932061713360923821&eid=1478750&rotseqno=1&dco=2&bnrid=55114305&intid=5437669736209526253&geo=11093,11348,578&bn=57438426&gid=910054521245439550&format=json&callback=adform_com_um97nhhh2q HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:58 GMT
content-type: application/javascript;charset=utf-8
content-length: 471
correlationid: 77fc33bd-5ef4-4f4c-93f3-57d04b906eec
x-origin: dcotar004prpitx.lin.pr.adform.zone
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/Serving/Event/?bn=57438426&event=152&time=1&baid=55114305&asid=10439973&name=Dynamic%20Product%20View&imprid=5437669736209526253&icid=-5932061713360923821&eData=lckVIEg7Z7oamJlicFM0d1XsSnmbQygi08O7cF3xBBLbNUjYKkRX5sHbk82aBCGdBzzZW6WRq2OhMOa-jVCzk7Q8JIJob1sX0&adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0&rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1&rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0&rnd=906515755&bv1=31186&bv2=1310870444005046642&bv3=Toalettpapir-101703&pdata=CPLy6suTt8mYEhITVG9hbGV0dHBhcGlyLTEwMTcwMw2
200 OK 17 kB URL HTTP/2 track.adform.net/Serving/Event/?bn=57438426&event=152&time=1&baid=55114305&asid=10439973&name=Dynamic%20Product%20View&imprid=5437669736209526253&icid=-5932061713360923821&eData=lckVIEg7Z7oamJlicFM0d1XsSnmbQygi08O7cF3xBBLbNUjYKkRX5sHbk82aBCGdBzzZW6WRq2OhMOa-jVCzk7Q8JIJob1sX0&adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0&rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1&rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0&rnd=906515755&bv1=31186&bv2=1310870444005046642&bv3=Toalettpapir-101703&pdata=CPLy6suTt8mYEhITVG9hbGV0dHBhcGlyLTEwMTcwMw2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6df5422d46e210fe6c250e1166616a33
4e2a76404f30cc27f5158332d759a339db3479ad
803d61389fd9567c8c28dce4b89604438f64fd7e144160339a1b1dac14c6cb44
GET /Serving/Event/?bn=57438426&event=152&time=1&baid=55114305&asid=10439973&name=Dynamic%20Product%20View&imprid=5437669736209526253&icid=-5932061713360923821&eData=lckVIEg7Z7oamJlicFM0d1XsSnmbQygi08O7cF3xBBLbNUjYKkRX5sHbk82aBCGdBzzZW6WRq2OhMOa-jVCzk7Q8JIJob1sX0&adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0&rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1&rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0&rnd=906515755&bv1=31186&bv2=1310870444005046642&bv3=Toalettpapir-101703&pdata=CPLy6suTt8mYEhITVG9hbGV0dHBhcGlyLTEwMTcwMw2 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:58 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Tue, 14 Dec 2021 23:07:59 GMT
ETag: "40014-119-5d32342a551c0"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Sep 2022 07:01:58 GMT
Connection: keep-alive
Vary: Accept-Encoding
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/1.1 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash d41805aed22c3b9731d56a19244e6b8a
7e5da0bdf4db3f38f1590b5020750a93d1a174b5
46aa57bbee28a5fa9e4352e856a1d3a0485613234232d0b3de27adc74d8fac26
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Mon, 25 Jul 2022 19:18:30 GMT
ETag: "e20015-b68-5e4a60c97afb7"
Accept-Ranges: bytes
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1387
Date: Sun, 11 Sep 2022 07:01:58 GMT
Connection: keep-alive
s1.adform.net/banners/scripts/adx.js
200 OK 44 kB URL HTTP/2 s1.adform.net/banners/scripts/adx.js
IP
Hash afa10947a29f2d256517c13d2f182600
0e9f09b9d9566169d4e4516dd829dcaa65ee9dfb
10e4a86874ec6807bc0630d3a19b8ec0daf2851172ba8234a9058d91f02d3283
GET /banners/scripts/adx.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 29 Jun 2022 08:28:54 GMT
etag: W/"c3a9d4f9b6981f579551b9a46e32d64a"
x-amz-request-id: tx00000000000009fa6ea2f-00631d83ec-32334d62-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.js
200 OK 9.4 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
File type ASCII text, with very long lines (17571)
Hash f71f0a95c50969b0244ae7354324e151
86be1d7921007790327edd201b1daff776772788
c25c06a04e5e03eebd372df0c5222ac9384591257345a2c8ced79248961f6cd2
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Wed, 24 Aug 2022 20:46:19 GMT
Content-Encoding: gzip
Content-Length: 9379
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=85233
Expires: Mon, 12 Sep 2022 06:42:31 GMT
Date: Sun, 11 Sep 2022 07:01:58 GMT
Connection: keep-alive
Vary: Accept-Encoding
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 07:01:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 1cea0c38-fb2d-474a-bbf2-9f1b5b732af0
Set-Cookie: uuid2=4704948723847067288; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 10-Dec-2022 07:01:58 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 07:01:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 0860df19-d82a-44cd-ab81-24ebc899ada8
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
cdn.indexww.com/ht/htw-pixel.gif?0
200 OK 43 B URL HTTP/2 cdn.indexww.com/ht/htw-pixel.gif?0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /ht/htw-pixel.gif?0 HTTP/1.1
Host: cdn.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:59 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 24 Jan 2017 19:36:04 GMT
etag: "761e21-2b-546dc3a097100"
cache-control: public, max-age=14400
expires: Sun, 11 Sep 2022 11:01:59 GMT
edge-control: cache-maxage=1h
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 55
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 748e89044e55fabc-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 07:01:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: f5ac5c68-f738-4b75-bfa3-1d9101e2a153
Set-Cookie: uuid2=8299150342702563216; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 10-Dec-2022 07:01:59 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 07:01:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 9af4a103-43c3-4de1-bcf2-18701c4ab9ea
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 90757
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
adx.adform.net/adx/?rp=4&bWlkPTE0MjM1MTMmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1hYWY0Y2NkNS1iMWJmLTRjY2MtYWJiMi1lNWI4OTQzOTk2YTk%3D&bWlkPTE0MjM1MTgmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD0yOWZiN2E1Ni04NTA5LTRmN2EtYjRlNS0wZWE5NGY4ZGFhZjQ%3D&bWlkPTE0MjM1MTQmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1mMjQwZDczNS04MTJlLTRmMGUtYTI5Yi00ZDIzYTdmYjE3Mzc%3D&pt=gross&stid=18f78aec-1832-4705-ad99-a3c5219b7066&fd=1
200 OK 0 B URL HTTP/2 adx.adform.net/adx/?rp=4&bWlkPTE0MjM1MTMmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1hYWY0Y2NkNS1iMWJmLTRjY2MtYWJiMi1lNWI4OTQzOTk2YTk%3D&bWlkPTE0MjM1MTgmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD0yOWZiN2E1Ni04NTA5LTRmN2EtYjRlNS0wZWE5NGY4ZGFhZjQ%3D&bWlkPTE0MjM1MTQmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1mMjQwZDczNS04MTJlLTRmMGUtYTI5Yi00ZDIzYTdmYjE3Mzc%3D&pt=gross&stid=18f78aec-1832-4705-ad99-a3c5219b7066&fd=1
IP
GET /adx/?rp=4&bWlkPTE0MjM1MTMmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1hYWY0Y2NkNS1iMWJmLTRjY2MtYWJiMi1lNWI4OTQzOTk2YTk%3D&bWlkPTE0MjM1MTgmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD0yOWZiN2E1Ni04NTA5LTRmN2EtYjRlNS0wZWE5NGY4ZGFhZjQ%3D&bWlkPTE0MjM1MTQmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1mMjQwZDczNS04MTJlLTRmMGUtYTI5Yi00ZDIzYTdmYjE3Mzc%3D&pt=gross&stid=18f78aec-1832-4705-ad99-a3c5219b7066&fd=1 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://www.pravda.com.ua
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
IP
GET /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js-sec.indexww.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 11 Sep 2022 07:01:58 GMT
content-type: text/html; charset=iso-8859-1
location: https://r.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
cf-ray: 748e89035e581c06-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Yx2H5tIt9WrXckYjzUz5DgAA;domain=casalemedia.com;path=/;expires=Mon, 11 Sep 2023 07:01:58 GMT
CMPS=4434;domain=casalemedia.com;path=/;expires=Sat, 10 Dec 2022 07:01:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9wt%2FXHW%2BLB%2BxmSEVKzqdL3cIS%2Fv0BCzP9iD613Pdy1gvTmL8RTwPypSC739TWCyx2pJmw5WmGFkffWxLzf0uxGVLP8obHEZ1eDNp2IptsAlUPN%2BaCMb98LM8rmWyrQ6wKkY7ZSutAGwz%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=pravda.com.ua&sn=FirefoxSyncframe&so=0&topUrl=www.pravda.com.ua&info=-adEu180M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRm9zQmZLbEhsZ1NKbFMwd1VYM3dXTjclMkIlMkY0SWtLSWhjNzdqUXlOVHRNbnA&idsd=97421311,1764778817&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=pravda.com.ua&sn=FirefoxSyncframe&so=0&topUrl=www.pravda.com.ua&info=-adEu180M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRm9zQmZLbEhsZ1NKbFMwd1VYM3dXTjclMkIlMkY0SWtLSWhjNzdqUXlOVHRNbnA&idsd=97421311,1764778817&cw=1&lsw=1
IP
GET /sid/json?origin=publishertag&domain=pravda.com.ua&sn=FirefoxSyncframe&so=0&topUrl=www.pravda.com.ua&info=-adEu180M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyRm9zQmZLbEhsZ1NKbFMwd1VYM3dXTjclMkIlMkY0SWtLSWhjNzdqUXlOVHRNbnA&idsd=97421311,1764778817&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1292154
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
s1.adform.net/stoat/626/s1.adform.net/bootstrap.js
200 OK 0 B URL HTTP/2 s1.adform.net/stoat/626/s1.adform.net/bootstrap.js
IP
GET /stoat/626/s1.adform.net/bootstrap.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Wed, 27 Jul 2022 07:02:09 GMT
cache-control: public, max-age=100000
expires: Mon, 12 Sep 2022 10:23:41 GMT
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
track.adform.net/csimpr/?bn=57438426&csi=lckVIEg7Z7p2HR5dIoGwWv4sU3Gvw-R2JFGQsQt3hHjvy7niHQLXTBkiQdZoAHEIQlfjQ2NaYpD5ZEWAuaZMaV-Lv0Ws3c7taOJDsqAYsG41
200 OK 0 B URL HTTP/2 track.adform.net/csimpr/?bn=57438426&csi=lckVIEg7Z7p2HR5dIoGwWv4sU3Gvw-R2JFGQsQt3hHjvy7niHQLXTBkiQdZoAHEIQlfjQ2NaYpD5ZEWAuaZMaV-Lv0Ws3c7taOJDsqAYsG41
IP
POST /csimpr/?bn=57438426&csi=lckVIEg7Z7p2HR5dIoGwWv4sU3Gvw-R2JFGQsQt3hHjvy7niHQLXTBkiQdZoAHEIQlfjQ2NaYpD5ZEWAuaZMaV-Lv0Ws3c7taOJDsqAYsG41 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:58 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Cache-Control, Accept-Encoding, X-Requested-With
access-control-max-age: 86400
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.membrana.media/upr/ym.js?v=4
200 OK 0 B URL HTTP/2 cdn.membrana.media/upr/ym.js?v=4
IP
ASN #34989 ServeTheWorld AS
Analyzer Verdict Alert fortinet Malware
GET /upr/ym.js?v=4 HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: application/javascript
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"631b3171-b8e"
last-modified: Fri, 09 Sep 2022 12:28:33 GMT
cdn-storageserver: DE-164
cdn-fileserver: 252
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/09/2022 12:30:02
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 65205bf79088f17c7b30713876959382
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.membrana.media/currency_file.json
200 OK 0 B URL HTTP/2 cdn.membrana.media/currency_file.json
IP
ASN #34989 ServeTheWorld AS
GET /currency_file.json HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: text/plain
vary: Accept-Encoding
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=86400
etag: W/"631c4b1e-b1"
last-modified: Sat, 10 Sep 2022 08:30:22 GMT
cdn-storageserver: DE-167
cdn-fileserver: 324
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/10/2022 08:31:06
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 9ce553a7608ef389fd2c731b49a36560
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:56 GMT
content-type: text/javascript
last-modified: Wed, 31 Aug 2022 21:48:59 GMT
etag: W/"630fd74b-16068"
expires: Mon, 12 Sep 2022 07:01:56 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c.amazon-adsystem.com/aax2/apstag.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 11 Sep 2022 06:21:20 GMT
last-modified: Thu, 01 Sep 2022 20:50:54 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 b04a6cb0bde4a78c29099913e07f9056.cloudfront.net (CloudFront), 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
etag: W/"350e165fc9b88312c43a9ba90eba4e3d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-C1
x-amz-cf-id: Ge6CYsldETDcP8jQoBD_zI47Vcx0NDKPEcdXHhMYWCfBAZUN9thiXg==
age: 2436
X-Firefox-Spdy: h2
track.adform.net/Serving/Event/?bn=57438426&event=152&time=1&baid=55114305&asid=10439973&name=Dynamic%20Product%20View&imprid=5437669736209526253&icid=-5932061713360923821&eData=lckVIEg7Z7oamJlicFM0d1XsSnmbQygi08O7cF3xBBLbNUjYKkRX5sHbk82aBCGdBzzZW6WRq2OhMOa-jVCzk7Q8JIJob1sX0&adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0&rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1&rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0&rnd=631786185&bv1=31186&bv2=-3069682560379937680&bv3=Rengj%C3%B8ringsb%C3%B8rste-103868&pdata=CPC43rqa_5Kz1QESGlJlbmdqw7hyaW5nc2LDuHJzdGUtMTAzODY40
200 OK 0 B URL HTTP/2 track.adform.net/Serving/Event/?bn=57438426&event=152&time=1&baid=55114305&asid=10439973&name=Dynamic%20Product%20View&imprid=5437669736209526253&icid=-5932061713360923821&eData=lckVIEg7Z7oamJlicFM0d1XsSnmbQygi08O7cF3xBBLbNUjYKkRX5sHbk82aBCGdBzzZW6WRq2OhMOa-jVCzk7Q8JIJob1sX0&adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0&rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1&rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0&rnd=631786185&bv1=31186&bv2=-3069682560379937680&bv3=Rengj%C3%B8ringsb%C3%B8rste-103868&pdata=CPC43rqa_5Kz1QESGlJlbmdqw7hyaW5nc2LDuHJzdGUtMTAzODY40
IP
GET /Serving/Event/?bn=57438426&event=152&time=1&baid=55114305&asid=10439973&name=Dynamic%20Product%20View&imprid=5437669736209526253&icid=-5932061713360923821&eData=lckVIEg7Z7oamJlicFM0d1XsSnmbQygi08O7cF3xBBLbNUjYKkRX5sHbk82aBCGdBzzZW6WRq2OhMOa-jVCzk7Q8JIJob1sX0&adxvars=yLf5CEsBWu3uPWSLnwizxcSUo0Br0445-133NqTLFZTJUACv2Rc3bS1xx9erKwFjbdNUhoI9UHDkLW4dXFrnNmz6FKw6YVrx3KPXVv4UIQjS29W2rgAPJBrzSG92JBTr1BfOA7QOUEtP1UJjIusvbCNyiAE8eNaAcGvUvXxGLFW76z5ifulEOzpof3QZacIKufvaUGHbvixHSigd4QEnFsWjAexNyLOV0&rtbdata=J5rp3P9EQMP9B8pREZrwYsIg5ut1QZHa1PI_8quRuXbBjfvwduJnxfSapJv6jB2d2r0DNSlm4cOKUNGXqrUku4EJi8Q7sOX5KTQgn4kREmbdHmQuCKRpEHl_SwACTqE9WCqRT2nHa2Chst8U_ZXnuZpp9exp_I4eDxRT_ixPaYDXOhCsuwZRs84cW96AmwE7ovtpqV_-lm2O_0jI-T8xWmrUUNigZaV8WzNHsz8XFnk1&rtbwp=2rOweA0v0lpuZdMujQD7K6zboUFQG3yp0&rnd=631786185&bv1=31186&bv2=-3069682560379937680&bv3=Rengj%C3%B8ringsb%C3%B8rste-103868&pdata=CPC43rqa_5Kz1QESGlJlbmdqw7hyaW5nc2LDuHJzdGUtMTAzODY40 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:58 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.membrana.media/upr/d/ym.js?v=4
200 OK 0 B URL HTTP/2 cdn.membrana.media/upr/d/ym.js?v=4
IP
ASN #34989 ServeTheWorld AS
GET /upr/d/ym.js?v=4 HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:54 GMT
content-type: application/javascript
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"631b3139-5c11e"
last-modified: Fri, 09 Sep 2022 12:27:37 GMT
cdn-storageserver: DE-197
cdn-fileserver: 352
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/09/2022 12:30:09
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 949e786d4d569ec0687220afcca3534d
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 0 B URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 24 Aug 2022 19:06:24 GMT
x-amz-version-id: tKimXuvhjexkvOlm5D.ynBWfUtiJgbbH
server: AmazonS3
content-encoding: gzip
date: Sun, 11 Sep 2022 03:35:27 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V92v3MFBOPkZanC-ZiIHxlnyYZ868TBuAHmX6_pgx8_nTFVBJ9CJ2Q==
age: 12389
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
IP
GET /syncframe?origin=publishertag&topUrl=www.pravda.com.ua HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:55 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=d3ef15dc-87fc-4f46-b302-ea5cef654ef1; expires=Fri, 06 Oct 2023 07:01:55 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 731466
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
s1.adform.net/stoat/626/s1.adform.net/load/v/0.0.221/e/2gBBwADA/i/vCAv.IAAAAAoAA/r:AdConstructor:contents/HTML:types/Standard
200 OK 0 B URL HTTP/2 s1.adform.net/stoat/626/s1.adform.net/load/v/0.0.221/e/2gBBwADA/i/vCAv.IAAAAAoAA/r:AdConstructor:contents/HTML:types/Standard
IP
GET /stoat/626/s1.adform.net/load/v/0.0.221/e/2gBBwADA/i/vCAv.IAAAAAoAA/r:AdConstructor:contents/HTML:types/Standard HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a222b02081bcf532c12f67a43fe00818.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 07:01:57 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Wed, 27 Jul 2022 07:02:09 GMT
cache-control: public, max-age=100000
expires: Mon, 12 Sep 2022 10:04:42 GMT
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
200 OK 0 B URL HTTP/2 r.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
IP
GET /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1 HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js-sec.indexww.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 07:01:59 GMT
content-type: text/html
cf-ray: 748e8903caafb505-OSL
cache-control: no-cache
expires: 0
vary: Is-Traffic-Usersync, Accept-Encoding
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qed9fuODMi5Kp9rbET%2FLVL3XWhP5PFuH6tK7tHNqPgcncgvlafqJRF1hL6wtP%2FuUEjMsr8THDCu8r697pGIZyQAS9%2BflZ0Cb8jhatZazEwxE%2FknKf1ZLQ%2B7P%2Fws9Suzk2tnl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
107.178.251.122
178.250.2.131
95.216.24.150
157.240.200.35
37.252.173.27
52.95.125.22
93.184.220.66
146.0.227.110
95.101.11.115
95.101.175.202