www.pravda.com.ua/eng/news/2022/10/25/7373389/
301 Moved Permanently 162 B URL HTTP/1.1 www.pravda.com.ua/eng/news/2022/10/25/7373389/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /eng/news/2022/10/25/7373389/ HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 25 Oct 2022 23:28:06 GMT
Content-Type: text/html
Content-Length: 162
Location: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3675
Expires: Wed, 26 Oct 2022 00:29:22 GMT
Date: Tue, 25 Oct 2022 23:28:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4654
Cache-Control: max-age=127238
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:48:45 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1628
Cache-Control: max-age=124212
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 09:58:19 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4728
Expires: Wed, 26 Oct 2022 00:46:55 GMT
Date: Tue, 25 Oct 2022 23:28:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NLGhLdoixZuLiiqvFAHMun1zCRweUmhtPXNj9Ip38VhkHd3ta7Rv/+uetgjEZ/1XGG/fFdLec8JhnpSxb8p7uw==
x-amz-request-id: 75Z502S24ND881DW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 22:38:58 GMT
age: 2949
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 23:28:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash c274c1d7269f9f6223f857cac382584e
f3fd803c66d8ab1fa59ce76247a8b00bcfa96bab
1d72a979f94a46c6cc992c44f86a7458b261e3a4407807968bb5154d028c5a23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 17:04:33 GMT
Expires: Sun, 30 Oct 2022 17:04:32 GMT
Etag: "f3fd803c66d8ab1fa59ce76247a8b00bcfa96bab"
Cache-Control: max-age=408384,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba0c7a5cb523-OSL
ocsp.sectigo.com/
200 OK 280 B IP
Hash c274c1d7269f9f6223f857cac382584e
f3fd803c66d8ab1fa59ce76247a8b00bcfa96bab
1d72a979f94a46c6cc992c44f86a7458b261e3a4407807968bb5154d028c5a23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 17:04:33 GMT
Expires: Sun, 30 Oct 2022 17:04:32 GMT
Etag: "f3fd803c66d8ab1fa59ce76247a8b00bcfa96bab"
Cache-Control: max-age=408384,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba0f8bb4b523-OSL
www.pravda.com.ua/images/v6/fonts/firasans-extrabold-webfont.woff2?1
200 OK 65 kB URL HTTP/2 www.pravda.com.ua/images/v6/fonts/firasans-extrabold-webfont.woff2?1
IP
File type Web Open Font Format (Version 2), TrueType, length 64904, version 1.0\012- data
Hash e71caebb37c4ebcd818042ed50fc9ba5
e9e4ca3fda58ff70fadbdad732694f77a647b6eb
009768c55260bbec207a0683d7d369513ac461c133ba9d481d8671a60a4db43c
GET /images/v6/fonts/firasans-extrabold-webfont.woff2?1 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 23 Oct 2022 03:24:18 GMT
content-type: text/html; charset=windows-1251
content-length: 64908
age: 245029
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/fonts/firasans-regular-webfont.woff2?1
200 OK 65 kB URL HTTP/2 www.pravda.com.ua/images/v6/fonts/firasans-regular-webfont.woff2?1
IP
File type Web Open Font Format (Version 2), TrueType, length 64676, version 1.0\012- data
Hash 0a7eb1cad2e136bd84214857ed513589
42f0e56b7a89ace9e981a597f9e8a0b0629254b1
eb2acdeed90af05956b14376a25ec2249494e6f4e0848b4245c78bd2160a17a8
GET /images/v6/fonts/firasans-regular-webfont.woff2?1 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 23 Oct 2022 03:22:15 GMT
content-type: text/html; charset=windows-1251
content-length: 64680
age: 245152
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/fonts/firasans-bold-webfont.woff2?1
200 OK 65 kB URL HTTP/2 www.pravda.com.ua/images/v6/fonts/firasans-bold-webfont.woff2?1
IP
File type Web Open Font Format (Version 2), TrueType, length 65144, version 1.0\012- data
Hash 9478a6e04033291a30733e69b0af277e
fd093225dc48c865f72ef6a59e5f04f1f6d073e6
6d1037044ed6dbc90e716d74923b63995949d21b04e3274f1a068e961a7ce4e9
GET /images/v6/fonts/firasans-bold-webfont.woff2?1 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 23 Oct 2022 03:24:18 GMT
content-type: text/html; charset=windows-1251
content-length: 65148
age: 245029
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/index.css?30
200 OK 22 kB URL HTTP/2 www.pravda.com.ua/misc/v6/index.css?30
IP
File type ASCII text, with very long lines (651)
Hash 6cb506998b50331baa8837204e2e10b5
13aac2cae9bde5003b55089650bda64f4493a9a1
90ba9cd73b28857b2df54492c2d6f6bca0a6d3388b51625f8e7863bb28d80c88
GET /misc/v6/index.css?30 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Tue, 25 Oct 2022 21:52:06 GMT
last-modified: Tue, 11 Oct 2022 18:40:24 GMT
etag: W/"6345b898-2c5ca"
content-type: text/css
content-length: 22201
age: 5761
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/jquery-1.12.4.min.js
200 OK 33 kB URL HTTP/2 www.pravda.com.ua/misc/v6/jquery-1.12.4.min.js
IP
File type ASCII text, with very long lines (32077)
Hash 18df9beb9adbb5d3623816e5c187cba6
c3d3ef99447058ff8b379b542f008ed411a95887
78e21803df2b3830b2f87a1f791d95ee48d9a8a4d91fa322f3955ea249382751
GET /misc/v6/jquery-1.12.4.min.js HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Wed, 19 Oct 2022 17:43:49 GMT
last-modified: Mon, 17 Feb 2020 12:57:31 GMT
etag: W/"5e4a8dbb-17b8b"
content-type: application/javascript; charset=windows-1251
content-length: 32724
age: 539058
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/sticky-kit.js
200 OK 1.9 kB URL HTTP/2 www.pravda.com.ua/misc/v6/sticky-kit.js
IP
Hash 29c45f26352aa37d59fb96686ea9d603
989d2795a39188ddfcb0e9b8cfbc4e30aa3dc70d
b28dd0bba77b9c217f8a506add7cb66217dd966c15f9428e5cafe051331fd1f4
GET /misc/v6/sticky-kit.js HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Mon, 24 Oct 2022 15:04:24 GMT
last-modified: Tue, 21 Mar 2017 03:30:03 GMT
etag: W/"58d09e3b-218d"
content-type: application/javascript; charset=windows-1251
content-length: 1942
age: 116623
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/v6/common.js?8
200 OK 1.4 kB URL HTTP/2 www.pravda.com.ua/misc/v6/common.js?8
IP
File type ASCII text, with CRLF line terminators
Hash 22b0d99fa92750337b4f0c4fe1004b46
a2e04a39c475a935d7b1a0409d93d2d412371cb6
8d4541d4889eb34012d02d90ed2efaa4fb0434d5e5e2f0275e4f8bfff7109f40
GET /misc/v6/common.js?8 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding,Accept-Encoding
content-encoding: br
via: 1.1 google
date: Sun, 23 Oct 2022 13:00:02 GMT
last-modified: Mon, 17 Jan 2022 13:47:05 GMT
etag: W/"61e57359-1a94"
content-type: application/javascript; charset=windows-1251
content-length: 1413
age: 210485
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_fb.svg
200 OK 481 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_fb.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash d472732f554e8fbf41f7a54746694c87
1b3ac30c2085c5c21b791ad783de459575275aa4
a9c7d999faf52b0de946c2e264ed7e260f2a27cf086451f4b932b558b65f60a0
GET /images/v6/ico_fb.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 481
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sun, 16 Oct 2022 01:32:45 GMT
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1e1"
content-type: image/svg+xml
age: 856522
cache-control: public,max-age=1209600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_eye.svg
200 OK 502 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_eye.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (439)
Hash ff97a0d3dbe4e373444557735e3193df
9fb5579d500f3c1623db469b6ad81396631e49e9
369163a2be3c3f1685f4b545199a1304a16ec3f0dc28d2b57d61e59e7584d706
GET /images/v6/ico_eye.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 502
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Fri, 21 Oct 2022 10:59:43 GMT
age: 390504
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1f6"
content-type: image/svg+xml
cache-control: public,max-age=604651
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_twitter.svg
200 OK 668 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_twitter.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (795), with CRLF line terminators
Hash b05ebacb0f20679bec23ad003be0aae8
a2a2f73376fa7e5a46119e305eaf48bb9be75521
702c2fd2f4058f9d408efea46e5318d2caf28f31f216d1575675ff70a5a5d8e8
GET /images/v6/ico_twitter.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 668
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Sat, 22 Oct 2022 00:40:43 GMT
age: 341244
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-29c"
content-type: image/svg+xml
cache-control: public,max-age=555621
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_telegram.svg
200 OK 496 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_telegram.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash af584d5b32af957e44f2264d9de2a0fc
ad430281d5d2f312d47829ffb5390f5388c16a13
e9df3785c23493cb3da4e9c5ed52680fc39b7b1ccd28e904b6d422b74fb273ea
GET /images/v6/ico_telegram.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 496
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Fri, 21 Oct 2022 11:02:27 GMT
age: 390340
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1f0"
content-type: image/svg+xml
cache-control: public,max-age=604797
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_comments.svg
200 OK 435 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_comments.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text
Hash 484b0e05bbbee86ecad24d9473b34544
77a7ffb84c5a3c2ff0124b4c1c0280e14527db0d
06cca9461488f5db355b10b477156d0deef73ec101f12b9602763111c9e60db9
GET /images/v6/ico_comments.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 435
content-encoding: br
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
via: 1.1 google
date: Fri, 21 Oct 2022 10:58:12 GMT
age: 390595
last-modified: Wed, 06 May 2020 08:31:04 GMT
etag: "5eb275c8-1b3"
content-type: image/svg+xml
cache-control: public,max-age=604800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e47ac2710b29b9d8a3996d7617ddab1
0114f2f4b2b57dea310eb0857e12ff94c01cc69c
a78f5a1bfe4b94b7063c20d33c65565b51aa331c0777028bd5848316eadf48da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A78F5A1BFE4B94B7063C20D33C65565B51AA331C0777028BD5848316EADF48DA"
Last-Modified: Tue, 25 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3035
Expires: Wed, 26 Oct 2022 00:18:42 GMT
Date: Tue, 25 Oct 2022 23:28:07 GMT
Connection: keep-alive
www.pravda.com.ua/images/v6/ico_patreon.svg
200 OK 490 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_patreon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 9b4440331817a34f6717f0ab55d385dc
6fa8305047c667d2cffff2c9a4d48ac98e7a31c2
bee5d8b92d1983ca50233cfea71aed7abcb1512367f254ee1dcae35eb3eb3046
GET /images/v6/ico_patreon.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 490
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
accept-ranges: bytes
via: 1.1 google
date: Fri, 21 Oct 2022 11:49:49 GMT
age: 387498
last-modified: Tue, 21 Jun 2022 11:31:09 GMT
etag: "62b1abfd-1ea"
content-type: image/svg+xml
cache-control: public,max-age=604797
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/images/v6/ico_linkedin.svg
200 OK 706 B URL HTTP/2 www.pravda.com.ua/images/v6/ico_linkedin.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 31a07855f6bf979b4d695926bf04b15f
595d38b81d3c4707aed6b78b45a6a0948a21cdd6
29a1a191b3918703a38e5ce9bdae2ed12e62082f45b8e2407eeacc0417df9fd3
GET /images/v6/ico_linkedin.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 706
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
accept-ranges: bytes
via: 1.1 google
date: Fri, 21 Oct 2022 12:09:27 GMT
age: 386320
last-modified: Tue, 21 Jun 2022 11:31:09 GMT
etag: "62b1abfd-2c2"
content-type: image/svg+xml
cache-control: public,max-age=600521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/eng/interfax.svg
200 OK 1.5 kB URL HTTP/2 www.pravda.com.ua/misc/eng/interfax.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (2095), with CRLF line terminators
Hash fc2d0e3ce1ca09d3b77b887848367288
2fe2c14183e6f711a71d61f7830fff42e953d184
4f54d65f78602e43a3f0c678981c408025c2623203614fc4384c08ff1dc82ca2
GET /misc/eng/interfax.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding
accept-ranges: none
via: 1.1 google
content-encoding: br
content-length: 1492
date: Tue, 25 Oct 2022 23:26:52 GMT
age: 75
last-modified: Fri, 13 Dec 2019 16:40:00 GMT
etag: W/"a77-5999883457800"
content-type: image/svg+xml
cache-control: public,max-age=3
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/misc/eng/quixote.svg
200 OK 14 kB URL HTTP/2 www.pravda.com.ua/misc/eng/quixote.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (33375), with CRLF line terminators
Hash 1b5ea070121189748892c43d3af0be0d
28b830d214b0a896cd7ef696d1aebbe424c1d9cb
81ab9f2fbd41abc033a21062bb2264ab035c7c204eb2c77d6bfeb997b2c25457
GET /misc/eng/quixote.svg HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding
accept-ranges: none
via: 1.1 google
content-encoding: br
content-length: 14452
date: Tue, 25 Oct 2022 23:26:52 GMT
age: 75
last-modified: Fri, 13 Dec 2019 16:40:08 GMT
etag: W/"84af-5999883bf8a00"
content-type: image/svg+xml
cache-control: public,max-age=1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.pravda.com.ua/counter/7373389
200 OK 42 B URL HTTP/2 www.pravda.com.ua/counter/7373389
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 0060cc426d58ea30f5099166a6452fdb
b30735b3b50864255dbe975427ee86373d876ef0
338aa77590082270f139cb5243d5dbb85989ffaa10b180c6ce8d788f47ee7c34
GET /counter/7373389 HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/eng/news/2022/10/25/7373389/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 23:28:07 GMT
content-type: image/gif
content-length: 42
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: must-revalidate, no-transform
vary: Accept-Encoding
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3999
Cache-Control: max-age=121520
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:13:27 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 4022ee7b53654f65608ad9a3ba759687
cc243d089a8a77c0a7123434746ea36b054634dd
7af6243905b2256cb4f8fe0e77386c274592c322fb23b11784ecf86d250c7e09
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 225
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Tue, 25 Oct 2022 23:28:07 GMT
Etag: "f26384f93da6974ed577808dfa1fede5+gzip"
Last-Modified: Wed, 28 Sep 2022 20:05:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F717)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29223
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 91a8a46e65722735ee05b2239a1c569e
7ea6d5489b771d5795c7f9535ac6db5943b74eeb
5500b4f8d46d3dca0fa134e8ac9c1750766cb3181f68577a1cbc686356d64a22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (2021)
Hash f4edcc4119c80477e4ed546fc207aa7a
e478d7f0f9d6d72c938251c17a8cc7a188651445
12015a413fc692bf5bac249afb06422a8ed8a6d70a1a141f999481f0bfb2ee34
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 25 Oct 2022 23:28:07 GMT
expires: Tue, 25 Oct 2022 23:28:07 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 18014762903861546619
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16831
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-554376-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-554376-1
IP
File type ASCII text, with very long lines (1588)
Hash bd1dbd190e51445a7738be1ce262975c
7fcb857626386362afd89a4d5248ac3e567efe99
48c14abc71906119fdb47d8b06bbd214e5d04bf4461a02a6234dbb9a4a95b6a1
GET /gtag/js?id=UA-554376-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 23:28:07 GMT
expires: Tue, 25 Oct 2022 23:28:07 GMT
cache-control: private, max-age=900
last-modified: Tue, 25 Oct 2022 21:28:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43555
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WW7B57
200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WW7B57
IP
File type Unicode text, UTF-8 text, with very long lines (47542)
Hash fa7acefb8c40939d19396277289b8d83
d9b076617107b1321fb8032c82018249f76ca4f5
3d6bfafe6ab09005457a0bc779559418713b562da6d307c8068c9d36e946f465
GET /gtm.js?id=GTM-WW7B57 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 23:28:07 GMT
expires: Tue, 25 Oct 2022 23:28:07 GMT
cache-control: private, max-age=900
last-modified: Tue, 25 Oct 2022 21:28:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59273
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 281 B IP
Hash e417bde69428bf7e9c83c92443372f33
ca907bf8bc2b25c2469521603a261e683265a665
9b90594b064401efc39710ec8c215f895fc7b7da88852b534e923e17114ea9fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 23:01:15 GMT
Expires: Sun, 30 Oct 2022 23:01:14 GMT
Etag: "ca907bf8bc2b25c2469521603a261e683265a665"
Cache-Control: max-age=429786,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba110d740af6-OSL
ocsp.sectigo.com/
200 OK 281 B IP
Hash e417bde69428bf7e9c83c92443372f33
ca907bf8bc2b25c2469521603a261e683265a665
9b90594b064401efc39710ec8c215f895fc7b7da88852b534e923e17114ea9fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 23:01:15 GMT
Expires: Sun, 30 Oct 2022 23:01:14 GMT
Etag: "ca907bf8bc2b25c2469521603a261e683265a665"
Cache-Control: max-age=429786,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba111cc70b69-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 47f90beaea0defc349959c786ee5ceea
b6be7b14abe9be2dc5e6fe278353b24627de6551
b244ef411f9cb8967ee0d0a6bcedbc32710d4f4729631c96f2dd242908dcf8e1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 21:57:39 GMT
Expires: Mon, 31 Oct 2022 21:57:38 GMT
Etag: "b6be7b14abe9be2dc5e6fe278353b24627de6551"
Cache-Control: max-age=512370,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba111d42b50f-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7f1de4025eee44eed5a0ada1e998d6c
fd8bfad40b964ffd3534ac3aff68aaf31d38ba37
fba4107e5627b68a00dc9c31a657be714c85dc7c648b8e8e1c7373cc305f8228
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7bd18d9f36c1699164becc136e455d11
3dfae5f9db30c099a1b9bfbc242158fd25f7ec24
54a4406f9cdf584411a3bcc64e63bde1371cd75727c23f853d3718be3fc35478
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img.pravda.com/images/doc/7/0/700343e-p434-original.png
200 OK 165 kB URL HTTP/2 img.pravda.com/images/doc/7/0/700343e-p434-original.png
IP
File type PNG image data, 1960 x 280, 8-bit/color RGB, non-interlaced\012- data
Size 165 kB (164727 bytes)
Hash 29395f34d908fb7f5a79f0e88427f2ad
94ff8dc7dccb484d490af3bb5712205ea76756f3
92b627801b17a9f10844ee322484af4928604a030fd390d2fd101bc510358b77
GET /images/doc/7/0/700343e-p434-original.png HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 164727
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Tue, 11 Oct 2022 12:14:59 GMT
age: 1249988
last-modified: Thu, 11 Aug 2022 14:08:48 GMT
etag: "62f50d70-28377"
content-type: image/png
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img.pravda.com/images/doc/9/d/9ddb9f7-irf.png
200 OK 9.4 kB URL HTTP/2 img.pravda.com/images/doc/9/d/9ddb9f7-irf.png
IP
File type PNG image data, 260 x 99, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a22546cb96e0436780a08f818691b39
22a2f41ae8b2133758d033a0888e510869d8b34b
5384a066982276b144c2b5c5167c0bd12a4193211016c6a540da791eeeb64bc8
GET /images/doc/9/d/9ddb9f7-irf.png HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9392
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Tue, 11 Oct 2022 12:15:08 GMT
age: 1249979
last-modified: Mon, 29 Aug 2022 14:13:49 GMT
etag: "630cc99d-24b0"
content-type: image/png
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.onthe.io/io.js/7LWgKFUpDNmn
200 OK 17 kB URL HTTP/1.1 cdn.onthe.io/io.js/7LWgKFUpDNmn
IP
ASN #14061 DIGITALOCEAN-ASN
File type C source, ASCII text, with very long lines (53870), with no line terminators
Hash c2d800180258443036afb77b09f291fb
a2b1d608aca3c0ceaedb84361bee2690542656d6
6dc1c59a6ca1b8023956330d0f5a02c14ec3e6713d503d1557d9c8270cf2dd5e
GET /io.js/7LWgKFUpDNmn HTTP/1.1
Host: cdn.onthe.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 24 Aug 2022 13:39:35 GMT
ETag: W/"63062a17-d26e"
Expires: Wed, 26 Oct 2022 23:28:07 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
cdn.membrana.media/geolocation.json
200 OK 3 B URL HTTP/2 cdn.membrana.media/geolocation.json
IP
ASN #34989 ServeTheWorld AS
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /geolocation.json HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Origin: https://www.pravda.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: text/plain
content-length: 3
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: x-ym-country, cdn-requestcountrycode
cache-control: public, max-age=86400
etag: "622b54c3-3"
last-modified: Fri, 11 Mar 2022 13:55:15 GMT
cdn-storageserver: DE-200
cdn-fileserver: 309
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/05/2022 21:08:19
cdn-edgestorageid: 830
x-ym-country: NO
cdn-status: 200
cdn-requestid: ff97a37108aa351764e7e1e16a8a5491
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 281 B IP
Hash e417bde69428bf7e9c83c92443372f33
ca907bf8bc2b25c2469521603a261e683265a665
9b90594b064401efc39710ec8c215f895fc7b7da88852b534e923e17114ea9fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 23:01:15 GMT
Expires: Sun, 30 Oct 2022 23:01:14 GMT
Etag: "ca907bf8bc2b25c2469521603a261e683265a665"
Cache-Control: max-age=429785,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba11ddc3b50f-OSL
ocsp.sectigo.com/
200 OK 281 B IP
Hash e417bde69428bf7e9c83c92443372f33
ca907bf8bc2b25c2469521603a261e683265a665
9b90594b064401efc39710ec8c215f895fc7b7da88852b534e923e17114ea9fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 23:01:15 GMT
Expires: Sun, 30 Oct 2022 23:01:14 GMT
Etag: "ca907bf8bc2b25c2469521603a261e683265a665"
Cache-Control: max-age=429786,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba10ec47b4f4-OSL
ocsp.sectigo.com/
200 OK 281 B IP
Hash e417bde69428bf7e9c83c92443372f33
ca907bf8bc2b25c2469521603a261e683265a665
9b90594b064401efc39710ec8c215f895fc7b7da88852b534e923e17114ea9fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 23:01:15 GMT
Expires: Sun, 30 Oct 2022 23:01:14 GMT
Etag: "ca907bf8bc2b25c2469521603a261e683265a665"
Cache-Control: max-age=429786,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba10dc55b523-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UZTfI/iQARhz0jGh0gn9VA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EWCAiFD16YH5jarrYZIHSp3Oji8=
ocsp.digicert.com/
200 OK 471 B IP
Hash f2c29d49da958fb819b4caf8f80f83c4
b740c041156f8798887c2d43e9be0ea20ef08df5
45afcb455b12880ec12dc3ec8f1dc6132adaf4312a88cdce6c3c3eefa396f6fc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6527
Cache-Control: max-age=162546
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "63582f7b-1d7"
Expires: Thu, 27 Oct 2022 20:37:14 GMT
Last-Modified: Tue, 25 Oct 2022 18:48:27 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c299b22df8fcd1fb07d9e2c0747ce24b
3a19da98be09a5bfc74529f17fcb8b1c8c2d03c8
886a6c6da5267ed27544abaff5e63606602bf6320bfae246cac3deea54a1f13a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6489
Cache-Control: max-age=95213
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "6357289c-1d7"
Expires: Thu, 27 Oct 2022 01:55:01 GMT
Last-Modified: Tue, 25 Oct 2022 00:06:52 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
platform.twitter.com/widgets/widget_iframe.7dae38096d06923d683a2a807172322a.html?origin=https%3A%2F%2Fwww.pravda.com.ua
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.7dae38096d06923d683a2a807172322a.html?origin=https%3A%2F%2Fwww.pravda.com.ua
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 800140747b9eaa618eb76779a72b8653
9b01fddea24a63b76d645398229523baae849fae
b4bc244dee0f2df26990afae0ccd9297f203e9757bc0a18445793ef4bb678dd2
GET /widgets/widget_iframe.7dae38096d06923d683a2a807172322a.html?origin=https%3A%2F%2Fwww.pravda.com.ua HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 477852
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 28 Sep 2022 20:04:27 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F704)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
ocsp.digicert.com/
200 OK 280 B IP
Hash 6625b1b96d0894c8f1d53474a2b83277
0cd3b0ec7db4a4a91c18a0ee5f15b7375db9cddd
3300ea145028d070650c44bbbf39efdad60b2f9e91712be2035560f32f439ac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2385
Cache-Control: max-age=131071
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "6357c4b6-118"
Expires: Thu, 27 Oct 2022 11:52:39 GMT
Last-Modified: Tue, 25 Oct 2022 11:12:54 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 471 B IP
Hash c299b22df8fcd1fb07d9e2c0747ce24b
3a19da98be09a5bfc74529f17fcb8b1c8c2d03c8
886a6c6da5267ed27544abaff5e63606602bf6320bfae246cac3deea54a1f13a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6489
Cache-Control: max-age=95213
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "6357289c-1d7"
Expires: Thu, 27 Oct 2022 01:55:01 GMT
Last-Modified: Tue, 25 Oct 2022 00:06:52 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 864ba1fdee7057c6a1073d5e5b87f0ba
954986680b2b25ab6f64e1057819f70e413d1366
6c92f4d99cc52912d0b9f376225f2b75cefbaf796de11d0032d4b322e0a93032
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6481
Cache-Control: max-age=108524
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "63575ca4-1d7"
Expires: Thu, 27 Oct 2022 05:36:52 GMT
Last-Modified: Tue, 25 Oct 2022 03:48:52 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 864ba1fdee7057c6a1073d5e5b87f0ba
954986680b2b25ab6f64e1057819f70e413d1366
6c92f4d99cc52912d0b9f376225f2b75cefbaf796de11d0032d4b322e0a93032
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5388
Cache-Control: max-age=107432
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "63575ca4-1d7"
Expires: Thu, 27 Oct 2022 05:18:40 GMT
Last-Modified: Tue, 25 Oct 2022 03:48:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 864ba1fdee7057c6a1073d5e5b87f0ba
954986680b2b25ab6f64e1057819f70e413d1366
6c92f4d99cc52912d0b9f376225f2b75cefbaf796de11d0032d4b322e0a93032
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6481
Cache-Control: max-age=108524
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "63575ca4-1d7"
Expires: Thu, 27 Oct 2022 05:36:52 GMT
Last-Modified: Tue, 25 Oct 2022 03:48:52 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=54da8b70-c713-46b5-b979-32da760e5bd6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6910779956425996
200 OK 241 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=54da8b70-c713-46b5-b979-32da760e5bd6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6910779956425996
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c0c8be8c0221ebecddcb8cba12cee044
49617db0d1300f5bab3900d9401b7337eb81bb6b
73bfc75fd67f9dbc0f718e22cafbb77654ab396da853199c86734512dd279476
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=54da8b70-c713-46b5-b979-32da760e5bd6&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.6910779956425996 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/json
Content-Length: 241
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L9OU93J6-1E-DRPE; Domain=.rubiconproject.com; Path=/; Expires=Wed, 25-Oct-2023 23:28:08 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qopqT4bwTIYje9DtVM30fCgBQHCW+5kIVtisbrA4yxOyT0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 25-Oct-2023 23:28:08 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=7a2ea9f6-3745-4fc0-8235-ffa43eea9965&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7800624368973585
200 OK 261 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=7a2ea9f6-3745-4fc0-8235-ffa43eea9965&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7800624368973585
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2c77bedd2ead9346e05c0f28cbce112f
358fdfb4e68a44703243f8d117279acc036e2a89
cadc7b998bd36fcab93e796558d157a1fafcc4c600502763bd5c4674ec56513b
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=7a2ea9f6-3745-4fc0-8235-ffa43eea9965&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7800624368973585 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/json
Content-Length: 261
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L9OU93J7-1U-40H7; Domain=.rubiconproject.com; Path=/; Expires=Wed, 25-Oct-2023 23:28:08 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/Eiugjm5TAhM4e9DtVM30fCgBQHCW+5kIVtisbrA4yxOyT0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 25-Oct-2023 23:28:08 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a7aea36affd7320a01fdd4edcf18db86
0e57c783e25bc3afb85d18402e0480df84811c56
3284d1f567d527256c02c56202d7067d2d672b68eaa362935fcb9704fd836b0a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3284D1F567D527256C02C56202D7067D2D672B68EAA362935FCB9704FD836B0A"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5313
Expires: Wed, 26 Oct 2022 00:56:41 GMT
Date: Tue, 25 Oct 2022 23:28:08 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash e359db1a1afd5f056f150f8b370e5ec4
c2e79a5f7c0d190f2f361327f0503d704b136c66
9a3d1087c583340c8814b493ccc966fda450f1c62128e636966524c4f22f09be
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 17:01:58 GMT
Expires: Sat, 29 Oct 2022 17:01:57 GMT
Etag: "c2e79a5f7c0d190f2f361327f0503d704b136c66"
Cache-Control: max-age=321828,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba12ae29b50f-OSL
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2de2e12639f9748686a88d6b8555d5f4
e53a15e6ed4f8fbbaac952433bdcf9367b36a61e
b2be8259d07799d878d811d4e45c5db8f0e64c5f12698ed813ed428a5f638986
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
tt.onthe.io/?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F,domain:www.pravda.com.ua,page:Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands,page_type:article,author:No%20Author,category:No%20Category,language:en,type_article:news,reference_time:66,pub_date:Tue%2C%2025%20Oct%202022%2011%3A34%3A56%20%2B0300,user_agent:Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0,device:desktop,browser_version:Firefox%2096,browser:Firefox,depth:1,user_type:new,user_id:2ae514453.28f7c74a9_1666740485469,session_id:5c93e392e.d6721bb07_1666740485471,cdn_version:0]&s=587ca673994803384542e727e488bf24&1666740485474
200 OK 0 B URL HTTP/1.1 tt.onthe.io/?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F,domain:www.pravda.com.ua,page:Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands,page_type:article,author:No%20Author,category:No%20Category,language:en,type_article:news,reference_time:66,pub_date:Tue%2C%2025%20Oct%202022%2011%3A34%3A56%20%2B0300,user_agent:Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0,device:desktop,browser_version:Firefox%2096,browser:Firefox,depth:1,user_type:new,user_id:2ae514453.28f7c74a9_1666740485469,session_id:5c93e392e.d6721bb07_1666740485471,cdn_version:0]&s=587ca673994803384542e727e488bf24&1666740485474
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F,domain:www.pravda.com.ua,page:Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands,page_type:article,author:No%20Author,category:No%20Category,language:en,type_article:news,reference_time:66,pub_date:Tue%2C%2025%20Oct%202022%2011%3A34%3A56%20%2B0300,user_agent:Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0,device:desktop,browser_version:Firefox%2096,browser:Firefox,depth:1,user_type:new,user_id:2ae514453.28f7c74a9_1666740485469,session_id:5c93e392e.d6721bb07_1666740485471,cdn_version:0]&s=587ca673994803384542e727e488bf24&1666740485474 HTTP/1.1
Host: tt.onthe.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: text/javascript
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Pragma: no-cache
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=d7d7052c-c728-463b-80ca-f333782783e9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.827771338029051
200 OK 241 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=d7d7052c-c728-463b-80ca-f333782783e9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.827771338029051
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8f2cf91eee278240fe8e588d2ec57a5c
e067f6238651654dece7f0f9c8a17a34b2134e96
d39a76933e82e4117b293ddf6c50684de750e71408d48fa13ea39d9372777a67
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tk_flint=pbjs_lite_v4.43.4&x_source.tid=d7d7052c-c728-463b-80ca-f333782783e9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.827771338029051 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/json
Content-Length: 241
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.pravda.com.ua
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L9OU93KM-10-8GYF; Domain=.rubiconproject.com; Path=/; Expires=Wed, 25-Oct-2023 23:28:08 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpu0s8Nj3vJze9DtVM30fCgBQHCW+5kIVtisbrA4yxOyT0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 25-Oct-2023 23:28:08 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6cda7eab45da64f5c38cfdab4779442a
c831158d77f52741b957faa1d1aa117bc5a8db2a
214cb7c0b2e1f131d419c80fe0818fd5d4e4efae0cd7e4c5ee815c4d484b0883
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9e2e2532cb11b07c56691dbdd0a78174
57c028ae1b62da359eececd71fac5f04a950d72a
69a6b5c595ea2a9bb12c6363156ab0580d1ac35ed49671b6aa6d269288f20309
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
cdn.membrana.media/currency_file.json
200 OK 7.8 kB URL HTTP/2 cdn.membrana.media/currency_file.json
IP
ASN #34989 ServeTheWorld AS
File type JSON data\012- , ASCII text, with no line terminators
Hash eb1f2dc2a31b032ad411e64dd50df0dc
85b52d68ac5884447656ad97e2c488481333efc4
71ed325e6644ca17f5fda5370256ddae775a18d55c6ccf94157e36b3f52a0c51
GET /currency_file.json HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: text/plain
vary: Accept-Encoding
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=86400
etag: W/"63579e9e-b3"
last-modified: Tue, 25 Oct 2022 08:30:22 GMT
cdn-storageserver: DE-197
cdn-fileserver: 324
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/25/2022 08:31:23
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 58692e990d6e547e4ad11e6d28b7ed2e
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c9b39fe444cc213ff0e33b623008816b
8f155fb3b0a1cb54339980bfb673eb70c6548d16
754ee777565c8c03387ebd12a7d5535541aa8da9a03ce73b434203f20e19d31b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136711
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "6357d00c-1d7"
Expires: Thu, 27 Oct 2022 13:26:39 GMT
Last-Modified: Tue, 25 Oct 2022 12:01:16 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Yu2BbXDdYHvd25Df1IWqpVh0i_cqxB8A7ez4PxVvme4VOKvdwFFcyQ==
Age: 5123
inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22d7d7052c-c728-463b-80ca-f333782783e9%22,%22sizes%22:[[300,250]],%22bidId%22:%224276db423d4aa08%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%227a2ea9f6-3745-4fc0-8235-ffa43eea9965%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%2243f88d175ebefb1%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2254da8b70-c713-46b5-b979-32da760e5bd6%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%224426458e9b5ecb98%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22}
200 OK 42 B URL HTTP/1.1 inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22d7d7052c-c728-463b-80ca-f333782783e9%22,%22sizes%22:[[300,250]],%22bidId%22:%224276db423d4aa08%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%227a2ea9f6-3745-4fc0-8235-ffa43eea9965%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%2243f88d175ebefb1%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2254da8b70-c713-46b5-b979-32da760e5bd6%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%224426458e9b5ecb98%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22}
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
GET /prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22d7d7052c-c728-463b-80ca-f333782783e9%22,%22sizes%22:[[300,250]],%22bidId%22:%224276db423d4aa08%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%227a2ea9f6-3745-4fc0-8235-ffa43eea9965%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%2243f88d175ebefb1%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2254da8b70-c713-46b5-b979-32da760e5bd6%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%224426458e9b5ecb98%22,%22bidderRequestId%22:%2241811537ece8ea4%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22} HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 42
Connection: keep-alive
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
X-Xss-Protection: 0
P3p: CP="NID DSP ALL COR"
Set-Cookie: am-uid=6c450ac2d1e441dd99a98f6e887c8d32; expires=Mon, 23 Jan 2023 23:28:08 GMT; domain=.admixer.net; secure; SameSite=None
Keep-Alive: timeout=25
inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22d7d7052c-c728-463b-80ca-f333782783e9%22,%22sizes%22:[[300,250]],%22bidId%22:%223067299824470af%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%227a2ea9f6-3745-4fc0-8235-ffa43eea9965%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%223111a4cbd3a39398%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2254da8b70-c713-46b5-b979-32da760e5bd6%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2232b821522eec818%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22}
200 OK 42 B URL HTTP/1.1 inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22d7d7052c-c728-463b-80ca-f333782783e9%22,%22sizes%22:[[300,250]],%22bidId%22:%223067299824470af%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%227a2ea9f6-3745-4fc0-8235-ffa43eea9965%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%223111a4cbd3a39398%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2254da8b70-c713-46b5-b979-32da760e5bd6%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2232b821522eec818%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22}
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
GET /prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22d7d7052c-c728-463b-80ca-f333782783e9%22,%22sizes%22:[[300,250]],%22bidId%22:%223067299824470af%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%227a2ea9f6-3745-4fc0-8235-ffa43eea9965%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%223111a4cbd3a39398%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2254da8b70-c713-46b5-b979-32da760e5bd6%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2232b821522eec818%22,%22bidderRequestId%22:%2229e007505255101%22,%22auctionId%22:%22b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22} HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 42
Connection: keep-alive
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
X-Xss-Protection: 0
P3p: CP="NID DSP ALL COR"
Set-Cookie: am-uid=6c450ac2d1e441dd99a98f6e887c8d32; expires=Mon, 23 Jan 2023 23:28:08 GMT; domain=.admixer.net; secure; SameSite=None
Keep-Alive: timeout=25
ocsp.digicert.com/
200 OK 313 B IP
Hash 7f4ae72681cd0bc7d44ce0596605c602
2a3593b1346c480b1f4c98864d1f23e021056bfd
a0316ee6811e9b388a436152087b757af72e4f74f20b1cc582bbd0553415af72
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5602
Cache-Control: max-age=101914
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "63574640-139"
Expires: Thu, 27 Oct 2022 03:46:42 GMT
Last-Modified: Tue, 25 Oct 2022 02:13:20 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 314 B IP
Hash f7d5a805746e2bc18d72a296102e8339
9387d72aa7f0b3e510efe8cc219081159885ec4e
747fc06e0d5f6233852c9c4b68f1679966ac7c86211b285db4c3b5d18bd036b4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6318
Cache-Control: max-age=109415
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "635760c1-13a"
Expires: Thu, 27 Oct 2022 05:51:43 GMT
Last-Modified: Tue, 25 Oct 2022 04:06:25 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 280 B IP
Hash 6625b1b96d0894c8f1d53474a2b83277
0cd3b0ec7db4a4a91c18a0ee5f15b7375db9cddd
3300ea145028d070650c44bbbf39efdad60b2f9e91712be2035560f32f439ac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5357
Cache-Control: max-age=134043
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "6357c4b6-118"
Expires: Thu, 27 Oct 2022 12:42:11 GMT
Last-Modified: Tue, 25 Oct 2022 11:12:54 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 280
bidder.criteo.com/cdb?profileId=207&av=33&wv=4.43.4&cb=91076545467
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=33&wv=4.43.4&cb=91076545467
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=33&wv=4.43.4&cb=91076545467 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 666
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 25 Oct 2022 23:28:07 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://www.pravda.com.ua
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d068186d75653e367152af8f8eded56c
865026ab5c5a979527bc8e23344ac90365652fb9
09402f8d100500df1656211d6fa9b44e6d4ae4159c2a060fcbc2f99eb097862a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 25 Oct 2022 20:30:50 GMT
Expires: Wed, 26 Oct 2022 20:30:50 GMT
ETag: "865026ab5c5a979527bc8e23344ac90365652fb9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tlx.3lift.com/header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tmax=1000
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tmax=1000
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tmax=1000 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 395
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-credentials: true
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 6534da42b1362d14c9ac7e6272215bdd
4bd948c078376b6fdb8982d57a9874be34c40506
b16dc2c3cc3e3584146fdfb6098a114fac65887489b535c3c1eac4e748ac334b
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 10:03:24 GMT
Expires: Sun, 30 Oct 2022 10:03:23 GMT
Etag: "4bd948c078376b6fdb8982d57a9874be34c40506"
Cache-Control: max-age=383114,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba142e56b4f4-OSL
syndication.twitter.com/settings?session_id=f1dfdbd26744c39399d2d54bac67665db27cb1fa
200 OK 355 B URL HTTP/2 syndication.twitter.com/settings?session_id=f1dfdbd26744c39399d2d54bac67665db27cb1fa
IP
File type JSON data\012- , ASCII text, with very long lines (851), with no line terminators
Hash 7cac009f8121486bc6c44991cf606190
ddae6074c908031f09b586d38a022e0e4add23b5
7825444c58d1293285c059256fb6e04dcd4bf7dff5a6a65972f65d55286b1e89
GET /settings?session_id=f1dfdbd26744c39399d2d54bac67665db27cb1fa HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Tue, 25 Oct 2022 23:28:08 GMT
content-length: 355
content-encoding: gzip
x-transaction-id: aa25d28e0908a3a6
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 104
x-connection-hash: 0acff9a8a988f08865d649ec79ca71badc80e92f6e449b4a88ed54a9cef873be
X-Firefox-Spdy: h2
ghb.adtelligent.com/v2/auction/
200 OK 2 B URL HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 539
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 25 Oct 2022 23:28:07 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 2
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d68830f33c12f2aa839ecd5c96146bb2
c4eca00dde1d737943bc2980b58a7288c06f808c
0b8dd5b33360dae55b75de1bb81fc9404103824c8d987372d1c44f425052f0d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 25 Oct 2022 22:41:09 GMT
expires: Wed, 26 Oct 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 2819
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=OPT-M5KSFRL
200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-M5KSFRL
IP
File type ASCII text, with very long lines (1588)
Hash 5a5ba75a53d5a9ec8005e499cfc7d904
68d3a5cf7db6c6acac0507c5c549c5660afba112
82fe7292876a40d7cedc3214fb32e402242cc0275e59a7305f51020045275de7
GET /gtm/optimize.js?id=OPT-M5KSFRL HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 23:28:08 GMT
expires: Tue, 25 Oct 2022 23:28:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44204
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/871974790/?random=1666740485410&cv=9&fst=1666740485410&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/871974790/?random=1666740485410&cv=9&fst=1666740485410&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2478), with no line terminators
Hash 5b0d8e95290577186f407f074ba358b7
bba20110d1aa93408a54598289b91b1efb96bf36
c83242d09267a943cac77f3323c12a3a854b1361c62dc1900d3040ef03f26df0
GET /pagead/viewthroughconversion/871974790/?random=1666740485410&cv=9&fst=1666740485410&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 23:28:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1109
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 25-Oct-2022 23:43:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e51b6855c0480724d286847fa91528fe
ee6a114e7bc79b1aa1f07b31cb90674c2ba77bbc
174e93f5d04840d025c9807d0c752ad4b96a4350ab968025b0856c5e59599d47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3122
Cache-Control: max-age=155905
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "635822d7-1d7"
Expires: Thu, 27 Oct 2022 18:46:33 GMT
Last-Modified: Tue, 25 Oct 2022 17:54:31 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/eng_UK/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/eng_UK/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 1b193f6162826967fd7379dfeae4e60a
17d20c24379b943c02720c2893ffadf823bb77e4
ca385386969d2f387105d4cd957b5f19171a6e38ae6db901b53714c7728060c3
GET /eng_UK/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: eb9da7dc6d11d98e10f6ae7143f6047a
etag: "b70f46f08a86b747c23d8dab398fe299"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 25 Oct 2022 23:38:31 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Gxk/YWKCaWf9c3nf6uTmCg==
x-fb-debug: hIFHBgx/YIjFcCVY5JVdE8L973h9frxknx8Ns5e77zf9qJPVmgt3YiU/zkJ7XLUaBB0uuKY/Vzp3nbktSeT4xQ==
content-length: 1685
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 23:28:08 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d68830f33c12f2aa839ecd5c96146bb2
c4eca00dde1d737943bc2980b58a7288c06f808c
0b8dd5b33360dae55b75de1bb81fc9404103824c8d987372d1c44f425052f0d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash e51b6855c0480724d286847fa91528fe
ee6a114e7bc79b1aa1f07b31cb90674c2ba77bbc
174e93f5d04840d025c9807d0c752ad4b96a4350ab968025b0856c5e59599d47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 633
Cache-Control: max-age=153416
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Etag: "635822d7-1d7"
Expires: Thu, 27 Oct 2022 18:05:04 GMT
Last-Modified: Tue, 25 Oct 2022 17:54:31 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 281 B IP
Hash 0063d68c23cc57bcfb6aa3eb72d6b18c
13810b0c61aab3fc39cbcd089bee08953687594d
a29a098a949a51847bb008040d3d8ccb5a35bcfb77d671cb2b7e126d70482819
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 23:28:08 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 18:32:37 GMT
Expires: Mon, 31 Oct 2022 18:32:36 GMT
Etag: "13810b0c61aab3fc39cbcd089bee08953687594d"
Cache-Control: max-age=500067,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75feba16f860b50f-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 19c5719e45cfb53e9fdd342d81c046e0
d588591f72e278a8936e6fcaab8297f6c65b4904
b75e541f0f1468d70b4845424348e052fdde69d5334d88317c47414e18dbec2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 77b5da0f60755df91da1b98333c6d33c
0c36c5f1063e2ef41d02e26ddf9ed1e0a490e6b4
085b499d52d53965301db8affc692e09876290e5d67bf09c83178cc54384999f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/871974790/?random=1666740485410&cv=9&fst=1666738800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=1197739085&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/871974790/?random=1666740485410&cv=9&fst=1666738800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=1197739085&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/871974790/?random=1666740485410&cv=9&fst=1666738800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=1197739085&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 23:28:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-23&cid=515456360.1666740486&jid=1044795325&gjid=528980031&_gid=1110146255.1666740486&_u=aADAAUABQAAAACAAI~&z=1098339645
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-23&cid=515456360.1666740486&jid=1044795325&gjid=528980031&_gid=1110146255.1666740486&_u=aADAAUABQAAAACAAI~&z=1098339645
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-23&cid=515456360.1666740486&jid=1044795325&gjid=528980031&_gid=1110146255.1666740486&_u=aADAAUABQAAAACAAI~&z=1098339645 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.pravda.com.ua
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 25 Oct 2022 23:28:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/xgemius.js
200 OK 16 kB URL HTTP/2 gaua.hit.gemius.pl/xgemius.js
IP
File type ASCII text, with very long lines (417)
Hash 432b4d0be4fa6693f8dfe0756b921064
a4dcb1f65004626de2b8bfbcd6682516f7b982cf
f77bbe611a477e2166785dd861010ad0a3f53c260119fe4174902b09d40cbfe3
GET /xgemius.js HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Wed, 26 Oct 2022 11:28:09 GMT
server: GHC
accept-ranges: none
cache-control: max-age=43200
last-modified: Fri, 30 Sep 2022 13:21:50 GMT
vary: Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 15975
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/871974790/?random=1666740485410&cv=9&fst=1666738800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=1197739085&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/871974790/?random=1666740485410&cv=9&fst=1666738800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=1197739085&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/871974790/?random=1666740485410&cv=9&fst=1666738800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&tiba=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=1197739085&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 23:28:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-1&cid=515456360.1666740486&jid=333644850&gjid=1906403524&_gid=1110146255.1666740486&_u=YADAAUAAQAAAACAAI~&z=1183996586
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-1&cid=515456360.1666740486&jid=333644850&gjid=1906403524&_gid=1110146255.1666740486&_u=YADAAUAAQAAAACAAI~&z=1183996586
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-1&cid=515456360.1666740486&jid=333644850&gjid=1906403524&_gid=1110146255.1666740486&_u=YADAAUAAQAAAACAAI~&z=1183996586 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.pravda.com.ua
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 25 Oct 2022 23:28:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=808fefc7be8f7b54f9ee15bde25058ae
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=808fefc7be8f7b54f9ee15bde25058ae
IP
File type ASCII text, with very long lines (18530)
Hash 9e9459a1c339cf6aaacab66a1f2c8e18
9b53a8a1520e3437384118c30d659d118bba345c
54238a296ec215c1374c5ad0f4ace194464d3be7a847737d14cfad101cc3d2f3
GET /en_US/sdk.js?hash=808fefc7be8f7b54f9ee15bde25058ae HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 49f47ad9a4b2050d189e6d36e4ae272b
etag: "7c1a3cd811fde98f3b5f4707079d0cc9"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 25 Oct 2023 22:57:47 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: npRZocM5z2qqyrZqHyyOGA==
x-fb-debug: ameQyQ5RiVgvl4LAZ56Fjsam7SDKfVvtbmlVKQiP496ZVYnVFcafQ6Hjh7h5PFtjRxaBX7x0aOfMwitgeF9L8w==
priority: u=3,i
content-length: 88392
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 23:28:08 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-MRSXWZPM31>m=2oeaj0&_p=386338806&cid=515456360.1666740486&ul=en-us&sr=1280x1024&_s=1&sid=1666740485&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&dt=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MRSXWZPM31>m=2oeaj0&_p=386338806&cid=515456360.1666740486&ul=en-us&sr=1280x1024&_s=1&sid=1666740485&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&dt=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MRSXWZPM31>m=2oeaj0&_p=386338806&cid=515456360.1666740486&ul=en-us&sr=1280x1024&_s=1&sid=1666740485&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&dt=Wagner%20Group%20recruits%20large%20number%20of%20prisoners%20with%20HIV%20and%20hepatitis%2C%20marking%20them%20with%20wristbands%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.pravda.com.ua
date: Tue, 25 Oct 2022 23:28:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 19c5719e45cfb53e9fdd342d81c046e0
d588591f72e278a8936e6fcaab8297f6c65b4904
b75e541f0f1468d70b4845424348e052fdde69d5334d88317c47414e18dbec2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 130509513bc271340f20f1c556b2592a
6fd8b0623344d4c06ecf4e0708eb51a37d79ed9d
6a69bfbb5b21f5cfae366b21ab59426e78d51467926430c7bbf44d7f8ac704de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d68830f33c12f2aa839ecd5c96146bb2
c4eca00dde1d737943bc2980b58a7288c06f808c
0b8dd5b33360dae55b75de1bb81fc9404103824c8d987372d1c44f425052f0d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adx.adform.net/adx/?rp=4&bWlkPTE0MjM1MTMmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1kN2Q3MDUyYy1jNzI4LTQ2M2ItODBjYS1mMzMzNzgyNzgzZTk%3D&bWlkPTE0MjM1MTgmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD03YTJlYTlmNi0zNzQ1LTRmYzAtODIzNS1mZmE0M2VlYTk5NjU%3D&bWlkPTE0MjM1MTQmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD01NGRhOGI3MC1jNzEzLTQ2YjUtYjk3OS0zMmRhNzYwZTViZDY%3D&pt=gross&stid=b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da&fd=1
200 OK 70 B URL HTTP/2 adx.adform.net/adx/?rp=4&bWlkPTE0MjM1MTMmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1kN2Q3MDUyYy1jNzI4LTQ2M2ItODBjYS1mMzMzNzgyNzgzZTk%3D&bWlkPTE0MjM1MTgmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD03YTJlYTlmNi0zNzQ1LTRmYzAtODIzNS1mZmE0M2VlYTk5NjU%3D&bWlkPTE0MjM1MTQmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD01NGRhOGI3MC1jNzEzLTQ2YjUtYjk3OS0zMmRhNzYwZTViZDY%3D&pt=gross&stid=b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da&fd=1
IP
Hash 46df1b02b116238485e4bfe67e75429a
79f4ace518f3bb31bf2bbdb268a11226a60c765e
79f094084d6e72e690f143051bdcb63c2b948d5057b376584742becc6ad9dd47
GET /adx/?rp=4&bWlkPTE0MjM1MTMmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD1kN2Q3MDUyYy1jNzI4LTQ2M2ItODBjYS1mMzMzNzgyNzgzZTk%3D&bWlkPTE0MjM1MTgmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD03YTJlYTlmNi0zNzQ1LTRmYzAtODIzNS1mZmE0M2VlYTk5NjU%3D&bWlkPTE0MjM1MTQmcmN1cj1VU0QmdHJhbnNhY3Rpb25JZD01NGRhOGI3MC1jNzEzLTQ2YjUtYjk3OS0zMmRhNzYwZTViZDY%3D&pt=gross&stid=b2dc6df9-8a08-42d0-b3ee-4e8ab0f1f2da&fd=1 HTTP/1.1
Host: adx.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: https://www.pravda.com.ua
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/fpdata.js?href=www.pravda.com.ua
200 OK 282 B URL HTTP/2 gaua.hit.gemius.pl/fpdata.js?href=www.pravda.com.ua
IP
Hash 71c69718a54034e7c1932222021f2af4
77090922761de98afceac62b04c4940bc40c8c15
2edbee534ff1ae9136da2982a8fefc28d92983a5fe406c8840826cb3c5f5230f
GET /fpdata.js?href=www.pravda.com.ua HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Thu, 24 Nov 2022 23:28:09 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 282
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (44849)
Hash 0693afbd4892f368d205a56da9d1ce10
76df76a7baa1ed36e11a183c6b707a2b8b03d0d3
e731183673c3e07489c29700a7b422b3cf0963b31fb612a5332d0a64b23fafe2
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27323
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Tue, 25 Oct 2022 23:28:09 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1374 / 356 of 1000 / last-modified: 1666735637"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash b043a2cdbdeaaf7ea23e40725178dffd
80bb531051688d0abea78edae82e022ce2a5962d
ca2a9744cb625a97b66ff76f6e5a3423195dcd7cf5748ea5e2af32004026c8ae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5423
Cache-Control: max-age=155340
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:09 GMT
Etag: "635817a6-139"
Expires: Thu, 27 Oct 2022 18:37:09 GMT
Last-Modified: Tue, 25 Oct 2022 17:06:46 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 313
www.facebook.com/tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&rl=&if=false&ts=1666740486520&sw=1280&sh=1024&at=
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&rl=&if=false&ts=1666740486520&sw=1280&sh=1024&at=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&rl=&if=false&ts=1666740486520&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 25 Oct 2022 23:28:09 GMT
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=www.pravda.com.ua
200 OK 152 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=www.pravda.com.ua
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 402ba3ebcfed0a0e34ae75c339ba7e94
d044815d29dc9a75d03b3dadfd11f31cb9dc2703
bfbb42038876f2c5f64f5adb0191c3e21bff813fccd42a74948939c321d26c4c
GET /pagead/ppub_config?ippd=www.pravda.com.ua HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Tue, 25 Oct 2022 23:28:09 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 152
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 25-Oct-2022 23:43:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/gpt/pubads_impl_2022102001.js
200 OK 130 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022102001.js
IP
File type ASCII text, with very long lines (65439)
Size 130 kB (130516 bytes)
Hash 370f197dccad2d780af6fe84d96db46a
a39d18fcc0b8a170e95842e5d03c90488cc271c2
d78ed17f802e4de0ad3183a383fede876d7373b7f10ba3e42b37f8b0dea7aa88
GET /gpt/pubads_impl_2022102001.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 130516
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 25 Oct 2022 06:48:25 GMT
expires: Wed, 25 Oct 2023 06:48:25 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 20 Oct 2022 08:34:56 GMT
content-type: text/javascript
age: 59984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ls.hit.gemius.pl/lsget.html
200 OK 2.7 kB URL HTTP/2 ls.hit.gemius.pl/lsget.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1257)
Hash dc54aa38ccf3efd954a07db82dcfd36f
e41ed82acb81a0658e4317380012f3684fd37c95
c40380ab24b74efe40d8873f5fb64c555e2936388362cd8bcd45879828fd83f0
GET /lsget.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Thu, 24 Nov 2022 23:28:09 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 2719
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5228
Expires: Wed, 26 Oct 2022 00:55:17 GMT
Date: Tue, 25 Oct 2022 23:28:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5228
Expires: Wed, 26 Oct 2022 00:55:17 GMT
Date: Tue, 25 Oct 2022 23:28:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5228
Expires: Wed, 26 Oct 2022 00:55:17 GMT
Date: Tue, 25 Oct 2022 23:28:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5228
Expires: Wed, 26 Oct 2022 00:55:17 GMT
Date: Tue, 25 Oct 2022 23:28:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F391c9e5f-b9b0-4854-b481-769430b76afa.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F391c9e5f-b9b0-4854-b481-769430b76afa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 237f766bae92a9812e7600207b95c632
bfa4bfc84e8fa8bd421e21123e04477538639981
100442fa760bf0b9e9a07a1e68d9321b53a32dd73a9cfbfcc8399f5041db35eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F391c9e5f-b9b0-4854-b481-769430b76afa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11124
x-amzn-requestid: 1bd056c4-37cd-4f45-b94a-cdad9a8b85c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aNnWVFayIAMFqOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634eec28-28116f7063b2a9e235a00b09;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 18:10:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8ak7dKvSkqDEZRGtevSbZ9O9T4zOLdM1nx1geGOP9MNNTV75MAc7lA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 22:07:56 GMT
age: 4813
etag: "bfa4bfc84e8fa8bd421e21123e04477538639981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eccb336-aab3-4c45-986e-3d5c068fa95f.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eccb336-aab3-4c45-986e-3d5c068fa95f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 77f26048280036eede4e216d7ac2ed6f
619dff28900195c0d76692c6695c610c57fde4f2
d17b83d8de3794b198bd371579ca3447639f53121eb463b6eb0a766fe7f0103c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eccb336-aab3-4c45-986e-3d5c068fa95f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4545
x-amzn-requestid: f774726e-125a-486e-8f7b-7eb86450368a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2qHG7IAMFTSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-3e3bf9a7046685f7643817b9;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cH4Ae-5tI8KMs7ZQCIQM6OWRz1cEBUf7eOTZmQw0mJ-cmnlLqSX19w==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:53:34 GMT
age: 5675
etag: "619dff28900195c0d76692c6695c610c57fde4f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46a778e-e75b-47e4-aeb6-86c999571ae0.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46a778e-e75b-47e4-aeb6-86c999571ae0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83eeb2a673d2d0b119ba37fec52d30d1
e4d440e51b826e2cd69a00f4abf195971b2843df
4a15ba8118e9ecfe75177a4ae36fe97f14f4d9b4c6938d5863e7ae805bccb431
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46a778e-e75b-47e4-aeb6-86c999571ae0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6090
x-amzn-requestid: ab19f9fb-ebca-468d-9fb4-b70b4812a5b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjiEiNoAMFQ8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857b0-63fc3f874e6015777194599c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:40:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nM-3r-MLfIaGrc1e2d-YfIjT_Zb6JElPb73k2Qmpksg2NxaOqbUZkQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:48:48 GMT
age: 5961
etag: "e4d440e51b826e2cd69a00f4abf195971b2843df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b946c4f2f177828cf7b76c5764e97157
c3856686b98e1883133aa1824c496d34512769a0
be818a015fc9c745ea561a0b9c2aca6ba25ade24acd696fa651163d47b195371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13796
x-amzn-requestid: 90b1e032-78c6-499d-b564-f25c15e20304
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2OG0SoAMFx-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568e-599d0f526fc6a01f77b67dcf;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sVS9nFgRyVconkkFTOrCO2zA0cICFNQFB2E1q7SQcVQm5_Dm6khvrA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:48:40 GMT
age: 5969
etag: "c3856686b98e1883133aa1824c496d34512769a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 494a826ce7609ee5cc8157ea5de5f4f7
3d28f2daeef33f37c91bd26cb527793288635103
09f702f40e29e6b0c27abc5c7bb4605e504453b543c92805ba4045bd3d65c4d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3337
x-amzn-requestid: 5a06b710-2b88-435e-8863-3e0e58742e6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ21FjooAMFp8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585691-2adc1ac2375e087b20ad0e32;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:13 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 02nWxjGUWnLOfCCH-_N91bhvwj9nD2aqZr757DDchdNlHitK7bih4Q==
via: 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 22:12:48 GMT
age: 4521
etag: "3d28f2daeef33f37c91bd26cb527793288635103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4bb798f-68f7-40da-b8a2-df020464cf6a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4bb798f-68f7-40da-b8a2-df020464cf6a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bde3afce205445ff4d37fd7304d6703f
940ab4fcf102e23bd3c66ea4ed884758884a3562
4effa7986e9e0f55c88caeefaa3d0523ad7496352c8caeaa1b6d7ef2e40138c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4bb798f-68f7-40da-b8a2-df020464cf6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12421
x-amzn-requestid: d1acf900-eae0-4c4a-9310-5cabb6cc53c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2hGsnoAMFXNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568f-315abf3d30887d94198a14af;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6vw_9qHLCuynGyCBz_xUgy903P5zAdVijTMIZaozryR6fU4Yd0PC9w==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:49:36 GMT
age: 5913
etag: "940ab4fcf102e23bd3c66ea4ed884758884a3562"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 130509513bc271340f20f1c556b2592a
6fd8b0623344d4c06ecf4e0708eb51a37d79ed9d
6a69bfbb5b21f5cfae366b21ab59426e78d51467926430c7bbf44d7f8ac704de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=www.pravda.com.ua
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.pravda.com.ua
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.pravda.com.ua HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 25 Oct 2022 23:28:09 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.pravda.com.ua
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.pravda.com.ua
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.pravda.com.ua HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 25 Oct 2022 23:28:09 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ls.hit.gemius.pl/lsset.html
200 OK 1.9 kB URL HTTP/2 ls.hit.gemius.pl/lsset.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1257)
Hash a19c14d720ad4e4857060bbad4ac175e
058488790a30b8a3957dcaefdd854cface9d22f4
893e59cbc3c555c3369a3e7cbe66cd879babee83118755de1bb259c7ee42fb82
GET /lsset.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Thu, 24 Nov 2022 23:28:09 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 1866
content-encoding: gzip
X-Firefox-Spdy: h2
20fd9c22d12004cf1fef2cbfb0f3666d.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 20fd9c22d12004cf1fef2cbfb0f3666d.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: 20fd9c22d12004cf1fef2cbfb0f3666d.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Wed, 25 Oct 2023 23:28:09 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap=
301 Moved Permanently 0 B URL HTTP/2 gaua.hit.gemius.pl/_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Mon, 24 Oct 2022 23:28:09 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlSYHRXGQMGG5seO8Ro8S29issGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Tue, 01 Nov 2022 23:28:09 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
location: /__/_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap=
content-length: 0
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/__/_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap=
200 OK 169 B URL HTTP/2 gaua.hit.gemius.pl/__/_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap=
IP
Hash f48351f63c57aeccc7bb0152a140a8bd
9890f855ba3260dba2c7cf70572bb9407e957b2e
10348120c9cc052b5646774ecfb1582eb129cc85cdbd1713edcc2758f72584ed
GET /__/_1666740487007/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR<ime=100&fpdata=tG.K3Tf5zf5q_WXGFgVixiYg9feJ5y79Pc2Sacl1xCz.m7&inner=_ver%3D330&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
expires: Mon, 24 Oct 2022 23:28:09 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlxYSMXGQMGGGCY56MF8S29issGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Tue, 01 Nov 2022 23:28:09 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 169
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022102001&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022102001&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14494), with no line terminators
Hash 0ca3f8a17bd959eb180aafe0955ee303
d83e17601498115deb4d8e5065e17f9a197f04f4
9c37841a27e760180d01c98e4667843e2957043629aa61cf9c9176f221798b69
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022102001&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 25 Oct 2022 23:28:09 GMT
server: cafe
cache-control: private
content-length: 11009
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0f86bf1e2fc0e53635d6dbd436afffda
c38c19618afd2c203b53f07c71d07a31fc397353
5cba005b31289d4df7c6bfa9e0bdd27ce43ff8b7e6d91ea95ce24f690426fdc7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=5-JZG180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3hpdTBpWFUlMkZ3U1Vudm4lMkZob0V4NmFCSVhQS2V5R0V5ZXB6SUFjTkkzZWpz; expires=Sun, 19 Nov 2023 23:28:10 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 268447
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash ff212cfb9b2bfe5f01a015e5fe3846e8
26935b668567d38b87318e8aaee45079622523dd
c49fc14c7e8a86ed7245454100366f53fc67c71e2428f4de08ef9bc01f48b2ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 797
Cache-Control: max-age=121562
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:10 GMT
Etag: "6357a5c7-13a"
Expires: Thu, 27 Oct 2022 09:14:12 GMT
Last-Modified: Tue, 25 Oct 2022 09:00:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash ff212cfb9b2bfe5f01a015e5fe3846e8
26935b668567d38b87318e8aaee45079622523dd
c49fc14c7e8a86ed7245454100366f53fc67c71e2428f4de08ef9bc01f48b2ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 852
Cache-Control: max-age=121617
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:10 GMT
Etag: "6357a5c7-13a"
Expires: Thu, 27 Oct 2022 09:15:07 GMT
Last-Modified: Tue, 25 Oct 2022 09:00:55 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 314
dnacdn.net/dna
200 OK 7.7 kB IP
File type JSON data\012- , ASCII text, with very long lines (1501)
Hash f8838e1a172fd5aabdb9bdbd4984dc44
401c111a2162af20c2aa73fd6b005309d12d04c9
3faaf1a2d685c1e682ae5e1b8aa018203cd6e66605461406a10cd4f01b579861
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=5-JZG180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3hpdTBpWFUlMkZ3U1Vudm4lMkZob0V4NmFCSVhQS2V5R0V5ZXB6SUFjTkkzZWpz
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:10 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=uODCl180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3hpdTBpWFUlMkZ3U1Vudm4lMkZob0V4NmFEa0NDNlg1JTJCNEd3Z3dzVFlib2w1bHE; expires=Sun, 19 Nov 2023 23:28:10 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 274980
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsstEwn3dRYRAj5zEzI4vEhob1scLy9EidLbTm2IXXywnzak0ZJ3zPuk7kNdmqUvMCCnMp4Oh77vslk588bnc7CzXfWRzRkTQqhONKMiNkurJmmMCOfIhlQUZqb7YM46QcVTBaE5A0_IrvlceHw-I13Mgpk-UlYH2QiDqOqZ2b8jeP8j_f4RTdqDhrUIqkmY-4id1bEcVehkRmK1sRVqToXmTPAHnmn9DI_4xmcU1NdcTnzg54DArwaVVka9XTD0qvrs6yLJFhHZvKOyvf3Qfo2VznpN4NzfT-KdpXWuBBmuh1nA8AJcFy2G6hR9VGJa-4xOtxsR&sai=AMfl-YT91xxD7Ib7HwJmBvk4SwekOtxSgLa2OmNZYwIXITLXYB1nhLWEovw91smTesxUOaeapNltifm1n1S5lyx-AhsjGhCvI7Ja4GrCHuJMFFdIKPrvySS2K0BhwQfu_Elo0gAs&sig=Cg0ArKJSzGosiosRRaSGEAE&uach_m=[UACH]&adurl=
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsstEwn3dRYRAj5zEzI4vEhob1scLy9EidLbTm2IXXywnzak0ZJ3zPuk7kNdmqUvMCCnMp4Oh77vslk588bnc7CzXfWRzRkTQqhONKMiNkurJmmMCOfIhlQUZqb7YM46QcVTBaE5A0_IrvlceHw-I13Mgpk-UlYH2QiDqOqZ2b8jeP8j_f4RTdqDhrUIqkmY-4id1bEcVehkRmK1sRVqToXmTPAHnmn9DI_4xmcU1NdcTnzg54DArwaVVka9XTD0qvrs6yLJFhHZvKOyvf3Qfo2VznpN4NzfT-KdpXWuBBmuh1nA8AJcFy2G6hR9VGJa-4xOtxsR&sai=AMfl-YT91xxD7Ib7HwJmBvk4SwekOtxSgLa2OmNZYwIXITLXYB1nhLWEovw91smTesxUOaeapNltifm1n1S5lyx-AhsjGhCvI7Ja4GrCHuJMFFdIKPrvySS2K0BhwQfu_Elo0gAs&sig=Cg0ArKJSzGosiosRRaSGEAE&uach_m=[UACH]&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjsstEwn3dRYRAj5zEzI4vEhob1scLy9EidLbTm2IXXywnzak0ZJ3zPuk7kNdmqUvMCCnMp4Oh77vslk588bnc7CzXfWRzRkTQqhONKMiNkurJmmMCOfIhlQUZqb7YM46QcVTBaE5A0_IrvlceHw-I13Mgpk-UlYH2QiDqOqZ2b8jeP8j_f4RTdqDhrUIqkmY-4id1bEcVehkRmK1sRVqToXmTPAHnmn9DI_4xmcU1NdcTnzg54DArwaVVka9XTD0qvrs6yLJFhHZvKOyvf3Qfo2VznpN4NzfT-KdpXWuBBmuh1nA8AJcFy2G6hR9VGJa-4xOtxsR&sai=AMfl-YT91xxD7Ib7HwJmBvk4SwekOtxSgLa2OmNZYwIXITLXYB1nhLWEovw91smTesxUOaeapNltifm1n1S5lyx-AhsjGhCvI7Ja4GrCHuJMFFdIKPrvySS2K0BhwQfu_Elo0gAs&sig=Cg0ArKJSzGosiosRRaSGEAE&uach_m=[UACH]&adurl= HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 23:28:10 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 25-Oct-2022 23:43:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 25 Oct 2022 23:28:10 GMT
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pcs/view?xai=AKAOjstFChvDz6OR0JP-b39G5upikKw0AtN4V91duMsQ9rUd2RfsfsAdunGTnOpEusJaljz9CIFZo8jlzV8m8KNNpTOyEN3oJFjW2kqdyhZq49TNXKZB2P1jwfzF7ydk_ecHugGfZ2EK-AGERpFGe7KgcWHt0KUVqrdLRt3pKJU9_lc9E-_6z7ezd0ESXfz6w3PLLyBx7OCY5ggkKkMrsSPXGQkHGU-CvrrFqA8LbRi1SVckrizz54DxKquo_uckCbjqtwjaoVbTNEVa5ijJEkPY_e9CpQPWVwdHLZTjcK9JY8RvuLtI1ei5p3Gv9rVXkc69UZxD&sai=AMfl-YRjW89abZBRZ3uNTVhpLyrMGMhxhLjp_iwNj6Arb3JMH-yFhYgaOontq6ak8ZHC3Oyl-QFVoIHUjFcjnaGk0V06KLkUIXWO7A5OjFlwEVT-zv4FMx10r5nf3SBQcomd9rIE&sig=Cg0ArKJSzDMmA6eLdyixEAE&uach_m=[UACH]&adurl=
200 OK 0 B URL HTTP/2 securepubads.g.doubleclick.net/pcs/view?xai=AKAOjstFChvDz6OR0JP-b39G5upikKw0AtN4V91duMsQ9rUd2RfsfsAdunGTnOpEusJaljz9CIFZo8jlzV8m8KNNpTOyEN3oJFjW2kqdyhZq49TNXKZB2P1jwfzF7ydk_ecHugGfZ2EK-AGERpFGe7KgcWHt0KUVqrdLRt3pKJU9_lc9E-_6z7ezd0ESXfz6w3PLLyBx7OCY5ggkKkMrsSPXGQkHGU-CvrrFqA8LbRi1SVckrizz54DxKquo_uckCbjqtwjaoVbTNEVa5ijJEkPY_e9CpQPWVwdHLZTjcK9JY8RvuLtI1ei5p3Gv9rVXkc69UZxD&sai=AMfl-YRjW89abZBRZ3uNTVhpLyrMGMhxhLjp_iwNj6Arb3JMH-yFhYgaOontq6ak8ZHC3Oyl-QFVoIHUjFcjnaGk0V06KLkUIXWO7A5OjFlwEVT-zv4FMx10r5nf3SBQcomd9rIE&sig=Cg0ArKJSzDMmA6eLdyixEAE&uach_m=[UACH]&adurl=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pcs/view?xai=AKAOjstFChvDz6OR0JP-b39G5upikKw0AtN4V91duMsQ9rUd2RfsfsAdunGTnOpEusJaljz9CIFZo8jlzV8m8KNNpTOyEN3oJFjW2kqdyhZq49TNXKZB2P1jwfzF7ydk_ecHugGfZ2EK-AGERpFGe7KgcWHt0KUVqrdLRt3pKJU9_lc9E-_6z7ezd0ESXfz6w3PLLyBx7OCY5ggkKkMrsSPXGQkHGU-CvrrFqA8LbRi1SVckrizz54DxKquo_uckCbjqtwjaoVbTNEVa5ijJEkPY_e9CpQPWVwdHLZTjcK9JY8RvuLtI1ei5p3Gv9rVXkc69UZxD&sai=AMfl-YRjW89abZBRZ3uNTVhpLyrMGMhxhLjp_iwNj6Arb3JMH-yFhYgaOontq6ak8ZHC3Oyl-QFVoIHUjFcjnaGk0V06KLkUIXWO7A5OjFlwEVT-zv4FMx10r5nf3SBQcomd9rIE&sig=Cg0ArKJSzDMmA6eLdyixEAE&uach_m=[UACH]&adurl= HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cache-control: private
access-control-allow-origin: *
content-type: image/gif
x-content-type-options: nosniff
date: Tue, 25 Oct 2022 23:28:10 GMT
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 25-Oct-2022 23:43:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 25 Oct 2022 23:28:10 GMT
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=pravda.com.ua&sn=FirefoxSyncframe&so=0&topUrl=www.pravda.com.ua&info=uODCl180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3hpdTBpWFUlMkZ3U1Vudm4lMkZob0V4NmFEa0NDNlg1JTJCNEd3Z3dzVFlib2w1bHE&idsd=-1211232971,-1899012182&cw=1&lsw=1
200 OK 2.9 kB URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=pravda.com.ua&sn=FirefoxSyncframe&so=0&topUrl=www.pravda.com.ua&info=uODCl180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3hpdTBpWFUlMkZ3U1Vudm4lMkZob0V4NmFEa0NDNlg1JTJCNEd3Z3dzVFlib2w1bHE&idsd=-1211232971,-1899012182&cw=1&lsw=1
IP
Hash 945b7661036b2c6f8eff8c2954c3031e
aa23b73ca96a024871acd37ef829106c5332b43f
5e25be3a7294da471605720cfd33102a27ef113e1f7e0ab510a0a33681bc7052
GET /sid/json?origin=publishertag&domain=pravda.com.ua&sn=FirefoxSyncframe&so=0&topUrl=www.pravda.com.ua&info=uODCl180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3hpdTBpWFUlMkZ3U1Vudm4lMkZob0V4NmFEa0NDNlg1JTJCNEd3Z3dzVFlib2w1bHE&idsd=-1211232971,-1899012182&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:10 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1134302
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 19132f29a8811a10f90eca2d81e5deb8
3b9e0bbf9f40f46b57dad5567b008e58b5770565
708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js
IP
File type ASCII text, with very long lines (32030)
Hash 04ba0252a9f264db106d4eaab8df4ccb
cf52d9b3df7839c5c64fbf33aafeced74b3db750
397852429e768ffbd12a78ce4b94f14e3ab4afabf84acb07c0bb5b7798e6e0b2
GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 12:09:32 GMT
expires: Fri, 20 Oct 2023 12:09:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 472719
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 19132f29a8811a10f90eca2d81e5deb8
3b9e0bbf9f40f46b57dad5567b008e58b5770565
708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstfL47NEzO9bEfWhkYYxgVBPAD-TM0VLiI1IDr1hoN3gR1SEDQ5xwJ7TAPwTso93UEP5rO3loc3ytDuewWzv9igSZP4ZlwIbGit_hbmLUP6LdQKsjMYWcWTHnfA5U01_ECUW1LQsqnMD--yrNDOsepPIF1Yf7UjHPPUOSnrDAq5wat48wbAOj1qIN1N8iv9oAN9EJ067xaKPOA6nBGskMLEBtJosxOTsKYYGm2FJkxuHv68xmMv05tiuQGOLdfqqf15d1zV9NEb43XdXYi5paBt-OzhB35XwbTPkpFXG9DyCHK48aecpog3DUYrPwbV8Rhcr9da-7ZPswFahQpnzaaAHdvllVZEj8J6KXSs-L3pbwJGfGwl3mon5ViSCsbCBxv24lC95KozyBviIsvmetQyHQag3ZOZ-xN3KERdBm6ZDvLrq9PN69y4asolo_kDOBAGwqfRTwFp0oB7ggFWoEfxejDk56_OfjlsfvvvdH6FHIN6OaRISa9PxXg1CpXBfneRppqadk508ciasrD34MvQgc7G2thLe28Z--o688kTVNaZSBEt4X_3zay3NQXApaYjcIC1Os_LbIvj1IMR4B2QIQKREaqd9oNAnXmFdLe2DdI9rH-Lr9XqO5T7lubw2lJvbWNz0kEGw12EaeozrH421SMBCowqAqQ9XGtTIJ94njisJx95PHgMqEXmUcauNkjlKZ50GN--edKNCfedEbJTlddclQ-4tiZEF_FJCtaJJAIC8lO6cE4gEKdeB-cFWHotqZsvWtLLQmKGKWjYSHSByIUUR8wVlSD6N9DcblvNFJtRbSIFtRl__SR1kzAjs7r2ZAevgt3agY4uRrWIRsAGMY_pEnQD9UNbuxmLqpNQ4dGIe-LPRt_Xb-w2W3yI6RvScZedoFMyyGBXMZBdwNDX8whML4zEvWwtf2AMHKKgOpXUH4b8sZK5NUoFzrY2FVR7oFDJWAgozookAw0mcAHbC_-iXmMPQg3BZvFVlveV1KsX03KfPgKYgscOZIXEOhCUpgKovsVEJKK4AdCwNwCVPds9_pk-GZ7HaSPEZnHeGuEmVhDwYI8RIM5Y5UFM-rXzL79sGyAzimrmQFbMM9jI4iMDtYICq3CXn6hAD-L_GwS7n793NJTG4exk2aEzGcFpDX12jAqxWlTwTfSUdZ_e56V8Mt4KobgW0A&sai=AMfl-YS9OZ6kPkDdeBOgD4PNPI6JpLsmRubRxH8TK_RGlBO4IvpOhnd6Hc_rgOZAVewvhOe9I0L3yNHaUgf1KkUJrqnrYZaeMmfZXOa7w_qUylyyjDGpmC6tKVoVIVDaWL2W_lZgIHuS3x5H7lT8VMA&sig=Cg0ArKJSzOp0S2E_OI2QEAE&id=lidar2&mcvt=1002&p=282,956,882,1256&mtos=1002,1002,1002,1002,1002&tos=1002,0,0,0,0&v=20221024&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=2&adk=1254274615&rs=4&la=0&cr=0&vs=4&r=v&rst=1666740487620&rpt=620&isd=0&lsd=0&met=mue&wmsd=0
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstfL47NEzO9bEfWhkYYxgVBPAD-TM0VLiI1IDr1hoN3gR1SEDQ5xwJ7TAPwTso93UEP5rO3loc3ytDuewWzv9igSZP4ZlwIbGit_hbmLUP6LdQKsjMYWcWTHnfA5U01_ECUW1LQsqnMD--yrNDOsepPIF1Yf7UjHPPUOSnrDAq5wat48wbAOj1qIN1N8iv9oAN9EJ067xaKPOA6nBGskMLEBtJosxOTsKYYGm2FJkxuHv68xmMv05tiuQGOLdfqqf15d1zV9NEb43XdXYi5paBt-OzhB35XwbTPkpFXG9DyCHK48aecpog3DUYrPwbV8Rhcr9da-7ZPswFahQpnzaaAHdvllVZEj8J6KXSs-L3pbwJGfGwl3mon5ViSCsbCBxv24lC95KozyBviIsvmetQyHQag3ZOZ-xN3KERdBm6ZDvLrq9PN69y4asolo_kDOBAGwqfRTwFp0oB7ggFWoEfxejDk56_OfjlsfvvvdH6FHIN6OaRISa9PxXg1CpXBfneRppqadk508ciasrD34MvQgc7G2thLe28Z--o688kTVNaZSBEt4X_3zay3NQXApaYjcIC1Os_LbIvj1IMR4B2QIQKREaqd9oNAnXmFdLe2DdI9rH-Lr9XqO5T7lubw2lJvbWNz0kEGw12EaeozrH421SMBCowqAqQ9XGtTIJ94njisJx95PHgMqEXmUcauNkjlKZ50GN--edKNCfedEbJTlddclQ-4tiZEF_FJCtaJJAIC8lO6cE4gEKdeB-cFWHotqZsvWtLLQmKGKWjYSHSByIUUR8wVlSD6N9DcblvNFJtRbSIFtRl__SR1kzAjs7r2ZAevgt3agY4uRrWIRsAGMY_pEnQD9UNbuxmLqpNQ4dGIe-LPRt_Xb-w2W3yI6RvScZedoFMyyGBXMZBdwNDX8whML4zEvWwtf2AMHKKgOpXUH4b8sZK5NUoFzrY2FVR7oFDJWAgozookAw0mcAHbC_-iXmMPQg3BZvFVlveV1KsX03KfPgKYgscOZIXEOhCUpgKovsVEJKK4AdCwNwCVPds9_pk-GZ7HaSPEZnHeGuEmVhDwYI8RIM5Y5UFM-rXzL79sGyAzimrmQFbMM9jI4iMDtYICq3CXn6hAD-L_GwS7n793NJTG4exk2aEzGcFpDX12jAqxWlTwTfSUdZ_e56V8Mt4KobgW0A&sai=AMfl-YS9OZ6kPkDdeBOgD4PNPI6JpLsmRubRxH8TK_RGlBO4IvpOhnd6Hc_rgOZAVewvhOe9I0L3yNHaUgf1KkUJrqnrYZaeMmfZXOa7w_qUylyyjDGpmC6tKVoVIVDaWL2W_lZgIHuS3x5H7lT8VMA&sig=Cg0ArKJSzOp0S2E_OI2QEAE&id=lidar2&mcvt=1002&p=282,956,882,1256&mtos=1002,1002,1002,1002,1002&tos=1002,0,0,0,0&v=20221024&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=2&adk=1254274615&rs=4&la=0&cr=0&vs=4&r=v&rst=1666740487620&rpt=620&isd=0&lsd=0&met=mue&wmsd=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pcs/activeview?xai=AKAOjstfL47NEzO9bEfWhkYYxgVBPAD-TM0VLiI1IDr1hoN3gR1SEDQ5xwJ7TAPwTso93UEP5rO3loc3ytDuewWzv9igSZP4ZlwIbGit_hbmLUP6LdQKsjMYWcWTHnfA5U01_ECUW1LQsqnMD--yrNDOsepPIF1Yf7UjHPPUOSnrDAq5wat48wbAOj1qIN1N8iv9oAN9EJ067xaKPOA6nBGskMLEBtJosxOTsKYYGm2FJkxuHv68xmMv05tiuQGOLdfqqf15d1zV9NEb43XdXYi5paBt-OzhB35XwbTPkpFXG9DyCHK48aecpog3DUYrPwbV8Rhcr9da-7ZPswFahQpnzaaAHdvllVZEj8J6KXSs-L3pbwJGfGwl3mon5ViSCsbCBxv24lC95KozyBviIsvmetQyHQag3ZOZ-xN3KERdBm6ZDvLrq9PN69y4asolo_kDOBAGwqfRTwFp0oB7ggFWoEfxejDk56_OfjlsfvvvdH6FHIN6OaRISa9PxXg1CpXBfneRppqadk508ciasrD34MvQgc7G2thLe28Z--o688kTVNaZSBEt4X_3zay3NQXApaYjcIC1Os_LbIvj1IMR4B2QIQKREaqd9oNAnXmFdLe2DdI9rH-Lr9XqO5T7lubw2lJvbWNz0kEGw12EaeozrH421SMBCowqAqQ9XGtTIJ94njisJx95PHgMqEXmUcauNkjlKZ50GN--edKNCfedEbJTlddclQ-4tiZEF_FJCtaJJAIC8lO6cE4gEKdeB-cFWHotqZsvWtLLQmKGKWjYSHSByIUUR8wVlSD6N9DcblvNFJtRbSIFtRl__SR1kzAjs7r2ZAevgt3agY4uRrWIRsAGMY_pEnQD9UNbuxmLqpNQ4dGIe-LPRt_Xb-w2W3yI6RvScZedoFMyyGBXMZBdwNDX8whML4zEvWwtf2AMHKKgOpXUH4b8sZK5NUoFzrY2FVR7oFDJWAgozookAw0mcAHbC_-iXmMPQg3BZvFVlveV1KsX03KfPgKYgscOZIXEOhCUpgKovsVEJKK4AdCwNwCVPds9_pk-GZ7HaSPEZnHeGuEmVhDwYI8RIM5Y5UFM-rXzL79sGyAzimrmQFbMM9jI4iMDtYICq3CXn6hAD-L_GwS7n793NJTG4exk2aEzGcFpDX12jAqxWlTwTfSUdZ_e56V8Mt4KobgW0A&sai=AMfl-YS9OZ6kPkDdeBOgD4PNPI6JpLsmRubRxH8TK_RGlBO4IvpOhnd6Hc_rgOZAVewvhOe9I0L3yNHaUgf1KkUJrqnrYZaeMmfZXOa7w_qUylyyjDGpmC6tKVoVIVDaWL2W_lZgIHuS3x5H7lT8VMA&sig=Cg0ArKJSzOp0S2E_OI2QEAE&id=lidar2&mcvt=1002&p=282,956,882,1256&mtos=1002,1002,1002,1002,1002&tos=1002,0,0,0,0&v=20221024&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=2&adk=1254274615&rs=4&la=0&cr=0&vs=4&r=v&rst=1666740487620&rpt=620&isd=0&lsd=0&met=mue&wmsd=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20fd9c22d12004cf1fef2cbfb0f3666d.safeframe.googlesyndication.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: image/gif
date: Tue, 25 Oct 2022 23:28:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 17 kB URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash f146342ec6e8dff840d77c06e00a8425
0d48cf0028aa1c4876c9ca0430d4b25df85d7990
56f025ec15c585cfcea6490e6d16a9b6aac78d3340f3226f0c976d24691dcbcd
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 130180
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 273 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 33e74af350dcb3595647d6d73c9a9392
528b659c3f664cc1d3e51207aa30d75a458dc2df
d50da697f5f7165facb205234caa03f64014af7482126b50fa2e64bea0b42744
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 135106
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:12 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 25 Oct 2022 23:28:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: d124767d-859d-477f-bf50-399adb6acd4c
Set-Cookie: uuid2=7072361324524780604; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 23-Jan-2023 23:28:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ap.lijit.com/beacon?informer=13408038
302 Found 0 B URL HTTP/1.1 ap.lijit.com/beacon?informer=13408038
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?informer=13408038 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 25 Oct 2022 23:28:12 GMT
Set-Cookie: ljt_reader=FiuArNZH-gno7B7LRQecIKZn; Path=/; Domain=.lijit.com; Expires=Wed, 25-Oct-2023 23:28:12 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://ap.lijit.com/beacon?informer=13408038&dnr=1
Content-Length: 0
X-Sovrn-Pod: ad_ap3ams1
ocsp.digicert.com/
200 OK 279 B IP
Hash 3163ffabd962f0acf37f4a3737519b3b
6c0d65aa05e2b2b0378e5e32b435ebe234294016
e9bfe4b1064904acd266e6c7eb40967d6da77988cdfff075e4bc208bc39e5dfe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5778
Cache-Control: max-age=104560
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:12 GMT
Etag: "63574fea-117"
Expires: Thu, 27 Oct 2022 04:30:52 GMT
Last-Modified: Tue, 25 Oct 2022 02:54:34 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
eus.rubiconproject.com/usync.js
200 OK 9.5 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
File type ASCII text, with very long lines (18097)
Hash 09cbdf593f98a5ae842782775c542df3
20f0928fb8fc31780e4f321d702a35ae8ace8de4
e104b39def59b5d21865408553817280f48b2b6b6b112520fa8ad8a17e4bf3a0
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Mon, 17 Oct 2022 18:37:59 GMT
Content-Encoding: gzip
Content-Length: 9456
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=40171
Expires: Wed, 26 Oct 2022 10:37:43 GMT
Date: Tue, 25 Oct 2022 23:28:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 25 Oct 2022 23:28:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 75d0c11c-3587-441b-b52d-f02cd5804ece
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js-sec.indexww.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 25 Oct 2022 23:28:12 GMT
content-length: 0
location: /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
cf-ray: 75feba2c8ff40af6-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y1hxDIvqXve.kUEaKi7VXAAA; Path=/; Domain=casalemedia.com; Expires=Wed, 25 Oct 2023 23:28:12 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4461; Path=/; Domain=casalemedia.com; Expires=Mon, 23 Jan 2023 23:28:12 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4461; Path=/; Domain=casalemedia.com; Expires=Mon, 23 Jan 2023 23:28:12 GMT; Max-Age=7776000; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ap.lijit.com/beacon?informer=13408038&dnr=1
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/beacon?informer=13408038&dnr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?informer=13408038&dnr=1 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Tue, 25 Oct 2022 23:28:12 GMT
Set-Cookie: ljt_reader=FiuArNZHW9npLEwJR--5mHsf; Path=/; Domain=.lijit.com; Expires=Wed, 25-Oct-2023 23:28:12 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap3ams1
ocsp.digicert.com/
200 OK 279 B IP
Hash 3163ffabd962f0acf37f4a3737519b3b
6c0d65aa05e2b2b0378e5e32b435ebe234294016
e9bfe4b1064904acd266e6c7eb40967d6da77988cdfff075e4bc208bc39e5dfe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 577
Cache-Control: max-age=99359
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:12 GMT
Etag: "63574fea-117"
Expires: Thu, 27 Oct 2022 03:04:11 GMT
Last-Modified: Tue, 25 Oct 2022 02:54:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 1ba67c56a9803afa73f6422f68c854a5
21dcb8e92219a2f64895bcbe692994a39448d2fb
6a025334d0ba920fe41a17d21a05dc139a4d031fc420b2a5968387ea646b2913
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 260
Cache-Control: max-age=96188
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 23:28:12 GMT
Etag: "635744c4-117"
Expires: Thu, 27 Oct 2022 02:11:20 GMT
Last-Modified: Tue, 25 Oct 2022 02:07:00 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
cdn.indexww.com/ht/htw-pixel.gif?0
200 OK 43 B URL HTTP/2 cdn.indexww.com/ht/htw-pixel.gif?0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /ht/htw-pixel.gif?0 HTTP/1.1
Host: cdn.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:12 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 24 Jan 2017 19:36:04 GMT
etag: "761e21-2b-546dc3a097100"
cache-control: public, max-age=86400
expires: Wed, 26 Oct 2022 23:28:12 GMT
edge-control: cache-maxage=1h
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 3446
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75feba2db8530af6-OSL
X-Firefox-Spdy: h2
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 25 Oct 2022 23:28:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: d2403618-546c-4b18-8265-4b50e09dbbb5
Set-Cookie: uuid2=1726954776606289047; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 23-Jan-2023 23:28:13 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 25 Oct 2022 23:28:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: f933f7fb-0c70-44b9-bb06-52e3ba1f06a4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
200 OK 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
IP
GET /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js-sec.indexww.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:12 GMT
content-type: text/html
cf-ray: 75feba2cd8130af6-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a4p.adpartner.pro/hb/bid?tag=8581,8580,8582&sizes=300x250,300x250|300x600,580x400|336x280&referer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F
200 OK 0 B URL HTTP/2 a4p.adpartner.pro/hb/bid?tag=8581,8580,8582&sizes=300x250,300x250|300x600,580x400|336x280&referer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F
IP
POST /hb/bid?tag=8581,8580,8582&sizes=300x250,300x250|300x600,580x400|336x280&referer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F HTTP/1.1
Host: a4p.adpartner.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 478
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 23:28:09 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.pravda.com.ua
set-cookie: apuid=89b6c69b-6b0c-4284-b7ae-ae3c2caacb83; Path=/; Expires=Sat, 24 Dec 2022 23:28:08 GMT; Secure; SameSite=None
cache-control: no-store no-transform
content-encoding: br
X-Firefox-Spdy: h2
js-sec.indexww.com/um/ixmatch.html
200 OK 0 B URL HTTP/2 js-sec.indexww.com/um/ixmatch.html
IP
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:12 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 25 Jul 2022 19:18:26 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 475
expires: Wed, 26 Oct 2022 03:28:12 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 75feba2b8b030b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.pravda.com.ua/eng/news/2022/10/25/7373389/
200 OK 0 B URL HTTP/2 www.pravda.com.ua/eng/news/2022/10/25/7373389/
IP
GET /eng/news/2022/10/25/7373389/ HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 23:28:07 GMT
content-type: text/html; charset=windows-1251
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-encoding: br
vary: Accept-Encoding
via: 1.1 google
cache-control: must-revalidate,no-transform,max-age=60,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
htlb.casalemedia.com/cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22134b959b5cceb8c8%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22notsy.io%22%2C%22sid%22%3A%22fd182d2f-e98c-448c-be3d-3d292004438e%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214d0b48921993ff8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%22153a84e17d944ee%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2216d96f9c0205b8a8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%22153a84e17d944ee%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2216d96f9c0205b8a8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D
200 OK 0 B URL HTTP/2 htlb.casalemedia.com/cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22134b959b5cceb8c8%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22notsy.io%22%2C%22sid%22%3A%22fd182d2f-e98c-448c-be3d-3d292004438e%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214d0b48921993ff8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%22153a84e17d944ee%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2216d96f9c0205b8a8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%22153a84e17d944ee%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2216d96f9c0205b8a8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D
IP
GET /cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%22134b959b5cceb8c8%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F10%2F25%2F7373389%2F%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22notsy.io%22%2C%22sid%22%3A%22fd182d2f-e98c-448c-be3d-3d292004438e%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214d0b48921993ff8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%22153a84e17d944ee%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2216d96f9c0205b8a8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%22153a84e17d944ee%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2216d96f9c0205b8a8%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: application/json
cf-ray: 75feba13aecdb4f7-OSL
access-control-allow-origin: https://www.pravda.com.ua
cache-control: no-cache
expires: 0
vary: Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ym-tack.b-cdn.net/page_view?UPR;desktop;;page_desktop;d80353|6b1ce9
200 OK 0 B URL HTTP/2 ym-tack.b-cdn.net/page_view?UPR;desktop;;page_desktop;d80353|6b1ce9
IP
ASN #60068 Datacamp Limited
POST /page_view?UPR;desktop;;page_desktop;d80353|6b1ce9 HTTP/1.1
Host: ym-tack.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:08 GMT
content-type: text/html
vary: Accept-Encoding
server: BunnyCDN-DE-860
cdn-pullzone: 749406
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
cache-control: public, max-age=0
cdn-storageserver: DE-167
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 404
cdn-cachedat: 10/25/2022 23:28:08
cdn-edgestorageid: 755
cdn-status: 404
cdn-requestid: 29be744e0ad5cb4dcbf925a9d8544069
content-encoding: br
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_4.43.4
200 OK 0 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_4.43.4
IP
POST /rtb/bid?src=prebid_prebid_4.43.4 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 714
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: close
Date: Tue, 25 Oct 2022 23:28:08 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
X-Sovrn-Pod: ad_ap3ams1
gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
IP
GET /syncframe?origin=publishertag&topUrl=www.pravda.com.ua HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:09 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=06358b80-fb8a-4bec-8e07-b7c1b5a019b2; expires=Sun, 19 Nov 2023 23:28:09 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 521589
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.membrana.media/upr/ym.js?v=4
200 OK 0 B URL HTTP/2 cdn.membrana.media/upr/ym.js?v=4
IP
ASN #34989 ServeTheWorld AS
Analyzer Verdict Alert fortinet Malware
GET /upr/ym.js?v=4 HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:07 GMT
content-type: application/javascript
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"6357d468-5ee4c"
last-modified: Tue, 25 Oct 2022 12:19:52 GMT
cdn-storageserver: DE-169
cdn-fileserver: 252
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/25/2022 12:20:38
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: f822c5a8c9a8d794f458797d2cfa987e
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.membrana.media/video/video.js
200 OK 0 B URL HTTP/2 cdn.membrana.media/video/video.js
IP
ASN #34989 ServeTheWorld AS
GET /video/video.js HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 23:28:07 GMT
content-type: application/javascript
server: BunnyCDN-NO-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"63512199-38b5e"
last-modified: Thu, 20 Oct 2022 10:23:21 GMT
cdn-storageserver: DE-167
cdn-fileserver: 224
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/20/2022 10:23:43
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: fd9cdddb49d343426252f0f9d4832dd7
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
107.178.251.122
185.89.210.212
104.88.9.101
54.38.197.123
146.0.227.110
185.239.173.226
72.251.249.9
23.36.77.32
95.216.24.149
37.157.4.24