korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
301 Moved Permanently 0 B URL HTTP/1.1 korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 25 Mar 2023 23:42:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 26 Mar 2023 00:42:09 GMT
Location: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Set-Cookie: __cf_bm=uW0xakx6rWyHPtFd6yZtwUC2mw89av2tYnPPvHschwI-1679787729-0-AUgS6D6YuHAsJBcOns3q3TPMBA6dj4C7r7v7HQeK16CMrLxoVpiD+5owRM+79R4N+W7yDq4IbvhUmw1o0Z4LeYA=; path=/; expires=Sun, 26-Mar-23 00:12:09 GMT; domain=.korrespondent.net; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7adb023d7831b51d-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12321
Expires: Sun, 26 Mar 2023 03:07:30 GMT
Date: Sat, 25 Mar 2023 23:42:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12630
Expires: Sun, 26 Mar 2023 03:12:39 GMT
Date: Sat, 25 Mar 2023 23:42:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 23:15:30 GMT
content-type: application/json
age: 1599
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4277
Expires: Sun, 26 Mar 2023 00:53:26 GMT
Date: Sat, 25 Mar 2023 23:42:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RhR5yG/0AwaHaVElzKiw0Vx/OtU6sQe5rxgjsakDHDy7SOEhfhXPN/aLP0hqSGSFYC/WRvrpOuk=
x-amz-request-id: H140BNQCD8R4EK5S
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 22:55:05 GMT
age: 2824
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:09 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
korrespondent.net/js/modules/socialCounters.js
200 OK 1.3 kB URL HTTP/2 korrespondent.net/js/modules/socialCounters.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash fa5b8896ee13001a89c4c51ac010fdd2
2303d81069e4acc8358a8bc3393644bdef024306
916dee2d0ebf8d26f9f628e5e4a5e249bd7e81bb743bb2d3eb13588e0b564e3e
GET /js/modules/socialCounters.js HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: application/javascript
content-length: 1302
cache-control: no-cache,public, max-age=31536
content-encoding: gzip
last-modified: Mon, 11 Jul 2016 11:44:00 GMT
etag: "0c0d08369dbd11:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 2680
accept-ranges: bytes
server: cloudflare
cf-ray: 7adb02413aadfab4-OSL
X-Firefox-Spdy: h2
korrespondent.net/i/ajax.gif
200 OK 5.5 kB URL HTTP/2 korrespondent.net/i/ajax.gif
IP
File type GIF image data, version 89a, 25 x 25\012- data
Hash 7cc7e4b648f75780de51ded3a834fd46
f2e2bef8a06957b69fa48e79b7fe635b5e50609d
dd4fb84ef463207662efa03dbd05515afb3aee6a71fa7c5e56e7b0b13504a7b4
GET /i/ajax.gif HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: image/gif
content-length: 5483
cache-control: no-cache,public, max-age=31536
last-modified: Mon, 11 Jul 2016 11:43:59 GMT
etag: "f5e98f8369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 621
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb02414ab5fab4-OSL
X-Firefox-Spdy: h2
korrespondent.net/i/blank.gif
200 OK 45 B URL HTTP/2 korrespondent.net/i/blank.gif
IP
File type GIF image data, version 89a, 20 x 1\012- data
Hash 909d04657c4ab77985e9323d7fae0da4
c506439545f0b77aeea04961f5af4c557ae83127
f2688cfce6737668af724081900a94bfdcf6437cf8372189005178964e7d1831
GET /i/blank.gif HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: image/gif
content-length: 45
cache-control: no-cache,public, max-age=31536
last-modified: Mon, 11 Jul 2016 11:43:59 GMT
etag: "f5e98f8369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 621
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb02414ab8fab4-OSL
X-Firefox-Spdy: h2
korrespondent.net/i/logo.png
200 OK 5.6 kB URL HTTP/2 korrespondent.net/i/logo.png
IP
File type PNG image data, 282 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash d9555401d4e4e2548cea17957cf82c3d
2e19a080b9684e43d8a1ef7f6873b1380f7b5049
bc485c60c1e0395cf0c58a2a9bcc80550b8f289f5be78594484b3eeed36c37d9
GET /i/logo.png HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: image/png
content-length: 5600
cache-control: no-cache,public, max-age=31536
last-modified: Mon, 11 Jul 2016 11:44:00 GMT
etag: "0c0d08369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb02414ab2fab4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e6775cb573aaee995c89d41b6be93723
cad165485f34023136370b32999077f4928c68c5
c14056ae20c7cd552209571a3430df2711ec94a5f8ee42c1693a3bf2d04b30ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
id.korrespondent.net/js/profile.js?v=3
200 OK 1.8 kB URL HTTP/2 id.korrespondent.net/js/profile.js?v=3
IP
ASN #197203 PJSC Ukrainian Media Holding
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 210ecf3e168946b3d6db3efefd3f4e6e
d254f920b5dbd438c8ba9bbb51a5b66537aeca46
72d304de3c21c627e79cd454c178839b8c740651c51e43813b575954dba13193
GET /js/profile.js?v=3 HTTP/1.1
Host: id.korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 21 Feb 2023 23:34:02 GMT
accept-ranges: bytes
etag: "0119afa4c46d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 1805
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-1609229-9
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-1609229-9
IP
File type ASCII text, with very long lines (2206)
Hash 0ecd5653a70a4cd163c3fa9b82fbe930
250f0acccd550f3585358c8e599203418ff97e6a
978b089fe287ea3bd68efd46672606357d6e5845166a6cdb307ab6485a74653c
GET /gtag/js?id=UA-1609229-9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:42:10 GMT
expires: Sat, 25 Mar 2023 23:42:10 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Mar 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44795
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash d01ed88167c88ffc1be93969d4471649
d4d474db33fe79cd82f410dd5e4e742a88685051
a2d226066ff02297d724916be3539ee1565fb64a6613e30b8e71da6b1acf3dd1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 12:10:56 GMT
Expires: Sat, 01 Apr 2023 12:10:55 GMT
Etag: "d4d474db33fe79cd82f410dd5e4e742a88685051"
Cache-Control: max-age=562724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb02429941b518-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash d01ed88167c88ffc1be93969d4471649
d4d474db33fe79cd82f410dd5e4e742a88685051
a2d226066ff02297d724916be3539ee1565fb64a6613e30b8e71da6b1acf3dd1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 12:10:56 GMT
Expires: Sat, 01 Apr 2023 12:10:55 GMT
Etag: "d4d474db33fe79cd82f410dd5e4e742a88685051"
Cache-Control: max-age=562724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb024299b2b4f7-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash d01ed88167c88ffc1be93969d4471649
d4d474db33fe79cd82f410dd5e4e742a88685051
a2d226066ff02297d724916be3539ee1565fb64a6613e30b8e71da6b1acf3dd1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 12:10:56 GMT
Expires: Sat, 01 Apr 2023 12:10:55 GMT
Etag: "d4d474db33fe79cd82f410dd5e4e742a88685051"
Cache-Control: max-age=562724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb02429c4e1c02-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash d01ed88167c88ffc1be93969d4471649
d4d474db33fe79cd82f410dd5e4e742a88685051
a2d226066ff02297d724916be3539ee1565fb64a6613e30b8e71da6b1acf3dd1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 12:10:56 GMT
Expires: Sat, 01 Apr 2023 12:10:55 GMT
Etag: "d4d474db33fe79cd82f410dd5e4e742a88685051"
Cache-Control: max-age=562724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb02429efbb4fd-OSL
csskor.ill.in.ua/css/admin.css?v=1
200 OK 855 B URL HTTP/2 csskor.ill.in.ua/css/admin.css?v=1
IP
ASN #197203 PJSC Ukrainian Media Holding
Hash 033338417e2c2acf4761915c01fa16e1
1665ccfe0ce56a051bea95dbcf841c260ee4af1d
0b25f1d772f235a00bf5a567e01a7f3fdea17ad8fc13022ce41fe3d53a685c77
GET /css/admin.css?v=1 HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Thu, 15 May 2014 11:10:16 GMT
accept-ranges: bytes
etag: "0dce73f2e70cf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 855
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c5afd310351225f5047b671a33d73e7
44677e6770f2002b0443ffaeb79de5461b250637
898626134987d19c0a49837ae74422702d0eb428e21d40838669b3526280f82c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "898626134987D19C0A49837AE74422702D0EB428E21D40838669B3526280F82C"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5590
Expires: Sun, 26 Mar 2023 01:15:20 GMT
Date: Sat, 25 Mar 2023 23:42:10 GMT
Connection: keep-alive
csskor.ill.in.ua/css/elections.css
200 OK 2.5 kB URL HTTP/2 csskor.ill.in.ua/css/elections.css
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (379)
Hash 725ee1688063d088d1fe960b62a9d249
49e3e7b6eaa92964418455bdef3a7e0232e5effb
a40150b140140aac6db6a6860126db257cd6a726304929fba3874c6f51c97cc3
GET /css/elections.css HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Mon, 27 Oct 2014 21:02:42 GMT
accept-ranges: bytes
etag: "0c5215929f2cf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 2480
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/dropdown.min.js
200 OK 900 B URL HTTP/2 jskor.ill.in.ua/js/dropdown.min.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (2237), with no line terminators
Hash deb2f1c770c10e79497a6305120b8aa9
971fc8248dce5ad768fc6b42fb083b9104986310
2873c8cc4bf8709502367529da3171c7c7949b1c70b7902184fdc081db5f184c
GET /js/dropdown.min.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:44 GMT
accept-ranges: bytes
etag: "078642cb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 900
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/select.min.js
200 OK 4.1 kB URL HTTP/2 jskor.ill.in.ua/js/select.min.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (14098), with no line terminators
Hash 4de1030cc0acb8b264c2415051e7a265
f0fd8b3b9b8fcc9f208d151844319f42ffe69415
abdfc81406a1de35caa88613a933feed341c3a840b363521dfc722ffb8103740
GET /js/select.min.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:48 GMT
accept-ranges: bytes
etag: "0d2c62eb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 4138
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e6775cb573aaee995c89d41b6be93723
cad165485f34023136370b32999077f4928c68c5
c14056ae20c7cd552209571a3430df2711ec94a5f8ee42c1693a3bf2d04b30ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ui.ill.in.ua/s/disclaimer.min.js
200 OK 1.4 kB URL HTTP/1.1 ui.ill.in.ua/s/disclaimer.min.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1891), with no line terminators
Hash 81af368548913378eaf5b545f248f476
e3860a83f2261e16303f1f1f41d4bce0bf3b0b9f
5375886b0e317b731b0ccfce873063e1036b9807a5431dd840edeb6b83e215eb
GET /s/disclaimer.min.js HTTP/1.1
Host: ui.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public, max-age=31536
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Thu, 13 Jun 2019 12:36:23 GMT
Accept-Ranges: bytes
ETag: "d67f5a9ce421d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Sat, 25 Mar 2023 23:42:09 GMT
Content-Length: 1352
jskor.ill.in.ua/js/jquery.royalslider.min.js
200 OK 17 kB URL HTTP/2 jskor.ill.in.ua/js/jquery.royalslider.min.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (638)
Hash 76efe2aa36cc6abae4b7707ac24c5660
82a087c1f4d1c595103a58705546565596ff22a3
70061a1f5e10289f903283237b61e69f74376d180497be1b58c6fc986d14e654
GET /js/jquery.royalslider.min.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:48 GMT
accept-ranges: bytes
etag: "0d2c62eb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 16792
X-Firefox-Spdy: h2
csskor.ill.in.ua/fonts/opensans-condbold-webfont.woff
200 OK 50 kB URL HTTP/2 csskor.ill.in.ua/fonts/opensans-condbold-webfont.woff
IP
ASN #197203 PJSC Ukrainian Media Holding
File type Web Open Font Format, TrueType, length 49816, version 1.0\012- data
Hash d52f34b2a70677309844b42996efe508
845d050a2758314d11c7079e1238cc06bb3c963d
26dc9aca8f2ab8bbb58b5e9e5918988475e42f7cffad974698a71b2addc6ec5b
GET /fonts/opensans-condbold-webfont.woff HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31536
content-type: font/x-woff
last-modified: Wed, 18 Dec 2013 10:08:55 GMT
accept-ranges: bytes
etag: "7499fa28d9fbce1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 49816
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 23:17:24 GMT
age: 1486
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/branding.js?v=1
200 OK 1.8 kB URL HTTP/2 jskor.ill.in.ua/js/branding.js?v=1
IP
ASN #197203 PJSC Ukrainian Media Holding
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 0296af9c343d838d13fd12c53de50680
f0e2c6b37ed5fc21f86d377b07d504b9120777a9
8f93c968660841e9fdccebc0cfd7ccda4eddb25ea8ebd8d7132a5b6a1fbb1244
GET /js/branding.js?v=1 HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 18 Nov 2021 13:58:37 GMT
accept-ranges: bytes
etag: "8024146284dcd71:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 1794
X-Firefox-Spdy: h2
i.holder.com.ua/t/holder.js
200 OK 3.9 kB URL HTTP/1.1 i.holder.com.ua/t/holder.js
IP
ASN #43405 LLC Digital Ventures
File type ASCII text, with CRLF line terminators
Hash eacda605637b03298832a58fcf0a495e
ab78a7d9d4bcf5817524a129bda841851c699286
7e2588e5284b5929eb6ac3cc72dfe87dbed2137cc1b697f0847deb5799044c1d
GET /t/holder.js HTTP/1.1
Host: i.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 25 Mar 2023 23:42:10 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Last-Modified: Tue, 25 Jul 2017 14:14:15 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sun, 24 Mar 2024 23:42:10 GMT
Cache-Control: max-age=31536000
jskor.ill.in.ua/js/hide-banners.js?v=1
200 OK 647 B URL HTTP/2 jskor.ill.in.ua/js/hide-banners.js?v=1
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with CRLF line terminators
Hash 6606a7e8137cf8edbc69e5f4df847287
3ec7125a61727a48cc7df1d8033c2ea9ac5b4236
a181dd4779484eeea1e315d7904f0468718b06729870809f3a7781fc1da63255
GET /js/hide-banners.js?v=1 HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 13 Aug 2019 07:52:08 GMT
accept-ranges: bytes
etag: "04941ac51d51:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 647
X-Firefox-Spdy: h2
csskor.ill.in.ua/css/royalslider.min.css?v=1
200 OK 2.6 kB URL HTTP/2 csskor.ill.in.ua/css/royalslider.min.css?v=1
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (12376), with no line terminators
Hash dc6d3373aa3a393e1e2c520feefad8fc
c870ff9babfb1705d59394edd12be64b39656600
da259625e7b972ac8250e192d611a2aadbf5ba6afabb623dcf71540b4dbca460
GET /css/royalslider.min.css?v=1 HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Fri, 26 Oct 2018 14:09:52 GMT
accept-ranges: bytes
etag: "0b82a90356dd41:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 2594
X-Firefox-Spdy: h2
csskor.ill.in.ua/css/responsive.min.css?v=1.1.2
200 OK 5.2 kB URL HTTP/2 csskor.ill.in.ua/css/responsive.min.css?v=1.1.2
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (28613), with no line terminators
Hash e984cab2ae40f65f4f1effc6bcdbf25b
4260ab03b87d177eb68432fa89517321be3cea56
312e3e00acdd7c282fd8f1b98055cbfdba9a99030e3ae39722469ee81427fe1f
GET /css/responsive.min.css?v=1.1.2 HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Wed, 14 Apr 2021 09:52:22 GMT
accept-ranges: bytes
etag: "08f70dd1331d71:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 5192
X-Firefox-Spdy: h2
csskor.ill.in.ua/css/index.min.css?v=3.1.2
200 OK 31 kB URL HTTP/2 csskor.ill.in.ua/css/index.min.css?v=3.1.2
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (65536), with no line terminators
Hash d44e46c7cbd2ea10ed71f850b7fc4ef7
8408630c6614c14c73842c3de322db9650958f87
11822e1b1dee90e76c3d8347937036f8c52968bad19f9decbb8d095557398d2f
GET /css/index.min.css?v=3.1.2 HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Tue, 20 Apr 2021 14:41:35 GMT
accept-ranges: bytes
etag: "80b91c43f335d71:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 30556
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash d01ed88167c88ffc1be93969d4471649
d4d474db33fe79cd82f410dd5e4e742a88685051
a2d226066ff02297d724916be3539ee1565fb64a6613e30b8e71da6b1acf3dd1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 12:10:56 GMT
Expires: Sat, 01 Apr 2023 12:10:55 GMT
Etag: "d4d474db33fe79cd82f410dd5e4e742a88685051"
Cache-Control: max-age=562724,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb0242b8a9b511-OSL
csskor.ill.in.ua/css/jq/ui/smoothness/jquery-ui-1.9.2.custom.css
200 OK 6.1 kB URL HTTP/2 csskor.ill.in.ua/css/jq/ui/smoothness/jquery-ui-1.9.2.custom.css
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (1339)
Hash f677350c88133fa9a0dab3845605bcbe
36ede0442eaf96e5b72e5b9511d45abcc5fe46fe
c5342e24475a836d15cb32d640eaa5e767190cf87e998452182d8b03bec7bfa1
GET /css/jq/ui/smoothness/jquery-ui-1.9.2.custom.css HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Tue, 25 Feb 2014 11:20:28 GMT
accept-ranges: bytes
etag: "066d961b32cf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 6146
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/common.min.js?v=1.3.5
200 OK 1.8 kB URL HTTP/2 jskor.ill.in.ua/js/common.min.js?v=1.3.5
IP
ASN #197203 PJSC Ukrainian Media Holding
File type Unicode text, UTF-8 text, with very long lines (5487), with no line terminators
Hash f23d348bfe0aeb1b2a66345a89b074be
2c82d6f1891e7550e98310fe60f921c9f24daea0
d8e86301cfd9238a025f6b275b1b13641678abccabfbc42de3c43c2c785d2619
GET /js/common.min.js?v=1.3.5 HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 09 Mar 2023 14:42:55 GMT
accept-ranges: bytes
etag: "80c1ff6e9552d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 1785
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/modules/menu.js?v=2
200 OK 1.6 kB URL HTTP/2 jskor.ill.in.ua/js/modules/menu.js?v=2
IP
ASN #197203 PJSC Ukrainian Media Holding
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash ede5599224ea125b2dfdb949237f5f38
cb3a27ef7e30c59aa731f6122f4bf1066b9d9052
06acfefe240623f223a8994f777520841b43f8d8ed42e336dec0826c431be21a
GET /js/modules/menu.js?v=2 HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:48 GMT
accept-ranges: bytes
etag: "0d2c62eb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 1610
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/jq/scrollable.js
200 OK 2.2 kB URL HTTP/2 jskor.ill.in.ua/js/jq/scrollable.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (551)
Hash 6e0c3d4a4fd44fa333d059a40d18df18
5d8d3c8362f15f973b9aa648c099e41e226560f4
f25792f03e8a6281ca105665f058e2ad2c95605305051a25a414c8e4fa7ef3dc
GET /js/jq/scrollable.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:46 GMT
accept-ranges: bytes
etag: "0a5952db3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 2214
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/jq/jquery.tmpl.min.js
200 OK 2.8 kB URL HTTP/2 jskor.ill.in.ua/js/jq/jquery.tmpl.min.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (5869)
Hash 8e9be4354a28a8327faee6e93a4fb093
a2a328d2989c55cad1adeadee7d5904e2f7bc346
24877c3d68f09f18f6128b89b6ba1192e3497a9a9cc8817457f968f6b942fe50
GET /js/jq/jquery.tmpl.min.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:44 GMT
accept-ranges: bytes
etag: "078642cb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 2804
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/jq/jquery.lazyload.mini.js
200 OK 901 B URL HTTP/2 jskor.ill.in.ua/js/jq/jquery.lazyload.mini.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (515), with CRLF line terminators
Hash b4445bd4de800b907afaabb9ee358c12
f8c0aa47988ff6041646441a369fd905e06cf9cb
69f44331a10ccbe557c107430185b73c5bdec2854acc70031d4d1f5b03b2b2be
GET /js/jq/jquery.lazyload.mini.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:44 GMT
accept-ranges: bytes
etag: "078642cb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 901
X-Firefox-Spdy: h2
jskor.ill.in.ua/js/jq/jquery.min.js
200 OK 40 kB URL HTTP/2 jskor.ill.in.ua/js/jq/jquery.min.js
IP
ASN #197203 PJSC Ukrainian Media Holding
File type ASCII text, with very long lines (38285), with CRLF line terminators
Hash 7319557d3fcc577f7d4631b0a6821843
740321564954db61c7a7110c53211fbe211cdf35
545d3fb2179e7e3ddd056bbbde42c3c90fd2b00cecf401b741e8d154c8077992
GET /js/jq/jquery.min.js HTTP/1.1
Host: jskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 24 Oct 2014 17:51:44 GMT
accept-ranges: bytes
etag: "078642cb3efcf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 39559
X-Firefox-Spdy: h2
csskor.ill.in.ua/css/adv.css?v=1
200 OK 560 B URL HTTP/2 csskor.ill.in.ua/css/adv.css?v=1
IP
ASN #197203 PJSC Ukrainian Media Holding
Hash 407896bf5986132bf19f65d7885cb7e1
10ad5fd75aaa92f41792d82d60558b325cb052ab
8d35c85ff03b586c5f7005079a34883f248db97b470daf3a2598adc166ef8d5e
GET /css/adv.css?v=1 HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: text/css
content-encoding: gzip
last-modified: Thu, 15 May 2014 11:10:16 GMT
accept-ranges: bytes
etag: "0dce73f2e70cf1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 560
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3905
Expires: Sun, 26 Mar 2023 00:47:15 GMT
Date: Sat, 25 Mar 2023 23:42:10 GMT
Connection: keep-alive
csskor.ill.in.ua/i/icon-sprite.png
200 OK 30 kB URL HTTP/2 csskor.ill.in.ua/i/icon-sprite.png
IP
ASN #197203 PJSC Ukrainian Media Holding
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash cbb2ee11467296e6356c44b93b65e52b
d89a0113fe04456582fbc9d9fb7e152d3f8e2374
83ab5047e820c4c9edf0823374a8a31e0119fae38f345a88caa81b46184dfe5d
GET /i/icon-sprite.png HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csskor.ill.in.ua/css/index.min.css?v=3.1.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: image/png
last-modified: Wed, 07 May 2014 14:11:34 GMT
accept-ranges: bytes
etag: "0ef6440fe69cf1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 29852
X-Firefox-Spdy: h2
csskor.ill.in.ua/i/preloader.gif
200 OK 6.2 kB URL HTTP/2 csskor.ill.in.ua/i/preloader.gif
IP
ASN #197203 PJSC Ukrainian Media Holding
File type GIF image data, version 89a, 25 x 25\012- data
Hash 1014c814319d907438c7c2ed95b2470c
3e1e9b7901056044f44367c05357595f2213e6d7
90102a5b0d498a0928a1923216a5e922fa4dd138a5c7ecad85c6f5b6cdd6bdab
GET /i/preloader.gif HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csskor.ill.in.ua/css/index.min.css?v=3.1.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536
content-type: image/gif
last-modified: Wed, 07 May 2014 14:11:34 GMT
accept-ranges: bytes
etag: "0ef6440fe69cf1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 6154
X-Firefox-Spdy: h2
kor.ill.in.ua/m/67x43/2733862.jpg
200 OK 2.6 kB URL HTTP/2 kor.ill.in.ua/m/67x43/2733862.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 67x43, components 3\012- data
Hash f25c38c8bff4ef55df8b2c98e9708ec3
b6bb349b11999e2c0f805eeb63ccbfc1e1d75187
de0c2e3871d664a68cbc83dc35b1f3ace6e8dee49cf9433cf74f13bcfce9bba2
GET /m/67x43/2733862.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:55:51 GMT
last-modified: Thu, 23 Mar 2023 20:04:06 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 2643
X-Firefox-Spdy: h2
kor.ill.in.ua/m/67x43/2814653.jpg
200 OK 1.8 kB URL HTTP/2 kor.ill.in.ua/m/67x43/2814653.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 67x43, components 3\012- data
Hash 8b846a232fbb2a3ec99c5425f54f1e1b
d7a2c16168f555792f638bc83112c6e3de81a908
73dca7575289499fa7c996f507db30d8bdfb790d4f81c1ec9faf7c5a5b55ad44
GET /m/67x43/2814653.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:44:22 GMT
last-modified: Sat, 25 Mar 2023 04:44:19 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 1776
X-Firefox-Spdy: h2
kor.ill.in.ua/m/67x43/2814635.jpg
200 OK 3.1 kB URL HTTP/2 kor.ill.in.ua/m/67x43/2814635.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 67x43, components 3\012- data
Hash a69a6bc8df43db2f757b093a9e80462f
74f003c1100834d12d79db8417051c49ad286196
4176ceee82eb57af20acebb09171ec844d9f1ba0eba9289854a1f01c1def6296
GET /m/67x43/2814635.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:55:27 GMT
last-modified: Fri, 24 Mar 2023 21:45:01 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 3106
X-Firefox-Spdy: h2
kor.ill.in.ua/m/86x115/2715997.jpg
200 OK 8.9 kB URL HTTP/2 kor.ill.in.ua/m/86x115/2715997.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 86x116, components 3\012- data
Hash b36ebf81fc70a3db8a91dfe543054720
7c95d01890c3c3c5af3d412fc95bd581a4de18c5
ee83c984c733b9c55a91f42e6cf39ba90c22bc0789296f4b7a5ec189ef24afbc
GET /m/86x115/2715997.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:55:21 GMT
last-modified: Sun, 27 Feb 2022 21:34:42 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 8895
X-Firefox-Spdy: h2
korrespondent.net/i/preloader.gif
200 OK 6.2 kB URL HTTP/2 korrespondent.net/i/preloader.gif
IP
File type GIF image data, version 89a, 25 x 25\012- data
Hash 1014c814319d907438c7c2ed95b2470c
3e1e9b7901056044f44367c05357595f2213e6d7
90102a5b0d498a0928a1923216a5e922fa4dd138a5c7ecad85c6f5b6cdd6bdab
GET /i/preloader.gif HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: image/gif
content-length: 6154
cache-control: no-cache,public, max-age=31536
last-modified: Mon, 11 Jul 2016 11:44:00 GMT
etag: "0c0d08369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 2186
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb0245cca7fab4-OSL
X-Firefox-Spdy: h2
kor.ill.in.ua/m/140x90/2813541.jpg
200 OK 9.6 kB URL HTTP/2 kor.ill.in.ua/m/140x90/2813541.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 140x90, components 3\012- data
Hash d1e50467db0344a4d7ac5c54c47b3d6d
00090c52f8b9eb58a4fe16ad94486457d79e7b1b
16499fd49a80792130a83f2b2cf0617ab8f29dfa01251d274110535c455ccff3
GET /m/140x90/2813541.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:57:10 GMT
last-modified: Tue, 21 Mar 2023 16:09:40 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 9584
X-Firefox-Spdy: h2
kor.ill.in.ua/m/67x43/2814624.jpg
200 OK 2.8 kB URL HTTP/2 kor.ill.in.ua/m/67x43/2814624.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 67x43, components 3\012- data
Hash 2e5e706102498f8df82af888359b9700
f1d1eaa54d7f564d5e1a2177b306adf1b38b9842
fdba66f77b00998957fcbb55354a29abf35fb8b143bbb1066a3a029e41d2bd32
GET /m/67x43/2814624.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:54:23 GMT
last-modified: Fri, 24 Mar 2023 21:12:13 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 2761
X-Firefox-Spdy: h2
csskor.ill.in.ua/i/subscribe.png
200 OK 4.1 kB URL HTTP/2 csskor.ill.in.ua/i/subscribe.png
IP
ASN #197203 PJSC Ukrainian Media Holding
File type PNG image data, 27 x 157, 8-bit/color RGB, non-interlaced\012- data
Hash 1db9edd34568b3f59b1f523bbca38953
1ebee2a6d17cb9eabfe7a9193d47118eb37b8f86
84510fffe17fea544ae340bc9373b62106bfccc148f93e8ac4bbed045c64e9a2
GET /i/subscribe.png HTTP/1.1
Host: csskor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csskor.ill.in.ua/css/index.min.css?v=3.1.2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,public, max-age=31536
content-type: image/png
last-modified: Wed, 07 May 2014 14:11:34 GMT
accept-ranges: bytes
etag: "0ef6440fe69cf1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
content-length: 4138
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9596d6c1547debac786270c48d1d7c60
0fc8cebd094b684205361c124e4ddf17a8866bd7
bc20088b727bbfccacc61ac52f094f9ad162d75bcbed7914f489c789960e9f90
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC20088B727BBFCCACC61AC52F094F9AD162D75BCBED7914F489C789960E9F90"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2782
Expires: Sun, 26 Mar 2023 00:28:32 GMT
Date: Sat, 25 Mar 2023 23:42:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9596d6c1547debac786270c48d1d7c60
0fc8cebd094b684205361c124e4ddf17a8866bd7
bc20088b727bbfccacc61ac52f094f9ad162d75bcbed7914f489c789960e9f90
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC20088B727BBFCCACC61AC52F094F9AD162D75BCBED7914F489C789960E9F90"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2782
Expires: Sun, 26 Mar 2023 00:28:32 GMT
Date: Sat, 25 Mar 2023 23:42:10 GMT
Connection: keep-alive
kor.ill.in.ua/m/610x385/2724747.jpg
200 OK 69 kB URL HTTP/2 kor.ill.in.ua/m/610x385/2724747.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 610x385, components 3\012- data
Hash a00788c8bee73b3da4d8adbebad9c3e4
19c53461887f10c012a5e00a2606034e6edee030
fbe216550eb616666f52b13bac0085948171cd76f1d3d6ab19c1c99f2897b863
GET /m/610x385/2724747.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:57:10 GMT
last-modified: Tue, 05 Apr 2022 13:40:36 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 68870
X-Firefox-Spdy: h2
korrespondent.net/langlink.hnd?id=4464585
200 OK 6.1 kB URL HTTP/2 korrespondent.net/langlink.hnd?id=4464585
IP
Hash 79b3e54689719eee2d7fef02733e4035
c23abb6a2a8a3f29856ec23920caf2811e422ef4
75bdc47e75a3f178765663d60e45fcd53f0c9bf481453d11a51bda0f804067fe
GET /langlink.hnd?id=4464585 HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7adb02459c97fab4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
kor.ill.in.ua/m/300x155/2814624.jpg
200 OK 43 kB URL HTTP/2 kor.ill.in.ua/m/300x155/2814624.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x155, components 3\012- data
Hash 1be3cfca1f23ba05ef905862db54450f
583a59fcc5f252ec32fbb9e4e359172d6d4acdd4
8a9a2e72b66cca9d71d38dc1857aaf0f8623b4791761c8fe40a8f8642e37c50f
GET /m/300x155/2814624.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:56:24 GMT
last-modified: Fri, 24 Mar 2023 21:12:13 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 43449
X-Firefox-Spdy: h2
kor.ill.in.ua/m/300x155/2814622.jpg
200 OK 47 kB URL HTTP/2 kor.ill.in.ua/m/300x155/2814622.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x155, components 3\012- data
Hash 2b72eae21a78b854dad04c30c525ecab
37774b3248caf04ce65e70640271ccd3f287159f
a1323fe2bb27b7a9d05983183c350b0203795ab0076ba4109e032973733ff6a8
GET /m/300x155/2814622.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:56:47 GMT
last-modified: Sat, 25 Mar 2023 09:04:11 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 46609
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c620d2f00a6bd394d6889de3a5b0b084
5eb5cecb7c2a8a248480af923998278b389e2e9e
3725b45413f08cf9d8365734d37b1145772e9af287f3c73ca332a4db62307c52
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3725B45413F08CF9D8365734D37B1145772E9AF287F3C73CA332A4DB62307C52"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6747
Expires: Sun, 26 Mar 2023 01:34:38 GMT
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
kor.ill.in.ua/m/300x155/2814289.jpg
200 OK 17 kB URL HTTP/2 kor.ill.in.ua/m/300x155/2814289.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x155, components 3\012- data
Hash 7e5359cf06ce13a79e04cace92c829ae
f5b2ee39857adbf94e361dc04fa519833d30e71d
4099aacec517d553c06b17d97e851cfe76e02f19849cdbdcd8071d38cc4aa99c
GET /m/300x155/2814289.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:44:36 GMT
last-modified: Thu, 23 Mar 2023 21:09:02 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 16852
X-Firefox-Spdy: h2
id.korrespondent.net/js/login.js?v=4.1
200 OK 4.9 kB URL HTTP/2 id.korrespondent.net/js/login.js?v=4.1
IP
ASN #197203 PJSC Ukrainian Media Holding
File type Unicode text, UTF-8 (with BOM) text, with very long lines (345), with CRLF line terminators
Hash e38883831317edd22a1a604180518bdf
b1f94d1aed959ccc7412090596fd88e337975776
1766f21a780c84b3c87f8d4e164d0e06f681c29c8c05586331636dda1bd56faa
GET /js/login.js?v=4.1 HTTP/1.1
Host: id.korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 21 Feb 2023 23:30:35 GMT
accept-ranges: bytes
etag: "805f387f4c46d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 4929
X-Firefox-Spdy: h2
kor.ill.in.ua/m/300x155/2814282.jpg
200 OK 47 kB URL HTTP/2 kor.ill.in.ua/m/300x155/2814282.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x155, components 3\012- data
Hash 43f13b80961898c30b2a92956f08c85d
eea60421f0d92df31c4c41284e55abfc0abca5f4
e2a5f03d787edd0955200b9bba2ede75de5fd78a838d2e15b523d7d65d5a0e59
GET /m/300x155/2814282.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:47:54 GMT
last-modified: Thu, 23 Mar 2023 20:09:31 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 47162
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dJMnKu1pPyAE4Hcu4jbZKw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hDbULcFiuyMe7D6xq69sFwyjOKI=
korrespondent.net/ajax/module.aspx?spm_id=520&id=3339383&lang=2&IsAjax=true
200 OK 24 kB URL HTTP/2 korrespondent.net/ajax/module.aspx?spm_id=520&id=3339383&lang=2&IsAjax=true
IP
Hash 4a55d86df6c63134c02368f7f3fb8300
1d75a12e14c95d0961e35707d1a051694809af7b
22e4d09f1a15e5ba643e06b68972eac3ef21b1165efe3c0df2d3bbb32b4098ea
GET /ajax/module.aspx?spm_id=520&id=3339383&lang=2&IsAjax=true HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: text/html
cache-control: private
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7adb02450c63fab4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
kor.ill.in.ua/m/300x155/2813940.jpg
200 OK 32 kB URL HTTP/2 kor.ill.in.ua/m/300x155/2813940.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x155, components 3\012- data
Hash 57fd48975a96184471d45dbb2b35c986
e85d824a3b2820d1da9817566aa35ce4fddb7e58
8e09bbeaf899f183df459a34b097a3c134dd61b18803181c0dde98de0ac70f8c
GET /m/300x155/2813940.jpg HTTP/1.1
Host: kor.ill.in.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Sat, 25 Mar 2023 23:52:38 GMT
last-modified: Wed, 22 Mar 2023 19:05:31 GMT
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
date: Sat, 25 Mar 2023 23:42:10 GMT
content-length: 32246
X-Firefox-Spdy: h2
h.holder.com.ua/s?ta&b6100&c1&r84509323&dholder_300x30_0&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
204 No Content 0 B URL HTTP/1.1 h.holder.com.ua/s?ta&b6100&c1&r84509323&dholder_300x30_0&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #43405 LLC Digital Ventures
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?ta&b6100&c1&r84509323&dholder_300x30_0&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: h.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
h.holder.com.ua/s?ta&b8350&c1&r84509323&dholder_300x300_50&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
204 No Content 0 B URL HTTP/1.1 h.holder.com.ua/s?ta&b8350&c1&r84509323&dholder_300x300_50&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #43405 LLC Digital Ventures
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?ta&b8350&c1&r84509323&dholder_300x300_50&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: h.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
exchange.informer.ua/assets/thumbnails/6f/6f8053ed89a25d9bef6504c551459694.jpg
200 OK 6.5 kB URL HTTP/2 exchange.informer.ua/assets/thumbnails/6f/6f8053ed89a25d9bef6504c551459694.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 85x55, components 3\012- data
Hash 30858d2161bdd63313138200c05e8431
699a6e5e501a174a62a62b1bfa413828ed0790fa
50d69ef57f570ac48e2e78f70dc0c0fc6769add0619eb8fab0a14ad17fb10fe5
GET /assets/thumbnails/6f/6f8053ed89a25d9bef6504c551459694.jpg HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://exchange.informer.ua/informer/stat/?s=tochka&l=5&t=tochkaKorr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: image/jpeg
content-length: 6490
last-modified: Fri, 24 Mar 2023 23:17:08 GMT
etag: "641e2f74-195a"
accept-ranges: bytes
X-Firefox-Spdy: h2
exchange.informer.ua/assets/thumbnails/d2/d2de8d069b253238479c0a8761878519.jpg
200 OK 5.4 kB URL HTTP/2 exchange.informer.ua/assets/thumbnails/d2/d2de8d069b253238479c0a8761878519.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 85x55, components 3\012- data
Hash c8f3c8d0236711cfb149d851ef473ce5
3ae0f189ccd1cc2d483a0a2c1bc1e44419ad786f
0c78d71a67fa87992101465effe1c45ac239ccf7e087ca72c7ebe7f53bcb60d7
GET /assets/thumbnails/d2/d2de8d069b253238479c0a8761878519.jpg HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://exchange.informer.ua/informer/stat/?s=tochka&l=5&t=tochkaKorr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: image/jpeg
content-length: 5432
last-modified: Fri, 24 Mar 2023 23:17:08 GMT
etag: "641e2f74-1538"
accept-ranges: bytes
X-Firefox-Spdy: h2
korrespondent.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1679774400
200 OK 15 kB URL HTTP/2 korrespondent.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1679774400
IP
File type ASCII text, with very long lines (30803), with no line terminators
Hash 6a4267966b4384d059c86dfeb86ef2c2
3967df74f41027be53bbd4f3cdd5ec9485e22cdf
24c530ce392b71da68e202febe680b27546f5facc3de1612f4759b595c65c920
GET /cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1679774400 HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: application/javascript; charset=UTF-8
x-control-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
content-encoding: gzip
server: cloudflare
cf-ray: 7adb02468cfdfab4-OSL
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1624934371&div=zone_1624934371&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=1624934371&div=zone_1624934371&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1624934371&div=zone_1624934371&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
h.holder.com.ua/s?ta&b8528&c1&r84509323&dholder_300x300_8528&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
204 No Content 0 B URL HTTP/1.1 h.holder.com.ua/s?ta&b8528&c1&r84509323&dholder_300x300_8528&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #43405 LLC Digital Ventures
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?ta&b8528&c1&r84509323&dholder_300x300_8528&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: h.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
h.holder.com.ua/s?ta&b8040&c1&r84509323&dholder_300x30_40&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
204 No Content 0 B URL HTTP/1.1 h.holder.com.ua/s?ta&b8040&c1&r84509323&dholder_300x30_40&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #43405 LLC Digital Ventures
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?ta&b8040&c1&r84509323&dholder_300x30_40&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: h.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
h.holder.com.ua/s?ta&b8479&c1&r84509323&dholder_300x300_8479&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
204 No Content 0 B URL HTTP/1.1 h.holder.com.ua/s?ta&b8479&c1&r84509323&dholder_300x300_8479&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #43405 LLC Digital Ventures
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?ta&b8479&c1&r84509323&dholder_300x300_8479&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: h.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
z.cdn.umh.ua/load?z=1349281805&div=zone_1349281805&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 705 B URL HTTP/2 z.cdn.umh.ua/load?z=1349281805&div=zone_1349281805&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (343), with CRLF, LF line terminators
Hash ba5bbd9960a57d6c3ea46de5a6c110c8
725f97eb1430f867696f58298993fb592576b3d7
1c491a64fad049631ed3c7c86227d1baa843adedae2c6a7b2b1474d09d38bbcf
GET /load?z=1349281805&div=zone_1349281805&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 705
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
h.holder.com.ua/s?ta&b2890&c1&r84509323&dholder_2890_ros&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
204 No Content 0 B URL HTTP/1.1 h.holder.com.ua/s?ta&b2890&c1&r84509323&dholder_2890_ros&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #43405 LLC Digital Ventures
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?ta&b2890&c1&r84509323&dholder_2890_ros&hhttps%3A//korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: h.holder.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
z.cdn.umh.ua/load?z=1988961805&div=zone_1988961805&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 1.4 kB URL HTTP/2 z.cdn.umh.ua/load?z=1988961805&div=zone_1988961805&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (1384), with CRLF, LF line terminators
Hash e11a95510bbf341611eaff8510a18e4b
f319be1b6ada4b752ce14a5b0fbcf5c8c95aaebc
b9d4744e0d1a6870301190327bc9d4ce7141b1f42b4b0f41844dd645f7e5127d
GET /load?z=1988961805&div=zone_1988961805&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 1359
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1849272440&div=zone_1849272440&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 730 B URL HTTP/2 z.cdn.umh.ua/load?z=1849272440&div=zone_1849272440&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (343), with CRLF, LF line terminators
Hash 781481fc88867a69e756c47b507f7651
01f00e830dc92c4ca5aa2cbf5082667f4603e3f9
1c8dc2cee76707d4f7817bd2f8f36420aba2bbc53713bf123f6965b008863411
GET /load?z=1849272440&div=zone_1849272440&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 730
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1836648724&div=zone_1836648724&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 819 B URL HTTP/2 z.cdn.umh.ua/load?z=1836648724&div=zone_1836648724&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (343), with CRLF, LF line terminators
Hash d92f5873285cf7fabf25bcf9bfd599d7
3912bfce7a1381ee2dd07ce29b1f09319997265c
e261f6f2718dbc6e2a9ce63647ec5af04a84242547dcafba923e97bd35517a1a
GET /load?z=1836648724&div=zone_1836648724&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 819
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1508430322&div=zone_1508430322&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=1508430322&div=zone_1508430322&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1508430322&div=zone_1508430322&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=2064876158&div=zone_2064876158&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=2064876158&div=zone_2064876158&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=2064876158&div=zone_2064876158&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1907900247&div=zone_1907900247&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=1907900247&div=zone_1907900247&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1907900247&div=zone_1907900247&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1664245384&div=zone_1664245384&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=1664245384&div=zone_1664245384&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1664245384&div=zone_1664245384&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1298427590&div=zone_1298427590&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=1298427590&div=zone_1298427590&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1298427590&div=zone_1298427590&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
korrespondent.net/widget/weather.hnd
200 OK 677 B URL HTTP/2 korrespondent.net/widget/weather.hnd
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (2205), with no line terminators
Hash 8f43c5048b605fdc532e74cb7715c963
86abaaeafdd5aa1827c3c614d0b67d64a5332374
12a16f65693b60e25c28eef8294590ad71bdbb6a422015664fa4e258fdb4d9ab
GET /widget/weather.hnd HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
x-powered-by: ASP.NET
last-modified: Sat, 25 Mar 2023 23:41:08 GMT
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 7adb0245ecb5fab4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=2109517661&div=zone_2109517661&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 1.4 kB URL HTTP/2 z.cdn.umh.ua/load?z=2109517661&div=zone_2109517661&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (1429), with CRLF, LF line terminators
Hash 42d06c6b5b66c5d72d101dcb14a27259
d365f4a52efbf3420b378c93854639e5f3725d99
1b858dad86564254d2a12e8973d2bd7b35249c6fc53fbef89feb3466a4522d2e
GET /load?z=2109517661&div=zone_2109517661&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 1364
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1179888271&div=zone_1179888271&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 3.6 kB URL HTTP/2 z.cdn.umh.ua/load?z=1179888271&div=zone_1179888271&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (605)
Hash 8d4e3e9c161131433eb797b2ba099a6d
efab7dac411e1d0d7b39a33b4b0bbf7163a3e216
5c4db6571c4c262289bc7f2c2b53a6712634f7f28f1a58cccdb0245a4c2056e4
GET /load?z=1179888271&div=zone_1179888271&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 3553
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1261666467&div=zone_1261666467&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 1.0 kB URL HTTP/2 z.cdn.umh.ua/load?z=1261666467&div=zone_1261666467&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (356), with CRLF, LF line terminators
Hash 882592a00868c2baebde0aebacaec103
b7f1cf53b71a18c6b30e4bc672e1076c2d0635e9
d480c151139f5fb94171404253adc7a82e673b9f91f3eaaf2d6ec7fb8c91698b
GET /load?z=1261666467&div=zone_1261666467&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 1021
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
sC=1; expires=Tue, 28 Mar 2023 21:00:02 GMT; path=/;
X-Firefox-Spdy: h2
exchange.informer.ua/informer/stat/?s=tochka&l=5&t=tochkaKorr
200 OK 5.0 kB URL HTTP/2 exchange.informer.ua/informer/stat/?s=tochka&l=5&t=tochkaKorr
IP
ASN #197203 PJSC Ukrainian Media Holding
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (605)
Hash 8cb5d7da5e9c0467bb8a8f3636e67826
09cb841db4b1aec9cf4706fd8d3539df2aa74c2f
e66496a08b22988ec3e343ffc3b869936167d1a3f17922858d13960dc775b75f
GET /informer/stat/?s=tochka&l=5&t=tochkaKorr HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.1.17
content-encoding: gzip
X-Firefox-Spdy: h2
exchange.informer.ua/assets/thumbnails/3b/3bd8e54e0b1bf868f4789d20d6279666.jpg
200 OK 7.0 kB URL HTTP/2 exchange.informer.ua/assets/thumbnails/3b/3bd8e54e0b1bf868f4789d20d6279666.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 85x55, components 3\012- data
Hash 753743991060f90ecf4c6cd2a85939bc
37b86535ad42334009baaf5d4a180e9a17b4292d
3d19c5c015d882919cb551bbedb9285b1149e81e76670b6ac273f51abbe373bb
GET /assets/thumbnails/3b/3bd8e54e0b1bf868f4789d20d6279666.jpg HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://exchange.informer.ua/informer/stat/?s=tochka&l=5&t=tochkaKorr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: image/jpeg
content-length: 7009
last-modified: Fri, 24 Mar 2023 23:17:08 GMT
etag: "641e2f74-1b61"
accept-ranges: bytes
X-Firefox-Spdy: h2
exchange.informer.ua/informer/stat/?s=ivona&l=4&t=ivonaKorr
200 OK 8.3 kB URL HTTP/2 exchange.informer.ua/informer/stat/?s=ivona&l=4&t=ivonaKorr
IP
ASN #197203 PJSC Ukrainian Media Holding
Hash 8190345f2cb8cba078950a9d6524854e
53a2f86ec5f518b912a41ffcc594114e0c4a6b88
f4d70f7f2271cb380656f94da08f5add996499efbdca2e52876dc10050bd04dd
GET /informer/stat/?s=ivona&l=4&t=ivonaKorr HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.1.17
content-encoding: gzip
X-Firefox-Spdy: h2
exchange.informer.ua/assets/thumbnails/a6/a66ca954563b0f3d328f7e0c3ec513d3.jpg
200 OK 6.8 kB URL HTTP/2 exchange.informer.ua/assets/thumbnails/a6/a66ca954563b0f3d328f7e0c3ec513d3.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 85x55, components 3\012- data
Hash 15d3a2fd23e97f09e98afaf003486c4a
c98c47d08ef828123ec54fac54598ca0b7ff7f90
8c18699589175622d88ec9d9a6c8451d9210e99a23e9d9d58ac66e126f0d15ff
GET /assets/thumbnails/a6/a66ca954563b0f3d328f7e0c3ec513d3.jpg HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://exchange.informer.ua/informer/stat/?s=ivona&l=4&t=ivonaKorr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: image/jpeg
content-length: 6769
last-modified: Sat, 25 Mar 2023 23:11:19 GMT
etag: "641f7f97-1a71"
accept-ranges: bytes
X-Firefox-Spdy: h2
exchange.informer.ua/assets/thumbnails/bb/bb5d4b869e6783650a0be9d59d789bde.jpg
200 OK 6.9 kB URL HTTP/2 exchange.informer.ua/assets/thumbnails/bb/bb5d4b869e6783650a0be9d59d789bde.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 85x55, components 3\012- data
Hash 86f4d9c174856addf03aa6f5df8934d1
edad5bf618f40f61a68f69f14d5569064a018c3f
152241d30bf4539b4eacd65f2ce25702200d3577e5817b9d6c5df748703b4cb4
GET /assets/thumbnails/bb/bb5d4b869e6783650a0be9d59d789bde.jpg HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://exchange.informer.ua/informer/stat/?s=ivona&l=4&t=ivonaKorr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: image/jpeg
content-length: 6850
last-modified: Sat, 25 Mar 2023 07:11:13 GMT
etag: "641e9e91-1ac2"
accept-ranges: bytes
X-Firefox-Spdy: h2
id.korrespondent.net/aut/user.hnd?_1679787745008=
200 OK 7.4 kB URL HTTP/2 id.korrespondent.net/aut/user.hnd?_1679787745008=
IP
ASN #197203 PJSC Ukrainian Media Holding
Hash 41913ee72a57816138163629d9ed7610
898210bb433aa46f19163ef3a36ce739c322c03e
0c2390c80bbe5fe7d0b7daca57db31ac3c8c2a40f446bfb815153b08e1303c14
GET /aut/user.hnd?_1679787745008= HTTP/1.1
Host: id.korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:09 GMT
X-Firefox-Spdy: h2
exchange.informer.ua/assets/thumbnails/43/43bda41ef0b2d32ecab78c02a23a8068.jpg
200 OK 7.2 kB URL HTTP/2 exchange.informer.ua/assets/thumbnails/43/43bda41ef0b2d32ecab78c02a23a8068.jpg
IP
ASN #197203 PJSC Ukrainian Media Holding
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 85x55, components 3\012- data
Hash a9278888cf06c5a3da15c121e7aecee1
15fad2eddc3068b1cbb835334b13e50ea61757a1
f437a9e5c16d3d975ec89255c5a5fcbc419738b7df8fbce9b0b8cbfad49e9317
GET /assets/thumbnails/43/43bda41ef0b2d32ecab78c02a23a8068.jpg HTTP/1.1
Host: exchange.informer.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://exchange.informer.ua/informer/stat/?s=ivona&l=4&t=ivonaKorr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.12.2
date: Sat, 25 Mar 2023 23:43:16 GMT
content-type: image/jpeg
content-length: 7165
last-modified: Fri, 24 Mar 2023 23:21:03 GMT
etag: "641e305f-1bfd"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 491a73e10131152976166bf168686f64
71dfefba99c8999725a28768d721ec175e2efa09
1fc8e5dc77f36596ef20501d9234a12fea7df15ab3b02100fe41d93e14747cff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1FC8E5DC77F36596EF20501D9234A12FEA7DF15AB3B02100FE41D93E14747CFF"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5135
Expires: Sun, 26 Mar 2023 01:07:46 GMT
Date: Sat, 25 Mar 2023 23:42:11 GMT
Connection: keep-alive
z.cdn.adtarget.market/smc?s=201&u=66910b6b6f197a70
204 No Content 0 B URL HTTP/2 z.cdn.adtarget.market/smc?s=201&u=66910b6b6f197a70
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smc?s=201&u=66910b6b6f197a70 HTTP/1.1
Host: z.cdn.adtarget.market
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:40:01 GMT
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1526170517&div=zone_1526170517&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 894 B URL HTTP/2 z.cdn.umh.ua/load?z=1526170517&div=zone_1526170517&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (357), with CRLF, LF line terminators
Hash 12215c4164a5fe3a73722c1ccf48abe4
a6d0a672857c8a8f8c3d369cd65eace310268ea0
fad98376a6983308941da3005bcfba4fee81f853c38e6e85bc439e0c8c363ea2
GET /load?z=1526170517&div=zone_1526170517&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 894
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1479810766&div=zone_1479810766&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 1.4 kB URL HTTP/2 z.cdn.umh.ua/load?z=1479810766&div=zone_1479810766&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (901), with CRLF, LF line terminators
Hash 085e6f5954171ed4831b101ad41343ec
1b4a255991027c6e2ea1afd53dbd40352a1290a9
a95b35d39010596c363caa7cb4b9339d1d87ced17f04af08a54df341884177f1
GET /load?z=1479810766&div=zone_1479810766&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 1364
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
p3p: policyref="/p3p.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
set-cookie: AU=66910b6b6f197a70; Expires=Sun, 25 Mar 2035 21:00:02 GMT; Path=/; HttpOnly; Domain=.cdn.umh.ua; SameSite=None; Secure
sC=1; expires=Tue, 28 Mar 2023 21:00:02 GMT; path=/;
X-Firefox-Spdy: h2
ad.mox.tv/mox/mwayss_invocation.min.js?pzoneid=775&height=250&width=300&tld=korrespondent.net&ctype=div
200 OK 9.4 kB URL HTTP/2 ad.mox.tv/mox/mwayss_invocation.min.js?pzoneid=775&height=250&width=300&tld=korrespondent.net&ctype=div
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with very long lines (29187)
Hash 4c802c4b5db758de9a83bea5102cc5ad
3101c44d8cf065110e36a3aca78e5ad54391fed2
6e542cde506738554da112115a8c0c361fb0631d1bcc7d1fe6c18c974057c360
GET /mox/mwayss_invocation.min.js?pzoneid=775&height=250&width=300&tld=korrespondent.net&ctype=div HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 11:58:06 GMT
vary: Accept-Encoding
etag: W/"638896ce-7204"
expires: Sun, 26 Mar 2023 00:42:11 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
go.rcvlink.com/static/main.js
200 OK 3.0 kB URL HTTP/2 go.rcvlink.com/static/main.js
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (831)
Hash a261f7688c23caaa1134ce5ba31679e9
01c165d3ac4025a6ad5ccc5093da79ea86b55df0
be0d2143d84de9aed66b6c66db1e6fe375ae93f3c91c0827eb0e487749960af2
GET /static/main.js HTTP/1.1
Host: go.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript
last-modified: Sun, 05 Mar 2023 07:50:00 GMT
etag: W/"640449a8-1909"
expires: Sun, 26 Mar 2023 23:42:11 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zerossl.ocsp.sectigo.com/
200 OK 314 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash f93f31358ebbcc1a9c6cce0d2c6d3fe6
29ed7ab938cb5508f1c8df4668b2c608199c3d0f
3c6b15294057ff7870be733cdafb8443550be3dc3b87f74a4b00414fd5f4b8e2
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:11 GMT
Content-Type: application/ocsp-response
Content-Length: 314
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 05:15:15 GMT
Expires: Sat, 01 Apr 2023 05:15:14 GMT
Etag: "29ed7ab938cb5508f1c8df4668b2c608199c3d0f"
Cache-Control: max-age=537782,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb0249d90d0b4d-OSL
cdn.umh.ua/libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1179888271_wTr5qwx093FO&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1179888271&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976
200 OK 3.9 kB URL HTTP/2 cdn.umh.ua/libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1179888271_wTr5qwx093FO&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1179888271&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash 4eca095e132be5483d5c0d7c3a6a8cea
73ec89fb307952415321ac06451d6c9f7427d029
6085efb1d35d87910520a1e7ef2faf01c8b05ed0a3b1488d520b6aea3f691858
GET /libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1179888271_wTr5qwx093FO&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1179888271&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976 HTTP/1.1
Host: cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: AU=66910b6b6f197a70
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 06 Oct 2022 14:38:04 GMT
vary: Accept-Encoding
etag: W/"633ee84c-27d3"
expires: Sun, 26 Mar 2023 23:42:11 GMT
cache-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: X-PINGOTHER
access-control-max-age: 1728000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v10/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v10/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16224, version 1.6554\012- data
Hash 766fc545e65b65297289359eac5ac7bf
6c118f4639d3ee03a0c1cce2a6047ccb5e4b6dac
abcbe0423061bbf5caca8b070eb57c5ea831fde8cca4af206f8b48938142b4e1
GET /s/opensans/v10/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:56 GMT
expires: Sat, 23 Mar 2024 10:26:56 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Aug 2014 18:08:16 GMT
content-type: font/woff2
age: 134115
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ghb.adtelligent.com/adunit/tracking?event=11&type=0&client_id=738585&site_id=17161&full_page_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&adid=om93kv.4k&features=81952&vpbv=N130&tte=505&lifecycle_tte=1754
200 OK 43 B URL HTTP/1.1 ghb.adtelligent.com/adunit/tracking?event=11&type=0&client_id=738585&site_id=17161&full_page_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&adid=om93kv.4k&features=81952&vpbv=N130&tte=505&lifecycle_tte=1754
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /adunit/tracking?event=11&type=0&client_id=738585&site_id=17161&full_page_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&adid=om93kv.4k&features=81952&vpbv=N130&tte=505&lifecycle_tte=1754 HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sat, 25 Mar 2023 23:42:11 GMT
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: https://korrespondent.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Set-Cookie: vmuid=d71e93b9030f0c71; expires=Fri, 26 May 2023 23:42:11 GMT; domain=.adtelligent.com; path=/; secure; SameSite
ghb.adtelligent.com/geo/
200 OK 154 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec65f841b5dcd74e7fbf6d72c39f8be4
a870e91242dd88bff2656674e85a819bab155c86
b5766bf1a0d74789f005f8935e4a0c88abe930f2f6df469ffe397038d955df54
GET /geo/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Sat, 25 Mar 2023 23:42:11 GMT
Content-Type: application/json
Content-Length: 154
Access-Control-Allow-Origin: https://korrespondent.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
cdn.umh.ua/libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1392847469_VxWgv4lb39Pe&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1392847469&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976
200 OK 16 kB URL HTTP/2 cdn.umh.ua/libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1392847469_VxWgv4lb39Pe&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1392847469&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash 4c9a4bc2b383253d953bad3699c3ab1b
ec2590bc030c185025fbc09afe2f268af6e38985
3135160ee3b34e2d1e58bf80944a1ed2cef3f073528ea98f11916a397b4c6ac9
GET /libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1392847469_VxWgv4lb39Pe&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1392847469&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976 HTTP/1.1
Host: cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: AU=66910b6b6f197a70
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 06 Oct 2022 14:38:04 GMT
vary: Accept-Encoding
etag: W/"633ee84c-27d3"
expires: Sun, 26 Mar 2023 23:42:11 GMT
cache-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: X-PINGOTHER
access-control-max-age: 1728000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 78 kB IP
Hash d13230b93cd9684de91a519819bcb291
84acef000c9fa66a6ffe82d1a30d4662542d4a04
b39834d13acb736b43fbcfc7b0a1b782d50d953e0383e3c6ebf3b266840c0c15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s-img.mgid.com/g/14936868/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTExLzEwMTkyNC8wM2NiZjY5ODY3ZjljZmNhNzk1MGQ3NzhlY2M5NzRmOC5qcGVn.webp?v=1679787731-RpgrtUnPbYkzEJKZ-NvRtIlTO1KQbYrlPBKNMf7WkJ8
200 OK 16 kB URL HTTP/2 s-img.mgid.com/g/14936868/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTExLzEwMTkyNC8wM2NiZjY5ODY3ZjljZmNhNzk1MGQ3NzhlY2M5NzRmOC5qcGVn.webp?v=1679787731-RpgrtUnPbYkzEJKZ-NvRtIlTO1KQbYrlPBKNMf7WkJ8
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 744431cd446555aa7bdbae9de34c4c77
4b885eaf4bfbcdd61c960c9db9b98adabfd4f2c8
208a7b4ba51297560e95d66d2e5014a9f00fc651dc3868ba63ebd76436133e89
GET /g/14936868/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTExLzEwMTkyNC8wM2NiZjY5ODY3ZjljZmNhNzk1MGQ3NzhlY2M5NzRmOC5qcGVn.webp?v=1679787731-RpgrtUnPbYkzEJKZ-NvRtIlTO1KQbYrlPBKNMf7WkJ8 HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 15876
x-mg-request-uuid: 08bb3736-9096-4932-ab8e-84339b0dbb51
access-control-allow-origin: *
last-modified: Fri, 16 Dec 2022 13:50:23 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 8588622
accept-ranges: bytes
set-cookie: __cf_bm=ErBsxkRD66BJl2goECr96zGnFPbhJE2nb.Bk3xjEgbs-1679787731-0-Afe63d2RFVQi9auK7vJh/IX6RXWMFBnJmBWdiyCaE4HbOgiYRnd6yKC1rakHj0Ob8bxwdkgWboT2mQo8hvEefuY=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c1f4cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/3946103/492x328/100x19x663x442/aHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMTktMDcvMTAxOTI0LzA3MDI4YzkxMmQ0NmY1MjBlMGQzMDhhOTdlZDI3MmE3LmpwZWc.webp?v=1679787731-6OstmJ0iPwaZX5BP_3qMf_8gD7lt7mS10HixgpNDg84
200 OK 18 kB URL HTTP/2 s-img.mgid.com/g/3946103/492x328/100x19x663x442/aHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMTktMDcvMTAxOTI0LzA3MDI4YzkxMmQ0NmY1MjBlMGQzMDhhOTdlZDI3MmE3LmpwZWc.webp?v=1679787731-6OstmJ0iPwaZX5BP_3qMf_8gD7lt7mS10HixgpNDg84
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f8651dbe1ceb553086856428efffd950
5d6b9e7da927ec5ae6abc998fa6a2d3d80144a80
36c93c55337f77acb53d19ebc1d5794a6c461e37533ba87ef6b38455e642edfa
GET /g/3946103/492x328/100x19x663x442/aHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMTktMDcvMTAxOTI0LzA3MDI4YzkxMmQ0NmY1MjBlMGQzMDhhOTdlZDI3MmE3LmpwZWc.webp?v=1679787731-6OstmJ0iPwaZX5BP_3qMf_8gD7lt7mS10HixgpNDg84 HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 17588
x-mg-request-uuid: 80206634-e854-4cd0-9d78-ea12f150ec34
access-control-allow-origin: *
last-modified: Wed, 10 Aug 2022 15:26:43 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 5713145
accept-ranges: bytes
set-cookie: __cf_bm=zaHfOazqfCQPvg4CmpR6i2nnZV8C85VbJ7AYhkgbZJo-1679787731-0-ARxXnrBiny5qcZMIoVefcbYQ0lYf6SRS8w9vHZExglaW+575937GCV3CCdE5+/fesF8yUMpj0pAVCTk7cgVtWbY=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c1f49b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/13780670/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3XzEwMjAseF8zMDAseV8xOTAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDcvMTAxOTI0L2EwZGE0NTA2YTQ0YTliOWU1NzFkYjI3ZDRjNTRiZjlmLmpwZw.webp?v=1679787731-noONDH2uPy_pbqI-dDXEBloFhJq9KrsmuFjl_F53hXI
200 OK 22 kB URL HTTP/2 s-img.mgid.com/g/13780670/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3XzEwMjAseF8zMDAseV8xOTAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDcvMTAxOTI0L2EwZGE0NTA2YTQ0YTliOWU1NzFkYjI3ZDRjNTRiZjlmLmpwZw.webp?v=1679787731-noONDH2uPy_pbqI-dDXEBloFhJq9KrsmuFjl_F53hXI
IP
Hash e58d9d603518221ffc49e885ffcd69cc
a139c5a4ca8e21911f16365349315600c471e6a7
14259eb8d0d39ef35c0103fbef0cf2a06e52ecfb53f3888e99baa36228cf5a23
GET /g/13780670/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3XzEwMjAseF8zMDAseV8xOTAvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDcvMTAxOTI0L2EwZGE0NTA2YTQ0YTliOWU1NzFkYjI3ZDRjNTRiZjlmLmpwZw.webp?v=1679787731-noONDH2uPy_pbqI-dDXEBloFhJq9KrsmuFjl_F53hXI HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 20734
x-mg-request-uuid: b2e00b1a-4a42-4022-8b1c-a834a720954a
access-control-allow-origin: *
last-modified: Thu, 11 Aug 2022 08:48:05 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 13051134
accept-ranges: bytes
set-cookie: __cf_bm=IWoEtWEH1v2wPlh7j1pDimlxgCtCrmzB50omgE6ib70-1679787731-0-Adccq0fOpyRMaDXPJvoPhllneO6yd1NCWzDVJ4/jfUaO5uv6LsCZx+B6BW1mVPN4aiyQWU1jcXLE1NjEhZ9xb1g=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c1f4bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/15112047/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIzLTAxLzEwMTkyNC85MjJkZTI0ZGIwMjgyYTgyMzY4MzQwNGJhM2UxN2U2OC5qcGVn.webp?v=1679787731-7XqaKLr2AKfjS0gGhBiLKIRm3dXoQBhZ69aaf71fOtY
200 OK 13 kB URL HTTP/2 s-img.mgid.com/g/15112047/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIzLTAxLzEwMTkyNC85MjJkZTI0ZGIwMjgyYTgyMzY4MzQwNGJhM2UxN2U2OC5qcGVn.webp?v=1679787731-7XqaKLr2AKfjS0gGhBiLKIRm3dXoQBhZ69aaf71fOtY
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash afecc80533b608b285ae0285e4cd0bc4
7e54f4e94f0ea43dcf3bc7e1947ae3d9df03378f
8b498783e7c012af67b00bc15641f54df601b547958f2f94a2a31e772e3a4c21
GET /g/15112047/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIzLTAxLzEwMTkyNC85MjJkZTI0ZGIwMjgyYTgyMzY4MzQwNGJhM2UxN2U2OC5qcGVn.webp?v=1679787731-7XqaKLr2AKfjS0gGhBiLKIRm3dXoQBhZ69aaf71fOtY HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 13408
x-mg-request-uuid: 068bb2e6-8594-47f8-bf20-d69591d1c085
access-control-allow-origin: *
last-modified: Thu, 12 Jan 2023 09:45:00 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 6271023
accept-ranges: bytes
set-cookie: __cf_bm=GXnj5AcVav_9pgPSgooZollEc8pvBaF0YKDlzJ_hyTw-1679787731-0-AZ21IFr8EZVTJR5o4mxFFRb6813vTlCXW1UdZXP6EftRBS3FkE8Xv6xtenWTVHcgIbxGpfALNbgKD+DRPwTZgEc=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c1f51b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
id.korrespondent.net/js/lang/login_ru.js?v=2
200 OK 90 kB URL HTTP/2 id.korrespondent.net/js/lang/login_ru.js?v=2
IP
ASN #197203 PJSC Ukrainian Media Holding
Hash 114daf6598b4d4ac557aad081f4d48eb
bc497786c4776fe85e9f90d9d88830423a893abf
98df32681e7bc51ff1c7241a16b61eb9ff1615dd55c1f6ed82fbcfd437ee82d5
GET /js/lang/login_ru.js?v=2 HTTP/1.1
Host: id.korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=86400
content-type: text/javascript; charset=utf-8
content-encoding: gzip
expires: Sun, 26 Mar 2023 08:42:11 GMT
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Sat, 25 Mar 2023 23:42:10 GMT
X-Firefox-Spdy: h2
s-img.mgid.com/g/14137415/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA5LzEwMTkyNC8xMDFlOTVkOTY0ZWEwYmYyYmY0ZDA4ZTY4M2FiYTE3Yi5qcGVn.webp?v=1679787731-eSbTPW734gZZl27s0GOqgjfyUAl1dGYF7NkX2kzUkzs
200 OK 14 kB URL HTTP/2 s-img.mgid.com/g/14137415/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA5LzEwMTkyNC8xMDFlOTVkOTY0ZWEwYmYyYmY0ZDA4ZTY4M2FiYTE3Yi5qcGVn.webp?v=1679787731-eSbTPW734gZZl27s0GOqgjfyUAl1dGYF7NkX2kzUkzs
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 614cfd36112bfd1d633690342738b549
4144b4911f6d963f4cb2317572d536a6cecdc81e
e9948275e571a7e681a4c307949d3e8dcde73ee7001946797304cd6ac4146b40
GET /g/14137415/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA5LzEwMTkyNC8xMDFlOTVkOTY0ZWEwYmYyYmY0ZDA4ZTY4M2FiYTE3Yi5qcGVn.webp?v=1679787731-eSbTPW734gZZl27s0GOqgjfyUAl1dGYF7NkX2kzUkzs HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 13990
x-mg-request-uuid: a2830471-4b0a-4fe6-bfef-c2530b8c706f
access-control-allow-origin: *
last-modified: Thu, 22 Sep 2022 09:58:55 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 13051855
accept-ranges: bytes
set-cookie: __cf_bm=BxP9oywLGNxfDvDeKh1e5doPbV6H.TY.xe8MKuD0rGE-1679787731-0-AVRot/saRERtmPD9t3qp+0ut2CRwqtDGKLCuKPitnLEuP8a0UQq8hVbuKKZEB72UAy9IxwW8Q9mYERM71GNvpW4=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c2f60b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/3805486/492x328/0x0x579x386/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTctMDYtMjAvMTAxOTI0LzdiMTQ4MzIwYTNjMzI4M2FlMjdmOTVhNTFkMGI5ZjZlLmpwZw.webp?v=1679787731-fEVcFWzXtpBHw3tfSuqJI-ZryuI2Q7qtQHQ7ZKKdJ2w
200 OK 39 kB URL HTTP/2 s-img.mgid.com/g/3805486/492x328/0x0x579x386/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTctMDYtMjAvMTAxOTI0LzdiMTQ4MzIwYTNjMzI4M2FlMjdmOTVhNTFkMGI5ZjZlLmpwZw.webp?v=1679787731-fEVcFWzXtpBHw3tfSuqJI-ZryuI2Q7qtQHQ7ZKKdJ2w
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 73b88a9dbfc9742d1819893c0b191d3c
b43052f4db6963ee70751f39dae9d7f8b53d38e8
f4026982c99f2d11ad9e05d1375ee571aae66420150c007fbdc30ac1bbb944d1
GET /g/3805486/492x328/0x0x579x386/aHR0cDovL2ltZ2hvc3RzLmNvbS90ZW1wLzIwMTctMDYtMjAvMTAxOTI0LzdiMTQ4MzIwYTNjMzI4M2FlMjdmOTVhNTFkMGI5ZjZlLmpwZw.webp?v=1679787731-fEVcFWzXtpBHw3tfSuqJI-ZryuI2Q7qtQHQ7ZKKdJ2w HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 39178
x-mg-request-uuid: a1f5ad60-bd20-4b16-9728-a9bacae7226f
access-control-allow-origin: *
last-modified: Wed, 10 Aug 2022 14:30:00 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 13051184
accept-ranges: bytes
set-cookie: __cf_bm=_b3GOytjY2XikQdUNM_WrzAKvxvuVYYldtAtbEcs8oo-1679787731-0-AbZV3daQETHG1fgAmPdRQJWR2AZckD5E5TsBGI7OYiwv+cH01WbpeogZScq0c0A2iPMS3oDSvEvgaDIgrsXVjeg=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c2f6eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.mgid.com/g/14936939/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTExLzEwMTkyNC8zNjQ3NGI1YTg1ZGY2MDNiNzcwNzc0YWYwMjg3N2Y0Yi5wbmc.webp?v=1679787731-CUtKFtGSDItbmZ5UAz-ieTz4JxZI9zSoEirjuV4myMI
200 OK 7.9 kB URL HTTP/2 s-img.mgid.com/g/14936939/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTExLzEwMTkyNC8zNjQ3NGI1YTg1ZGY2MDNiNzcwNzc0YWYwMjg3N2Y0Yi5wbmc.webp?v=1679787731-CUtKFtGSDItbmZ5UAz-ieTz4JxZI9zSoEirjuV4myMI
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e2c107a805c5bb2200bc1ea026286122
2469fdec7d0d1a4996b7b361de52653bb0f3e717
bcb8b35070c1969832b951f103df25399e078c9b6b243ee956b9a5d1eb8822a0
GET /g/14936939/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTExLzEwMTkyNC8zNjQ3NGI1YTg1ZGY2MDNiNzcwNzc0YWYwMjg3N2Y0Yi5wbmc.webp?v=1679787731-CUtKFtGSDItbmZ5UAz-ieTz4JxZI9zSoEirjuV4myMI HTTP/1.1
Host: s-img.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/webp
content-length: 7938
x-mg-request-uuid: 4d35c1c5-d8fd-4f79-8cb5-ff11b2fa208a
access-control-allow-origin: *
last-modified: Fri, 16 Dec 2022 13:48:56 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 8588321
accept-ranges: bytes
set-cookie: __cf_bm=a0qAMOORekcBqBwC2fy1e4LdHOK8c_A9YYuEdPQXhko-1679787731-0-AZmR9I9GyzdI/O3SByvp+zgU9uuYxOXMgwmev2DXhhe3OnEVfNInUSAU2FK59SUek8sZrKbjdIEqb3s58/cgK7I=; path=/; expires=Sun, 26-Mar-23 00:12:11 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024c2f78b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 665fb37a1503052326dac992a996f020
2892ca1b3f8e4d8d9f6481a6e34c7c8bd66a735c
a7e43132252849439cf209da4906f3102ef59b4e2b5affecd02141617ff94f51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6007
Cache-Control: max-age=109360
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:11 GMT
Etag: "641e778d-139"
Expires: Mon, 27 Mar 2023 06:04:51 GMT
Last-Modified: Sat, 25 Mar 2023 04:24:45 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 313
korrespondent.net/i/apple-touch-icon.png
200 OK 5.1 kB URL HTTP/2 korrespondent.net/i/apple-touch-icon.png
IP
File type PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash e33356f36759a68e98b52ed55c5b9827
0564b044e44404b3564b62574ab0975d4802e59f
e9cec03ea7ca19f4d6ca5dcf3d6ac70968fc91626da951fbdbcbf273be1cdb1b
GET /i/apple-touch-icon.png HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1283487%22%3A%7B%22page%22%3A1%7D%2C%22C360033%22%3A%7B%22page%22%3A1%2C%22time%22%3A1679787745921%7D%2C%22C971150%22%3A%7B%22page%22%3A1%2C%22time%22%3A1679787745946%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/png
content-length: 5094
cache-control: no-cache,public, max-age=31536
last-modified: Mon, 11 Jul 2016 11:44:00 GMT
etag: "0c0d08369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024cc803fab4-OSL
X-Firefox-Spdy: h2
ssbsync.smartadserver.com/api/sync?callerId=61&gdpr=0&gdpr_consent=&u=66910b6b6f197a70
200 OK 851 B URL HTTP/1.1 ssbsync.smartadserver.com/api/sync?callerId=61&gdpr=0&gdpr_consent=&u=66910b6b6f197a70
IP
ASN #201081 SmartAdServer SAS
File type HTML document text\012- HTML document, ASCII text
Hash 5488f5deb7c8fc9ef4ed1cab59cd1d0f
b1f62a2e2a5c0e69f7de30ad836c726e13e9af90
5d350789fbc4a539e989ae3e8f00f1d3c224b1435a60b744c40101500dd9cc73
GET /api/sync?callerId=61&gdpr=0&gdpr_consent=&u=66910b6b6f197a70 HTTP/1.1
Host: ssbsync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 851
content-type: text/html
date: Sat, 25 Mar 2023 23:42:11 GMT
set-cookie: pid=6116928269195243228; expires=Wed, 24 Apr 2024 23:41:12 GMT; domain=smartadserver.com; path=/; secure; samesite=none
ads.pubmatic.com/AdServer/js/pwt/161673/7165/pwt.js
200 OK 60 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/pwt/161673/7165/pwt.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 862fd3f118b5de055220f74acb0986ac
b088b724a69a32d1b6ab2033c9c11933f84b662e
8ae035b28bee10ebca0d36b0a91fe66cb53d6595e1a222720e6570f77e13a402
GET /AdServer/js/pwt/161673/7165/pwt.js HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 22 Feb 2023 07:52:04 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-type: application/javascript
content-length: 60066
cache-control: max-age=92442
expires: Mon, 27 Mar 2023 01:22:54 GMT
date: Sat, 25 Mar 2023 23:42:12 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ua.korrespondent.net/
200 OK 26 kB IP
Hash e2af60786478524420f1433bb439f5ad
2a40f8ab09c5a3a4edb14557c5a43ed296f276c1
c99c4792d4d0d7067ab69d138690eea8445070818fab505507dbf0000329ad52
GET / HTTP/1.1
Host: ua.korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Referer: https://korrespondent.net/
Connection: keep-alive
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/html; charset=utf-8
cache-control: private
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7adb024c1fa4fab4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39604)
Hash 787cdb264a5705484cfa225555aa5863
f269890440771b14118eb22b6154f389b7159b3b
1e401c817aab137463477bfa800d72be03c824f91ca627ec73654823f7dd90c3
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27418
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Sat, 25 Mar 2023 23:42:12 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1522 / 782 of 1000 / last-modified: 1679695651"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
z.cdn.umh.ua/mc?d=6&u=6116928269195243228&gdpr=0&gdpr_consent=
200 OK 0 B URL HTTP/2 z.cdn.umh.ua/mc?d=6&u=6116928269195243228&gdpr=0&gdpr_consent=
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mc?d=6&u=6116928269195243228&gdpr=0&gdpr_consent= HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssbsync.smartadserver.com/
Cookie: AU=66910b6b6f197a70
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:12 GMT
content-length: 0
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3755662197386269
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3755662197386269
IP
File type ASCII text, with very long lines (3599)
Hash 8c0378fc9eddf9dcc8bf4501739f8954
34266a621c24803b4028c6497eb6672c744df155
c85d2db75e8130729e1f602057d1b6411dba9ac4bf8c269337a50e40b8d7b7c3
GET /pagead/js/adsbygoogle.js?client=ca-pub-3755662197386269 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Sat, 25 Mar 2023 23:42:12 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 5543461537245042783
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 48684
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.mox.tv/delivery/impress?ctype=div&pzoneid=1554&height=288&width=400&tld=korrespondent.net&in_iframe=&position=btf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=6517071596
200 OK 12 kB URL HTTP/2 ad.mox.tv/delivery/impress?ctype=div&pzoneid=1554&height=288&width=400&tld=korrespondent.net&in_iframe=&position=btf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=6517071596
IP
ASN #49981 WorldStream B.V.
Hash 1cc86fc13cac85a659cd65c9ac4caf58
855a5764578f97d68dd979da69b4ee5768bc89a4
a196f6ac9facc2750c24f1a83ef9a6c61f89f85415357ecb46467ad8d9e2229f
GET /delivery/impress?ctype=div&pzoneid=1554&height=288&width=400&tld=korrespondent.net&in_iframe=&position=btf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=6517071596 HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
set-cookie: moxuuid=cc364908-7a41-4f84-b712-da6610ba2bb1; expires=Tue, 22-Mar-2033 23:42:11 GMT; Max-Age=315360000; path=/; secure; SameSite=None
_mwayss_zone_imp[1554][count]=0; expires=Wed, 17-Jun-2076 23:24:22 GMT; Max-Age=1679874131; path=/; secure; SameSite=None
_mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[15493][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[15493][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[4849][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[4849][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[15495][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[15495][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[2822][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[2822][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[12260][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[12260][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[1946][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[1946][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_zone_imp[1554][count]=0; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; expires=Sun, 26-Mar-2023 23:42:11 GMT; Max-Age=86400; path=/; secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-origin: https://korrespondent.net
content-encoding: gzip
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&gjid=105873610&_gid=461482706.1679787746&_u=YGDAgUABAAAAAGAAI~&z=569470981
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&gjid=105873610&_gid=461482706.1679787746&_u=YGDAgUABAAAAAGAAI~&z=569470981
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&gjid=105873610&_gid=461482706.1679787746&_u=YGDAgUABAAAAAGAAI~&z=569470981 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://korrespondent.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 25 Mar 2023 23:42:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/2 c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssbsync.smartadserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 25 Mar 2023 23:42:12 GMT
content-length: 0
location: https://c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Tue, 25 Apr 2023 23:42:10 GMT; domain=adform.net; path=/
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4095
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 23:42:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4095
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 23:42:12 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 282 B IP
Hash 7d32483f46d24eb37251c0f1880ad00d
b427be27d09fff38b1f901dd8236f049c136b46a
ed8f49e34fa3dbd5e7ae456e7b8ca3f38760ad7c34f4a9f4adbbd837e3e8f6e8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:12 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Fri, 24 Mar 2023 06:32:39 GMT
Expires: Fri, 31 Mar 2023 06:32:38 GMT
Etag: "b427be27d09fff38b1f901dd8236f049c136b46a"
Cache-Control: max-age=456025,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb024d8c79b518-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 3b0a7d2d049cee9d96771ee09db52af4
12076c20743f89b044366e2604162bf460b415bd
1f8d5e971f2a0d64e61cddad1dba09413e0eb0f9eb3ec379c798b2e4281a25bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4393
Cache-Control: max-age=145917
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Etag: "641f0ca8-1d7"
Expires: Mon, 27 Mar 2023 16:14:09 GMT
Last-Modified: Sat, 25 Mar 2023 15:00:56 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 63948
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1ec08d4bd079a92161fc80f41281b5a9
bf61369962342cce85de8f48942b4b150fd2721e
8a8ed12c31d89d71c3cb88f0813ded83939529206461e917dcb0b8bc11abdda4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3589
x-amzn-requestid: 9c09af43-79e8-4734-b28b-4194e0bb1e4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1uyE2joAMF50g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6991-7607d33f6301182b591c56e8;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: pjRA439kqSg5daR_Zuvsf2l45R4oqv3AMWNiMCGQ_C5o2KA8kEd3TQ==
via: 1.1 46673955829b59a6da0ab071e0b7fbea.cloudfront.net (CloudFront), 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:21 GMT
etag: "bf61369962342cce85de8f48942b4b150fd2721e"
content-type: image/jpeg
age: 7491
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=
302 Found 0 B URL HTTP/1.1 gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1
Host: gu.dyntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssbsync.smartadserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
server: nginx
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
keep-alive: timeout=10
p3p: CP="NOI DEV OUR BUS UNI"
cache-control: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: Origin
set-cookie: dyn_u=03010001_641f86d448a9a; expires=Sun, 24-Mar-2024 23:42:12 GMT; Max-Age=31536000; path=/; domain=.dyntrk.com; secure; SameSite=None
location: https://gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=03010001_641f86d448a9a&knw=
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8a2437b3c9ab01cd0e2327d4be5c61a
33573e5a6b6c1912702040c6d880c362baf0c3db
2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5424
x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWGCnIAMFf7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: cMFdcKw6RZYIg35YKKDuetMlSGtT-g4Kc2L-BHA5s0877l_Gg-PqUw==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
etag: "33573e5a6b6c1912702040c6d880c362baf0c3db"
content-type: image/jpeg
age: 7505
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ff4405f-78db-4a79-9e55-e4fc35844c68.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ff4405f-78db-4a79-9e55-e4fc35844c68.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffef80630953d486de654abbb5d40ccd
06323c322ac667e3388bba406222121607eb804a
b853a741069e96d8430d766bb1422e50488622729bd069e29b8839ddc5743822
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ff4405f-78db-4a79-9e55-e4fc35844c68.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6566
x-amzn-requestid: 0a9abca1-24c3-4adf-8509-f8ebcab1c24d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1smEZFIAMFyFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6983-6ce8a53e779d724a11af3531;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: ibxm5Q-obzgZHNavKjqxgcgY9ePeF9PTC8wPzjE8fERmyVxaxnahKQ==
via: 1.1 0a166b53605851fe961f5a2952e5a748.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
etag: "06323c322ac667e3388bba406222121607eb804a"
content-type: image/jpeg
age: 7505
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fcbc03b-3146-4d3b-898e-c53b92f7b7a6.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fcbc03b-3146-4d3b-898e-c53b92f7b7a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 908bd7a6c220345e72fa664f871424c4
61a5d3f11e85d5fd77192701c305cb8651aa6395
9531f5b25cab1030aa579aa9f3b369ecb9daf0b929573897c6516520c06084a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fcbc03b-3146-4d3b-898e-c53b92f7b7a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11100
x-amzn-requestid: 3021b51a-674d-45d7-9939-9257330c0dbc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1hQFs1oAMFb0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f693a-0200a29207f6a3f5074c3cf1;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:35:54 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: NWvCK-Z608BCGDZIvuqVJ2wBQxwRoRmfjnxeDEcvzHZ7877go8IpRw==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:22 GMT
etag: "61a5d3f11e85d5fd77192701c305cb8651aa6395"
content-type: image/jpeg
age: 7490
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9fb4561-4e9a-4728-817a-dc7935921c78.gif
200 OK 31 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9fb4561-4e9a-4728-817a-dc7935921c78.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Hash cb02719790621d275340a9f1302ad716
49d537f5017c791f5cf1757a99dffad2aedfb111
4d7be52572d52cd74432b3e32fd1b6e2975a0f7b7090d7f26f46c724647bf099
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9fb4561-4e9a-4728-817a-dc7935921c78.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 30715
x-amzn-requestid: 0c3fb7fe-a3a6-4cff-9bdf-e3d45a9d5ff1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRi6YHaOoAMF8zQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d4b75-15abd6411d64661b3e73de78;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 07:04:21 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9zS033UuOJMwNkrxTBQuEUmuSVCnifR9l7eNPmPmy_mSpzH8q23C8Q==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 07:36:40 GMT
age: 57932
etag: "49d537f5017c791f5cf1757a99dffad2aedfb111"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 84bb3742b35aeea7166300e23308752c
804f4763cb08e6a2173876b17d4e8f3edbe8af2b
df3016f9211bbcfe374acc4273a9b4a9a220cbd859fbc84c69de966ebed54def
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 25 Mar 2023 23:42:12 GMT
Last-Modified: Sat, 25 Mar 2023 23:36:04 GMT
Server: ECAcc (nya/1C5E)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zIA34H9xDTz7qOSJ6ft9wjR969dIHugBUI3WzuamL3VbCdqXegqvrQ==
Age: 368
gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=03010001_641f86d448a9a&knw=
302 Found 0 B URL HTTP/1.1 gu.dyntrk.com/adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=03010001_641f86d448a9a&knw=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx/sma/us.php?dynk=sma4rt4bt4fg&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D69%26partneruserid%3DPARTNER_USER_ID%26gdpr%3D$GDPR%26gdpr_consent%3D$GDPR_CONSENT&gdpr=0&gdpr_consent=&prevuid=03010001_641f86d448a9a&knw= HTTP/1.1
Host: gu.dyntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ssbsync.smartadserver.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
server: nginx
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
keep-alive: timeout=10
p3p: CP="NOI DEV OUR BUS UNI"
cache-control: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: Origin
set-cookie: dyn_u=03010003_641f86d45b6ac; expires=Sun, 24-Mar-2024 23:42:12 GMT; Max-Age=31536000; path=/; domain=.dyntrk.com; secure; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=69&partneruserid=03010003_641f86d45b6ac&gdpr=0&gdpr_consent=
ocsp.digicert.com/
200 OK 471 B IP
Hash 2c5edbdf033f9278273fe462e3e33d15
0b2ce4177f9047122df9741e6daeae864093a09d
a6d8b7066a502ea64660dec35ed51c2ec20c4c6cffa67d2494931458185cfaec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3072
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Last-Modified: Sat, 25 Mar 2023 22:51:00 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
gaua.hit.gemius.pl/xgemius.js
200 OK 17 kB URL HTTP/2 gaua.hit.gemius.pl/xgemius.js
IP
File type ASCII text, with very long lines (417)
Hash 9abbbc491c5dcc53ebb2d112fc845131
10445eafef948fed0365ab870c4985cce937ce84
98c8323e174cb3d9bc7ea1b736f442d5a6f43a35ff3012b4c3635527e7386db7
GET /xgemius.js HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Sun, 26 Mar 2023 11:42:12 GMT
server: GHC
accept-ranges: none
cache-control: max-age=43200
last-modified: Fri, 17 Mar 2023 09:26:20 GMT
vary: Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 17201
content-encoding: gzip
X-Firefox-Spdy: h2
match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/sas?gdpr=0&gdpr_consent= HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssbsync.smartadserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Sat, 25 Mar 2023 23:42:12 GMT
location: https://match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sat, 25 Mar 2023 23:52:12 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a324879e2e9930aeda7af4cdc991387f
31e3344418928a4f25ca3e620789762bb39ca63a
9f858ddd035ce0305b15d6654d6dcfa7dd757641ddc8abf0527f6054a3431b7f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 25 Mar 2023 23:42:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 25 Mar 2023 22:38:33 GMT
Expires: Sun, 26 Mar 2023 22:38:33 GMT
ETag: "31e3344418928a4f25ca3e620789762bb39ca63a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b3bc98ea073f3406ac0b5a58e1680e5
afe4aee5aaadfa14a649cc6a54744a1d6124ee3d
40fc04eb6ea297f2220ae058e482e15ce94aa9adc7512d0e360b8b0800ea1ada
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40FC04EB6EA297F2220AE058E482E15CE94AA9ADC7512D0E360B8B0800EA1ADA"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4541
Expires: Sun, 26 Mar 2023 00:57:53 GMT
Date: Sat, 25 Mar 2023 23:42:12 GMT
Connection: keep-alive
match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1
303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/sas?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ssbsync.smartadserver.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Sat, 25 Mar 2023 23:42:12 GMT
location: https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=&gdpr=0
Server: gunicorn
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
id.crwdcntrl.net/id
200 OK 43 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.29.36
access-control-allow-credentials: true
access-control-allow-origin: https://korrespondent.net
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d1fd527b8778df4eea91a77830e22273
064e80a24dab08294990dfab209157d8e205b039
8797c985d0cac4a4a2449ca56f19eec7d2fcc910f55e47831303b4f11939f29c
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://korrespondent.net
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sat, 25 Mar 2023 23:42:12 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
gaua.hit.gemius.pl/fpdata.js?href=korrespondent.net
200 OK 286 B URL HTTP/2 gaua.hit.gemius.pl/fpdata.js?href=korrespondent.net
IP
Hash 87e3efe4a60934be744a85406c62cc7b
440f1b5eb96723269571c5c31fb8f2f68307bf86
88cc27f353323a44d28f2d22662a9f3f84ed93bc247a81a32dff90703fe5aaa9
GET /fpdata.js?href=korrespondent.net HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Mon, 24 Apr 2023 23:42:12 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 286
X-Firefox-Spdy: h2
rtb-csync.smartadserver.com/redir/?issi=1&partnerid=69&partneruserid=03010003_641f86d45b6ac&gdpr=0&gdpr_consent=
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?issi=1&partnerid=69&partneruserid=03010003_641f86d45b6ac&gdpr=0&gdpr_consent=
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?issi=1&partnerid=69&partneruserid=03010003_641f86d45b6ac&gdpr=0&gdpr_consent= HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ssbsync.smartadserver.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Sat, 25 Mar 2023 23:42:12 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=1690221638893530660; expires=Thu, 25 Apr 2024 23:42:12 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Thu, 25 Apr 2024 23:42:12 GMT; domain=smartadserver.com; path=/
csync=69:03010003_641f86d45b6ac; expires=Mon, 25 Mar 2024 23:42:12 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=&gdpr=0
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=&gdpr=0
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir?partnerid=127&partneruserid=&gdpr=0 HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ssbsync.smartadserver.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Sat, 25 Mar 2023 23:42:11 GMT
transfer-encoding: chunked
b1sync.zemanta.com/usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/1.1 b1sync.zemanta.com/usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent= HTTP/1.1
Host: b1sync.zemanta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssbsync.smartadserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sat, 25 Mar 2023 23:42:12 GMT
ls.hit.gemius.pl/lsget.html
200 OK 2.7 kB URL HTTP/2 ls.hit.gemius.pl/lsget.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1257)
Hash e1bcbf994bdc5e8c0a01538c8cf1097d
8090e178d60c781b54e323380643ea621ca7aa2f
5d7f07832188621887cd5fde7a244f1271ab49581cda9d7f42b69a8c7f1ef220
GET /lsget.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Mon, 24 Apr 2023 23:42:12 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 2720
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef8608ef03d2e48c9cd6b665e8b3a946
894e7d4897dabb155138a7cbad323943c0c95122
b1a0d70bdae876e192cb4b9ba7c7f8fb7064ef3796a5d48e14c7b014789f63c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7e3ff6b78faf64b75d13e5e4c390f7c5
1ec395988633a280be5876ea74b91b994ca88bda
470501dd8e4cb351f2b3effe7507b9582758ecf492d587545f740c13527289d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=korrespondent.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=korrespondent.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=korrespondent.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 25 Mar 2023 23:42:12 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
200 OK 542 B URL HTTP/2 c1.adform.net/serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 76986bb4b22514bec7ce552d9888675f
a2ce1897707027e6e0ead510fde19330eb02398e
f78da8ba5135a8eefaea3ef381ad5b9286886c6dedaa15132f0c0fe071f6c2b8
GET /serving/cookie/match?CC=1&party=10&sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D22%26partneruserid%3DYOUR_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1
Host: c1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ssbsync.smartadserver.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef8608ef03d2e48c9cd6b665e8b3a946
894e7d4897dabb155138a7cbad323943c0c95122
b1a0d70bdae876e192cb4b9ba7c7f8fb7064ef3796a5d48e14c7b014789f63c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a3bb632b19e8593edf3bc8edd8988aea
a003467155f24c2636eb7704d23ba3ae069ba23b
d20e64937f9efc1a8a62bebb0036f4b0259b00dfc1a958b6b2a0c08dafc0f2f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7e3ff6b78faf64b75d13e5e4c390f7c5
1ec395988633a280be5876ea74b91b994ca88bda
470501dd8e4cb351f2b3effe7507b9582758ecf492d587545f740c13527289d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=korrespondent.net&callback=_gfp_s_&client=ca-pub-3755662197386269
200 OK 255 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=korrespondent.net&callback=_gfp_s_&client=ca-pub-3755662197386269
IP
File type ASCII text, with very long lines (401), with no line terminators
Hash 3ca7329cbb3d621ee4521b33c6a262ea
5f5806bf3b2233734ec6b054d93739c58b59140a
65612ccb4b604e7d5406af554a8b235be6ee26cc321362613e79f89fa4820d66
GET /gampad/cookie.js?domain=korrespondent.net&callback=_gfp_s_&client=ca-pub-3755662197386269 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 25 Mar 2023 23:42:12 GMT
server: cafe
cache-control: private
content-length: 255
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a3bb632b19e8593edf3bc8edd8988aea
a003467155f24c2636eb7704d23ba3ae069ba23b
d20e64937f9efc1a8a62bebb0036f4b0259b00dfc1a958b6b2a0c08dafc0f2f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e5cb3a1a31505641c5c04414ed9fef23
6189dff2351b28cfaf807b9d55116c61d68f759e
94ea22e295db0fa41499be64f533685ec8293a770b252f4b92fdc5db5be3441d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 50 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3399)
Hash 1300547bdd24747a1050f3bcf61ed6bd
bca14bfd2016dacf5b54edaf1d51835ba00c8420
2c02b0fea6efd77d65b682a58b6e9bd462c5f74da83157020b98e5f4eca38103
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
timing-allow-origin: *
content-length: 49540
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Sat, 25 Mar 2023 23:42:12 GMT
cache-control: private, max-age=3000
etag: "1679493709445325"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e5cb3a1a31505641c5c04414ed9fef23
6189dff2351b28cfaf807b9d55116c61d68f759e
94ea22e295db0fa41499be64f533685ec8293a770b252f4b92fdc5db5be3441d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230322/r20110914/client/qs_click_protection_fy2021.js
200 OK 8.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230322/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (2465)
Hash 9da78d3accd905d5cc426fad37ef9ce9
c1c5ebc107844e165679f2b069763d10cf8d226d
79578369b938e27d7a0e3b6d02e048ef340d848e12e7b2465acb1e52dc24eeaa
GET /pagead/js/r20230322/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 8627
x-xss-protection: 0
date: Sat, 25 Mar 2023 16:28:34 GMT
expires: Sat, 08 Apr 2023 16:28:34 GMT
cache-control: public, max-age=1209600
age: 26018
etag: 8620137988422272387
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ls.hit.gemius.pl/lsset.html
200 OK 1.9 kB URL HTTP/2 ls.hit.gemius.pl/lsset.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1256)
Hash 664594b47c1dc88fcb432e56bd28440a
2ff1a2cc5b8e4805d89d61fb1f6810524ba5e00e
deae2539aa5fc079c0623c70396c33e71ea89d781ec8ea88d615768ce3f58010
GET /lsset.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
expires: Mon, 24 Apr 2023 23:42:12 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 1867
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 5ffffa8dcd39c8c51968bbf21b5968b3
64aebb38aa19d9b858a42eb1ff8da85a6318a862
07047bef878c43ea5051291c14e4e0118518406c007589d73410f43819003a78
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 51
Cache-Control: max-age=115282
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641ea5f4-139"
Expires: Mon, 27 Mar 2023 07:43:35 GMT
Last-Modified: Sat, 25 Mar 2023 07:42:44 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313
cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
IP
File type ASCII text, with very long lines (2171)
Hash 44c72b9bddfecacc9114e84d685dd085
38f3ff57b9b64a38fc2153eb30564b7fc1c86349
c82afd4f2d89288b4b79244f0c24264810b11326670710ac8e28e7bfc87c7991
GET /ajax/libs/webfont/1.6.28/webfontloader.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04030-30d9"
last-modified: Mon, 04 May 2020 16:17:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2185484
expires: Thu, 14 Mar 2024 23:42:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bEaRzu9h%2BdAf3GmvpNOtrcPdKhbTG%2BuK57wVElUoWVUX%2Frmg0rHc4hy%2BITHhLKFHEQ47yhGHYyepUdIWXBKmKtpGPmnOyqlswFO1jl07oWxBufMpDQgLIEihhU8L5rVb7jKQGDaL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7adb0254fbfe0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 82a72198525faf58846a22d332d984be
5af484c55eaf16d54064f9f5eda1f77e21cb6da4
a653ed75e6d63a902c05473a1e135516c257e3d9a92c0e66369bd83377f85de8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 392
Cache-Control: max-age=171424
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641f7fed-1d7"
Expires: Mon, 27 Mar 2023 23:19:17 GMT
Last-Modified: Sat, 25 Mar 2023 23:12:45 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&cw=1&lsw=1
200 OK 493 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&cw=1&lsw=1
IP
Hash cc2b37af320c7aad11eca725203e6b2e
88f607e743dbfa21a69bf88c04921d183ed04183
997928abfb965d4c50e7014a646b934a6c46341a71472a584fe572436e7fdad7
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://korrespondent.net/
Origin: https://korrespondent.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://korrespondent.net
server-processing-duration-in-ticks: 226265
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=k_jTDrOzWawC-gGdg2ICAgAAAMZrlI_ksFw9FTf6r0TXZDYQ1IYfZATX7e0c8wAPOXkAABIAAAoKQVFVQkFRRUJBUQ&wp=ZB-G1AALZLQKwkhNAAtaR9EGzJeA-Mn6qVH11A
200 OK 0 B URL HTTP/2 rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=k_jTDrOzWawC-gGdg2ICAgAAAMZrlI_ksFw9FTf6r0TXZDYQ1IYfZATX7e0c8wAPOXkAABIAAAoKQVFVQkFRRUJBUQ&wp=ZB-G1AALZLQKwkhNAAtaR9EGzJeA-Mn6qVH11A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=k_jTDrOzWawC-gGdg2ICAgAAAMZrlI_ksFw9FTf6r0TXZDYQ1IYfZATX7e0c8wAPOXkAABIAAAoKQVFVQkFRRUJBUQ&wp=ZB-G1AALZLQKwkhNAAtaR9EGzJeA-Mn6qVH11A HTTP/1.1
Host: rtb.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
server: Kestrel
content-length: 0
server-processing-duration-in-ticks: 180408
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=k_vFErOzWdgFWp2DYgICAAAALTT3sEV_vtIVN_qvRNdkNhDUhh9kqYKOyRJu-UrN1AAAEgAACgpBUVVCQVFFQkFR&wp=ZB-G1AALXLwKGfUHAAoUt68BcJb5n2CwhRUMdw
200 OK 0 B URL HTTP/2 rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=k_vFErOzWdgFWp2DYgICAAAALTT3sEV_vtIVN_qvRNdkNhDUhh9kqYKOyRJu-UrN1AAAEgAACgpBUVVCQVFFQkFR&wp=ZB-G1AALXLwKGfUHAAoUt68BcJb5n2CwhRUMdw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=k_vFErOzWdgFWp2DYgICAAAALTT3sEV_vtIVN_qvRNdkNhDUhh9kqYKOyRJu-UrN1AAAEgAACgpBUVVCQVFFQkFR&wp=ZB-G1AALXLwKGfUHAAoUt68BcJb5n2CwhRUMdw HTTP/1.1
Host: rtb.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
server: Kestrel
content-length: 0
server-processing-duration-in-ticks: 184285
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cbb8969fef45c0eb4bea093b5127941b
7ee1f2f697db13b77f10c8a8ef45ecee0fc92959
df2fb9bac4f658bc9302ddd1aadf5b608ccd309e8f93396ffa6391f9db9a9db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5442
Cache-Control: max-age=93688
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641e3c8b-1d7"
Expires: Mon, 27 Mar 2023 01:43:41 GMT
Last-Modified: Sat, 25 Mar 2023 00:12:59 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash cbb8969fef45c0eb4bea093b5127941b
7ee1f2f697db13b77f10c8a8ef45ecee0fc92959
df2fb9bac4f658bc9302ddd1aadf5b608ccd309e8f93396ffa6391f9db9a9db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5442
Cache-Control: max-age=93688
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641e3c8b-1d7"
Expires: Mon, 27 Mar 2023 01:43:41 GMT
Last-Modified: Sat, 25 Mar 2023 00:12:59 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
static.criteo.net/design/dt/0c622d256dee425682575f30240ec196_gotham-black-regular.woff
200 OK 26 kB URL HTTP/2 static.criteo.net/design/dt/0c622d256dee425682575f30240ec196_gotham-black-regular.woff
IP
File type Web Open Font Format, TrueType, length 26324, version 1.0\012- data
Hash 9acd111085f701eaf4fea7135f15ffa7
176a9dd986032b3647d1a40458db1db7d965f8bc
5a4a3459c15a5266e888bb12bbe9041b0f72aed89306411a5d5e69e7a1aa9f4d
GET /design/dt/0c622d256dee425682575f30240ec196_gotham-black-regular.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: text/plain; charset=UTF-8
content-length: 26324
last-modified: Mon, 06 Jul 2020 12:19:39 GMT
etag: "5f0316db-66d4"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/c05716d7ca7548d789c4d0b3d5042816_gotham-black-italic.woff
200 OK 17 kB URL HTTP/2 static.criteo.net/design/dt/c05716d7ca7548d789c4d0b3d5042816_gotham-black-italic.woff
IP
File type Web Open Font Format, CFF, length 17120, version 1.0\012- data
Hash f683179206a26fcb9ef35c6d14f6f7c7
c6da815fa6502dd63eb2606efd112fdd1eb9e79e
a26a23639f1408dca8879503cd479d3f823b085b727437c9d66c33ca3f75c08f
GET /design/dt/c05716d7ca7548d789c4d0b3d5042816_gotham-black-italic.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: text/plain; charset=UTF-8
content-length: 17120
last-modified: Mon, 06 Jul 2020 12:19:39 GMT
etag: "5f0316db-42e0"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/back_button2.svg
200 OK 293 B URL HTTP/2 static.criteo.net/flash/icon/back_button2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d9f776bdc698e1bc9c6a1977218019cd
5763cfb5ac79adf0fa7f03a82bad04eea2dca243
725e869434fef8013208ed4c233d29744f9b363f867dcfb8f23e862880fa699a
GET /flash/icon/back_button2.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: image/svg+xml
content-length: 293
last-modified: Thu, 28 Apr 2022 09:09:48 GMT
etag: "626a59dc-125"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/close_button.svg
200 OK 308 B URL HTTP/2 static.criteo.net/flash/icon/close_button.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 1bfe2e290ec4440da74a2e2c249eae2b
0b888a3f9e27d1554f2e21d51e7a1c223d00dbd4
8ec89605fe3d580e9539c7b858e8f69ba4e26fe06377ebe04585397de23a7395
GET /flash/icon/close_button.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: image/svg+xml
content-length: 308
last-modified: Fri, 14 Feb 2020 13:51:32 GMT
etag: "5e46a5e4-134"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy.svg
200 OK 20 kB URL HTTP/2 static.criteo.net/flash/icon/privacy.svg
IP
Hash 8c7d83db0666d8fdb7a63fbdee6e93d2
9396c2a9ee4ee03e8e7aeadceae78f939bfba37a
c7178eec26affaec1a003bc35eb807b03b28732531bd8b296d70e3b9c17cdaff
GET /flash/icon/privacy.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Feb 2020 10:57:21 GMT
etag: W/"5e4d1491-646"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 6bb512dfef74c3d88ea93303b4f61ca9
98d14ef1b3850e6a54f2aab66445e4f145639134
adbd2884bd865ca62b366041d7cb72d82df7ca967edc030fad9aa87e78ea165a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5125
Cache-Control: max-age=126845
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641ebf4e-138"
Expires: Mon, 27 Mar 2023 10:56:18 GMT
Last-Modified: Sat, 25 Mar 2023 09:30:54 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 6bb512dfef74c3d88ea93303b4f61ca9
98d14ef1b3850e6a54f2aab66445e4f145639134
adbd2884bd865ca62b366041d7cb72d82df7ca967edc030fad9aa87e78ea165a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5582
Cache-Control: max-age=127303
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641ebf4e-138"
Expires: Mon, 27 Mar 2023 11:03:56 GMT
Last-Modified: Sat, 25 Mar 2023 09:30:54 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 6bb512dfef74c3d88ea93303b4f61ca9
98d14ef1b3850e6a54f2aab66445e4f145639134
adbd2884bd865ca62b366041d7cb72d82df7ca967edc030fad9aa87e78ea165a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5582
Cache-Control: max-age=127303
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641ebf4e-138"
Expires: Mon, 27 Mar 2023 11:03:56 GMT
Last-Modified: Sat, 25 Mar 2023 09:30:54 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 6bb512dfef74c3d88ea93303b4f61ca9
98d14ef1b3850e6a54f2aab66445e4f145639134
adbd2884bd865ca62b366041d7cb72d82df7ca967edc030fad9aa87e78ea165a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5582
Cache-Control: max-age=127303
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641ebf4e-138"
Expires: Mon, 27 Mar 2023 11:03:56 GMT
Last-Modified: Sat, 25 Mar 2023 09:30:54 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 6bb512dfef74c3d88ea93303b4f61ca9
98d14ef1b3850e6a54f2aab66445e4f145639134
adbd2884bd865ca62b366041d7cb72d82df7ca967edc030fad9aa87e78ea165a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5582
Cache-Control: max-age=127303
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:13 GMT
Etag: "641ebf4e-138"
Expires: Mon, 27 Mar 2023 11:03:56 GMT
Last-Modified: Sat, 25 Mar 2023 09:30:54 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 312
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F2%2Fb%2F0%2F0%2F2b000d2cbdeb449182eef93ee5e87a59_2_PIA-311454_0_10.png%3Fcb%3D202312&v=3&w=400&s=farX8BZ-3ISPGn_bpz_pTnLq&b=400
200 OK 18 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F2%2Fb%2F0%2F0%2F2b000d2cbdeb449182eef93ee5e87a59_2_PIA-311454_0_10.png%3Fcb%3D202312&v=3&w=400&s=farX8BZ-3ISPGn_bpz_pTnLq&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f83c2cffc08f804c39019c2f11debeb4
20d806e5bc82c155c9789458c94ea62269233ce3
2381a69809c8adb3d6edd949286bb61576b28a910ebe33c5aa9618f28111d3e3
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F2%2Fb%2F0%2F0%2F2b000d2cbdeb449182eef93ee5e87a59_2_PIA-311454_0_10.png%3Fcb%3D202312&v=3&w=400&s=farX8BZ-3ISPGn_bpz_pTnLq&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045883
expires: Tue, 19 Mar 2024 07:33:37 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 18118
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2F5%2F5%2F7%2F3557b75957637d6f543d090be193e7b45104aca2_skoter_kapell_3068862.png%3Fcb%3D202312&v=3&w=400&s=NHyP-k_6LgV9dzyPEz5GA0Md&b=400
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2F5%2F5%2F7%2F3557b75957637d6f543d090be193e7b45104aca2_skoter_kapell_3068862.png%3Fcb%3D202312&v=3&w=400&s=NHyP-k_6LgV9dzyPEz5GA0Md&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b7782fd803f6fdd27f336a26d4bd5288
7fa67b07e9b73a1304d2f40fba58c1bce42e04fe
ab8a0f68397149aab615d1ae3d82efc11ddead88116138a42b1e5c4c87c8a851
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2F5%2F5%2F7%2F3557b75957637d6f543d090be193e7b45104aca2_skoter_kapell_3068862.png%3Fcb%3D202312&v=3&w=400&s=NHyP-k_6LgV9dzyPEz5GA0Md&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045546
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Sat, 25 Mar 2023 23:42:12 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 14122
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2Fa%2F4%2F6%2Fda4627b405ab4ecda1ab5ac28aeb4761_1_PIA-215674_1_10.png%3Fcb%3D202312&v=3&w=400&s=DEnZ-tbhVXoLNrNT2a1h8XmK&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2Fa%2F4%2F6%2Fda4627b405ab4ecda1ab5ac28aeb4761_1_PIA-215674_1_10.png%3Fcb%3D202312&v=3&w=400&s=DEnZ-tbhVXoLNrNT2a1h8XmK&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 76ed11b43c7f7c18f72b18927465be8b
9b8668bdd4500daed497855bbb7c382f8e80bd31
67462d55da1cfd2da05ae93b63a38b90d4b3860e013f6fb1243e4f929c28c18e
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2Fa%2F4%2F6%2Fda4627b405ab4ecda1ab5ac28aeb4761_1_PIA-215674_1_10.png%3Fcb%3D202312&v=3&w=400&s=DEnZ-tbhVXoLNrNT2a1h8XmK&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045592
expires: Tue, 19 Mar 2024 07:28:46 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10692
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=400&s=Ok14sS-G1IxNH1-pJKPM5eVR&b=400
200 OK 23 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=400&s=Ok14sS-G1IxNH1-pJKPM5eVR&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0dc67e7e37057abca22bf86e6eb903c0
4049728b81212c7ac1f80e48b1f7ad2b49d1a429
35e88c28c8c5c176c5d598a46f8ef43cef6773bdb5599b4365f1c4500cf0e564
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=400&s=Ok14sS-G1IxNH1-pJKPM5eVR&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045546
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 22794
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2F4%2F0%2F2%2Fb402d771b947f7e6f7fa5ea167ccdf8a7826b501_2_PIA_126896_0_10.PNG%3Fcb%3D202312&v=3&w=400&s=YkEmgGHhJeMYIUSL05RZHbxl&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2F4%2F0%2F2%2Fb402d771b947f7e6f7fa5ea167ccdf8a7826b501_2_PIA_126896_0_10.PNG%3Fcb%3D202312&v=3&w=400&s=YkEmgGHhJeMYIUSL05RZHbxl&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2924acc056c6a1ee6e76c74e898c1483
1f8caab9ebf2deefa8f63afd1678e9c042a950eb
184692b48663c35068f47be270ff6d343e6f606a65417db41bd24aef966c7e93
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2F4%2F0%2F2%2Fb402d771b947f7e6f7fa5ea167ccdf8a7826b501_2_PIA_126896_0_10.PNG%3Fcb%3D202312&v=3&w=400&s=YkEmgGHhJeMYIUSL05RZHbxl&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045538
expires: Tue, 19 Mar 2024 07:27:52 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10710
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=76&m=0&partner=23519&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F23519%2F221201%2F78224789e70d41118d050b40be08cca7_sledstore-logo.png&v=3&w=596&s=tV3XGP_KvOwhCerr1_N82fS9
200 OK 6.2 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=76&m=0&partner=23519&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F23519%2F221201%2F78224789e70d41118d050b40be08cca7_sledstore-logo.png&v=3&w=596&s=tV3XGP_KvOwhCerr1_N82fS9
IP
File type PNG image data, 265 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash ddbdb66a49cd00eb499ee0add2255930
77c7597c1edce15c304b05cf9d560cab7e3ff8b3
4fd5a4f756f84ee0a3d83ad26e3fa2a3712d2458294eb29eaf759bc775424d7f
GET /img/img?h=76&m=0&partner=23519&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F23519%2F221201%2F78224789e70d41118d050b40be08cca7_sledstore-logo.png&v=3&w=596&s=tV3XGP_KvOwhCerr1_N82fS9 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=30945186
expires: Mon, 18 Mar 2024 03:35:20 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6219
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F0%2Fd%2F5%2F5%2F0d55cff743f14c31a59d4c5773a3942b_2_PIA-310417_0_10.png%3Fcb%3D202312&v=3&w=400&s=Y-BZdHVxW023EXAO4BiJYv5o&b=400
200 OK 28 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F0%2Fd%2F5%2F5%2F0d55cff743f14c31a59d4c5773a3942b_2_PIA-310417_0_10.png%3Fcb%3D202312&v=3&w=400&s=Y-BZdHVxW023EXAO4BiJYv5o&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash de908e35cf40e4bfa87139679aa6f72c
bf9124398462dfeb0b39c9982e7f040d144b7611
db6a3f7548c7abf269e9ba93c9ed35cd0ddf6475d6db1aeb8ae1a54d0e10afb8
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F0%2Fd%2F5%2F5%2F0d55cff743f14c31a59d4c5773a3942b_2_PIA-310417_0_10.png%3Fcb%3D202312&v=3&w=400&s=Y-BZdHVxW023EXAO4BiJYv5o&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045651
expires: Tue, 19 Mar 2024 07:29:45 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 28286
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F9%2Fd%2Fd%2F3%2F9dd3cdfdd918501458a05342717e8b8d4383d82b_3_1006_8_M_lis272017.png%3Fcb%3D202312&v=3&w=400&s=FDR4sRU-uUW03SJTz8rQV-02&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F9%2Fd%2Fd%2F3%2F9dd3cdfdd918501458a05342717e8b8d4383d82b_3_1006_8_M_lis272017.png%3Fcb%3D202312&v=3&w=400&s=FDR4sRU-uUW03SJTz8rQV-02&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 37229099b9fd8add3a6e42b8a65e0167
8655c42cb94d855f5b65dbcd22957ecdf2daf238
f33b557dbefba1de8afc5e980c354e826922a4cc342e83c7f86d8bb7f8dcf132
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F9%2Fd%2Fd%2F3%2F9dd3cdfdd918501458a05342717e8b8d4383d82b_3_1006_8_M_lis272017.png%3Fcb%3D202312&v=3&w=400&s=FDR4sRU-uUW03SJTz8rQV-02&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31045335
expires: Tue, 19 Mar 2024 07:24:29 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 9968
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F8a2896a1-0564-439d-bc47-c583a961154a&v=3&w=800&s=FBFMEMvUxF61e45wNt4hdbTx&b=400
200 OK 7.8 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F8a2896a1-0564-439d-bc47-c583a961154a&v=3&w=800&s=FBFMEMvUxF61e45wNt4hdbTx&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 315x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4611d14ebeb8ccf9afd0278b27df15cd
578653ed3a31904b66ab3c9e965c747542300c76
619c0c3d2c3b906ce171a7d9d3ac9150043b0999a61b87ec2325b510ce43f027
GET /img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F8a2896a1-0564-439d-bc47-c583a961154a&v=3&w=800&s=FBFMEMvUxF61e45wNt4hdbTx&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30604620
expires: Thu, 14 Mar 2024 04:59:13 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 7790
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F034a7c05-5485-4748-8f9d-42a9973d8c36&v=3&w=800&s=kflctihCKMqK8H9PunvHkrdw&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F034a7c05-5485-4748-8f9d-42a9973d8c36&v=3&w=800&s=kflctihCKMqK8H9PunvHkrdw&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 268x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1b5cb7c93b21b2e126a7542b78ac202d
dc7c6cbb566c8157e7ce9e9001c00b35dcc74c4d
a8d72a14e4cc278a73378034065f4fbc11f67b61540258619baaa4937e6450f3
GET /img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F034a7c05-5485-4748-8f9d-42a9973d8c36&v=3&w=800&s=kflctihCKMqK8H9PunvHkrdw&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30924706
expires: Sun, 17 Mar 2024 21:54:00 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10572
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/criteo_logo_2021.svg
200 OK 11 kB URL HTTP/2 static.criteo.net/flash/icon/criteo_logo_2021.svg
IP
Hash 9972de0633a5ae1c5c46c18a6b5e3a7b
3ed3fa229c668c1c5de1d44c1b3f2caa8d1fc9bc
90e39aff2da0563b537cbad08a4b3f0ab6995441dc6639c31b87150e3cc0617a
GET /flash/icon/criteo_logo_2021.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: image/svg+xml
last-modified: Thu, 27 May 2021 13:21:59 GMT
etag: W/"60af9cf7-891"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=176&m=0&partner=93582&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F93582%2F220215%2F0304b728d11c411db7721aef61d96f37_rr-1200x1200-black-logo-transparent.png&v=3&w=256&s=Hg86Glae9TcDTnFIdfXQtLkV
200 OK 6.5 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=176&m=0&partner=93582&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F93582%2F220215%2F0304b728d11c411db7721aef61d96f37_rr-1200x1200-black-logo-transparent.png&v=3&w=256&s=Hg86Glae9TcDTnFIdfXQtLkV
IP
File type PNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced\012- data
Hash 297115bddac63f71388e98f4a154b147
bd5e9cfdfaa2e9cf218200f254a2e75f029dd492
e492b3f2a730489f49db7776602fdd9144b2885c5812a396d893d123391a86ea
GET /img/img?h=176&m=0&partner=93582&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F93582%2F220215%2F0304b728d11c411db7721aef61d96f37_rr-1200x1200-black-logo-transparent.png&v=3&w=256&s=Hg86Glae9TcDTnFIdfXQtLkV HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30129474
expires: Fri, 08 Mar 2024 17:00:08 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6460
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F3a0d5ec2-85a2-4211-a26e-8a2df79b9ebc&v=3&w=800&s=xx9qUILnU_zokFLTwlrOBMsM&b=400
200 OK 9.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F3a0d5ec2-85a2-4211-a26e-8a2df79b9ebc&v=3&w=800&s=xx9qUILnU_zokFLTwlrOBMsM&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 237x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 58800a78532dddb3a22b4c39dad5a0c1
ceee3c879c7d88abef6a532268a1c0380269dd99
da4620ba33095afca308c69703eb28736a206d396fe4e25e5c5a6355d723d765
GET /img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F3a0d5ec2-85a2-4211-a26e-8a2df79b9ebc&v=3&w=800&s=xx9qUILnU_zokFLTwlrOBMsM&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30555659
expires: Wed, 13 Mar 2024 15:23:13 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8956
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F366e8fe1-8ab4-440b-a783-09080ed1f4b3&v=3&w=800&s=gePnJCa7sgEVhSMHdm0XPCJd&b=400
200 OK 9.6 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F366e8fe1-8ab4-440b-a783-09080ed1f4b3&v=3&w=800&s=gePnJCa7sgEVhSMHdm0XPCJd&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 314x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2afa9e999fb810a08a9f7b97aa51a61d
08c9a15cc97f0c54ba15f97607c715cf86646f8e
e805842dddec6571950b437a3557fd87412828bb1f20565f14546274423852c5
GET /img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F366e8fe1-8ab4-440b-a783-09080ed1f4b3&v=3&w=800&s=gePnJCa7sgEVhSMHdm0XPCJd&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30641622
expires: Thu, 14 Mar 2024 15:15:56 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 9600
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2F6%2Fa%2F1%2Fd6a1cd0ae8f66971c14753f24e7d5439714d3edb_3_PIA_175702_0_10ab.png%3Fcb%3D202312&v=3&w=400&s=FKjs0iXLp_yVgj-JwpHcKzy1&b=400
200 OK 23 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2F6%2Fa%2F1%2Fd6a1cd0ae8f66971c14753f24e7d5439714d3edb_3_PIA_175702_0_10ab.png%3Fcb%3D202312&v=3&w=400&s=FKjs0iXLp_yVgj-JwpHcKzy1&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dd0a1c840e987576c4524c173f5ba558
661ab4b71e1ccdd618b4273038c2952415caa5c9
ed06f20190828ef63326ca239cfd61cf4049a1c7162640d1059427a5c97f11e2
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2F6%2Fa%2F1%2Fd6a1cd0ae8f66971c14753f24e7d5439714d3edb_3_PIA_175702_0_10ab.png%3Fcb%3D202312&v=3&w=400&s=FKjs0iXLp_yVgj-JwpHcKzy1&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31045428
expires: Tue, 19 Mar 2024 07:26:02 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 23428
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.id5-sync.com/api/1.0/id5-api.js
200 OK 38 kB URL HTTP/2 cdn.id5-sync.com/api/1.0/id5-api.js
IP
Hash 80dd3146dbf82eea1791d1a0c44f9ed2
7744d52fad7aff0e6605613717a1eb07108e27cd
5ab5f96ee00462cf7f2a4bea5df30d8bfc82959b64865d278644cdfb59122bcb
GET /api/1.0/id5-api.js HTTP/1.1
Host: cdn.id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: text/javascript;charset=utf-8
x-amz-id-2: aoB/Sieh9ynrVwOo+d8fo0EnrWB5hIatF3s5IYLgL17dLZkXaGZHx7o0qic5tXYZ+t3dwuB2qaA=
x-amz-request-id: 5MF1BW9Z70MA5G1F
last-modified: Mon, 13 Feb 2023 11:21:55 GMT
etag: W/"7586740695219e27c1483ac351f18884"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
cf-cache-status: HIT
age: 315
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 7adb024d2bc20b41-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F0aef79ab-6f91-45b9-9abf-f0f05dec705c&v=3&w=800&s=CUOtMFm2OUscubqa_icxuQAR&b=400
200 OK 8.4 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F0aef79ab-6f91-45b9-9abf-f0f05dec705c&v=3&w=800&s=CUOtMFm2OUscubqa_icxuQAR&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 261x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0c8bedebdb7eb66ebb645004f0e6e748
e0fb4c7365090c048b96f675cefe4ca0c4ca9ecb
a988505037586660b43ad18ce910da9cf1f753b467369e63813f51bdb64d8bc6
GET /img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F0aef79ab-6f91-45b9-9abf-f0f05dec705c&v=3&w=800&s=CUOtMFm2OUscubqa_icxuQAR&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30515077
expires: Wed, 13 Mar 2024 04:06:51 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8432
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fc%2Fa%2F9%2Fa%2Fca9aa4d3e6fe9d12679c339709c5bb441c92fafc_3_PIA_111193_0_20.PNG%3Fcb%3D202312&v=3&w=400&s=hygqwHTxG2q0tKaAy6MChoMp&b=400
200 OK 27 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fc%2Fa%2F9%2Fa%2Fca9aa4d3e6fe9d12679c339709c5bb441c92fafc_3_PIA_111193_0_20.PNG%3Fcb%3D202312&v=3&w=400&s=hygqwHTxG2q0tKaAy6MChoMp&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a8f8e0926b4cf4cd91d697caa45718e4
2d2742638965604150261f5c1cf0b1c793bf6de3
27013d092e5a435411704dd3a6ec3ef5f71daefd6bad9344bd274399798f3c99
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fc%2Fa%2F9%2Fa%2Fca9aa4d3e6fe9d12679c339709c5bb441c92fafc_3_PIA_111193_0_20.PNG%3Fcb%3D202312&v=3&w=400&s=hygqwHTxG2q0tKaAy6MChoMp&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31045544
expires: Tue, 19 Mar 2024 07:27:58 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 27400
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F12704cdc-dca7-4cca-a0b9-a73d61d1336b&v=3&w=800&s=UrW_OwD5YbQvIWQzJCcWS_Yh&b=400
200 OK 7.7 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F12704cdc-dca7-4cca-a0b9-a73d61d1336b&v=3&w=800&s=UrW_OwD5YbQvIWQzJCcWS_Yh&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 218x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3e44b1419f2cd133fe8207936fff5aa7
493dd1603daad3cf98915e7ad27e2b72ede9037f
2322747cfd1b0209823d50fe0bd8de131088b518b12327c7c208ab38c478899e
GET /img/img?c=3&cq=256&h=800&m=0&partner=93582&q=80&r=0&u=https%3A%2F%2Fmedia.revolutionrace.com%2Fapi%2Fmedia%2Fimage%2F12704cdc-dca7-4cca-a0b9-a73d61d1336b&v=3&w=800&s=UrW_OwD5YbQvIWQzJCcWS_Yh&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30538262
expires: Wed, 13 Mar 2024 10:33:16 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 7714
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fa%2F2%2Fe%2Fd%2Fa2ed61241dd28913ec99c53963570b7ff389c358_2_PIA_243000_0_20.png%3Fcb%3D202312&v=3&w=400&s=3IU9oxMHxheX-wOCm-XAtbRf&b=400
200 OK 18 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fa%2F2%2Fe%2Fd%2Fa2ed61241dd28913ec99c53963570b7ff389c358_2_PIA_243000_0_20.png%3Fcb%3D202312&v=3&w=400&s=3IU9oxMHxheX-wOCm-XAtbRf&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8732984d7122abb25797456f46ee2e0c
d675d610839381269a3cab057013f7b987da4020
542f3c916bd780cf4719b7640f406a5e6c0928744eeb9e6ad5787f89114c0f50
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fa%2F2%2Fe%2Fd%2Fa2ed61241dd28913ec99c53963570b7ff389c358_2_PIA_243000_0_20.png%3Fcb%3D202312&v=3&w=400&s=3IU9oxMHxheX-wOCm-XAtbRf&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31045546
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 18476
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2F0%2Fa%2F6%2F30a6dc9340d30581e48bcc7c6d14c8bf85650d2c_3_Pia_204893_0_40.png%3Fcb%3D202312&v=3&w=400&s=b1g13psbt6kHjKm_Hi9JGXAR&b=400
200 OK 20 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2F0%2Fa%2F6%2F30a6dc9340d30581e48bcc7c6d14c8bf85650d2c_3_Pia_204893_0_40.png%3Fcb%3D202312&v=3&w=400&s=b1g13psbt6kHjKm_Hi9JGXAR&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 69ef8d7270b796a51569161ed2e7747b
7b3af849b03f49debe419bfcfb648f6cf6e01844
16f42634aadf2c6b24533c618229423189aa9cddb1a163f0a807c0b2fbe3398d
GET /img/img?c=3&cq=256&h=400&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2F0%2Fa%2F6%2F30a6dc9340d30581e48bcc7c6d14c8bf85650d2c_3_Pia_204893_0_40.png%3Fcb%3D202312&v=3&w=400&s=b1g13psbt6kHjKm_Hi9JGXAR&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31045639
expires: Tue, 19 Mar 2024 07:29:33 GMT
date: Sat, 25 Mar 2023 23:42:12 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 19458
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap=
301 Moved Permanently 0 B URL HTTP/2 gaua.hit.gemius.pl/_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 25 Mar 2023 23:42:14 GMT
expires: Fri, 24 Mar 2023 23:42:14 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlGCUMaGQMQGU-UmUkHApGXUssGMXP8cFRbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Sat, 01 Apr 2023 23:42:14 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
location: /__/_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap=
content-length: 0
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=jy1CRgxwO2ZetgBXHri6QnTBD5u_x3CVyywz02QM7xZmsMEfGGPDLT-C5ccJYONUsjepQyOuMNGZIxfPL43gZb7XM8RSnhH9JsSipY6E99Oef53WngEoEQ-2Krudsshq95Wno-CbjE_q7fZt-ccluMelyUrAClbve6N4JQYtOQ_SKxQV8-kDLVSD5rzRIAuBNI-m6sUGTuCLqrGHda41jwOEP4VrzdRzAmFXedWscr1bKVfF6SH6eOsjxnM&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=jy1CRgxwO2ZetgBXHri6QnTBD5u_x3CVyywz02QM7xZmsMEfGGPDLT-C5ccJYONUsjepQyOuMNGZIxfPL43gZb7XM8RSnhH9JsSipY6E99Oef53WngEoEQ-2Krudsshq95Wno-CbjE_q7fZt-ccluMelyUrAClbve6N4JQYtOQ_SKxQV8-kDLVSD5rzRIAuBNI-m6sUGTuCLqrGHda41jwOEP4VrzdRzAmFXedWscr1bKVfF6SH6eOsjxnM&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=jy1CRgxwO2ZetgBXHri6QnTBD5u_x3CVyywz02QM7xZmsMEfGGPDLT-C5ccJYONUsjepQyOuMNGZIxfPL43gZb7XM8RSnhH9JsSipY6E99Oef53WngEoEQ-2Krudsshq95Wno-CbjE_q7fZt-ccluMelyUrAClbve6N4JQYtOQ_SKxQV8-kDLVSD5rzRIAuBNI-m6sUGTuCLqrGHda41jwOEP4VrzdRzAmFXedWscr1bKVfF6SH6eOsjxnM&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=iv-02wxwO2ZetgBXidwsL93ZntF4WvyGMTOPokHjnmo3B4-NklI_9no_k2wL7YhHsofZjl4ncvpPHxZ5F6lkStMDi0CINPiU8pNthJLkyi68oHCO58JQt_7yBqD-A9ACHxcaaXrp6AjtO9giyqIZ_d_tV1GF6IqPk3zJdtFpaXUuSo76AYfLLstA89mbiWxI4FUS11v0eOOZA6QcdiaOLiXArYm-uUHUbrQYOwYyGikr4MFJ42xY3NzSK8Q&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=iv-02wxwO2ZetgBXidwsL93ZntF4WvyGMTOPokHjnmo3B4-NklI_9no_k2wL7YhHsofZjl4ncvpPHxZ5F6lkStMDi0CINPiU8pNthJLkyi68oHCO58JQt_7yBqD-A9ACHxcaaXrp6AjtO9giyqIZ_d_tV1GF6IqPk3zJdtFpaXUuSo76AYfLLstA89mbiWxI4FUS11v0eOOZA6QcdiaOLiXArYm-uUHUbrQYOwYyGikr4MFJ42xY3NzSK8Q&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=iv-02wxwO2ZetgBXidwsL93ZntF4WvyGMTOPokHjnmo3B4-NklI_9no_k2wL7YhHsofZjl4ncvpPHxZ5F6lkStMDi0CINPiU8pNthJLkyi68oHCO58JQt_7yBqD-A9ACHxcaaXrp6AjtO9giyqIZ_d_tV1GF6IqPk3zJdtFpaXUuSo76AYfLLstA89mbiWxI4FUS11v0eOOZA6QcdiaOLiXArYm-uUHUbrQYOwYyGikr4MFJ42xY3NzSK8Q&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:13 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/__/_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap=
200 OK 169 B URL HTTP/2 gaua.hit.gemius.pl/__/_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap=
IP
Hash 8ed886045fd7f44a8bbd2198376f33e8
8cae8ed4169f33a833883d222e857b779f81d57a
6271b5f9ecaad44ec3b9887f900e9e467b66eaafd7bf73e9fb0836e6b2aeac7c
GET /__/_1679787748167/rexdot.js?l=100&sendf=24&id=ba.q_A_5v19vVz2R9iG8lbRIzUrWsVtFQgh8mmHaZov.n7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&tz=0&fv=-&href=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7<ime=1050&fr=1&ref=&inner=_ver%3D340&exid=641f86e224b29edc&brts=1679787748&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:14 GMT
expires: Fri, 24 Mar 2023 23:42:14 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=Klx3LRGGQMQGnSjA2rnApGXUssGMXP8cFRbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Sat, 01 Apr 2023 23:42:14 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 169
X-Firefox-Spdy: h2
korrespondent.net/i/weather/icon/82.png
200 OK 852 B URL HTTP/2 korrespondent.net/i/weather/icon/82.png
IP
File type PNG image data, 36 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 81acb13340e2640728a383e0f0c00199
a700ed9c54fb0df6973d6a737ff1b15b11d18f09
380f8b735399c5fbda091b91677813b993261a2fd76e0c1b417e9eec64b43a91
GET /i/weather/icon/82.png HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1283487%22%3A%7B%22page%22%3A1%7D%2C%22C360033%22%3A%7B%22page%22%3A1%2C%22time%22%3A1679787745921%7D%2C%22C971150%22%3A%7B%22page%22%3A1%2C%22time%22%3A1679787745946%7D%7D; _ga=GA1.2.1836443908.1679787746; _gid=GA1.2.461482706.1679787746; _gat_gtag_UA_1609229_9=1; _dc_gtm_UA-1609229-30=1; _pbjs_userid_consent_data=3524755945110770; _pubcid=42a94325-18f8-4b31-ae7a-cec4aa30cb81; __gfp_64b=sn4qP4M0cVtxyQWA3f7DAVm1WSLprcxJHHYkPSNk7SL.e7|1679787732; __gads=ID=4cb6a552564190aa-22285cb96cdd00c2:T=1679787732:RT=1679787732:S=ALNI_MbBCDaFdNLoyJt5KKtF2TsmoYVV7w; __gpi=UID=00000bcc867db3b0:T=1679787732:RT=1679787732:S=ALNI_MZG9eb7v32FokLrwxcoDBr9mA7R5Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/png
content-length: 852
cache-control: no-cache,public, max-age=31536
last-modified: Mon, 11 Jul 2016 11:43:59 GMT
etag: "3244c88369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 623
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb025b7fc7fab4-OSL
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=2024485967&div=zone_2024485967&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
200 OK 951 B URL HTTP/2 z.cdn.umh.ua/load?z=2024485967&div=zone_2024485967&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (523), with CRLF, LF line terminators
Hash 5175ec1a06500f3cac1f4194b3023481
d95a9ccefb7ea74b43e202ef22a114cbe74070fe
b44c8bcb5bc8f7a861ea0483873b5dd14e45b6a76c67dc1107284c8ffcdd9956
GET /load?z=2024485967&div=zone_2024485967&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: AU=66910b6b6f197a70
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 951
content-encoding: gzip
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
X-Firefox-Spdy: h2
z.cdn.umh.ua/load?z=1853094485&div=zone_1853094485&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
204 No Content 0 B URL HTTP/2 z.cdn.umh.ua/load?z=1853094485&div=zone_1853094485&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682
IP
ASN #28753 Leaseweb Deutschland GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load?z=1853094485&div=zone_1853094485&cw=1268&ch=939&sr=1280x1024&df=1&bh=1&tl=1641&hc=16&n=1679787745266&url=korrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQ&vc=0&ti=%D0%A5%D1%83%D0%B4%D0%BE%D0%B6%D0%BD%D0%B8%D0%BA%D0%B8%20%D0%B0%D0%B4%D0%B0%D0%BF%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BB%D0%B8%20%D0%BF%D0%BB%D0%B0%D0%BA%D0%B0%D1%82%D1%8B%20%D0%92%D1%82%D0%BE%D1%80%D0%BE%D0%B9%20%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%20%D0%B2%D0%BE%D0%B9%D0%BD%D0%B5%20%D0%A0%D0%BE%D1%81%D1%81%D0%B8%D0%B8%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5%20-%20Korrespondent.net&zyx=1658165682 HTTP/1.1
Host: z.cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: AU=66910b6b6f197a70
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: -1
X-Firefox-Spdy: h2
go.rcvlink.com/img/logo160.png
200 OK 6.2 kB URL HTTP/2 go.rcvlink.com/img/logo160.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 160 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash d878e8553e2d485276747db5b9425aed
9a41b1cf930b9de515513658c6e27c7012fab53c
a4b9e9ead2fa2e2326506b52b3f253b19ab9aa2bfe0b2c276dfbecfb4baf12cc
GET /img/logo160.png HTTP/1.1
Host: go.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rcvlink.com/static/iframe.htm
Cookie: cache=tp_f69bYu2j93Bk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/png
content-length: 6249
last-modified: Mon, 21 Jan 2019 15:07:51 GMT
etag: "5c45e047-1869"
expires: Sat, 01 Apr 2023 23:42:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ad.mox.tv/js/achernar/achernar.min.js
200 OK 4.4 kB URL HTTP/2 ad.mox.tv/js/achernar/achernar.min.js
IP
ASN #49981 WorldStream B.V.
Hash 63333548ade1f42b0a416b5453cc0ac9
3a6c3ef85bc19ed743b5e83f95bfac3f74a9c3dd
9aab1b18b200166989c4d26613cdf499b3500a15791cf09462a88d0e2de0a9d8
GET /js/achernar/achernar.min.js HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=782c1d07-2639-491e-8cd2-dd24c7e923af; _mwayss_zone_imp[1554][count]=0; _mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; _mwayss_imp[15493][count]=0; _mwayss_imp[15493][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[4849][count]=0; _mwayss_camp_imp[4849][frequencyPeriodEnd]=1679874131; _mwayss_imp[15495][count]=0; _mwayss_imp[15495][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2822][count]=0; _mwayss_camp_imp[2822][frequencyPeriodEnd]=1679874131; _mwayss_imp[12260][count]=0; _mwayss_imp[12260][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[1946][count]=0; _mwayss_camp_imp[1946][frequencyPeriodEnd]=1679874131; _mwayss_zone_imp[775][count]=0; _mwayss_zone_imp[775][frequencyPeriodEnd]=1679874131; _mwayss_imp[15629][count]=0; _mwayss_imp[15629][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[3084][count]=0; _mwayss_camp_imp[3084][frequencyPeriodEnd]=1679874131; _mwayss_imp[15482][count]=0; _mwayss_imp[15482][frequencyPeriodEnd]=1679874131; _mwayss_imp[15483][count]=0; _mwayss_imp[15483][frequencyPeriodEnd]=1679874131; _mwayss_imp[15648][count]=0; _mwayss_imp[15648][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2821][count]=0; _mwayss_camp_imp[2821][frequencyPeriodEnd]=1679874131
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 14:47:09 GMT
vary: Accept-Encoding
etag: W/"6213a5ed-2b1e"
expires: Sun, 26 Mar 2023 00:42:14 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
bgstats.mox.tv/magic.png
200 OK 0 B IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /magic.png HTTP/1.1
Host: bgstats.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/png
content-length: 0
X-Firefox-Spdy: h2
st11.rcvlink.com/2/304/e8973919ddece9d7f0496f80e91a5f54
200 OK 16 kB URL HTTP/2 st11.rcvlink.com/2/304/e8973919ddece9d7f0496f80e91a5f54
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 304x171, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 799cd82003d406970465bc85cefe6c4c
204d4c4dc60d382bf716a7c38fb073644fa85010
182dbc6c626c936352a67024be598d5d4811fa763bcec32045a9dfc030d6b627
GET /2/304/e8973919ddece9d7f0496f80e91a5f54 HTTP/1.1
Host: st11.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rcvlink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/webp
content-length: 16346
last-modified: Thu, 05 Jan 2023 09:10:52 GMT
etag: "63b6941c-2abe2"
expires: Fri, 23 Jun 2023 23:42:14 GMT
cache-control: max-age=7776000
access-control-allow-origin: *, *
timing-allow-origin: *, *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 749da5fb39a9082e02e0b7b8b0aaa509
df7f4f50d6aaed5f2c9cfbdeedaac2eca69b7c0b
469420160014e6a86689dc8f044adfbd2eb40fb959a67245fb94230082f5ae14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469420160014E6A86689DC8F044ADFBD2EB40FB959A67245FB94230082F5AE14"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7441
Expires: Sun, 26 Mar 2023 01:46:15 GMT
Date: Sat, 25 Mar 2023 23:42:14 GMT
Connection: keep-alive
st11.rcvlink.com/2/304/a58c986f3a8e9e10210babb752a271d1
200 OK 22 kB URL HTTP/2 st11.rcvlink.com/2/304/a58c986f3a8e9e10210babb752a271d1
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 304x304, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash aca3c8f14df1638bf4b588330f66bf34
88964fa5ca3857536da9ff4bf4dbf72f0ff46dd5
20a3df19bb4591acf90ed393750b81271bd66ad897aa358be33e375a01cc66cf
GET /2/304/a58c986f3a8e9e10210babb752a271d1 HTTP/1.1
Host: st11.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rcvlink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/webp
content-length: 22064
last-modified: Fri, 14 May 2021 14:45:02 GMT
etag: "609e8cee-9853"
expires: Fri, 23 Jun 2023 23:42:14 GMT
cache-control: max-age=7776000
access-control-allow-origin: *, *
timing-allow-origin: *, *
accept-ranges: bytes
X-Firefox-Spdy: h2
st11.rcvlink.com/2/304/0fa2b5f2cffde375fbb6f6882463a4ec
200 OK 16 kB URL HTTP/2 st11.rcvlink.com/2/304/0fa2b5f2cffde375fbb6f6882463a4ec
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 304x172, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2edd803b181185f7525189479a2798ce
0e943a1822794ee5fd49f07ab24f6b850f3b3855
fbace05547f06021dd7e2d6e78179fd769e024caeeda44221790bce08887ca45
GET /2/304/0fa2b5f2cffde375fbb6f6882463a4ec HTTP/1.1
Host: st11.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rcvlink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/webp
content-length: 15812
last-modified: Fri, 03 Jun 2022 10:19:54 GMT
etag: "6299e04a-1c62a"
expires: Fri, 23 Jun 2023 23:42:14 GMT
cache-control: max-age=7776000
access-control-allow-origin: *, *
timing-allow-origin: *, *
accept-ranges: bytes
X-Firefox-Spdy: h2
go.rcvlink.com/img/gt.svg
200 OK 219 B URL HTTP/2 go.rcvlink.com/img/gt.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 9d4ab3914d3c096e3a9012f4958f6f11
a9208fe8420df4c8d74f95b61f156df8a4d7d427
56d1f1f3e5b1add4f774ea6c58dbb722abd040454ccc1cc1ce38e9fe98e9021d
GET /img/gt.svg HTTP/1.1
Host: go.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rcvlink.com/static/iframe.htm
Cookie: cache=tp_f69bYu2j93Bk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: image/svg+xml
content-length: 219
last-modified: Tue, 22 Jan 2019 19:51:29 GMT
etag: "5c477441-db"
expires: Sat, 01 Apr 2023 23:42:14 GMT
cache-control: max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=ZB-G1AALXLwKGfUHAAoUt68BcJb5n2CwhRUMdw&u=%7CvLwl%2Fc9MLoTFDzUvkOJKoSS9TARMNMFAHCXni2Xosng%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9wezrPaJiQs0IrAT_NMwso9pmJYbL17bZvOflH8pudrbVGe0cnCGSKGh3SKFJ3UI0661qGp0CqtlT-FyK2GAko-M_HpR1NysMAzQOW2bQI6fuqeEHfgGPjCFHKkTH1PARTG3ZDikCD01BAd_9dEvjrOBNVXovYCdKRnM6L-79La2K4AZWgObtAtwtIhY7R_5dHJ9eNP8u1brlJib1ESMJfyoZWoXvpWBwtXjAU3L-nQJDu5epkyYb76BOkDJcbfnd-eVIANiRFBAjErjncWPJlzr6kTVCIoXzT-o7S3m3u08l-BgE2W1QPvSLIrW79UYWfkj9m7b9dDpd5j2MzU8RC4in5R07RW4TqtanIcsDrvuNI70BevH3aHDwXWERyT0d4gnvtbujm7pcBlb7u0m3JGY04PbRg1mXQdnIzbDD6aLeZn45CIQ2BPdkNoq28fPF0_UMXhPfWfettbznPRRsYlQQRyyxu1XS_N5U5LKgLGJNuXobgGxhYpT3wpeXJyLYLOIurspf-tddg&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCA7WI1IYfZLy5LYfqZ7epqJAKyZ7SsVzVnZH3cMCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi0zNzU1NjYyMTk3Mzg2MjY5yAEJqQJX7qvQOQ2yPqgDAaoEtwNP0FC9M0EQ0q3UVMdmmQh_gpnWnz8DduzoidUgubDUNMWnVGCPF33UYRPju1q0CP0L1NHgNVuEGLl5Fd87piONoRh9nXfWxd4TgVgtd6HeZVfUV4QnodWQj_zVG6_1vusfvYRI3pMXn1oV-lggX4MDosABxC_G7PHgNjKwjX1PqPucqYT4nRNI7iXn3OEHt8pJeDzdfkvoESLnqDqTjgs1U5JzcQgsxCmu6x13iZfvdWvY6DagTouQOsZ6uaLVUoK6FW91rZrZzXzZ_MnyQml_g7OVegaqjOOWEy_8u8mMXGF1p1mnfCa3iEEhZINRK9mP0Ikv12TACak80d6phIMIrFBGFMXJaikgzjTzxj6366kcZ64LPHo797Eiw8kOc61mjyk7offKsUfeXcPOwAV_fq8JFjg6anjx7LoOlExsCinFU06KmTMKcXYFlf3pvUgE7AJRIFmvnBfevNDufRx-lH927zJj73ZtCI7z8tJVSh_HI6Yi108QIeS4C0sZoC9rlCRV_FhRpuCu_pCPMAPY9QGQ_8TaPY2_kt7NHer6kxIEZlBYcVhbTSzQQJUTRU_Lsu_Bef1OgAbc-KvOkri2yzygBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggPCIDhgHAQATIC6wI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_325KR0K2DRrzFRPd2260RV-J7l2A%26client%3Dca-pub-3755662197386269%26adurl%3D
200 OK 54 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZB-G1AALXLwKGfUHAAoUt68BcJb5n2CwhRUMdw&u=%7CvLwl%2Fc9MLoTFDzUvkOJKoSS9TARMNMFAHCXni2Xosng%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9wezrPaJiQs0IrAT_NMwso9pmJYbL17bZvOflH8pudrbVGe0cnCGSKGh3SKFJ3UI0661qGp0CqtlT-FyK2GAko-M_HpR1NysMAzQOW2bQI6fuqeEHfgGPjCFHKkTH1PARTG3ZDikCD01BAd_9dEvjrOBNVXovYCdKRnM6L-79La2K4AZWgObtAtwtIhY7R_5dHJ9eNP8u1brlJib1ESMJfyoZWoXvpWBwtXjAU3L-nQJDu5epkyYb76BOkDJcbfnd-eVIANiRFBAjErjncWPJlzr6kTVCIoXzT-o7S3m3u08l-BgE2W1QPvSLIrW79UYWfkj9m7b9dDpd5j2MzU8RC4in5R07RW4TqtanIcsDrvuNI70BevH3aHDwXWERyT0d4gnvtbujm7pcBlb7u0m3JGY04PbRg1mXQdnIzbDD6aLeZn45CIQ2BPdkNoq28fPF0_UMXhPfWfettbznPRRsYlQQRyyxu1XS_N5U5LKgLGJNuXobgGxhYpT3wpeXJyLYLOIurspf-tddg&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCA7WI1IYfZLy5LYfqZ7epqJAKyZ7SsVzVnZH3cMCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi0zNzU1NjYyMTk3Mzg2MjY5yAEJqQJX7qvQOQ2yPqgDAaoEtwNP0FC9M0EQ0q3UVMdmmQh_gpnWnz8DduzoidUgubDUNMWnVGCPF33UYRPju1q0CP0L1NHgNVuEGLl5Fd87piONoRh9nXfWxd4TgVgtd6HeZVfUV4QnodWQj_zVG6_1vusfvYRI3pMXn1oV-lggX4MDosABxC_G7PHgNjKwjX1PqPucqYT4nRNI7iXn3OEHt8pJeDzdfkvoESLnqDqTjgs1U5JzcQgsxCmu6x13iZfvdWvY6DagTouQOsZ6uaLVUoK6FW91rZrZzXzZ_MnyQml_g7OVegaqjOOWEy_8u8mMXGF1p1mnfCa3iEEhZINRK9mP0Ikv12TACak80d6phIMIrFBGFMXJaikgzjTzxj6366kcZ64LPHo797Eiw8kOc61mjyk7offKsUfeXcPOwAV_fq8JFjg6anjx7LoOlExsCinFU06KmTMKcXYFlf3pvUgE7AJRIFmvnBfevNDufRx-lH927zJj73ZtCI7z8tJVSh_HI6Yi108QIeS4C0sZoC9rlCRV_FhRpuCu_pCPMAPY9QGQ_8TaPY2_kt7NHer6kxIEZlBYcVhbTSzQQJUTRU_Lsu_Bef1OgAbc-KvOkri2yzygBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggPCIDhgHAQATIC6wI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_325KR0K2DRrzFRPd2260RV-J7l2A%26client%3Dca-pub-3755662197386269%26adurl%3D
IP
Hash d9514b669d8d9476d52eda4f9abbfc68
acf7ebb874b11752ce3d9a1a7a6e6e911670d4ff
467e2bce76714122e76fb92dadaaa5eeaf5c80c918a410f16b95ef7f0e74d273
GET /delivery/r/afr.php?z=ZB-G1AALXLwKGfUHAAoUt68BcJb5n2CwhRUMdw&u=%7CvLwl%2Fc9MLoTFDzUvkOJKoSS9TARMNMFAHCXni2Xosng%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9wezrPaJiQs0IrAT_NMwso9pmJYbL17bZvOflH8pudrbVGe0cnCGSKGh3SKFJ3UI0661qGp0CqtlT-FyK2GAko-M_HpR1NysMAzQOW2bQI6fuqeEHfgGPjCFHKkTH1PARTG3ZDikCD01BAd_9dEvjrOBNVXovYCdKRnM6L-79La2K4AZWgObtAtwtIhY7R_5dHJ9eNP8u1brlJib1ESMJfyoZWoXvpWBwtXjAU3L-nQJDu5epkyYb76BOkDJcbfnd-eVIANiRFBAjErjncWPJlzr6kTVCIoXzT-o7S3m3u08l-BgE2W1QPvSLIrW79UYWfkj9m7b9dDpd5j2MzU8RC4in5R07RW4TqtanIcsDrvuNI70BevH3aHDwXWERyT0d4gnvtbujm7pcBlb7u0m3JGY04PbRg1mXQdnIzbDD6aLeZn45CIQ2BPdkNoq28fPF0_UMXhPfWfettbznPRRsYlQQRyyxu1XS_N5U5LKgLGJNuXobgGxhYpT3wpeXJyLYLOIurspf-tddg&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCA7WI1IYfZLy5LYfqZ7epqJAKyZ7SsVzVnZH3cMCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi0zNzU1NjYyMTk3Mzg2MjY5yAEJqQJX7qvQOQ2yPqgDAaoEtwNP0FC9M0EQ0q3UVMdmmQh_gpnWnz8DduzoidUgubDUNMWnVGCPF33UYRPju1q0CP0L1NHgNVuEGLl5Fd87piONoRh9nXfWxd4TgVgtd6HeZVfUV4QnodWQj_zVG6_1vusfvYRI3pMXn1oV-lggX4MDosABxC_G7PHgNjKwjX1PqPucqYT4nRNI7iXn3OEHt8pJeDzdfkvoESLnqDqTjgs1U5JzcQgsxCmu6x13iZfvdWvY6DagTouQOsZ6uaLVUoK6FW91rZrZzXzZ_MnyQml_g7OVegaqjOOWEy_8u8mMXGF1p1mnfCa3iEEhZINRK9mP0Ikv12TACak80d6phIMIrFBGFMXJaikgzjTzxj6366kcZ64LPHo797Eiw8kOc61mjyk7offKsUfeXcPOwAV_fq8JFjg6anjx7LoOlExsCinFU06KmTMKcXYFlf3pvUgE7AJRIFmvnBfevNDufRx-lH927zJj73ZtCI7z8tJVSh_HI6Yi108QIeS4C0sZoC9rlCRV_FhRpuCu_pCPMAPY9QGQ_8TaPY2_kt7NHer6kxIEZlBYcVhbTSzQQJUTRU_Lsu_Bef1OgAbc-KvOkri2yzygBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggPCIDhgHAQATIC6wI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_325KR0K2DRrzFRPd2260RV-J7l2A%26client%3Dca-pub-3755662197386269%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=iv-02wxwO2ZetgBXidwsL93ZntF4WvyGMTOPokHjnmo3B4-NklI_9no_k2wL7YhHsofZjl4ncvpPHxZ5F6lkStMDi0CINPiU8pNthJLkyi68oHCO58JQt_7yBqD-A9ACHxcaaXrp6AjtO9giyqIZ_d_tV1GF6IqPk3zJdtFpaXUuSo76AYfLLstA89mbiWxI4FUS11v0eOOZA6QcdiaOLiXArYm-uUHUbrQYOwYyGikr4MFJ42xY3NzSK8Q"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 71799138
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ad.mox.tv/js/achernar/prebid.js
200 OK 152 kB URL HTTP/2 ad.mox.tv/js/achernar/prebid.js
IP
ASN #49981 WorldStream B.V.
Size 152 kB (152093 bytes)
Hash eebe8fdd67e4fb8df81242fb0934945b
334f23d428c1c6c978f05a1506a50d9b7a527dad
22d1b4ee23b3137fde7416caa8df03321d8688b04356a9b1fed439f8e3e5c87e
GET /js/achernar/prebid.js HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=782c1d07-2639-491e-8cd2-dd24c7e923af; _mwayss_zone_imp[1554][count]=0; _mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; _mwayss_imp[15493][count]=0; _mwayss_imp[15493][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[4849][count]=0; _mwayss_camp_imp[4849][frequencyPeriodEnd]=1679874131; _mwayss_imp[15495][count]=0; _mwayss_imp[15495][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2822][count]=0; _mwayss_camp_imp[2822][frequencyPeriodEnd]=1679874131; _mwayss_imp[12260][count]=0; _mwayss_imp[12260][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[1946][count]=0; _mwayss_camp_imp[1946][frequencyPeriodEnd]=1679874131; _mwayss_zone_imp[775][count]=0; _mwayss_zone_imp[775][frequencyPeriodEnd]=1679874131; _mwayss_imp[15629][count]=0; _mwayss_imp[15629][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[3084][count]=0; _mwayss_camp_imp[3084][frequencyPeriodEnd]=1679874131; _mwayss_imp[15482][count]=0; _mwayss_imp[15482][frequencyPeriodEnd]=1679874131; _mwayss_imp[15483][count]=0; _mwayss_imp[15483][frequencyPeriodEnd]=1679874131; _mwayss_imp[15648][count]=0; _mwayss_imp[15648][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2821][count]=0; _mwayss_camp_imp[2821][frequencyPeriodEnd]=1679874131
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/javascript
last-modified: Mon, 28 Nov 2022 15:58:34 GMT
vary: Accept-Encoding
etag: W/"6384daaa-4f0f0"
expires: Sun, 26 Mar 2023 00:42:14 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6bac14ff70f1fb910e47debdd40434da
c2ce59c6cae9af589143a911a086f35db830654d
670d54ab31df749a0b913c0d490e3b1cf835aff2df965d7b6522c6e9ad3d6be2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&_u=YGDAgUABAAAAAGAAI~&z=1851639337
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&_u=YGDAgUABAAAAAGAAI~&z=1851639337
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&_u=YGDAgUABAAAAAGAAI~&z=1851639337 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:42:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&_u=YGDAgUABAAAAAGAAI~&z=1851639337
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&_u=YGDAgUABAAAAAGAAI~&z=1851639337
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-30&cid=1836443908.1679787746&jid=611521154&_u=YGDAgUABAAAAAGAAI~&z=1851639337 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:42:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 678d29248aa32ac654d461a9453b0bcb
4bfd729759e57cf5444488ca7a7fb637d79c6f9f
90203638d9d2afd2de6de65e8884a8aba4396212df76357380172b0053f6dd53
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "90203638D9D2AFD2DE6DE65E8884A8ABA4396212DF76357380172B0053F6DD53"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5007
Expires: Sun, 26 Mar 2023 01:05:41 GMT
Date: Sat, 25 Mar 2023 23:42:14 GMT
Connection: keep-alive
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-9&cid=1836443908.1679787746&jid=1239767247&_u=YEBAAUAAAAAAACAAI~&z=173822174
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-9&cid=1836443908.1679787746&jid=1239767247&_u=YEBAAUAAAAAAACAAI~&z=173822174
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-9&cid=1836443908.1679787746&jid=1239767247&_u=YEBAAUAAAAAAACAAI~&z=173822174 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:42:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-9&cid=1836443908.1679787746&jid=1239767247&_u=YEBAAUAAAAAAACAAI~&z=173822174
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-9&cid=1836443908.1679787746&jid=1239767247&_u=YEBAAUAAAAAAACAAI~&z=173822174
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-1609229-9&cid=1836443908.1679787746&jid=1239767247&_u=YEBAAUAAAAAAACAAI~&z=173822174 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Mar 2023 23:42:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.criteo.net/animejs/animejs.js
200 OK 8.4 kB URL HTTP/2 static.criteo.net/animejs/animejs.js
IP
Hash 515eb05ea9ae984430a8225f978d7bc6
1a05c37dc146d71c551a406d17616eb5619ffc7f
33354f32eab6540e5cc9248ade4e1d4f6d40a94867fffd80cabcf2c58801b267
GET /animejs/animejs.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: text/javascript
last-modified: Tue, 26 Mar 2019 17:44:11 GMT
etag: W/"5c9a64eb-3181"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
id5-sync.com/g/v2/231.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/231.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 329ffd4a24669817cc76d7eac1cd0aeb
8e4d5af5877706c3f331b869ad02ee37daf7b151
f75e35e8993f51eae314afcad86dafb3dbefa9404bcbad728b9b3e888fa2a339
POST /g/v2/231.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 898
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://korrespondent.net
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sat, 25 Mar 2023 23:42:14 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
adservice.google.no/adsid/integrator.js?domain=korrespondent.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=korrespondent.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=korrespondent.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 25 Mar 2023 23:42:14 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.vidverto.io/images/favicon-16px.png
200 OK 900 B URL HTTP/2 ad.vidverto.io/images/favicon-16px.png
IP
ASN #49981 WorldStream B.V.
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash def1867c4a716b7225c4a33298a063c6
15add4cc2c5a08fd57d419f0dccbd1593ee85869
42fe10d8382d3fb7f84308b95ae83c5959838f0aeff2cb1733bab9d394c5a2d7
GET /images/favicon-16px.png HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: image/png
content-length: 900
last-modified: Wed, 10 Jun 2020 14:52:51 GMT
etag: "5ee0f3c3-384"
expires: Sat, 01 Apr 2023 23:42:15 GMT
cache-control: max-age=604800, public, max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
inv-nets.admixer.net/prebid.1.2.aspx
200 OK 42 B URL HTTP/2 inv-nets.admixer.net/prebid.1.2.aspx
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
POST /prebid.1.2.aspx HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2238
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 42
accept-ch: Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://korrespondent.net
access-control-allow-credentials: true
x-xss-protection: 0
p3p: CP="NID DSP ALL COR"
set-cookie: am-uid=c51cc07db81746c8afdb00e8eb1cfd22; expires=Fri, 23 Jun 2023 23:42:15 GMT; domain=.admixer.net; secure; SameSite=None
X-Firefox-Spdy: h2
ads.pubmatic.com/AdServer/js/pwt/162534/8426/pwt.js
200 OK 66 kB URL HTTP/2 ads.pubmatic.com/AdServer/js/pwt/162534/8426/pwt.js
IP
File type ASCII text, with very long lines (64588)
Hash 721e4335094f174a7960206b7541a0de
650a12c642da27a74d6ef3b8bebaf05614860b8b
05ad0b4b1db05040c0ec3322376df8abe401490c72d602ff472114b7a466b0d8
GET /AdServer/js/pwt/162534/8426/pwt.js HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Dec 2022 18:28:04 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-type: application/javascript
content-length: 65843
cache-control: max-age=163562
expires: Mon, 27 Mar 2023 21:08:17 GMT
date: Sat, 25 Mar 2023 23:42:15 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 63ca8c4e17e0b692d1829cd62b9af3af
d0bbecbe0b93ea21026898dbd13edee5fc071cb2
1208545ecf01edb7bcef0b3c288d9edd34d2034c7404ba68a64c2ef251cb42f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.vidverto.io/js/ima2/2/vast-client.min.js
200 OK 13 kB URL HTTP/2 ad.vidverto.io/js/ima2/2/vast-client.min.js
IP
ASN #49981 WorldStream B.V.
Hash d6df796d36b2a6fedb5d9e6aa469d9d9
fa8530a730bf42c590d41368a343b2716da43c49
1d10fdba94aaf508055dfee1c64653e6ac978f88daf2d732c99fdeacbeccda8e
GET /js/ima2/2/vast-client.min.js HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/javascript
last-modified: Fri, 17 Sep 2021 18:13:12 GMT
vary: Accept-Encoding
etag: W/"6144dab8-ea58"
expires: Sun, 26 Mar 2023 00:42:15 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 055ec2304299ff5ee3438eb5614b9e8d
0a2d3da3baff311c87a60d27a2626345596cafce
ffb7390a02cd904b336aad8551f25393bf417f12aa943e8c645fe695c472f291
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.vidverto.io/delivery/impress?ctype=div&width=400&height=300&tld=korrespondent.net&pzoneid=9105&in_iframe=&position=atf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=3276802842
200 OK 129 kB URL HTTP/2 ad.vidverto.io/delivery/impress?ctype=div&width=400&height=300&tld=korrespondent.net&pzoneid=9105&in_iframe=&position=atf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=3276802842
IP
ASN #49981 WorldStream B.V.
File type JSON data\012- HTML document, ASCII text, with very long lines (15564)
Size 129 kB (129427 bytes)
Hash b1ea0a459a296d6584043f86883f8297
7573defdf72ac0b2f2b46747d0435ae754c22d20
b1d0b5eb1ae0cd58fbccdae213038e6515bca1236d37710f30fd698d63252660
GET /delivery/impress?ctype=div&width=400&height=300&tld=korrespondent.net&pzoneid=9105&in_iframe=&position=atf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=3276802842 HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
set-cookie: _mwayss_zone_imp[9105][count]=0; expires=Wed, 17-Jun-2076 23:24:30 GMT; Max-Age=1679874135; path=/; secure; SameSite=None
_mwayss_zone_imp[9105][frequencyPeriodEnd]=1679874135; expires=Sun, 26-Mar-2023 23:42:15 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_zone_imp[9105][count]=0; expires=Sun, 26-Mar-2023 23:42:15 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_zone_imp[9105][frequencyPeriodEnd]=1679874135; expires=Sun, 26-Mar-2023 23:42:15 GMT; Max-Age=86400; path=/; secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-origin: https://korrespondent.net
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 055ec2304299ff5ee3438eb5614b9e8d
0a2d3da3baff311c87a60d27a2626345596cafce
ffb7390a02cd904b336aad8551f25393bf417f12aa943e8c645fe695c472f291
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.vidverto.io/js/ima2/2/ima.min.js
200 OK 24 kB URL HTTP/2 ad.vidverto.io/js/ima2/2/ima.min.js
IP
ASN #49981 WorldStream B.V.
Hash 334f5a5ca3f6789cf92f90328b44c40b
932b069dd5e245cd4fc81d821ee395b6309fcad3
35afba06563dd475125b636d078e2edf170af0d3cf84ebab18b90ce1a82f0f7b
GET /js/ima2/2/ima.min.js HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/javascript
last-modified: Tue, 14 Mar 2023 19:14:09 GMT
vary: Accept-Encoding
etag: W/"6410c781-15dd6"
expires: Sun, 26 Mar 2023 00:42:15 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
ad.mox.tv/delivery/tracking?hash=UHlDZ1hzbVFjVmRlRXVnRFptT2lKbXM1SU9jR0M3KzU3SkF6SkFib2xyS0VmVUdMcnAxbmxQaFB6SnZoeXNtdlVaTEhkSWlVcVZzVFpTRVg1VDdoT0ZLZmE2SEEvSmsxaUJHTVg2c1J3V2I3L0ZDbTZNcWV5bjFSRjFzd3NUaFJlRk5kUzhnQ3hOblV4b3BLSHlFVlFGWkxybnNCKzIxOTVVNjBKNVdOaTR3Y2dnb1BvK1lNRzRRZVRoNHhPcEJST3R4UkdYalhxRFhGK3FpMkl4RnNzVEU4ajRUMUNJWVlNRzV3eS9lUjFkbTcySE9PWjlIYzFSdGIvR056QXdidA%3D%3D¶ms=WU5hbjdEMFYwSjFoSjB4VmZOWlNFUT09
200 OK 542 B URL HTTP/2 ad.mox.tv/delivery/tracking?hash=UHlDZ1hzbVFjVmRlRXVnRFptT2lKbXM1SU9jR0M3KzU3SkF6SkFib2xyS0VmVUdMcnAxbmxQaFB6SnZoeXNtdlVaTEhkSWlVcVZzVFpTRVg1VDdoT0ZLZmE2SEEvSmsxaUJHTVg2c1J3V2I3L0ZDbTZNcWV5bjFSRjFzd3NUaFJlRk5kUzhnQ3hOblV4b3BLSHlFVlFGWkxybnNCKzIxOTVVNjBKNVdOaTR3Y2dnb1BvK1lNRzRRZVRoNHhPcEJST3R4UkdYalhxRFhGK3FpMkl4RnNzVEU4ajRUMUNJWVlNRzV3eS9lUjFkbTcySE9PWjlIYzFSdGIvR056QXdidA%3D%3D¶ms=WU5hbjdEMFYwSjFoSjB4VmZOWlNFUT09
IP
ASN #49981 WorldStream B.V.
Hash ecca357ca9d66eb391537577778e5e10
4699b0ad2b24b107ca6be77e6fb36addd1571369
136445c202bebe8c0d378f55642bb5b2b3dd27c5223d45dbca9ee7f343e585c6
GET /delivery/tracking?hash=UHlDZ1hzbVFjVmRlRXVnRFptT2lKbXM1SU9jR0M3KzU3SkF6SkFib2xyS0VmVUdMcnAxbmxQaFB6SnZoeXNtdlVaTEhkSWlVcVZzVFpTRVg1VDdoT0ZLZmE2SEEvSmsxaUJHTVg2c1J3V2I3L0ZDbTZNcWV5bjFSRjFzd3NUaFJlRk5kUzhnQ3hOblV4b3BLSHlFVlFGWkxybnNCKzIxOTVVNjBKNVdOaTR3Y2dnb1BvK1lNRzRRZVRoNHhPcEJST3R4UkdYalhxRFhGK3FpMkl4RnNzVEU4ajRUMUNJWVlNRzV3eS9lUjFkbTcySE9PWjlIYzFSdGIvR056QXdidA%3D%3D¶ms=WU5hbjdEMFYwSjFoSjB4VmZOWlNFUT09 HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=782c1d07-2639-491e-8cd2-dd24c7e923af; _mwayss_zone_imp[1554][count]=0; _mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; _mwayss_imp[15493][count]=0; _mwayss_imp[15493][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[4849][count]=0; _mwayss_camp_imp[4849][frequencyPeriodEnd]=1679874131; _mwayss_imp[15495][count]=0; _mwayss_imp[15495][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2822][count]=0; _mwayss_camp_imp[2822][frequencyPeriodEnd]=1679874131; _mwayss_imp[12260][count]=0; _mwayss_imp[12260][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[1946][count]=0; _mwayss_camp_imp[1946][frequencyPeriodEnd]=1679874131; _mwayss_zone_imp[775][count]=0; _mwayss_zone_imp[775][frequencyPeriodEnd]=1679874131; _mwayss_imp[15629][count]=0; _mwayss_imp[15629][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[3084][count]=0; _mwayss_camp_imp[3084][frequencyPeriodEnd]=1679874131; _mwayss_imp[15482][count]=0; _mwayss_imp[15482][frequencyPeriodEnd]=1679874131; _mwayss_imp[15483][count]=0; _mwayss_imp[15483][frequencyPeriodEnd]=1679874131; _mwayss_imp[15648][count]=0; _mwayss_imp[15648][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2821][count]=0; _mwayss_camp_imp[2821][frequencyPeriodEnd]=1679874131
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 1339ec70ef22f9a9bbc60211432c7b8d
15965f972a1a3c3a62942d5cf53bf220f325cc01
7125067e8ee20da59444918dc7c190803551bb7aa627d49dcc63ae82996aba30
GET /rtv/012302271541000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61845
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 20:14:56 GMT
expires: Sun, 24 Mar 2024 20:14:56 GMT
cache-control: public, max-age=31536000
age: 12439
etag: "4fba9ccee66ca96a"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14764)
Hash b768be4ec895091a432dcd125d02d18a
403f5cacc316fa63e34b9c966fb1f407289960f7
a3d9373ac3cf42c49d24ab565dc6725919c09819f82485c2216e0998562b77a6
GET /rtv/012302271541000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5236
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:23:00 GMT
expires: Tue, 19 Mar 2024 14:23:00 GMT
cache-control: public, max-age=31536000
etag: "cedf9691907d886d"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 465555
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-form-0.1.mjs
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-form-0.1.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (41068)
Hash 29e6ca8d9edc05b4a956dcce746de287
01e641dc83f7983e17ddaf615178cd01cf68da48
5ed7c51df3267031660c777660ef695cceb8c82e22b1a417e07a4a6f9de2330f
GET /rtv/012302271541000/v0/amp-form-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12965
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 19:09:03 GMT
expires: Sat, 23 Mar 2024 19:09:03 GMT
cache-control: public, max-age=31536000
etag: "2e1a930b1f14d060"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 102792
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash 97148bebedae50d7264d4d5405be0a3b
db63df3856d8695f61b0c171b88d6ebc88620e36
0c4b6a78c0561c36ed709f09039426304fcbe06e0f58e4e21209c59c401cba73
GET /rtv/012302271541000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28954
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 13:46:30 GMT
expires: Tue, 19 Mar 2024 13:46:30 GMT
cache-control: public, max-age=31536000
etag: "eb54a928dd76f593"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 467745
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5021)
Hash 29310274e55382559cb128e7210c3290
c4ee1bfdccf9bcdb6c3f3522021c698233ed11f5
f0ec8e4452c0078c6f320b8f9117ebae510dd5732e1ab6abb8cf2d71ec52cdab
GET /rtv/012302271541000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1898
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 11:58:24 GMT
expires: Sun, 24 Mar 2024 11:58:24 GMT
cache-control: public, max-age=31536000
etag: "aaf5c93962f41d5e"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 42231
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 63ca8c4e17e0b692d1829cd62b9af3af
d0bbecbe0b93ea21026898dbd13edee5fc071cb2
1208545ecf01edb7bcef0b3c288d9edd34d2034c7404ba68a64c2ef251cb42f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.vidverto.io/delivery/impress?ctype=div&width=720&height=405&tld=korrespondent.net&pzoneid=777&in_iframe=&position=btf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=216706963
200 OK 90 kB URL HTTP/2 ad.vidverto.io/delivery/impress?ctype=div&width=720&height=405&tld=korrespondent.net&pzoneid=777&in_iframe=&position=btf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=216706963
IP
ASN #49981 WorldStream B.V.
Hash 525db6946ebd85c607c7cc2b8261ce22
5f14dc4785b16c75c0ea4236b62289573651612f
8377fd4c017c64f44128a881f0ab91a057404e06938bd7bfa8fff98b2562fc69
GET /delivery/impress?ctype=div&width=720&height=405&tld=korrespondent.net&pzoneid=777&in_iframe=&position=btf&screen_width=1280&screen_height=1024&top_domain=korrespondent.net&top_url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&domain=korrespondent.net&url=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE&referrer=&async=1&uid=216706963 HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
set-cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; expires=Tue, 22-Mar-2033 23:42:14 GMT; Max-Age=315360000; path=/; secure; SameSite=None
_mwayss_zone_imp[777][count]=0; expires=Wed, 17-Jun-2076 23:24:28 GMT; Max-Age=1679874134; path=/; secure; SameSite=None
_mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[19099][count]=0; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_imp[19099][frequencyPeriodEnd]=1679874134; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[7422][count]=0; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_zone_imp[777][count]=0; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
_mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; expires=Sun, 26-Mar-2023 23:42:14 GMT; Max-Age=86400; path=/; secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-origin: https://korrespondent.net
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 055ec2304299ff5ee3438eb5614b9e8d
0a2d3da3baff311c87a60d27a2626345596cafce
ffb7390a02cd904b336aad8551f25393bf417f12aa943e8c645fe695c472f291
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 290b56b6948b9a2f2e7a48800a046f98
fc7d062580cc0434ed2ec970a3ce13cf1bbde126
f3f5fdd65b0c79a9e2fad4855efd14c5ddc18084f0f3b3c3e3faaaeef756f149
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3F5FDD65B0C79A9E2FAD4855EFD14C5DDC18084F0F3B3C3E3FAAAEEF756F149"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10770
Expires: Sun, 26 Mar 2023 02:41:45 GMT
Date: Sat, 25 Mar 2023 23:42:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 290b56b6948b9a2f2e7a48800a046f98
fc7d062580cc0434ed2ec970a3ce13cf1bbde126
f3f5fdd65b0c79a9e2fad4855efd14c5ddc18084f0f3b3c3e3faaaeef756f149
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3F5FDD65B0C79A9E2FAD4855EFD14C5DDC18084F0F3B3C3E3FAAAEEF756F149"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10770
Expires: Sun, 26 Mar 2023 02:41:45 GMT
Date: Sat, 25 Mar 2023 23:42:15 GMT
Connection: keep-alive
id5-sync.com/g/v2/429.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/429.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b1878be4b4b339f0ed61d352e7f32c9f
d8920dc67285e9d690132c798572d12e9993d0a4
5ca6c2d46eedb750ed4379bd32d8542b4637a8d1a8db4bb93c96c825d08edac2
POST /g/v2/429.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 725
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://korrespondent.net
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sat, 25 Mar 2023 23:42:15 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
id.crwdcntrl.net/id
200 OK 43 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.31.122
access-control-allow-credentials: true
access-control-allow-origin: https://korrespondent.net
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
outstream.video/vid-player/vap.js?v=16708558293
200 OK 503 kB URL HTTP/1.1 outstream.video/vid-player/vap.js?v=16708558293
IP
ASN #14061 DIGITALOCEAN-ASN
File type Unicode text, UTF-8 text, with very long lines (15828)
Size 503 kB (503056 bytes)
Hash fefbb5b5b544c70e059e9cde6a0317a0
42ed00eff3883ae3b661f3638ead1aa67043e793
ea25151c051cff95ad25e11370234c6433d2d41a625c28833795598b7d20bce9
GET /vid-player/vap.js?v=16708558293 HTTP/1.1
Host: outstream.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Sat, 25 Mar 2023 23:42:15 GMT
Content-Type: application/javascript
Content-Length: 503056
Last-Modified: Thu, 09 Mar 2023 14:24:00 GMT
Connection: keep-alive
ETag: "6409ec00-7ad10"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
outstream.video/vid-player/vap.js?v=16708558291
200 OK 503 kB URL HTTP/1.1 outstream.video/vid-player/vap.js?v=16708558291
IP
ASN #14061 DIGITALOCEAN-ASN
File type Unicode text, UTF-8 text, with very long lines (15828)
Size 503 kB (503056 bytes)
Hash fefbb5b5b544c70e059e9cde6a0317a0
42ed00eff3883ae3b661f3638ead1aa67043e793
ea25151c051cff95ad25e11370234c6433d2d41a625c28833795598b7d20bce9
GET /vid-player/vap.js?v=16708558291 HTTP/1.1
Host: outstream.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Sat, 25 Mar 2023 23:42:15 GMT
Content-Type: application/javascript
Content-Length: 503056
Last-Modified: Thu, 09 Mar 2023 14:24:00 GMT
Connection: keep-alive
ETag: "6409ec00-7ad10"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash ae46670a66ccaa9c24def2c7c5b981b6
7ab11e813eefc4a65af26b703ac4a75bcd5c87c0
8df4cd86f67a272b3a10b476456044b962e25fec79bd8fae0b53f0072032d0d8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 29 Mar 2023 21:12:57 GMT
ETag: "7ab11e813eefc4a65af26b703ac4a75bcd5c87c0"
Last-Modified: Sat, 25 Mar 2023 21:12:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 91
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7adb0263ef21b527-OSL
fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
200 OK 894 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
IP
Hash e778d1a831a81f42f787e18b10048286
018ec74f3764269056d9049514e6412326809042
00139c3eb999f1847e60b4561da664afc057ba84e12f3e5a4b675fc0763929c4
GET /css?family=Roboto%3A300%2C400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 23:42:15 GMT
date: Sat, 25 Mar 2023 23:42:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:41 GMT
expires: Sat, 23 Mar 2024 10:26:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 134134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:42 GMT
expires: Sat, 23 Mar 2024 10:26:42 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 134133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f34d991a84658c3bf21ee4712cc561f
57ba88b889c69ef88f7310bda99cf5b632f17ed3
f758d9124c071779fb1cf9b947a3ae2f2192ce53a0757d22b17d581a841c2eed
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Mon, 24 Apr 2023 23:42:15 GMT
vary: Origin
access-control-allow-origin: https://korrespondent.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:42 GMT
expires: Sat, 23 Mar 2024 10:26:42 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
age: 134133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&bundle=W8y8sl9GbmkwMnRMemhkd3FXbm1IJTJGVU9XYUQlMkY2WEtwMTBFNXBPZTM0dHk0JTJGenlzM3BPdXNiMVNPY0JkN2psSGt6WkNmYVJLeXZvJTJCQndYRXlDUUdTWFFoVm9ZWCUyRmpVUnAlMkJ1RHZLeEFKZUd5enQlMkJJc0l5ZVI0WkFKY1NucU1BS3lUNENt&cw=1&lsw=1
200 OK 869 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&bundle=W8y8sl9GbmkwMnRMemhkd3FXbm1IJTJGVU9XYUQlMkY2WEtwMTBFNXBPZTM0dHk0JTJGenlzM3BPdXNiMVNPY0JkN2psSGt6WkNmYVJLeXZvJTJCQndYRXlDUUdTWFFoVm9ZWCUyRmpVUnAlMkJ1RHZLeEFKZUd5enQlMkJJc0l5ZVI0WkFKY1NucU1BS3lUNENt&cw=1&lsw=1
IP
Hash 5df07e2059ce07d3311b63d08307a876
413837ba15c3aed6d943c6e9229426bc35f548ac
b1a3ae7330b107eaf5cddfb048212bffaf5c6d915ce0194b96e664572d5d1253
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&bundle=W8y8sl9GbmkwMnRMemhkd3FXbm1IJTJGVU9XYUQlMkY2WEtwMTBFNXBPZTM0dHk0JTJGenlzM3BPdXNiMVNPY0JkN2psSGt6WkNmYVJLeXZvJTJCQndYRXlDUUdTWFFoVm9ZWCUyRmpVUnAlMkJ1RHZLeEFKZUd5enQlMkJJc0l5ZVI0WkFKY1NucU1BS3lUNENt&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://korrespondent.net
server-processing-duration-in-ticks: 534733
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
api.rlcdn.com/api/identity/envelope?pid=1258
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Sat, 25 Mar 2023 23:42:15 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 8ed3047ee91d173a374a1a85ae52a7a8
4b6029b31d616b6ce4510bbebfa3d19727830cb4
97397600ff0e83eabe0185e5d326aa997f8cec6ea2ae7d0af7d08015b11a6c4e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 23:42:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 08:38:01 GMT
Expires: Thu, 30 Mar 2023 08:38:00 GMT
Etag: "4b6029b31d616b6ce4510bbebfa3d19727830cb4"
Cache-Control: max-age=377144,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adb02655d901c02-OSL
outstream.video/vid-player/vap.css
200 OK 127 kB URL HTTP/1.1 outstream.video/vid-player/vap.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (643)
Size 127 kB (127258 bytes)
Hash fb959e436d0f654f417b45f70dafe149
d51fd64cae2f1a3c50f9854f647a0dedb72815d0
d8a770f197ae539652ac645835a0e1f3db601516f86cbdfc5c88bb51f19db08b
GET /vid-player/vap.css HTTP/1.1
Host: outstream.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Sat, 25 Mar 2023 23:42:15 GMT
Content-Type: text/css
Content-Length: 127258
Last-Modified: Fri, 10 Mar 2023 11:54:09 GMT
Connection: keep-alive
ETag: "640b1a61-1f11a"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ad.vidverto.io/vidverto/player/logo.svg
200 OK 414 B URL HTTP/2 ad.vidverto.io/vidverto/player/logo.svg
IP
ASN #49981 WorldStream B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (414), with no line terminators
Hash b52b973a055993a93b5ea72d7a38b241
0313e408025147b88eb9b62e120fecc0afaf7b57
8d5d4d2769bdb28802f4309747ef6a358007eeb37daadc66a78ba0ca81cd4bce
GET /vidverto/player/logo.svg HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134; _mwayss_zone_imp[9105][count]=0; _mwayss_zone_imp[9105][frequencyPeriodEnd]=1679874135
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:16 GMT
content-type: image/svg+xml
content-length: 414
last-modified: Wed, 04 May 2022 14:39:21 GMT
etag: "62729019-19e"
accept-ranges: bytes
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=korrespondent.net
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=korrespondent.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=korrespondent.net HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 25 Mar 2023 23:42:16 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.vidverto.io/js/ima2/2/inview.min.js
200 OK 2.4 kB URL HTTP/2 ad.vidverto.io/js/ima2/2/inview.min.js
IP
ASN #49981 WorldStream B.V.
Hash 865b240556b53784410cd9138864131e
ac9efcebd9aee237a198fc8b3a8ff1880ccbb3f7
ba9abbb5b50aa6de2380db3f8b0112cf73d28bcbcbc77c5a09212a1004e3112c
GET /js/ima2/2/inview.min.js HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/javascript
last-modified: Wed, 10 Jun 2020 14:52:51 GMT
vary: Accept-Encoding
etag: W/"5ee0f3c3-1389"
expires: Sun, 26 Mar 2023 00:42:15 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1611
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://korrespondent.net
cache-control: no-cache, no-store, must-revalidate
date: Sat, 25 Mar 2023 23:42:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a953a9bc0129f404c586d798892c4f1d
099ab04894beacfb569046a30a87871c936d97c3
c091f54d04b4dbf26c9876f1783c47fab3b81615522c84679afcd2eaf82cff03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.vidverto.io/vidverto/player/ui/js/video_playlist.js?v=1653047028
200 OK 49 kB URL HTTP/2 ad.vidverto.io/vidverto/player/ui/js/video_playlist.js?v=1653047028
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6a71126b8c3dc9eb24a700203e5ac7b6
5b6fc840c516a014fc610966d6486219c87236b5
88bd40a3206b41f8261318bdc2f06ac01b9a865beb6ae8fc784c4267601f2bc4
GET /vidverto/player/ui/js/video_playlist.js?v=1653047028 HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134; _mwayss_zone_imp[9105][count]=0; _mwayss_zone_imp[9105][frequencyPeriodEnd]=1679874135
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:16 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 08:21:47 GMT
vary: Accept-Encoding
etag: W/"62fdf69b-1bc07"
expires: Sun, 26 Mar 2023 00:42:16 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a953a9bc0129f404c586d798892c4f1d
099ab04894beacfb569046a30a87871c936d97c3
c091f54d04b4dbf26c9876f1783c47fab3b81615522c84679afcd2eaf82cff03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.vidverto.io/vidverto/invocation.min.css
200 OK 19 kB URL HTTP/2 ad.vidverto.io/vidverto/invocation.min.css
IP
ASN #49981 WorldStream B.V.
Hash 557d416f662f423fd7fe35359de81aa5
bf30b17d73c605135b7de47d9310b72c7771a03e
4d641d6219ca4286b14a616ab88c72dae1673fc3d11fe84bfcfe7b45b54d6fec
GET /vidverto/invocation.min.css HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: text/css
last-modified: Wed, 11 Nov 2020 16:53:37 GMT
vary: Accept-Encoding
etag: W/"5fac1711-a0a"
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c704ecf65aac1c454690e76efbc61972
c4aeee8212243a59e6fa8e966e8d1e30ea0bc3ff
a49521ad872ef89dddd166c30a67ba073eb639502ee6fee22659474220eeb3e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A49521AD872EF89DDDD166C30A67BA073EB639502EE6FEE22659474220EEB3E0"
Last-Modified: Sat, 25 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5654
Expires: Sun, 26 Mar 2023 01:16:30 GMT
Date: Sat, 25 Mar 2023 23:42:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 94771c3e312600050645afec0ac137fd
f3712f691676c03f580554e7e9610b73e796ba07
39ea5a39ef20814ab9b1b29921e66cc013c115970048524ca62d37c3653d459f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4923
Cache-Control: max-age=93552
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 23:42:17 GMT
Etag: "641e3e0e-139"
Expires: Mon, 27 Mar 2023 01:41:29 GMT
Last-Modified: Sat, 25 Mar 2023 00:19:26 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313
cdn.vidverto.io/data/mS5mae9jbh6g9Cf/1109/video/2393/480_650.mp4
206 Partial Content 405 kB URL HTTP/1.1 cdn.vidverto.io/data/mS5mae9jbh6g9Cf/1109/video/2393/480_650.mp4
IP
ASN #49981 WorldStream B.V.
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 405 kB (405189 bytes)
Hash fd3692e4deac42016b6458c7a050f0ca
7033e2c2d4c03bf5cf80ea2f7a997c7589e4d8ad
f51fb7dec0395beb2bf736b5f7fbd13605dacf9b0fa18ccaf802efe3d31348bc
GET /data/mS5mae9jbh6g9Cf/1109/video/2393/480_650.mp4 HTTP/1.1
Host: cdn.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 25 Mar 2023 23:42:16 GMT
Content-Type: video/mp4
Content-Length: 10709296
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2022 10:26:04 GMT
ETag: "6254023c-a36930"
Content-Range: bytes 0-10709295/10709296
Access-Control-Allow-Origin: *
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ftimberland%2F1300x1700%2Ftimtb0a1sdi0011_cblack.jpg&v=3&w=400&s=xye3xKo-BDxC3L3qoQq_EHJQ&b=400
200 OK 8.4 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ftimberland%2F1300x1700%2Ftimtb0a1sdi0011_cblack.jpg&v=3&w=400&s=xye3xKo-BDxC3L3qoQq_EHJQ&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 930bbd0059d6ba12cc9dd3270e6ffa40
7d4fd507520d27553d6da15364626b245d536849
1ed99977a72ae67a31f248fcec6c4d582ff808b5887f7d6b5c3568bf18e82f3f
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ftimberland%2F1300x1700%2Ftimtb0a1sdi0011_cblack.jpg&v=3&w=400&s=xye3xKo-BDxC3L3qoQq_EHJQ&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30699158
expires: Fri, 15 Mar 2024 07:14:56 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8386
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=104&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2Fcf4d96ca020d4e318ab97db5ad436112_logo_n_horizontal.jpg&v=3&w=596&s=n4bqIOOhKo8l2h_tT4t54E8a
200 OK 3.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=104&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2Fcf4d96ca020d4e318ab97db5ad436112_logo_n_horizontal.jpg&v=3&w=596&s=n4bqIOOhKo8l2h_tT4t54E8a
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 277x104, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d7a5c76aec6cbaff3effe7fba832f7b4
ab3046d70078b235d53e535f3be76e2e404ebc8b
1204eb619e2c0b5c191c701da71af8261cb4de1c90efca0f92280ab46a66cc66
GET /img/img?h=104&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2Fcf4d96ca020d4e318ab97db5ad436112_logo_n_horizontal.jpg&v=3&w=596&s=n4bqIOOhKo8l2h_tT4t54E8a HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30508447
expires: Wed, 13 Mar 2024 02:16:24 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 2972
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=1200&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2F38fa9246a8044b9d84346a654df0b3f8_1200x1200_no.png&v=3&w=1200&s=LUavQo56ZLnCnPd6oiNuRcTH
200 OK 128 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=1200&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2F38fa9246a8044b9d84346a654df0b3f8_1200x1200_no.png&v=3&w=1200&s=LUavQo56ZLnCnPd6oiNuRcTH
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 128 kB (128318 bytes)
Hash 9ff2ed9e224d6b96a54afe736c4b0b07
ef6420bcdc5c7b89e892768d26b6156f20896019
3f643c2f2356cf933397bab72e5df5cdec174c7af924d8352390677e56cfbf68
GET /img/img?h=1200&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.nl3.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2F38fa9246a8044b9d84346a654df0b3f8_1200x1200_no.png&v=3&w=1200&s=LUavQo56ZLnCnPd6oiNuRcTH HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30509394
expires: Wed, 13 Mar 2024 02:32:12 GMT
date: Sat, 25 Mar 2023 23:42:16 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 128318
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Freima%2F1300x1700%2Frei569387_cblack_v9990.jpg&v=3&w=400&s=ON_TnnQamH6w4wpgQ8OhSOS_&b=400
200 OK 6.9 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Freima%2F1300x1700%2Frei569387_cblack_v9990.jpg&v=3&w=400&s=ON_TnnQamH6w4wpgQ8OhSOS_&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 318x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fae149eb545af89b7d4384bcb615886a
5ebc96aa6c0e2fdf20176ca0c3b5d6ecb8511cc7
4b6e1c643df5cf2441a7e0d61bd55cd7b29e08fc0f3117679ad41703f7c999e2
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Freima%2F1300x1700%2Frei569387_cblack_v9990.jpg&v=3&w=400&s=ON_TnnQamH6w4wpgQ8OhSOS_&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30799763
expires: Sat, 16 Mar 2024 11:11:41 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6914
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fahlvar-gallery%2F1300x1700%2Fagy9511_cblack.jpg&v=3&w=400&s=h2RYxxU2Nw3SWzd_lsmGa7Az&b=400
200 OK 6.2 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fahlvar-gallery%2F1300x1700%2Fagy9511_cblack.jpg&v=3&w=400&s=h2RYxxU2Nw3SWzd_lsmGa7Az&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 153x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1045753a9a9f079685f4fe2c9e982149
907a43fe5cc06689beb0ac0702280623d6b3ef79
24e600ae02d65f5074aed7f9ef20f10dbdf2331cf4578f1774196024a3f3f09e
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fahlvar-gallery%2F1300x1700%2Fagy9511_cblack.jpg&v=3&w=400&s=h2RYxxU2Nw3SWzd_lsmGa7Az&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30436288
expires: Tue, 12 Mar 2024 06:13:46 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6212
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fbjorn-borg-footwear%2F1300x1700%2Fbbf1741394803_ctan.jpg&v=3&w=400&s=NTtvgePhF0MNicCYa-0Orwfu&b=400
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fbjorn-borg-footwear%2F1300x1700%2Fbbf1741394803_ctan.jpg&v=3&w=400&s=NTtvgePhF0MNicCYa-0Orwfu&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x342, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 99693f44b94946304f8bc098974bcdd2
a76990117ddf657cb61f09a8e8011211efc5e897
4f31215492ee8b7855652b8d7f548ffedbbf1b4f6f0ce8077d02264fcdb926b8
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fbjorn-borg-footwear%2F1300x1700%2Fbbf1741394803_ctan.jpg&v=3&w=400&s=NTtvgePhF0MNicCYa-0Orwfu&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30566054
expires: Wed, 13 Mar 2024 18:16:32 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 13820
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ffabelab%2F1300x1700%2Fb2006238465os_cmulticolours.jpg&v=3&w=400&s=hdT8j6HPvWH7DCrOr_8VA0ew&b=400
200 OK 5.1 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ffabelab%2F1300x1700%2Fb2006238465os_cmulticolours.jpg&v=3&w=400&s=hdT8j6HPvWH7DCrOr_8VA0ew&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x397, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a03961bcdac6eb39a0772d2aa4dfc60b
e1ef56b16ca597c44f5c6b4a5d377e58eab0fd90
88ca89fc6abb95aa277a7bf17f4519c2b70b99a4db6995fc86775fe4487f3c88
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ffabelab%2F1300x1700%2Fb2006238465os_cmulticolours.jpg&v=3&w=400&s=hdT8j6HPvWH7DCrOr_8VA0ew&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30872911
expires: Sun, 17 Mar 2024 07:30:48 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 5094
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsun-city-nickelodeon%2F1300x1700%2Fscnvh1121bio_cgrey.jpg&v=3&w=400&s=XlvdUVcp0Dt1brYathH1FgV8&b=400
200 OK 18 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsun-city-nickelodeon%2F1300x1700%2Fscnvh1121bio_cgrey.jpg&v=3&w=400&s=XlvdUVcp0Dt1brYathH1FgV8&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x333, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bd7f2775ebfef2f4fac453f78de7c5df
53751f85b7080535f2f25321bd9ad9a7a4ee5dbe
6b3f7549ba56ebc50140c2fe542ca8ae9f8ef46cabd339cdac1e188b9e17edad
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsun-city-nickelodeon%2F1300x1700%2Fscnvh1121bio_cgrey.jpg&v=3&w=400&s=XlvdUVcp0Dt1brYathH1FgV8&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30712900
expires: Fri, 15 Mar 2024 11:03:58 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 17946
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Flyle-scott%2F1300x1700%2Fylelw1309v_cvictoryorangeolive_vw736.jpg&v=3&w=400&s=ME5DFlW0mywRVyOPHX27u743&b=400
200 OK 22 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Flyle-scott%2F1300x1700%2Fylelw1309v_cvictoryorangeolive_vw736.jpg&v=3&w=400&s=ME5DFlW0mywRVyOPHX27u743&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 334x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5239300bfcc5254fd4057ebc56cd6206
d4ad9482f493d11b3965d7b5223cf431c3b20ea9
624e7ebc911657d2e81e113bed3d6e389d9507b758755cd510c9f7a7ea4d545b
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Flyle-scott%2F1300x1700%2Fylelw1309v_cvictoryorangeolive_vw736.jpg&v=3&w=400&s=ME5DFlW0mywRVyOPHX27u743&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30877680
expires: Sun, 17 Mar 2024 08:50:18 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 21662
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsuperdry%2F1300x1700%2Fsdm40006kr_croyalplaid.jpg&v=3&w=400&s=Z2Vd0EXkg-rMLacU1qUV9vjB&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsuperdry%2F1300x1700%2Fsdm40006kr_croyalplaid.jpg&v=3&w=400&s=Z2Vd0EXkg-rMLacU1qUV9vjB&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 312x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e263130ebcc48e84a8a8715cc46bfb06
806f95d357f7b37229c14fc8c6fa9d854fb90709
8b71a61e3446aaa975f746b916639010930b4b21c5bde6557e225ca79267ece7
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsuperdry%2F1300x1700%2Fsdm40006kr_croyalplaid.jpg&v=3&w=400&s=Z2Vd0EXkg-rMLacU1qUV9vjB&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30445499
expires: Tue, 12 Mar 2024 08:47:17 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11394
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Flollys-laundry%2F1300x1700%2Flol221552056_c40green.jpg&v=3&w=400&s=tE1tAHA1N4UHSFHeiP4ZBgMF&b=400
200 OK 16 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Flollys-laundry%2F1300x1700%2Flol221552056_c40green.jpg&v=3&w=400&s=tE1tAHA1N4UHSFHeiP4ZBgMF&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9db6a864279430b8ecee3555e4f1258d
d86df277f768bf6996a1d3dc39683eac52cd4776
cbfc5e98003f8f6cea854ab0704d730d52675d50d5a807450549c695b0df2bd3
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Flollys-laundry%2F1300x1700%2Flol221552056_c40green.jpg&v=3&w=400&s=tE1tAHA1N4UHSFHeiP4ZBgMF&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30445976
expires: Tue, 12 Mar 2024 08:55:14 GMT
date: Sat, 25 Mar 2023 23:42:16 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 15686
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fdecadent%2F1300x1700%2Fde280b_csuedenavy.jpg&v=3&w=400&s=QwujCUCeFAHZj8AoWPPTReXl&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fdecadent%2F1300x1700%2Fde280b_csuedenavy.jpg&v=3&w=400&s=QwujCUCeFAHZj8AoWPPTReXl&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x396, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5551e2e0489a532ef7c6119763090f28
bce4cb27411b3881f8f099e8832306ea55bfbeee
3696d9be8380e02629abb2a86d7439c9682402f5ab241a4dc843598075cd713a
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fdecadent%2F1300x1700%2Fde280b_csuedenavy.jpg&v=3&w=400&s=QwujCUCeFAHZj8AoWPPTReXl&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30592992
expires: Thu, 14 Mar 2024 01:45:30 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11042
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ad.vidverto.io/vidverto/player/ui/css/video_playlist.css?v=1653047028
200 OK 15 kB URL HTTP/2 ad.vidverto.io/vidverto/player/ui/css/video_playlist.css?v=1653047028
IP
ASN #49981 WorldStream B.V.
Hash b19d0fa4faf1f9265ceaede7b6bceb25
ef83271a39676e2314c5669cacc6688df9542f16
5cafdedbda1688e6e68ebfdceded08e7a97fe61023347bd80a232100427904cd
GET /vidverto/player/ui/css/video_playlist.css?v=1653047028 HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134; _mwayss_zone_imp[9105][count]=0; _mwayss_zone_imp[9105][frequencyPeriodEnd]=1679874135
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:16 GMT
content-type: text/css
last-modified: Sun, 28 Feb 2021 22:32:40 GMT
vary: Accept-Encoding
etag: W/"603c1a08-f52f"
content-encoding: gzip
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Freima%2F1300x1700%2Frei569514_croseblush_v1120.jpg&v=3&w=400&s=57OH9SNoLNTWFQloNf2-bpMn&b=400
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Freima%2F1300x1700%2Frei569514_croseblush_v1120.jpg&v=3&w=400&s=57OH9SNoLNTWFQloNf2-bpMn&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d52d6b23b49dd350bf47633bc4e6a3a0
e5a371b819de5def33aa0a1f6eb09f4961db6ff2
bd2e59643c42e111c46e80b12bd324b6efa41c4804e0d2f125972184f70f91d1
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Freima%2F1300x1700%2Frei569514_croseblush_v1120.jpg&v=3&w=400&s=57OH9SNoLNTWFQloNf2-bpMn&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30577581
expires: Wed, 13 Mar 2024 21:28:39 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 13706
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fby-ti-mo%2F1300x1700%2Fbtm2310505_cbluegarden.jpg&v=3&w=400&s=ddoPaUtBWedMOozdlRnfnH6H&b=400
200 OK 28 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fby-ti-mo%2F1300x1700%2Fbtm2310505_cbluegarden.jpg&v=3&w=400&s=ddoPaUtBWedMOozdlRnfnH6H&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 257x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 43e620f7496ecc52c409ae821389ab23
842fc3d16b93ad47d2cabd761659f03bc6dff21c
e86b33cbcf0be737b562330a203970d087d70fa8bed1fa6f5036b038daa11134
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fby-ti-mo%2F1300x1700%2Fbtm2310505_cbluegarden.jpg&v=3&w=400&s=ddoPaUtBWedMOozdlRnfnH6H&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30442399
expires: Tue, 12 Mar 2024 07:55:37 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 27628
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fin-wear%2F1300x1700%2Fiw30105352_cmarineblue_v300005.jpg&v=3&w=400&s=227INtNjTwg8Bpl7d4uHqs3k&b=400
200 OK 5.1 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fin-wear%2F1300x1700%2Fiw30105352_cmarineblue_v300005.jpg&v=3&w=400&s=227INtNjTwg8Bpl7d4uHqs3k&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 303x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3a0098c6f27731751dda67814bd0d413
ea1f94ef4cab9c264806eb651e10ec93eb1025e3
c45c203e9720293dd43451d661201707bc062a48a5ce21dd30c4a0a08ccf10aa
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fin-wear%2F1300x1700%2Fiw30105352_cmarineblue_v300005.jpg&v=3&w=400&s=227INtNjTwg8Bpl7d4uHqs3k&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31129811
expires: Wed, 20 Mar 2024 06:52:29 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 5148
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fwonders%2F1300x1700%2Fwonh5203_cblack.jpg&v=3&w=400&s=1X0DwcRuA3NwYb59P7Arlc13&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fwonders%2F1300x1700%2Fwonh5203_cblack.jpg&v=3&w=400&s=1X0DwcRuA3NwYb59P7Arlc13&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 337x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76635f6a9316126713e76e26e93a6417
443895f70fba9a7eb739e8df8ece7a0daeda19f5
26f824bfa047ddd743693f34ac6264419eb784f4c30f8ecef96baff9012bbb07
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fwonders%2F1300x1700%2Fwonh5203_cblack.jpg&v=3&w=400&s=1X0DwcRuA3NwYb59P7Arlc13&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30630884
expires: Thu, 14 Mar 2024 12:17:02 GMT
date: Sat, 25 Mar 2023 23:42:16 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10166
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant-clothing%2F1300x1700%2Fgcl2004028_cplumpedred_v604.jpg&v=3&w=400&s=YiOeI3ItWCE0DpKsBVRct50W&b=400
200 OK 7.0 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant-clothing%2F1300x1700%2Fgcl2004028_cplumpedred_v604.jpg&v=3&w=400&s=YiOeI3ItWCE0DpKsBVRct50W&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 316x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f312e49e1be001c3902e4dc3b432ac8d
71cb03cde65f53e2858f72dd5ba12621addff139
f6f6dd5f15073056ed8b533b71da0ec2c7547eb2be47fa2eb6863c2a9d755a94
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant-clothing%2F1300x1700%2Fgcl2004028_cplumpedred_v604.jpg&v=3&w=400&s=YiOeI3ItWCE0DpKsBVRct50W&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30787523
expires: Sat, 16 Mar 2024 07:47:41 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 7010
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fivy-oak%2F1300x1700%2Fio1122f3088_ccobaltblue.jpg&v=3&w=400&s=9Svgs2gteZKsjHWBdlwqhJWN&b=400
200 OK 3.7 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fivy-oak%2F1300x1700%2Fio1122f3088_ccobaltblue.jpg&v=3&w=400&s=9Svgs2gteZKsjHWBdlwqhJWN&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 183x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f89c747fbff91aa6af6b71bc4abf5fed
e4714bf97171525b77b245c0a83aad0cff67b57a
dd93d1bc3dd4ddbe0cd933b4cec5bb16180f9910b434dc188465d4bbfa89e2fb
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fivy-oak%2F1300x1700%2Fio1122f3088_ccobaltblue.jpg&v=3&w=400&s=9Svgs2gteZKsjHWBdlwqhJWN&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30533197
expires: Wed, 13 Mar 2024 09:08:55 GMT
date: Sat, 25 Mar 2023 23:42:16 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 3714
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ffarah%2F1300x1700%2Fahf4ksb056_csummergreen.jpg&v=3&w=400&s=Nk6P88EFmFQR3iGOtc44DY_T&b=400
200 OK 3.4 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ffarah%2F1300x1700%2Fahf4ksb056_csummergreen.jpg&v=3&w=400&s=Nk6P88EFmFQR3iGOtc44DY_T&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 354x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 03038efdcb3bd1416e263d011bddfe48
ba7ef913df1189330470fa4ca2d70130f78bf6b7
3a263df3bd396f31b0dd5e3dc98f3d5bf694ed7e0f79d461061db5052b9435e3
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Ffarah%2F1300x1700%2Fahf4ksb056_csummergreen.jpg&v=3&w=400&s=Nk6P88EFmFQR3iGOtc44DY_T&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30904987
expires: Sun, 17 Mar 2024 16:25:25 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 3418
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fmarimekko%2F1300x1700%2Fmam090794_clightgreendarkgrey.jpg&v=3&w=400&s=NnMmJux6bCvkDPhfVrZsfwZA&b=400
200 OK 8.9 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fmarimekko%2F1300x1700%2Fmam090794_clightgreendarkgrey.jpg&v=3&w=400&s=NnMmJux6bCvkDPhfVrZsfwZA&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 314x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4746c6ae214ea57a25261ce221f06d7d
a93d5cc5bc5864ff89217102d5c3e5e7ff7e6d46
dc9663d13aa2c2419301c61d631a25845fbe3d2a99a1f407a597d9a8a664c201
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fmarimekko%2F1300x1700%2Fmam090794_clightgreendarkgrey.jpg&v=3&w=400&s=NnMmJux6bCvkDPhfVrZsfwZA&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30548914
expires: Wed, 13 Mar 2024 13:30:52 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8850
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Farmor-lux%2F1300x1700%2Frmo79149_cmilk.jpg&v=3&w=400&s=-P-nvoxg45P_5GhPFvDrLbA6&b=400
200 OK 3.1 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Farmor-lux%2F1300x1700%2Frmo79149_cmilk.jpg&v=3&w=400&s=-P-nvoxg45P_5GhPFvDrLbA6&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 332x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9a17bc418a33ac945147ce0496852599
cd97f5b51f0dfe862dd778153507d20581dd879b
3d11bf9fe24e5ea91c8647695b3f6d2a3fb06ea6cabeee42628c8ea4478dd70f
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Farmor-lux%2F1300x1700%2Frmo79149_cmilk.jpg&v=3&w=400&s=-P-nvoxg45P_5GhPFvDrLbA6&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30829782
expires: Sat, 16 Mar 2024 19:32:00 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 3148
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsofie-schnoor%2F1300x1700%2Fssrs214330_coffwhite_v0109.jpg&v=3&w=400&s=ccyoBDq2E2ZNTdW7fpwxxGc9&b=400
200 OK 6.2 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsofie-schnoor%2F1300x1700%2Fssrs214330_coffwhite_v0109.jpg&v=3&w=400&s=ccyoBDq2E2ZNTdW7fpwxxGc9&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 335x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 11a55fcd04e75b9e704483186e8cc593
251954df8e2c0ff2c37946dae0a1fd9407d4f907
dcd166da264f566e644ff8305f16a5017e6bd0e5f7d0ad03036f5450235c37cb
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsofie-schnoor%2F1300x1700%2Fssrs214330_coffwhite_v0109.jpg&v=3&w=400&s=ccyoBDq2E2ZNTdW7fpwxxGc9&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30901909
expires: Sun, 17 Mar 2024 15:34:07 GMT
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6220
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=ZB-G2AAEI9MKsufYAAoUFhIiQEk1f3o_m14D0Q&u=%7C0vE7L4wZg0DCh%2Fb2J4Rw%2BttqvzFe7pEeuaJyAoDvF2U%3D%7C&c1=0n2XosTo5ckbeNFvq0zVIcsyhyT3WKD0PIixkNz--ZUETQtbu7-RuG02-JTbIw6iQcfCEIzTmgN28ygJ6EDhxetKXJaJDowpTkNSrevsW3_0ktq5ViVezEF8l7r1wovzmR2kAjkn_NOrNMYg5M0UVcdmmkRl5Gl4yABIr2syYd_NKga0tLkQvMYXOouXOf4_swPouXOJi_5inSbdfmwwBNpsW5zUA4Q-wKsS7KZPfQJvVJoBVVM2LuQbsZ4fY4KJ8rWWNBij-VMduoY4td7at-0sjt6h_smbZKk4CdquL_kUBRWASErlMp9yow_JY36vbs-Dh5evbEaVE7hrgnOZJ9zVaFR7T6iqvWPlk6NoeGLjk4m0De3ivP26LrCaoSramK3gSV9zBtsY5uXsEUJSbzgEhK5tUO_pFAs0LG2mh9CK9paH1xdkgFNZw2tJ61SFT1QBCjhaybZs5M6EW66nM1Neh9kHe0zbMuu7rzuGzgT7K6KFtT_RqiVczocgyW8_BMDkfugYSk-arNM4tp5gqR7v6f9i_KoD-i4MOEeTkmtgBjqkg8DOD5R1ok3c9Gla-MTrF0Bl6d86puDh0WcsNrac0QlQmI7K&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DC2AoO2IYfZNPHENjPywWWqKi4CMme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItMzY5MDUzNDQ4NTE2NDYzNMgBCakCV-6r0DkNsj6oAwGqBLgDT9D0yaMzLme0cdqruqcL4wk8oz81qBeWJjD636WQEfmU7RKcHd0p5LeCACZEuQCp2lXaoZcHBgNwJo6zNANbAUEt4JXz6PBjXsJbCLdyMWZc7iuBV3-yJjN2rqXv40lkJLo6yIUkPe78fwSHuFmjiR5SU1fCz2OKDw7ZKDSJ_THGamDecDgUoh0bXjfbghJ60H3dJCOejnP_KsAg7bTc0RyXqOuiNS0th1u31Q3-UpcCMnCLwuA8ca_3i1sNaB5mQOe7XujQgPze4MwmNWbzqhEkOyC1C8OEponD29So-LndX8Rk5z3pKyXL6sDux5ok0ax4osh6Rvvm8N1usjrzDTMHYTflWKB4cnrYVrU0-Ta7NYWKQ7MJtKHpwvs6cZVNO1souCx8Xq9WucNB9UGpb7bXZ04Vgr1_S4yLVjosQ--WyqO67WoRXJ7eXUq25WrgbDmsHWYgIKAmNmPKZNcakxEOXV2WwosL_IC6iKFOnQO1qb8V6hxaVba2m3DWWkXlw3G4D7xWYBB7MhSaYFpzEkhXQsZccVMZo_DklFmRsyJULegT-lNeVb2qZ5I3TbUkWips25FgjwKABrLG24WHmazcZaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAEBABMgKqAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1yVxMUXpzYjUIrUTNcL-MR9Qbakg%26client%3Dca-pub-3690534485164634%26adurl%3D
200 OK 63 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZB-G2AAEI9MKsufYAAoUFhIiQEk1f3o_m14D0Q&u=%7C0vE7L4wZg0DCh%2Fb2J4Rw%2BttqvzFe7pEeuaJyAoDvF2U%3D%7C&c1=0n2XosTo5ckbeNFvq0zVIcsyhyT3WKD0PIixkNz--ZUETQtbu7-RuG02-JTbIw6iQcfCEIzTmgN28ygJ6EDhxetKXJaJDowpTkNSrevsW3_0ktq5ViVezEF8l7r1wovzmR2kAjkn_NOrNMYg5M0UVcdmmkRl5Gl4yABIr2syYd_NKga0tLkQvMYXOouXOf4_swPouXOJi_5inSbdfmwwBNpsW5zUA4Q-wKsS7KZPfQJvVJoBVVM2LuQbsZ4fY4KJ8rWWNBij-VMduoY4td7at-0sjt6h_smbZKk4CdquL_kUBRWASErlMp9yow_JY36vbs-Dh5evbEaVE7hrgnOZJ9zVaFR7T6iqvWPlk6NoeGLjk4m0De3ivP26LrCaoSramK3gSV9zBtsY5uXsEUJSbzgEhK5tUO_pFAs0LG2mh9CK9paH1xdkgFNZw2tJ61SFT1QBCjhaybZs5M6EW66nM1Neh9kHe0zbMuu7rzuGzgT7K6KFtT_RqiVczocgyW8_BMDkfugYSk-arNM4tp5gqR7v6f9i_KoD-i4MOEeTkmtgBjqkg8DOD5R1ok3c9Gla-MTrF0Bl6d86puDh0WcsNrac0QlQmI7K&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DC2AoO2IYfZNPHENjPywWWqKi4CMme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItMzY5MDUzNDQ4NTE2NDYzNMgBCakCV-6r0DkNsj6oAwGqBLgDT9D0yaMzLme0cdqruqcL4wk8oz81qBeWJjD636WQEfmU7RKcHd0p5LeCACZEuQCp2lXaoZcHBgNwJo6zNANbAUEt4JXz6PBjXsJbCLdyMWZc7iuBV3-yJjN2rqXv40lkJLo6yIUkPe78fwSHuFmjiR5SU1fCz2OKDw7ZKDSJ_THGamDecDgUoh0bXjfbghJ60H3dJCOejnP_KsAg7bTc0RyXqOuiNS0th1u31Q3-UpcCMnCLwuA8ca_3i1sNaB5mQOe7XujQgPze4MwmNWbzqhEkOyC1C8OEponD29So-LndX8Rk5z3pKyXL6sDux5ok0ax4osh6Rvvm8N1usjrzDTMHYTflWKB4cnrYVrU0-Ta7NYWKQ7MJtKHpwvs6cZVNO1souCx8Xq9WucNB9UGpb7bXZ04Vgr1_S4yLVjosQ--WyqO67WoRXJ7eXUq25WrgbDmsHWYgIKAmNmPKZNcakxEOXV2WwosL_IC6iKFOnQO1qb8V6hxaVba2m3DWWkXlw3G4D7xWYBB7MhSaYFpzEkhXQsZccVMZo_DklFmRsyJULegT-lNeVb2qZ5I3TbUkWips25FgjwKABrLG24WHmazcZaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAEBABMgKqAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1yVxMUXpzYjUIrUTNcL-MR9Qbakg%26client%3Dca-pub-3690534485164634%26adurl%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (40556)
Hash 2cf1d68a9f1548de505985db6221b77b
b0500b48faf05e4f64e063bcbb1a261da7959789
cad7ef5ddd9b51ef7d588d4b5ca9f4214bf882ffa1ab6fe689447c94b96cd145
GET /delivery/r/afr.php?z=ZB-G2AAEI9MKsufYAAoUFhIiQEk1f3o_m14D0Q&u=%7C0vE7L4wZg0DCh%2Fb2J4Rw%2BttqvzFe7pEeuaJyAoDvF2U%3D%7C&c1=0n2XosTo5ckbeNFvq0zVIcsyhyT3WKD0PIixkNz--ZUETQtbu7-RuG02-JTbIw6iQcfCEIzTmgN28ygJ6EDhxetKXJaJDowpTkNSrevsW3_0ktq5ViVezEF8l7r1wovzmR2kAjkn_NOrNMYg5M0UVcdmmkRl5Gl4yABIr2syYd_NKga0tLkQvMYXOouXOf4_swPouXOJi_5inSbdfmwwBNpsW5zUA4Q-wKsS7KZPfQJvVJoBVVM2LuQbsZ4fY4KJ8rWWNBij-VMduoY4td7at-0sjt6h_smbZKk4CdquL_kUBRWASErlMp9yow_JY36vbs-Dh5evbEaVE7hrgnOZJ9zVaFR7T6iqvWPlk6NoeGLjk4m0De3ivP26LrCaoSramK3gSV9zBtsY5uXsEUJSbzgEhK5tUO_pFAs0LG2mh9CK9paH1xdkgFNZw2tJ61SFT1QBCjhaybZs5M6EW66nM1Neh9kHe0zbMuu7rzuGzgT7K6KFtT_RqiVczocgyW8_BMDkfugYSk-arNM4tp5gqR7v6f9i_KoD-i4MOEeTkmtgBjqkg8DOD5R1ok3c9Gla-MTrF0Bl6d86puDh0WcsNrac0QlQmI7K&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DC2AoO2IYfZNPHENjPywWWqKi4CMme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItMzY5MDUzNDQ4NTE2NDYzNMgBCakCV-6r0DkNsj6oAwGqBLgDT9D0yaMzLme0cdqruqcL4wk8oz81qBeWJjD636WQEfmU7RKcHd0p5LeCACZEuQCp2lXaoZcHBgNwJo6zNANbAUEt4JXz6PBjXsJbCLdyMWZc7iuBV3-yJjN2rqXv40lkJLo6yIUkPe78fwSHuFmjiR5SU1fCz2OKDw7ZKDSJ_THGamDecDgUoh0bXjfbghJ60H3dJCOejnP_KsAg7bTc0RyXqOuiNS0th1u31Q3-UpcCMnCLwuA8ca_3i1sNaB5mQOe7XujQgPze4MwmNWbzqhEkOyC1C8OEponD29So-LndX8Rk5z3pKyXL6sDux5ok0ax4osh6Rvvm8N1usjrzDTMHYTflWKB4cnrYVrU0-Ta7NYWKQ7MJtKHpwvs6cZVNO1souCx8Xq9WucNB9UGpb7bXZ04Vgr1_S4yLVjosQ--WyqO67WoRXJ7eXUq25WrgbDmsHWYgIKAmNmPKZNcakxEOXV2WwosL_IC6iKFOnQO1qb8V6hxaVba2m3DWWkXlw3G4D7xWYBB7MhSaYFpzEkhXQsZccVMZo_DklFmRsyJULegT-lNeVb2qZ5I3TbUkWips25FgjwKABrLG24WHmazcZaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAEBABMgKqAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1yVxMUXpzYjUIrUTNcL-MR9Qbakg%26client%3Dca-pub-3690534485164634%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:16 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=1UknBgxwO2ZetgBXEIs6HPFeGY6AGsUSTwZKT6_gJBokWqsXJBnqynnClD05y49IOhMACg3AG9ekaQVE87giLI1Nf7sdWW9Osf51MiuEWuDiV7-6EH-MXXO8M50E3S2FtcAEGBZuiVvMnwI9dac-zueTD2RIDr1qWiqh1jjgjlwuDDQcnu7OLpnga2BaIUd6W8IFoFPyyPvVauLWBOAmCiw16tLxkI_dyIlR0_42GXEZNUcv_v5hf51HhkatyrJpIJYZyg"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 96677185
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=162534
302 Found 59 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=162534
IP
File type HTML document, ASCII text
Hash 593fa68dea210123f7afa8c4c13ecce3
931d5243be2bf1687f128bb1dbb5d96dbf8a4e1a
42c7d61ec74e608c796efe03227629c660b1ef4ac3b1299e13f5f1c2b5646263
GET /AdServer/ImgSync?p=162534 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=162534&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Sat, 25 Mar 2023 23:42:18 GMT
content-length: 59
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=1UknBgxwO2ZetgBXEIs6HPFeGY6AGsUSTwZKT6_gJBokWqsXJBnqynnClD05y49IOhMACg3AG9ekaQVE87giLI1Nf7sdWW9Osf51MiuEWuDiV7-6EH-MXXO8M50E3S2FtcAEGBZuiVvMnwI9dac-zueTD2RIDr1qWiqh1jjgjlwuDDQcnu7OLpnga2BaIUd6W8IFoFPyyPvVauLWBOAmCiw16tLxkI_dyIlR0_42GXEZNUcv_v5hf51HhkatyrJpIJYZyg&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=1UknBgxwO2ZetgBXEIs6HPFeGY6AGsUSTwZKT6_gJBokWqsXJBnqynnClD05y49IOhMACg3AG9ekaQVE87giLI1Nf7sdWW9Osf51MiuEWuDiV7-6EH-MXXO8M50E3S2FtcAEGBZuiVvMnwI9dac-zueTD2RIDr1qWiqh1jjgjlwuDDQcnu7OLpnga2BaIUd6W8IFoFPyyPvVauLWBOAmCiw16tLxkI_dyIlR0_42GXEZNUcv_v5hf51HhkatyrJpIJYZyg&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=1UknBgxwO2ZetgBXEIs6HPFeGY6AGsUSTwZKT6_gJBokWqsXJBnqynnClD05y49IOhMACg3AG9ekaQVE87giLI1Nf7sdWW9Osf51MiuEWuDiV7-6EH-MXXO8M50E3S2FtcAEGBZuiVvMnwI9dac-zueTD2RIDr1qWiqh1jjgjlwuDDQcnu7OLpnga2BaIUd6W8IFoFPyyPvVauLWBOAmCiw16tLxkI_dyIlR0_42GXEZNUcv_v5hf51HhkatyrJpIJYZyg&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:17 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=162534&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=162534&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=162534&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://korrespondent.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:17 GMT
content-length: 0
X-Firefox-Spdy: h2
korrespondent.net/
302 Found 0 B IP
GET / HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1283487%22%3A%7B%22page%22%3A1%7D%2C%22C360033%22%3A%7B%22page%22%3A1%7D%2C%22C971150%22%3A%7B%22page%22%3A1%7D%7D
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/html; charset=UTF-8
location: https://ua.korrespondent.net
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7adb024b1f4bfab4-OSL
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=ZB-G1AALZLQKwkhNAAtaR9EGzJeA-Mn6qVH11A&u=%7CvLwl%2Fc9MLoTlPSwYLmpRukADphqrfVLfW2J28oqOaUc%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9wezrPaJiQs0IrAT_NMwso9p2iZVEw0bkryumEqlTXm6q4m3Ud3hxFl5fTSD38WIcQHp-pId-HBUcLMxQfdewYxvvd8Hhf4nRzjag0aRH27BzyD1YeDjbqFT48HobMBBvbNL2dBe8B9EAxwP7GnroD5DBb6T_6QsScPwMPABfEBDaQuDOp8VnGjNevCIJj4-aQICvuLctuVK8t12m9ZKhkL-Ab60lOB_YLgAujK0KLN0qQQISh9Mo7OuweXQsVvdXNYF4UpqAV4hxHzu7ureIemCJyAcu9tD9uUeoxcQFjorI6FC0TsXVRonLgPijLWDGm_I1pLcmlBKzAbq8G1Okeced35VBffMg5XXh6qpk9UHPyYP040JxrrSXC0KCHP61wL4h_fDgmNPODHPbpc1rjSUH53Wmb_OvDT54kwGXMI-zcfmzAYqamXtKdqki1pO3zdYF8nH6DGHAtC_qHmNUI607YqLG3aw70ZPivT11ATWKowUUn_26TfbHzz_4IGZUmJofu188ymHlg&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCAp_X1IYfZLTJLc2QiQbHtK14yZ7SsVzVnZH3cMCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi0zNzU1NjYyMTk3Mzg2MjY5yAEJqQJX7qvQOQ2yPqgDAaoEvgNP0ERCy7P_-aNrLXMq5w05sSYpsncK80eZtFtEIFO42p_WutP3oYLbtJGxqOgrEeNYEzQhk81pCmop4X4CFYU2R_HDdBXWRP1_i83XybfF6pIMP9n_OfYwRbDj48ft8NY4cL1zYz-FSawyotMeNs63AWqIHp5gCK9J9C2RifCVN2tCvEQ4CZ3KW12QbjxG_1_4qHSIzzS-slZz9jVoyYWsQylbSqEd7okI-5ppEsv9Rm29wm0vB0tkCH9LMc3xXBWDHN2W0BRhpej4V4ENpSgZwM_EAJ6E4KRqCUju9OnAXmkXA2JP2IMtqGjvqjKKZJzAM7n6NoSdZNH1TVkDlIx2f2LGN41DHPiCNYJw-4htXGvkwQnEWOwp4zv-O1kzMB1n81TI9-NY26TqgMgtvmvtIDysNWkBTcMDuc1hp5p81FKdKcZHn24c98e0UsC8iQsrIdL3bBWExjiWe7qFhBz-8hQMDPwZGkI1LgNrOHfnZdAhQDnmdajFw5__9VHpV_MClROModdvGTRgjE-zs8-DtH8NV4Fh9iQnqaQO3lyqC0B7aI1thTmPfT2DEW-zkfHo_Zuoj9z29cajOPP1l4AG_rvXy52P_7RroAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIDwiA4YBwEAEyAusCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3etPk3-p1OhzoI1d631tIzJ8oLGA%26client%3Dca-pub-3755662197386269%26adurl%3D
200 OK 0 B URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZB-G1AALZLQKwkhNAAtaR9EGzJeA-Mn6qVH11A&u=%7CvLwl%2Fc9MLoTlPSwYLmpRukADphqrfVLfW2J28oqOaUc%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9wezrPaJiQs0IrAT_NMwso9p2iZVEw0bkryumEqlTXm6q4m3Ud3hxFl5fTSD38WIcQHp-pId-HBUcLMxQfdewYxvvd8Hhf4nRzjag0aRH27BzyD1YeDjbqFT48HobMBBvbNL2dBe8B9EAxwP7GnroD5DBb6T_6QsScPwMPABfEBDaQuDOp8VnGjNevCIJj4-aQICvuLctuVK8t12m9ZKhkL-Ab60lOB_YLgAujK0KLN0qQQISh9Mo7OuweXQsVvdXNYF4UpqAV4hxHzu7ureIemCJyAcu9tD9uUeoxcQFjorI6FC0TsXVRonLgPijLWDGm_I1pLcmlBKzAbq8G1Okeced35VBffMg5XXh6qpk9UHPyYP040JxrrSXC0KCHP61wL4h_fDgmNPODHPbpc1rjSUH53Wmb_OvDT54kwGXMI-zcfmzAYqamXtKdqki1pO3zdYF8nH6DGHAtC_qHmNUI607YqLG3aw70ZPivT11ATWKowUUn_26TfbHzz_4IGZUmJofu188ymHlg&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCAp_X1IYfZLTJLc2QiQbHtK14yZ7SsVzVnZH3cMCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi0zNzU1NjYyMTk3Mzg2MjY5yAEJqQJX7qvQOQ2yPqgDAaoEvgNP0ERCy7P_-aNrLXMq5w05sSYpsncK80eZtFtEIFO42p_WutP3oYLbtJGxqOgrEeNYEzQhk81pCmop4X4CFYU2R_HDdBXWRP1_i83XybfF6pIMP9n_OfYwRbDj48ft8NY4cL1zYz-FSawyotMeNs63AWqIHp5gCK9J9C2RifCVN2tCvEQ4CZ3KW12QbjxG_1_4qHSIzzS-slZz9jVoyYWsQylbSqEd7okI-5ppEsv9Rm29wm0vB0tkCH9LMc3xXBWDHN2W0BRhpej4V4ENpSgZwM_EAJ6E4KRqCUju9OnAXmkXA2JP2IMtqGjvqjKKZJzAM7n6NoSdZNH1TVkDlIx2f2LGN41DHPiCNYJw-4htXGvkwQnEWOwp4zv-O1kzMB1n81TI9-NY26TqgMgtvmvtIDysNWkBTcMDuc1hp5p81FKdKcZHn24c98e0UsC8iQsrIdL3bBWExjiWe7qFhBz-8hQMDPwZGkI1LgNrOHfnZdAhQDnmdajFw5__9VHpV_MClROModdvGTRgjE-zs8-DtH8NV4Fh9iQnqaQO3lyqC0B7aI1thTmPfT2DEW-zkfHo_Zuoj9z29cajOPP1l4AG_rvXy52P_7RroAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIDwiA4YBwEAEyAusCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3etPk3-p1OhzoI1d631tIzJ8oLGA%26client%3Dca-pub-3755662197386269%26adurl%3D
IP
GET /delivery/r/afr.php?z=ZB-G1AALZLQKwkhNAAtaR9EGzJeA-Mn6qVH11A&u=%7CvLwl%2Fc9MLoTlPSwYLmpRukADphqrfVLfW2J28oqOaUc%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9wezrPaJiQs0IrAT_NMwso9p2iZVEw0bkryumEqlTXm6q4m3Ud3hxFl5fTSD38WIcQHp-pId-HBUcLMxQfdewYxvvd8Hhf4nRzjag0aRH27BzyD1YeDjbqFT48HobMBBvbNL2dBe8B9EAxwP7GnroD5DBb6T_6QsScPwMPABfEBDaQuDOp8VnGjNevCIJj4-aQICvuLctuVK8t12m9ZKhkL-Ab60lOB_YLgAujK0KLN0qQQISh9Mo7OuweXQsVvdXNYF4UpqAV4hxHzu7ureIemCJyAcu9tD9uUeoxcQFjorI6FC0TsXVRonLgPijLWDGm_I1pLcmlBKzAbq8G1Okeced35VBffMg5XXh6qpk9UHPyYP040JxrrSXC0KCHP61wL4h_fDgmNPODHPbpc1rjSUH53Wmb_OvDT54kwGXMI-zcfmzAYqamXtKdqki1pO3zdYF8nH6DGHAtC_qHmNUI607YqLG3aw70ZPivT11ATWKowUUn_26TfbHzz_4IGZUmJofu188ymHlg&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCAp_X1IYfZLTJLc2QiQbHtK14yZ7SsVzVnZH3cMCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi0zNzU1NjYyMTk3Mzg2MjY5yAEJqQJX7qvQOQ2yPqgDAaoEvgNP0ERCy7P_-aNrLXMq5w05sSYpsncK80eZtFtEIFO42p_WutP3oYLbtJGxqOgrEeNYEzQhk81pCmop4X4CFYU2R_HDdBXWRP1_i83XybfF6pIMP9n_OfYwRbDj48ft8NY4cL1zYz-FSawyotMeNs63AWqIHp5gCK9J9C2RifCVN2tCvEQ4CZ3KW12QbjxG_1_4qHSIzzS-slZz9jVoyYWsQylbSqEd7okI-5ppEsv9Rm29wm0vB0tkCH9LMc3xXBWDHN2W0BRhpej4V4ENpSgZwM_EAJ6E4KRqCUju9OnAXmkXA2JP2IMtqGjvqjKKZJzAM7n6NoSdZNH1TVkDlIx2f2LGN41DHPiCNYJw-4htXGvkwQnEWOwp4zv-O1kzMB1n81TI9-NY26TqgMgtvmvtIDysNWkBTcMDuc1hp5p81FKdKcZHn24c98e0UsC8iQsrIdL3bBWExjiWe7qFhBz-8hQMDPwZGkI1LgNrOHfnZdAhQDnmdajFw5__9VHpV_MClROModdvGTRgjE-zs8-DtH8NV4Fh9iQnqaQO3lyqC0B7aI1thTmPfT2DEW-zkfHo_Zuoj9z29cajOPP1l4AG_rvXy52P_7RroAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIDwiA4YBwEAEyAusCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3etPk3-p1OhzoI1d631tIzJ8oLGA%26client%3Dca-pub-3755662197386269%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=jy1CRgxwO2ZetgBXHri6QnTBD5u_x3CVyywz02QM7xZmsMEfGGPDLT-C5ccJYONUsjepQyOuMNGZIxfPL43gZb7XM8RSnhH9JsSipY6E99Oef53WngEoEQ-2Krudsshq95Wno-CbjE_q7fZt-ccluMelyUrAClbve6N4JQYtOQ_SKxQV8-kDLVSD5rzRIAuBNI-m6sUGTuCLqrGHda41jwOEP4VrzdRzAmFXedWscr1bKVfF6SH6eOsjxnM"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 62601472
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.umh.ua/libs/vast/vast-player/vast-player.js
200 OK 0 B URL HTTP/2 cdn.umh.ua/libs/vast/vast-player/vast-player.js
IP
ASN #28753 Leaseweb Deutschland GmbH
GET /libs/vast/vast-player/vast-player.js HTTP/1.1
Host: cdn.umh.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.umh.ua/libs/vast/vast-player/contentroll.html?2&advMediaId=zone_1179888271_wTr5qwx093FO&ADTAG=https://z.cdn.umh.ua/load?o=v&z=1179888271&u=66910b6b6f197a70&sr=1280x1024&cw=1268&ch=939&hc=16&df=64&bh=1&tl=1641&n=455518264&url=korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQ&vc=0&zyx=3435135976
Cookie: AU=66910b6b6f197a70
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 06 Oct 2022 14:41:04 GMT
vary: Accept-Encoding
etag: W/"633ee900-26604"
expires: Sun, 26 Mar 2023 23:42:11 GMT
cache-control: max-age=86400
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: X-PINGOTHER
access-control-max-age: 1728000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-encoding: gzip
X-Firefox-Spdy: h2
korrespondent.net/
302 Found 0 B IP
GET / HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1283487%22%3A%7B%22page%22%3A1%7D%2C%22C360033%22%3A%7B%22page%22%3A1%7D%2C%22C971150%22%3A%7B%22page%22%3A1%7D%7D
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/html; charset=UTF-8
location: https://ua.korrespondent.net
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7adb024b1f49fab4-OSL
X-Firefox-Spdy: h2
cat.nl3.eu.criteo.com/delivery/lg.php?cppv=3&cpp=euO76t93wCs3txwqPiSRw8TATw4s-J-TsGFELzBTPhXRbL5tRc9Mw5hUSPMCkjxVKMC8wEEJLze_ZhxIwdfLjl2MJow8PyqBkuxFXoMPElFyt23K42nNrWRTrqzU1hNGOVJTiKpPlv5hj3iWJrab1IbJViZkfwshnlwwnrCafpcUXwcOHcRcr3xN_mAraugwTSf1ExEoPdmP6WsvkjFWJRvFBDzeE3g7WoMygfAx45trpTn8jWZTJm2-_LJv4oCh9vmg1bvgoKDmWwEnRJpzL3vgcV1Kkq4PKhqNngZqoNiEF17bWLndJRhBvLBvKhYwOv1xCrf00a5jAhhXj-BYfzhU3nG8hp1igpL_0b1A992za4FHbO9SIqo-HixfvLjF0gxaU4bo09M2kJQOIfMctIOctMTDMF7roGYZ76KJTJPaejXD-_z9RX_SgnEpkLqQu_LBHg
200 OK 0 B URL HTTP/2 cat.nl3.eu.criteo.com/delivery/lg.php?cppv=3&cpp=euO76t93wCs3txwqPiSRw8TATw4s-J-TsGFELzBTPhXRbL5tRc9Mw5hUSPMCkjxVKMC8wEEJLze_ZhxIwdfLjl2MJow8PyqBkuxFXoMPElFyt23K42nNrWRTrqzU1hNGOVJTiKpPlv5hj3iWJrab1IbJViZkfwshnlwwnrCafpcUXwcOHcRcr3xN_mAraugwTSf1ExEoPdmP6WsvkjFWJRvFBDzeE3g7WoMygfAx45trpTn8jWZTJm2-_LJv4oCh9vmg1bvgoKDmWwEnRJpzL3vgcV1Kkq4PKhqNngZqoNiEF17bWLndJRhBvLBvKhYwOv1xCrf00a5jAhhXj-BYfzhU3nG8hp1igpL_0b1A992za4FHbO9SIqo-HixfvLjF0gxaU4bo09M2kJQOIfMctIOctMTDMF7roGYZ76KJTJPaejXD-_z9RX_SgnEpkLqQu_LBHg
IP
GET /delivery/lg.php?cppv=3&cpp=euO76t93wCs3txwqPiSRw8TATw4s-J-TsGFELzBTPhXRbL5tRc9Mw5hUSPMCkjxVKMC8wEEJLze_ZhxIwdfLjl2MJow8PyqBkuxFXoMPElFyt23K42nNrWRTrqzU1hNGOVJTiKpPlv5hj3iWJrab1IbJViZkfwshnlwwnrCafpcUXwcOHcRcr3xN_mAraugwTSf1ExEoPdmP6WsvkjFWJRvFBDzeE3g7WoMygfAx45trpTn8jWZTJm2-_LJv4oCh9vmg1bvgoKDmWwEnRJpzL3vgcV1Kkq4PKhqNngZqoNiEF17bWLndJRhBvLBvKhYwOv1xCrf00a5jAhhXj-BYfzhU3nG8hp1igpL_0b1A992za4FHbO9SIqo-HixfvLjF0gxaU4bo09M2kJQOIfMctIOctMTDMF7roGYZ76KJTJPaejXD-_z9RX_SgnEpkLqQu_LBHg HTTP/1.1
Host: cat.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:16 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 1595461
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
player.adtcdn.com/prebidlink/466607/wrapper_hb_738585_17161.js
200 OK 0 B URL HTTP/2 player.adtcdn.com/prebidlink/466607/wrapper_hb_738585_17161.js
IP
GET /prebidlink/466607/wrapper_hb_738585_17161.js HTTP/1.1
Host: player.adtcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 22:26:36 GMT
etag: W/"641cd21c-6ec"
expires: Sat, 25 Mar 2023 23:46:50 GMT
cache-control: max-age=345600
cf-cache-status: HIT
age: 620
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c5rjw%2FdvnnJFMlYpITAdpGtygb3Kp7LWfv%2B5rZRZZbZNTacweR1sMTLtWYcpMGIgzqJRdk%2FV0chYj%2B1%2B54DuwPc3E7x3ckGTeVXJu0P5VA%2BHV311nao6KTM%2FV1rQ6gtyP35ipA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb02455fa0b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ad.mox.tv/mox/mwayss_invocation.min.js?pzoneid=1554&height=288&width=400&tld=korrespondent.net&ctype=div
200 OK 0 B URL HTTP/2 ad.mox.tv/mox/mwayss_invocation.min.js?pzoneid=1554&height=288&width=400&tld=korrespondent.net&ctype=div
IP
ASN #49981 WorldStream B.V.
GET /mox/mwayss_invocation.min.js?pzoneid=1554&height=288&width=400&tld=korrespondent.net&ctype=div HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 11:58:06 GMT
vary: Accept-Encoding
etag: W/"638896ce-7204"
expires: Sun, 26 Mar 2023 00:42:11 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
player.adtelligent.com/exchange_rates/738581/config.json?cb=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
200 OK 0 B URL HTTP/2 player.adtelligent.com/exchange_rates/738581/config.json?cb=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #39572 DataWeb Global Group B.V.
GET /exchange_rates/738581/config.json?cb=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: player.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://korrespondent.net
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: application/json
server: nginx
last-modified: Fri, 24 Mar 2023 00:04:26 GMT
etag: W/"641ce90a-8f0"
cache-control: max-age=172800
content-encoding: gzip
expires: Mon, 27 Mar 2023 23:42:12 GMT
access-control-allow-origin: https://korrespondent.net
x-proxy-cache: HIT
X-Firefox-Spdy: h2
korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
200 OK 0 B URL HTTP/2 korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
GET /showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:09 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
pragma: no-cache
expires: -1
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
set-cookie: dcw=44; domain=.korrespondent.net; expires=Mon, 25-Mar-2024 23:42:09 GMT; path=/
__cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=; path=/; expires=Sun, 26-Mar-23 00:12:09 GMT; domain=.korrespondent.net; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7adb023f49c5fab4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/swiper@7.3.0/swiper-bundle.min.js
200 OK 0 B URL HTTP/2 unpkg.com/swiper@7.3.0/swiper-bundle.min.js
IP
GET /swiper@7.3.0/swiper-bundle.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"211c1-rxAEOIj0DtL1iihSDpsruCFXSHs"
via: 1.1 fly.io
fly-request-id: 01GQ45HS9W59QETH0TPNMK4J64-fra
cf-cache-status: HIT
age: 5684187
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7adb025bdc140b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
go.rcvlink.com/cs/1/1
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
GET /cs/1/1 HTTP/1.1
Host: go.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: text/javascript;charset=utf-8
hn: b29
access-control-allow-origin: *
cache-control: private, max-age=315360000
expires: Wed, 23 Mar 2033 01:42:11 +0200
content-encoding: gzip
X-Firefox-Spdy: h2
go.rcvlink.com/bdto/f3wMYMNBP6/?cache=tp_f69bYu2j93Bk&ver=230305-0950&w=300&h=0&vw=1280&ms=2385.1077&me=1&ref=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
200 OK 0 B URL HTTP/2 go.rcvlink.com/bdto/f3wMYMNBP6/?cache=tp_f69bYu2j93Bk&ver=230305-0950&w=300&h=0&vw=1280&ms=2385.1077&me=1&ref=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
ASN #24940 Hetzner Online GmbH
GET /bdto/f3wMYMNBP6/?cache=tp_f69bYu2j93Bk&ver=230305-0950&w=300&h=0&vw=1280&ms=2385.1077&me=1&ref=https%3A%2F%2Fkorrespondent.net%2Fshowbiz%2Fculture%2F4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: go.rcvlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rcvlink.com/static/iframe.htm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: application/json
expires: Sun, 26 Mar 2023 01:42:13 +0200
p3p: CP="CAO DSP COR LAW CURa ADMa DEVa PSAa PSDa OUR DELa BUS IND PHY ONL UNI PUR COM NAV INT STA",policyref="/w3c/p3p.xml"
last-modified: Sat, 25 Mar 2023 23:42:13 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate
pragma: no-cache
hn: b28
set-cookie: cache=tp_f69bYu2j93Bk; expires=Fri, 25-Mar-2033 11:42:13 GMT; Max-Age=315576000; path=/; samesite=None; domain=go.rcvlink.com; secure; HttpOnly
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ad.mox.tv/mox/mwayss_invocation.min.js?act=rollback&banner_id=-666&ch=&token=54e525bdfa9a4095135fbf9019be09e5&uid=3852469553&scen_id=0
200 OK 0 B URL HTTP/2 ad.mox.tv/mox/mwayss_invocation.min.js?act=rollback&banner_id=-666&ch=&token=54e525bdfa9a4095135fbf9019be09e5&uid=3852469553&scen_id=0
IP
ASN #49981 WorldStream B.V.
GET /mox/mwayss_invocation.min.js?act=rollback&banner_id=-666&ch=&token=54e525bdfa9a4095135fbf9019be09e5&uid=3852469553&scen_id=0 HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=782c1d07-2639-491e-8cd2-dd24c7e923af; _mwayss_zone_imp[1554][count]=0; _mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; _mwayss_imp[15493][count]=0; _mwayss_imp[15493][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[4849][count]=0; _mwayss_camp_imp[4849][frequencyPeriodEnd]=1679874131; _mwayss_imp[15495][count]=0; _mwayss_imp[15495][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2822][count]=0; _mwayss_camp_imp[2822][frequencyPeriodEnd]=1679874131; _mwayss_imp[12260][count]=0; _mwayss_imp[12260][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[1946][count]=0; _mwayss_camp_imp[1946][frequencyPeriodEnd]=1679874131; _mwayss_zone_imp[775][count]=0; _mwayss_zone_imp[775][frequencyPeriodEnd]=1679874131; _mwayss_imp[15629][count]=0; _mwayss_imp[15629][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[3084][count]=0; _mwayss_camp_imp[3084][frequencyPeriodEnd]=1679874131; _mwayss_imp[15482][count]=0; _mwayss_imp[15482][frequencyPeriodEnd]=1679874131; _mwayss_imp[15483][count]=0; _mwayss_imp[15483][frequencyPeriodEnd]=1679874131; _mwayss_imp[15648][count]=0; _mwayss_imp[15648][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2821][count]=0; _mwayss_camp_imp[2821][frequencyPeriodEnd]=1679874131
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 11:58:06 GMT
vary: Accept-Encoding
etag: W/"638896ce-7204"
expires: Sun, 26 Mar 2023 00:42:15 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
ad.vidverto.io/js/moxplayer/moxplayer.css
200 OK 0 B URL HTTP/2 ad.vidverto.io/js/moxplayer/moxplayer.css
IP
ASN #49981 WorldStream B.V.
GET /js/moxplayer/moxplayer.css HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: text/css
last-modified: Wed, 10 Jun 2020 14:52:51 GMT
vary: Accept-Encoding
etag: W/"5ee0f3c3-cbf7"
expires: Sun, 26 Mar 2023 00:42:15 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
player.adtelligent.com/prebidlink/19441/hbw_master_738585_17161.js
200 OK 0 B URL HTTP/2 player.adtelligent.com/prebidlink/19441/hbw_master_738585_17161.js
IP
ASN #39572 DataWeb Global Group B.V.
GET /prebidlink/19441/hbw_master_738585_17161.js HTTP/1.1
Host: player.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Thu, 23 Mar 2023 22:26:36 GMT
etag: W/"641cd21c-1a828"
cache-control: max-age=172800
content-encoding: gzip
expires: Mon, 27 Mar 2023 23:42:11 GMT
access-control-allow-origin: *
x-proxy-cache: HIT
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy_small.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy_small.svg
IP
GET /flash/icon/privacy_small.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:30:28 GMT
etag: W/"5e42ba84-6aa"
expires: Tue, 19 Mar 2024 23:42:13 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.nl3.eu.criteo.com/delivery/lg.php?cppv=3&cpp=i1gPP653B9rnuK1wYYK64mDFXJ6OK91par5_MBixrfU7ZUva19vnJn5s8ISIvIzbCatdnXhUe-jDHI1O_C9BzZ4UZUhvA0fDhBocz3r1akijYi1dCZdHpvY02sSzJAVUKP5q6Dz63Hxr2S9zYAeI2_ULMoQuHVqcfbUh2KXiDk6EWUDEl-EcN-XVzu8lQY_U7fOlCOM8yzdgN60sJDDCzaf5TVXUzvM9FRJv3W-vciScEvOY-GiKmlipF9PViLBj69QoQC7ereSdhIN2ZJ5HLGBer6ormtGlqo5HTEQP0prlOviNe6KQi-KiN79jTNU3PG95TDkrlGPnpNUoU2VGQzuxGiydrHADx91Zd-_Jyf5DxbIdX12P95p8O1Ppnrc7jNx49MXrgc5clu9xdWSHpntUCt8ILPniHAN0jSDgB9BWApn4K1K2b_26BPW1imAeAqcemw
200 OK 0 B URL HTTP/2 cat.nl3.eu.criteo.com/delivery/lg.php?cppv=3&cpp=i1gPP653B9rnuK1wYYK64mDFXJ6OK91par5_MBixrfU7ZUva19vnJn5s8ISIvIzbCatdnXhUe-jDHI1O_C9BzZ4UZUhvA0fDhBocz3r1akijYi1dCZdHpvY02sSzJAVUKP5q6Dz63Hxr2S9zYAeI2_ULMoQuHVqcfbUh2KXiDk6EWUDEl-EcN-XVzu8lQY_U7fOlCOM8yzdgN60sJDDCzaf5TVXUzvM9FRJv3W-vciScEvOY-GiKmlipF9PViLBj69QoQC7ereSdhIN2ZJ5HLGBer6ormtGlqo5HTEQP0prlOviNe6KQi-KiN79jTNU3PG95TDkrlGPnpNUoU2VGQzuxGiydrHADx91Zd-_Jyf5DxbIdX12P95p8O1Ppnrc7jNx49MXrgc5clu9xdWSHpntUCt8ILPniHAN0jSDgB9BWApn4K1K2b_26BPW1imAeAqcemw
IP
GET /delivery/lg.php?cppv=3&cpp=i1gPP653B9rnuK1wYYK64mDFXJ6OK91par5_MBixrfU7ZUva19vnJn5s8ISIvIzbCatdnXhUe-jDHI1O_C9BzZ4UZUhvA0fDhBocz3r1akijYi1dCZdHpvY02sSzJAVUKP5q6Dz63Hxr2S9zYAeI2_ULMoQuHVqcfbUh2KXiDk6EWUDEl-EcN-XVzu8lQY_U7fOlCOM8yzdgN60sJDDCzaf5TVXUzvM9FRJv3W-vciScEvOY-GiKmlipF9PViLBj69QoQC7ereSdhIN2ZJ5HLGBer6ormtGlqo5HTEQP0prlOviNe6KQi-KiN79jTNU3PG95TDkrlGPnpNUoU2VGQzuxGiydrHADx91Zd-_Jyf5DxbIdX12P95p8O1Ppnrc7jNx49MXrgc5clu9xdWSHpntUCt8ILPniHAN0jSDgB9BWApn4K1K2b_26BPW1imAeAqcemw HTTP/1.1
Host: cat.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:13 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 2040421
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
unpkg.com/swiper@7.3.0/swiper-bundle.min.css
200 OK 0 B URL HTTP/2 unpkg.com/swiper@7.3.0/swiper-bundle.min.css
IP
GET /swiper@7.3.0/swiper-bundle.min.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"3ccb-bbg35pXUy1EXOpXHxlwOip0M+cE"
via: 1.1 fly.io
fly-request-id: 01G4XKT6AQXECQWDY9C3N8M02K-fra
cf-cache-status: HIT
age: 25231473
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7adb025bec1f0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
player.adtcdn.com/prebidlink/466607/hb_738585_17161.js
200 OK 0 B URL HTTP/2 player.adtcdn.com/prebidlink/466607/hb_738585_17161.js
IP
GET /prebidlink/466607/hb_738585_17161.js HTTP/1.1
Host: player.adtcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 22:26:36 GMT
etag: W/"641cd21c-3a9"
expires: Sat, 25 Mar 2023 23:46:50 GMT
cache-control: max-age=345600
cf-cache-status: HIT
age: 620
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YQeA3LN1dDrveg0DWxXgJ8ldhaneINtcSRWGftDSBXqf9nVtxn9EancpWlyRl%2BAm%2FwpfGhHl%2FqaiaZeU74NUIDqf8P%2Bx3rBWOz68bdmsQOLdfd8dPJyj512iDV3rXm7namX4WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb02454f9eb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ad.mox.tv/mox/mwayss_invocation.min.css
200 OK 0 B URL HTTP/2 ad.mox.tv/mox/mwayss_invocation.min.css
IP
ASN #49981 WorldStream B.V.
GET /mox/mwayss_invocation.min.css HTTP/1.1
Host: ad.mox.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=782c1d07-2639-491e-8cd2-dd24c7e923af; _mwayss_zone_imp[1554][count]=0; _mwayss_zone_imp[1554][frequencyPeriodEnd]=1679874131; _mwayss_imp[15493][count]=0; _mwayss_imp[15493][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[4849][count]=0; _mwayss_camp_imp[4849][frequencyPeriodEnd]=1679874131; _mwayss_imp[15495][count]=0; _mwayss_imp[15495][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2822][count]=0; _mwayss_camp_imp[2822][frequencyPeriodEnd]=1679874131; _mwayss_imp[12260][count]=0; _mwayss_imp[12260][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[1946][count]=0; _mwayss_camp_imp[1946][frequencyPeriodEnd]=1679874131; _mwayss_zone_imp[775][count]=0; _mwayss_zone_imp[775][frequencyPeriodEnd]=1679874131; _mwayss_imp[15629][count]=0; _mwayss_imp[15629][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[3084][count]=0; _mwayss_camp_imp[3084][frequencyPeriodEnd]=1679874131; _mwayss_imp[15482][count]=0; _mwayss_imp[15482][frequencyPeriodEnd]=1679874131; _mwayss_imp[15483][count]=0; _mwayss_imp[15483][frequencyPeriodEnd]=1679874131; _mwayss_imp[15648][count]=0; _mwayss_imp[15648][frequencyPeriodEnd]=1679874131; _mwayss_camp_imp[2821][count]=0; _mwayss_camp_imp[2821][frequencyPeriodEnd]=1679874131
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: text/css
last-modified: Wed, 10 Jun 2020 14:52:51 GMT
vary: Accept-Encoding
etag: W/"5ee0f3c3-a0a"
content-encoding: gzip
X-Firefox-Spdy: h2
r.i.ua/s?u1647&p4&n0.24137187563607476&c1&d24&w1280&h1024&r/korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
200 OK 0 B URL HTTP/2 r.i.ua/s?u1647&p4&n0.24137187563607476&c1&d24&w1280&h1024&r/korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
IP
GET /s?u1647&p4&n0.24137187563607476&c1&d24&w1280&h1024&r/korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne%26psig%3DAOvVaw2_SSez2L5y40ALElEw1roq%26ust%3D1673833176360000%26source%3Dimages%26cd%3Dvfe%26ved%3D0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE HTTP/1.1
Host: r.i.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:12 GMT
content-type: image/png
cache-control: no-cache, must-revalidate
expires: 0
pragma: no-cache
p3p: policyref="http://i.i.ua/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
cf-cache-status: DYNAMIC
set-cookie: U=22fcebd3641f86d3; SameSite=None; expires=Thu, 23-Mar-2028 23:42:12 GMT; path=/
__cf_bm=eLQKlWqzu7p9gaEyieuI6UgdaMRRAFHkrWa3SKewsXM-1679787732-0-AXWFvy5+Tn9DTn16eKaVpocHxe6Wqm6Gk+uSMj615ITN6lJKRRZdo0OZ7fXXc27zNq04s726HriH7izOsYoHy9Q=; path=/; expires=Sun, 26-Mar-23 00:12:12 GMT; domain=.i.ua; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7adb024d1b2bb515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&bundle=W8y8sl9GbmkwMnRMemhkd3FXbm1IJTJGVU9XYUQlMkY2WEtwMTBFNXBPZTM0dHk0JTJGenlzM3BPdXNiMVNPY0JkN2psSGt6WkNmYVJLeXZvJTJCQndYRXlDUUdTWFFoVm9ZWCUyRmpVUnAlMkJ1RHZLeEFKZUd5enQlMkJJc0l5ZVI0WkFKY1NucU1BS3lUNENt&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&bundle=W8y8sl9GbmkwMnRMemhkd3FXbm1IJTJGVU9XYUQlMkY2WEtwMTBFNXBPZTM0dHk0JTJGenlzM3BPdXNiMVNPY0JkN2psSGt6WkNmYVJLeXZvJTJCQndYRXlDUUdTWFFoVm9ZWCUyRmpVUnAlMkJ1RHZLeEFKZUd5enQlMkJJc0l5ZVI0WkFKY1NucU1BS3lUNENt&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fkorrespondent.net%2F&domain=korrespondent.net&bundle=W8y8sl9GbmkwMnRMemhkd3FXbm1IJTJGVU9XYUQlMkY2WEtwMTBFNXBPZTM0dHk0JTJGenlzM3BPdXNiMVNPY0JkN2psSGt6WkNmYVJLeXZvJTJCQndYRXlDUUdTWFFoVm9ZWCUyRmpVUnAlMkJ1RHZLeEFKZUd5enQlMkJJc0l5ZVI0WkFKY1NucU1BS3lUNENt&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://korrespondent.net/
Origin: https://korrespondent.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:14 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://korrespondent.net
server-processing-duration-in-ticks: 294812
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
jsc.mgid.com/k/o/korrespondent.net.1283487.js
200 OK 0 B URL HTTP/2 jsc.mgid.com/k/o/korrespondent.net.1283487.js
IP
GET /k/o/korrespondent.net.1283487.js HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:10 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=2666
etag: W/"a9c6941aa7a34a0a789a9a6edc77c85e"
last-modified: Wed, 22 Mar 2023 12:12:43 GMT
x-amz-id-2: J143iMHg7WXJVWBB8ScabD4gGCpQtsmXfPvPff3zB+ZRb4jeJ8ccd2hBW1KPJ88UPbZgAr3O8DM=
x-amz-request-id: KNGET30CY8G5P6XZ
x-amz-server-side-encryption: AES256
x-amz-version-id: c.osgNuxKt8Sc6X81XbeXCUHWASTnNCj
cf-cache-status: HIT
age: 6768
expires: Sun, 26 Mar 2023 02:42:10 GMT
cache-control: public, max-age=10800
set-cookie: __cf_bm=VGPtZTlG8y6YVWfJDaFuRUlODmtXX4NKM9_oZQpEKLI-1679787730-0-AfoBLPVFxcNrrA9gcdqd4mXkba/RFAP44iOl7qyMmQifwT2wrUQuJ9rxQIHf5bJ1U8LF46zm53Vn7O7ilV98fk8=; path=/; expires=Sun, 26-Mar-23 00:12:10 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb02419a88b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
korrespondent.net/favicon.ico
200 OK 0 B URL HTTP/2 korrespondent.net/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: korrespondent.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/showbiz/culture/4464585-khudozhnyky-adaptyrovaly-plakaty-vtoroi-myrovoi-k-voine-rossyy-v-ukrayne&psig=AOvVaw2_SSez2L5y40ALElEw1roq&ust=1673833176360000&source=images&cd=vfe&ved=0CAMQjB1qFwoTCLiM3oK5yPwCFQAAAAAdAAAAABAE
Cookie: dcw=44; __cf_bm=6q2KRV4GCkH7sF6qcg9nML0DVr_TcSZGIJzGZn6.6Hc-1679787729-0-AfQlChJjCpKlVIOOdm5kU+xHVezbKdIj8emFXbmNEZhkAZN0PvI8gYq1JnGr2bWMMAXWp/HM0AMkAAo5QyXxFv4=; MgidStorage=%7B%220%22%3A%7B%22svspr%22%3A%22%22%2C%22svsds%22%3A2%7D%2C%22C1283487%22%3A%7B%22page%22%3A1%7D%2C%22C360033%22%3A%7B%22page%22%3A1%2C%22time%22%3A1679787745921%7D%2C%22C971150%22%3A%7B%22page%22%3A1%2C%22time%22%3A1679787745946%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 23:42:11 GMT
content-type: image/x-icon
last-modified: Mon, 11 Jul 2016 11:44:00 GMT
etag: W/"0c0d08369dbd11:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adb024cc804fab4-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ad.vidverto.io/js/achernar/prebid.js
200 OK 0 B URL HTTP/2 ad.vidverto.io/js/achernar/prebid.js
IP
ASN #49981 WorldStream B.V.
GET /js/achernar/prebid.js HTTP/1.1
Host: ad.vidverto.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://korrespondent.net/
Cookie: moxuuid=b35fdd28-ff19-4469-a306-5d51afcaa21c; _mwayss_zone_imp[777][count]=0; _mwayss_zone_imp[777][frequencyPeriodEnd]=1679874134; _mwayss_imp[19099][count]=0; _mwayss_imp[19099][frequencyPeriodEnd]=1679874134; _mwayss_camp_imp[7422][count]=0; _mwayss_camp_imp[7422][frequencyPeriodEnd]=1679874134
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Sat, 25 Mar 2023 23:42:15 GMT
content-type: application/javascript
last-modified: Mon, 28 Nov 2022 15:58:34 GMT
vary: Accept-Encoding
etag: W/"6384daaa-4f0f0"
expires: Sun, 26 Mar 2023 00:42:15 GMT
cache-control: max-age=3600, public, max-age=3600
content-encoding: gzip
X-Firefox-Spdy: h2
104.18.30.182
178.250.1.10
212.8.250.83
142.250.74.65
193.29.200.151
52.51.127.121
188.114.97.1
37.157.6.246
185.64.189.112
23.36.76.226
136.243.84.75