www.pravda.com.ua/eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq]
301 Moved Permanently 162 B URL HTTP/1.1 www.pravda.com.ua/eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq]
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq] HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 29 Nov 2022 03:01:36 GMT
Content-Type: text/html
Content-Length: 162
Location: https://www.pravda.com.ua/eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq]
Via: 1.1 google
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5665
Expires: Tue, 29 Nov 2022 04:36:01 GMT
Date: Tue, 29 Nov 2022 03:01:36 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5854
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:36 GMT
Last-Modified: Tue, 29 Nov 2022 01:24:02 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 02:17:51 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2625
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4326
Expires: Tue, 29 Nov 2022 04:13:42 GMT
Date: Tue, 29 Nov 2022 03:01:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: XQh+YCSXfmDvvDMzvi9vkvT3f9vfABLHc8STUwqATBff8au/iBcwcJA2YzCFFhVSgvp32OaIAc0=
x-amz-request-id: 4WNMWA4M2XQ30EAJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 02:42:20 GMT
age: 1156
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4e46991b32cf097409318aac4bf6078c
15458237a41fbc1b66183f382f82c099116de297
3682d8f39d778aac8a72126ce8b8707af32a64ca033f57a8fd46085e2fff7769
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:36 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 17:04:29 GMT
Expires: Sun, 04 Dec 2022 17:04:28 GMT
Etag: "15458237a41fbc1b66183f382f82c099116de297"
Cache-Control: max-age=481971,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77181988cbcdb517-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 03:01:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4e46991b32cf097409318aac4bf6078c
15458237a41fbc1b66183f382f82c099116de297
3682d8f39d778aac8a72126ce8b8707af32a64ca033f57a8fd46085e2fff7769
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 17:04:29 GMT
Expires: Sun, 04 Dec 2022 17:04:28 GMT
Etag: "15458237a41fbc1b66183f382f82c099116de297"
Cache-Control: max-age=481970,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198a4c85b517-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4ad47f704e316c046fca3e1e8cfa961a
75e175b78a421c7876555679305e5d907ecf36e5
2901c02c02d53a298a3cda61a2fb6d8ae702059a434487dca09cb2c3066e5055
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 23:01:21 GMT
Expires: Sun, 04 Dec 2022 23:01:20 GMT
Etag: "75e175b78a421c7876555679305e5d907ecf36e5"
Cache-Control: max-age=503382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198b9cfbb517-OSL
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4ad47f704e316c046fca3e1e8cfa961a
75e175b78a421c7876555679305e5d907ecf36e5
2901c02c02d53a298a3cda61a2fb6d8ae702059a434487dca09cb2c3066e5055
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 23:01:21 GMT
Expires: Sun, 04 Dec 2022 23:01:20 GMT
Etag: "75e175b78a421c7876555679305e5d907ecf36e5"
Cache-Control: max-age=503382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198bab69b50f-OSL
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/2 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 2df2f01e0c50f93a363cd2121f336b8e
f2c4d94859575123d0b1056f0338982eb094c60f
2cf6d15fc44a8c4387114a5a20174ae75515d43840cde361e64bf1a75e676585
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 19:43:37 GMT
cache-control: public, max-age=1800
content-type: application/javascript; charset=utf-8
etag: "6633f9603c759c40d9b200995454f17c+gzip"
content-encoding: gzip
access-control-allow-methods: GET
access-control-allow-origin: *
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:01:37 GMT
x-served-by: cache-iad-kcgs7200106-IAD, cache-bma1659-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
tw-cdn: FT
content-length: 29221
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-554376-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-554376-1
IP
File type ASCII text, with very long lines (1921)
Hash 4405ecb238c02fa817c98a3aa8adc833
812787e3c592edfb1e0a3a0f690e115847b0e87d
c547ce7dde4542652d279c3eb05af32247c65d49b320a4c661843e44123732b5
GET /gtag/js?id=UA-554376-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 03:01:37 GMT
expires: Tue, 29 Nov 2022 03:01:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43653
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0377e26b5f2fbd3ce629b251ef24e619
c7231f6c070102057d95b07ac5fcb9d4e096bc57
b455391467a08d5bd48c811c31a33595f52d40326370cc7f5ff82e27bdb17dd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img.pravda.com/images/doc/8/b/8b12321-7ebbc68-fedorov690.jpg
200 OK 116 kB URL HTTP/2 img.pravda.com/images/doc/8/b/8b12321-7ebbc68-fedorov690.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 690x387, components 3\012- data
Size 116 kB (115827 bytes)
Hash 5d6329765e659b7426020ae469c284d7
e7c2fc790ebcb4a5cdf7014d45ca8279a6a14796
77fda21e14ca8cee425e8dd64f352ce442a7259c999161aac5b3e0f24310ea08
GET /images/doc/8/b/8b12321-7ebbc68-fedorov690.jpg HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 115827
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Sun, 27 Nov 2022 12:54:53 GMT
last-modified: Sun, 27 Nov 2022 12:48:11 GMT
etag: "63835c8b-1c473"
content-type: image/jpeg
age: 137204
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash cebba074a73ab6b30ed093534d3ba1ae
3b882ebd744e85bc04b0901ab1275340ecc5b9e8
c4ac45a171ef36cf2b4a11afbc27b7253516a09eae4fca811ec491caf9889ff8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 21:57:40 GMT
Expires: Mon, 05 Dec 2022 21:57:39 GMT
Etag: "3b882ebd744e85bc04b0901ab1275340ecc5b9e8"
Cache-Control: max-age=585961,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198bed16b517-OSL
www.googletagmanager.com/gtm.js?id=GTM-WW7B57
200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WW7B57
IP
File type Unicode text, UTF-8 text, with very long lines (47542)
Hash 8e099ae080f0253d66c17e163fc0561d
5de1301e15a032234be96ae0e21c827d9b71ae89
0716c6ffff23d436e3b422dcf200fff0b48f23aa49acfa18861dc8decd6c2061
GET /gtm.js?id=GTM-WW7B57 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 03:01:37 GMT
expires: Tue, 29 Nov 2022 03:01:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59379
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img.pravda.com/images/doc/9/d/9ddb9f7-irf.png
200 OK 9.4 kB URL HTTP/2 img.pravda.com/images/doc/9/d/9ddb9f7-irf.png
IP
File type PNG image data, 260 x 99, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a22546cb96e0436780a08f818691b39
22a2f41ae8b2133758d033a0888e510869d8b34b
5384a066982276b144c2b5c5167c0bd12a4193211016c6a540da791eeeb64bc8
GET /images/doc/9/d/9ddb9f7-irf.png HTTP/1.1
Host: img.pravda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9392
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
via: 1.1 google
date: Thu, 10 Nov 2022 12:15:27 GMT
age: 1608370
last-modified: Mon, 29 Aug 2022 14:13:49 GMT
etag: "630cc99d-24b0"
content-type: image/png
cache-control: max-age=5184000,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (2772)
Hash ac7574cbc5b2e85b7ddfa76b8657e59d
2bbeec5531576d6352b1c2b74e0e05c1ea10251d
bdf1e52afba9d671ea698707f97e8609de6360c502dc7b6eed2f40f979e08387
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 29 Nov 2022 03:01:37 GMT
expires: Tue, 29 Nov 2022 03:01:37 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 16359567893097152046
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16827
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.onthe.io/io.js/7LWgKFUpDNmn
200 OK 17 kB URL HTTP/1.1 cdn.onthe.io/io.js/7LWgKFUpDNmn
IP
ASN #24940 Hetzner Online GmbH
File type C source, ASCII text, with very long lines (53870), with no line terminators
Hash c2d800180258443036afb77b09f291fb
a2b1d608aca3c0ceaedb84361bee2690542656d6
6dc1c59a6ca1b8023956330d0f5a02c14ec3e6713d503d1557d9c8270cf2dd5e
GET /io.js/7LWgKFUpDNmn HTTP/1.1
Host: cdn.onthe.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 24 Aug 2022 13:39:35 GMT
ETag: W/"63062a17-d26e"
Expires: Wed, 30 Nov 2022 03:01:37 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4ad47f704e316c046fca3e1e8cfa961a
75e175b78a421c7876555679305e5d907ecf36e5
2901c02c02d53a298a3cda61a2fb6d8ae702059a434487dca09cb2c3066e5055
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 23:01:21 GMT
Expires: Sun, 04 Dec 2022 23:01:20 GMT
Etag: "75e175b78a421c7876555679305e5d907ecf36e5"
Cache-Control: max-age=503382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198c4d46b517-OSL
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4ad47f704e316c046fca3e1e8cfa961a
75e175b78a421c7876555679305e5d907ecf36e5
2901c02c02d53a298a3cda61a2fb6d8ae702059a434487dca09cb2c3066e5055
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 23:01:21 GMT
Expires: Sun, 04 Dec 2022 23:01:20 GMT
Etag: "75e175b78a421c7876555679305e5d907ecf36e5"
Cache-Control: max-age=503382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198ba8f3b4ff-OSL
ocsp.sectigo.com/
200 OK 281 B IP
Hash 4ad47f704e316c046fca3e1e8cfa961a
75e175b78a421c7876555679305e5d907ecf36e5
2901c02c02d53a298a3cda61a2fb6d8ae702059a434487dca09cb2c3066e5055
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 23:01:21 GMT
Expires: Sun, 04 Dec 2022 23:01:20 GMT
Etag: "75e175b78a421c7876555679305e5d907ecf36e5"
Cache-Control: max-age=503382,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7718198baae60afa-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 02:08:56 GMT
cache-control: public,max-age=3600
age: 3161
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a857eec26a095f97806facc4251f4048
21bcf238687fd5f4fbefaf9704786f7c498f305e
b44b50b7e234fd05080699152a9bc0055a703a93ec2642ecb6b1f717effe7933
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.pravda.com.ua
200 OK 105 kB URL HTTP/2 platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.pravda.com.ua
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 2c908e4df66c813c91eb41dd02376079
29df916bd525b6e273f6a62adb7d6df80789edfb
767b670476dae60cf2ddfda9bf3695fd9be641e1a338564b0d23b80cedaed567
GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fwww.pravda.com.ua HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Nov 2022 19:36:59 GMT
cache-control: public, max-age=315360000
content-type: text/html; charset=utf-8
etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
content-encoding: gzip
access-control-allow-methods: GET
access-control-allow-origin: *
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
accept-ranges: bytes
date: Tue, 29 Nov 2022 03:01:37 GMT
x-served-by: cache-iad-kiad7000167-IAD, cache-bma1659-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
tw-cdn: FT
content-length: 105445
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3991
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Last-Modified: Tue, 29 Nov 2022 01:55:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
tt.onthe.io/?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F,domain:www.pravda.com.ua,page:Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles,page_type:article,author:Roman%20Petrenko,category:No%20Category,language:en,type_article:news,reference_time:47,pub_date:Sun%2C%2027%20Nov%202022%2014%3A47%3A00%20%2B0200,user_agent:Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0,device:desktop,browser_version:Firefox%20105,browser:Firefox,referrer:dlvr.it,first_source:dlvr.it,depth:1,user_type:new,user_id:1b64ea1ae.f9ec2a885_1669690896693,session_id:ee66bdda3.4fa66ce89_1669690896695,cdn_version:0]&s=587ca673994803384542e727e488bf24&1669690896700
200 OK 0 B URL HTTP/1.1 tt.onthe.io/?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F,domain:www.pravda.com.ua,page:Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles,page_type:article,author:Roman%20Petrenko,category:No%20Category,language:en,type_article:news,reference_time:47,pub_date:Sun%2C%2027%20Nov%202022%2014%3A47%3A00%20%2B0200,user_agent:Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0,device:desktop,browser_version:Firefox%20105,browser:Firefox,referrer:dlvr.it,first_source:dlvr.it,depth:1,user_type:new,user_id:1b64ea1ae.f9ec2a885_1669690896693,session_id:ee66bdda3.4fa66ce89_1669690896695,cdn_version:0]&s=587ca673994803384542e727e488bf24&1669690896700
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?k[]=45252:pageviews[url:%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F,domain:www.pravda.com.ua,page:Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles,page_type:article,author:Roman%20Petrenko,category:No%20Category,language:en,type_article:news,reference_time:47,pub_date:Sun%2C%2027%20Nov%202022%2014%3A47%3A00%20%2B0200,user_agent:Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0,device:desktop,browser_version:Firefox%20105,browser:Firefox,referrer:dlvr.it,first_source:dlvr.it,depth:1,user_type:new,user_id:1b64ea1ae.f9ec2a885_1669690896693,session_id:ee66bdda3.4fa66ce89_1669690896695,cdn_version:0]&s=587ca673994803384542e727e488bf24&1669690896700 HTTP/1.1
Host: tt.onthe.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 03:01:37 GMT
Content-Type: text/javascript
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Pragma: no-cache
ocsp.digicert.com/
200 OK 313 B IP
Hash 8560c8978b5df3ffb0c739a02eb02809
1d58e4af1ab7ba382e294ffca6d51990482a6e5c
1da7a37c7026d5bd7be4ca342e9d0376a7abbaf742031962b3b79ebd4c2c3a73
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2364
Cache-Control: max-age=96253
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Etag: "638441d2-139"
Expires: Wed, 30 Nov 2022 05:45:50 GMT
Last-Modified: Mon, 28 Nov 2022 05:06:26 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
syndication.twitter.com/settings?session_id=c15cf0a157b47f42b2d48208e907d451fddc90d9
200 OK 374 B URL HTTP/2 syndication.twitter.com/settings?session_id=c15cf0a157b47f42b2d48208e907d451fddc90d9
IP
File type JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Hash 925c2a7587f39436ea29513221652474
695b7f2f3d99f407bcdfd0b372db0e28193cc60c
62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
GET /settings?session_id=c15cf0a157b47f42b2d48208e907d451fddc90d9 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:37 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Tue, 29 Nov 2022 03:01:37 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: 0f599b0b97ffe365
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 114
x-connection-hash: cf6fcfaba742fa97297398c32257d2db34200ed8085eca234a6cf012e3a7fe84
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5887
Cache-Control: max-age=122137
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 12:57:14 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 02:41:08 GMT
expires: Tue, 29 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 1229
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/gtm/optimize.js?id=OPT-M5KSFRL
200 OK 45 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-M5KSFRL
IP
File type ASCII text, with very long lines (1921)
Hash 24f3a4f674d09592eec5a90ed7a0932a
45a35b81bfdfd6c005e90da2bf64afb4528f2a0f
0dac3a3eb422e3677f6e173504fc4b03ccdec34f4a340d14fcaf5493e08d895c
GET /gtm/optimize.js?id=OPT-M5KSFRL HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 03:01:37 GMT
expires: Tue, 29 Nov 2022 03:01:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45297
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (40310)
Hash 4ebbed2e7687edcd84d258ef7dd1aaf2
f2573046861bca6b89f490f83955c9270177da43
7fb78852e75a85dc60b4d1149666e4daa650740772ee2e3f1c323976f15ba664
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27211
date: Tue, 29 Nov 2022 03:01:37 GMT
expires: Tue, 29 Nov 2022 03:01:37 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1406 / 202 of 1000 / last-modified: 1669676784"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/871974790/?random=1669690896616&cv=9&fst=1669690896616&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/871974790/?random=1669690896616&cv=9&fst=1669690896616&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2551), with no line terminators
Hash 0e5b3edb8bd3db1fc02e0a4913c17854
c1f6ce3095005f54a49fa3b9faf8d1b95f0109a7
22cb8c107fbb5ac8b5639ae4780de98dff1283297d9d02c0f18d6de4f11c0bcf
GET /pagead/viewthroughconversion/871974790/?random=1669690896616&cv=9&fst=1669690896616&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 03:01:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1065
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 29-Nov-2022 03:16:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/eng_UK/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/eng_UK/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 3a2924e69e5cc393a57018e455c52ced
c8f81c7233cc7455e069c396cfd4fd66fe932529
d1e3514d7140b014689d74b40e49d752f0a3dc86cb5715bafb399dcf73159c1d
GET /eng_UK/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: d86057bf9752d111119741f802301457
etag: "7bf79400e01ca07b4fb67e219a349be9"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 29 Nov 2022 03:21:37 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Oikk5p5cw5OlcBjkVcUs7Q==
x-fb-debug: 1RhOLL8m/3Loc0Xm1T7jjRL/VJVH5h7s4Rjq0f/dq8/06S5PKPEZFfshDYxZ30MDUViGLBPLCEZ988Fa88nlAA==
content-length: 1686
priority: u=3,i
x-fb-trip-id: 1904183273
date: Tue, 29 Nov 2022 03:01:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5887
Cache-Control: max-age=122137
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:37 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 12:57:14 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mDaiDrRtwLkZcsx/dJBsxQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BP9PBNA4YkzGM/c+1X9gcuDo77A=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5029e257d3ee67470774d6f71892475c
4f53b303e4162b07b88c3cf83066c732d4e62029
4bf82e5378733ed948c0fa33d2495bba40506dc135fdb5529f4427af5f6a9322
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BF82E5378733ED948C0FA33D2495BBA40506DC135FDB5529F4427AF5F6A9322"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4681
Expires: Tue, 29 Nov 2022 04:19:39 GMT
Date: Tue, 29 Nov 2022 03:01:38 GMT
Connection: keep-alive
connect.facebook.net/en_US/sdk.js?hash=a078dc1c068256a36ae7f450ab407001
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=a078dc1c068256a36ae7f450ab407001
IP
File type ASCII text, with very long lines (18530)
Hash 4b39d74a357e3b32815a177077e2ed06
54b0f254e704f6d6a70c385d476871eef83baf91
7100bec03ae42698c38f319a391906fd15a32d5e60fd58ac0d3fbed143e4da8a
GET /en_US/sdk.js?hash=a078dc1c068256a36ae7f450ab407001 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: a5e64cda21ef4d326b119515345533a8
etag: "4972f03ae56736bbb57c1daed73bd676"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 29 Nov 2023 01:44:38 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: SznXSjV+OzKBWhdwd+LtBg==
x-fb-debug: YzFxg6gxc4GKdToul2mPChknSKPIpIAhge38yxWpb8sbxgVBeZ3KzJ1tqErDElo9t3sfi3Coa2IGtQM3vQvf9w==
content-length: 88358
x-fb-trip-id: 1904183273
date: Tue, 29 Nov 2022 03:01:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03ad9fc0b00b5df3165dc2fb1e3b0a3e
f8243335a8bc24d989bddd346048a055e1d0bdeb
366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 879cba431d8b6f2717a750acd5ca7156
1d4eb23583d48dd6801a104aa20046b34acd0efe
31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-23&cid=522260831.1669690897&jid=351021547&gjid=149325551&_gid=1010970284.1669690897&_u=YADAAUABQAAAACAAI~&z=169535295
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-23&cid=522260831.1669690897&jid=351021547&gjid=149325551&_gid=1010970284.1669690897&_u=YADAAUABQAAAACAAI~&z=169535295
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-23&cid=522260831.1669690897&jid=351021547&gjid=149325551&_gid=1010970284.1669690897&_u=YADAAUABQAAAACAAI~&z=169535295 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.pravda.com.ua
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 29 Nov 2022 03:01:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/gpt/pubads_impl_2022111501.js
200 OK 132 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022111501.js
IP
File type ASCII text, with very long lines (65395)
Size 132 kB (132177 bytes)
Hash 3308ca8addf332f89a8f9ae5fada3b60
69a0af021add1aa44292528532ef632aff2ab1d0
7c1c9e093bf8e56cf2ba9af1d8cfc092f7a98c4b9472abc3257147aa97ec0ee3
GET /gpt/pubads_impl_2022111501.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 132177
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 05:13:59 GMT
expires: Tue, 28 Nov 2023 05:13:59 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 15 Nov 2022 09:35:23 GMT
content-type: text/javascript
age: 78459
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-1&cid=522260831.1669690897&jid=468057895&gjid=1818423694&_gid=1010970284.1669690897&_u=YADAAUAAQAAAACAAI~&z=1128970347
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-1&cid=522260831.1669690897&jid=468057895&gjid=1818423694&_gid=1010970284.1669690897&_u=YADAAUAAQAAAACAAI~&z=1128970347
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-554376-1&cid=522260831.1669690897&jid=468057895&gjid=1818423694&_gid=1010970284.1669690897&_u=YADAAUAAQAAAACAAI~&z=1128970347 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.pravda.com.ua
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 29 Nov 2022 03:01:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=www.pravda.com.ua
200 OK 136 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=www.pravda.com.ua
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f52773746574a2298d0708d8d1ffd07d
4de82609f1c487978e2e3d630e73b317462b7595
5edee8c6a04914b1eeba7804dd057d9195d266892be0b9318b8ff42b242b6962
GET /pagead/ppub_config?ippd=www.pravda.com.ua HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Tue, 29 Nov 2022 03:01:38 GMT
expires: Tue, 29 Nov 2022 03:01:38 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 136
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 29-Nov-2022 03:16:38 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/871974790/?random=1669690896616&cv=9&fst=1669690800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2237273252&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/871974790/?random=1669690896616&cv=9&fst=1669690800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2237273252&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/871974790/?random=1669690896616&cv=9&fst=1669690800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2237273252&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 03:01:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/871974790/?random=1669690896616&cv=9&fst=1669690800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2237273252&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/871974790/?random=1669690896616&cv=9&fst=1669690800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2237273252&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/871974790/?random=1669690896616&cv=9&fst=1669690800000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tiba=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&fmt=3&is_vtc=1&random=2237273252&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 03:01:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.membrana.media/geolocation.json
200 OK 3 B URL HTTP/2 cdn.membrana.media/geolocation.json
IP
ASN #34989 ServeTheWorld AS
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /geolocation.json HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Origin: https://www.pravda.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: text/plain
content-length: 3
server: BunnyCDN-NO1-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: x-ym-country, cdn-requestcountrycode
cache-control: public, max-age=86400
etag: "622b54c3-3"
last-modified: Fri, 11 Mar 2022 13:55:15 GMT
cdn-storageserver: DE-200
cdn-fileserver: 309
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/16/2022 17:55:56
cdn-edgestorageid: 830
x-ym-country: NO
cdn-status: 200
cdn-requestid: 785ddc594b4f33ae14ad3a8a5ad49662
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7a3051a98d79c95ee4ddef5891b01c75
a7dc36d1f59e6ef71d0fdc214aabc470e7fcbcf3
999acaf16e70f61fcf5c62e25a055548921a06a5531f31b7b8aec10dea442768
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2893
Cache-Control: max-age=149705
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "6385108e-1d7"
Expires: Wed, 30 Nov 2022 20:36:43 GMT
Last-Modified: Mon, 28 Nov 2022 19:48:30 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 4f273b4771affbb386baa0f89682e2e3
f1cb414f17c19666970cac278d72ac55088c7939
46040d520feb12b2dee8956ad589082d60120e82b62822eaf90e38366e0e87b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3885
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Last-Modified: Tue, 29 Nov 2022 01:56:53 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 879cba431d8b6f2717a750acd5ca7156
1d4eb23583d48dd6801a104aa20046b34acd0efe
31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 6ceeb0fa8f792106679e242104e3110b
f060d3fe81ce002009a179501531d07c1c7a07da
e39934fce99325a9bab3ca1e4f4de18c24851fa4b6c39235a33ed47d3657c014
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3453
Cache-Control: max-age=96290
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "63843db7-1d7"
Expires: Wed, 30 Nov 2022 05:46:28 GMT
Last-Modified: Mon, 28 Nov 2022 04:48:55 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 314 B IP
Hash e2719662331235eab22354739e4dc7f6
0c551405dde991d90c609eac59209b4456ab63b0
6b99c1c9184d1cf2799a5d02ad358e2050788f0f7365e8e9b22ab80208c40410
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4849
Cache-Control: max-age=120356
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "63849645-13a"
Expires: Wed, 30 Nov 2022 12:27:34 GMT
Last-Modified: Mon, 28 Nov 2022 11:06:45 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 314
ocsp.sectigo.com/
200 OK 472 B IP
Hash e8af240149c1bffcfa3b0ecc0595d420
415c8a792d290854cf08d4ac1b60a6b2bdf9a05d
66c72a69ba9543a6991f9e7c005accc50f7731fb93a3c62bdb2981158b7978fc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 02:30:24 GMT
Expires: Tue, 06 Dec 2022 02:30:23 GMT
Etag: "415c8a792d290854cf08d4ac1b60a6b2bdf9a05d"
Cache-Control: max-age=602324,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771819926f82b517-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 6ceeb0fa8f792106679e242104e3110b
f060d3fe81ce002009a179501531d07c1c7a07da
e39934fce99325a9bab3ca1e4f4de18c24851fa4b6c39235a33ed47d3657c014
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4645
Cache-Control: max-age=97482
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "63843db7-1d7"
Expires: Wed, 30 Nov 2022 06:06:20 GMT
Last-Modified: Mon, 28 Nov 2022 04:48:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 06459ee5466ffeafa0e73620e2fa33c0
61465ba212f4ac21791ab751386c631ff6f4d424
f04fcfc1b196e86978dd08c8d1e00d46b22e0e8b6c5c50b0aa801fbbb898fce5
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a969830018080dbca36dc83309f0009&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9be5b512530985c94942b01c36d95397
dbd8767a356e21d7c6ebfb32fe46a6d7e945d47f
abc1a723d9039dfc20718f4f50b771a28f608848961a7298ec1c0a48b25e64b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3912
Cache-Control: max-age=169830
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "63855b30-1d7"
Expires: Thu, 01 Dec 2022 02:12:08 GMT
Last-Modified: Tue, 29 Nov 2022 01:06:56 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90b31ca4c207f5096d872bcdc614c9c7
61318d9e8a8e7b429c1a64a6176ee4d427764a1b
97c938b6937a8559586353127b597b3eb56343ee29400eb95b918db9c82effd9
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a9695a00180803c601847bf29ec017c&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9be5b512530985c94942b01c36d95397
dbd8767a356e21d7c6ebfb32fe46a6d7e945d47f
abc1a723d9039dfc20718f4f50b771a28f608848961a7298ec1c0a48b25e64b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2646
Cache-Control: max-age=168564
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "63855b30-1d7"
Expires: Thu, 01 Dec 2022 01:51:02 GMT
Last-Modified: Tue, 29 Nov 2022 01:06:56 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 9be5b512530985c94942b01c36d95397
dbd8767a356e21d7c6ebfb32fe46a6d7e945d47f
abc1a723d9039dfc20718f4f50b771a28f608848961a7298ec1c0a48b25e64b9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3912
Cache-Control: max-age=169830
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "63855b30-1d7"
Expires: Thu, 01 Dec 2022 02:12:08 GMT
Last-Modified: Tue, 29 Nov 2022 01:06:56 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=33&wv=4.43.4&cb=17881090469
200 OK 44 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=33&wv=4.43.4&cb=17881090469
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f1dcf53824ce88cdb7941d34db3f19d
4164a13e3f53e1f002606a807d64a92620720fb0
3a803b7520764b5266cfac90aa9f9b2ff931109f489d9a1deb24aa686c239a74
POST /cdb?profileId=207&av=33&wv=4.43.4&cb=17881090469 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 732
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:37 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://www.pravda.com.ua
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 44
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1
200 OK 62 B URL HTTP/2 c2shb.ssp.yahoo.com/bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ca9134a3f067dc2fd6b70b1a0d4ce32c
657cea8b64922820fabf0df189fbde6f9a04eb35
625d10b7b1d46fe30179f7d8102fc4a247530994980ec65c5b837ba1c016a27c
GET /bidRequest?dcn=8a9695a00180803c601847b0d179017a&pos=8a96913f0180803c5bc247c533030183&cmd=bid&secure=1 HTTP/1.1
Host: c2shb.ssp.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: ATS/9.1.10.25
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5be643fa560626bd0d6196749ccd5bc9
49ceffbb45d480eaef7553f31c3b34bfe1cd80f0
b2ed20a5335b13c7982c79ee9b426821df5f72e8df02e2d12698596031c35f00
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 03:01:38 GMT
Last-Modified: Tue, 29 Nov 2022 01:48:40 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jRyEB8o0kOE_JqlYGY-LfwXQ9jCk6owPquc8lxZbddXVXr3OA2h-pg==
Age: 4378
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc9a5b725091f563e61e3be5daa4ed77
0dfc8d85db55f41bbfa46e10ee2625313154be45
8b0ef4d4b76369de8b7b60a71949d01bfcbbfa2fe6221e1a884247d04f6a78f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B0EF4D4B76369DE8B7B60A71949D01BFCBBFA2FE6221E1A884247D04F6A78F9"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2725
Expires: Tue, 29 Nov 2022 03:47:03 GMT
Date: Tue, 29 Nov 2022 03:01:38 GMT
Connection: keep-alive
region1.google-analytics.com/g/collect?v=2&tid=G-MRSXWZPM31>m=2oeb90&_p=738205427&cid=522260831.1669690897&ul=en-us&sr=1280x1024&_s=1&sid=1669690897&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&dt=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-MRSXWZPM31>m=2oeb90&_p=738205427&cid=522260831.1669690897&ul=en-us&sr=1280x1024&_s=1&sid=1669690897&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&dt=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MRSXWZPM31>m=2oeb90&_p=738205427&cid=522260831.1669690897&ul=en-us&sr=1280x1024&_s=1&sid=1669690897&sct=1&seg=0&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&dt=Russians%20hunting%20down%20partisans%20in%20Melitopol%20are%20offering%20half%20a%20million%20roubles%20%7C%20Ukrainska%20Pravda&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.pravda.com.ua
date: Tue, 29 Nov 2022 03:01:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75%22,%22sizes%22:[[300,250]],%22bidId%22:%22306ce082ee0927b%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%220b6965c8-2d88-441d-babb-4bd5aacc7e65%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%2231ee800b6f04442%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2217875d26-1b1b-4bcb-af27-868f17a9989f%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2232fa05d0aa3da268%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22}
200 OK 42 B URL HTTP/1.1 inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75%22,%22sizes%22:[[300,250]],%22bidId%22:%22306ce082ee0927b%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%220b6965c8-2d88-441d-babb-4bd5aacc7e65%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%2231ee800b6f04442%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2217875d26-1b1b-4bcb-af27-868f17a9989f%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2232fa05d0aa3da268%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22}
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
GET /prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75%22,%22sizes%22:[[300,250]],%22bidId%22:%22306ce082ee0927b%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%22168345ce-a342-4b76-b9b3-030057b6d907%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%220b6965c8-2d88-441d-babb-4bd5aacc7e65%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%2231ee800b6f04442%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22go2net%22,%22params%22:{%22zone%22:%2219aae5d9-7b49-4ac6-86ef-0bfae6884f28%22},%22cpmAdjustmentCoefficient%22:0.62,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2217875d26-1b1b-4bcb-af27-868f17a9989f%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2232fa05d0aa3da268%22,%22bidderRequestId%22:%22298edc46233a8dd%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22} HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 42
Connection: keep-alive
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
X-Xss-Protection: 0
P3p: CP="NID DSP ALL COR"
Set-Cookie: am-uid=3ea4daee6dbc47c1bca879e13625aeb5; expires=Mon, 27 Feb 2023 03:01:38 GMT; domain=.admixer.net; secure; SameSite=None
Keep-Alive: timeout=25
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=17875d26-1b1b-4bcb-af27-868f17a9989f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1757150031286785
200 OK 241 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=17875d26-1b1b-4bcb-af27-868f17a9989f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1757150031286785
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8284a1579814033e26e239b0c8c4538c
27798b7623dfa680de7505fac62735d35ad9b828
906623ae0057c96229d4dedee763e443ce20253f4fd40fa8c215b657033df5f8
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390938&size_id=16&alt_size_ids=232&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=17875d26-1b1b-4bcb-af27-868f17a9989f&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.1757150031286785 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.pravda.com.ua
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB1MUMKV-1O-C9SE; Domain=.rubiconproject.com; Path=/; Expires=Wed, 29-Nov-2023 03:01:38 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qojjoEyd0Yjze9DtVM30fCgX9j0V4idhPtHTnoRflKPrj0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 29-Nov-2023 03:01:38 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 241
X-Firefox-Spdy: h2
htlb.casalemedia.com/cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213fb8ef72c15c508%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22notsy.io%22%2C%22sid%22%3A%22fd182d2f-e98c-448c-be3d-3d292004438e%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214ce4cc75b254c48%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2215802e4629a8e68%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221606d10734a7ffd%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2215802e4629a8e68%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221606d10734a7ffd%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D
200 OK 38 B URL HTTP/2 htlb.casalemedia.com/cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213fb8ef72c15c508%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22notsy.io%22%2C%22sid%22%3A%22fd182d2f-e98c-448c-be3d-3d292004438e%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214ce4cc75b254c48%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2215802e4629a8e68%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221606d10734a7ffd%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2215802e4629a8e68%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221606d10734a7ffd%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 21c8403526ad014f08f2285bd0c53441
53003d531cad1eacc947e1564e66e978252def88
60254c12251512178bfdf5e5fc15817a1ad05cab6fe97362cd62f29c4951c469
GET /cygnus?s=831915&v=7.2&ac=j&sd=1&r=%7B%22id%22%3A%2213fb8ef72c15c508%22%2C%22site%22%3A%7B%22page%22%3A%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22%7D%2C%22ext%22%3A%7B%22source%22%3A%22prebid%22%2C%22ixdiag%22%3A%7B%22mfu%22%3A0%2C%22bu%22%3A3%2C%22iu%22%3A0%2C%22nu%22%3A0%2C%22ou%22%3A0%2C%22allu%22%3A3%2C%22ren%22%3Afalse%2C%22version%22%3A%224.43.4%22%2C%22userIds%22%3A%5B%5D%2C%22msd%22%3A2%2C%22msi%22%3A2%7D%7D%2C%22source%22%3A%7B%22ext%22%3A%7B%22schain%22%3A%7B%22ver%22%3A%221.0%22%2C%22complete%22%3A1%2C%22nodes%22%3A%5B%7B%22asi%22%3A%22notsy.io%22%2C%22sid%22%3A%22fd182d2f-e98c-448c-be3d-3d292004438e%22%2C%22hp%22%3A1%7D%5D%7D%7D%7D%2C%22imp%22%3A%5B%7B%22id%22%3A%2214ce4cc75b254c48%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2215802e4629a8e68%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x600%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A600%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221606d10734a7ffd%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22580x400%22%7D%2C%22banner%22%3A%7B%22w%22%3A580%2C%22h%22%3A400%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%2215802e4629a8e68%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22300x250%22%7D%2C%22banner%22%3A%7B%22w%22%3A300%2C%22h%22%3A250%2C%22topframe%22%3A1%7D%7D%2C%7B%22id%22%3A%221606d10734a7ffd%22%2C%22ext%22%3A%7B%22siteID%22%3A%22831915%22%2C%22sid%22%3A%22336x280%22%7D%2C%22banner%22%3A%7B%22w%22%3A336%2C%22h%22%3A280%2C%22topframe%22%3A1%7D%7D%5D%7D HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json
content-length: 38
cf-ray: 771819926af7b518-OSL
access-control-allow-origin: https://www.pravda.com.ua
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p6I0SvCpUSO01E%2FiLm1HpPAnmCdvRAqyEWASnNxZPME%2BMfcMaeKHlIaQ7ZNKxnVe4VmHCSMep2TQ1uUD5r3dMr65788roOhNfRCyLSixiI%2F2nsQxJ%2Bzt2Z%2FSUkQ73fVsAQaa%2F9wz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75%22,%22sizes%22:[[300,250]],%22bidId%22:%22422857043b95c51%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%220b6965c8-2d88-441d-babb-4bd5aacc7e65%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%224300d64ae8cb501%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2217875d26-1b1b-4bcb-af27-868f17a9989f%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2244bce60faff25ea8%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22}
200 OK 42 B URL HTTP/1.1 inv-nets.admixer.net/prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75%22,%22sizes%22:[[300,250]],%22bidId%22:%22422857043b95c51%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%220b6965c8-2d88-441d-babb-4bd5aacc7e65%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%224300d64ae8cb501%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2217875d26-1b1b-4bcb-af27-868f17a9989f%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2244bce60faff25ea8%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22}
IP
ASN #20773 Host Europe GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 2eed0c491d0240deafc0ac5287c838ad
9ddf084d3a5df11da05ea97ac14b0c0942d0ef2b
c979ffd70003be58ccc574778b78d9303e8b5b3494a6cdeb01449d65a5a815e6
GET /prebid.1.1.aspx?data={%22imps%22:[{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250]]}},%22adUnitCode%22:%22UPR_SBL%22,%22transactionId%22:%22ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75%22,%22sizes%22:[[300,250]],%22bidId%22:%22422857043b95c51%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[300,250],[300,600]]}},%22adUnitCode%22:%22UPR_SBR%22,%22transactionId%22:%220b6965c8-2d88-441d-babb-4bd5aacc7e65%22,%22sizes%22:[[300,250],[300,600]],%22bidId%22:%224300d64ae8cb501%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}},{%22bidder%22:%22admixer%22,%22params%22:{%22zone%22:%2231e23cc6-22fd-4b15-b2cd-7260ea9463e8%22},%22cpmAdjustmentCoefficient%22:0.8,%22mediaTypes%22:{%22banner%22:{%22sizes%22:[[580,400],[336,280]]}},%22adUnitCode%22:%22UPR_BTA%22,%22transactionId%22:%2217875d26-1b1b-4bcb-af27-868f17a9989f%22,%22sizes%22:[[580,400],[336,280]],%22bidId%22:%2244bce60faff25ea8%22,%22bidderRequestId%22:%22419f666d7030f43%22,%22auctionId%22:%222b03707e-c44c-4979-a424-86649f2c419b%22,%22src%22:%22client%22,%22bidRequestsCount%22:1,%22bidderRequestsCount%22:1,%22bidderWinsCount%22:0,%22schain%22:{%22ver%22:%221.0%22,%22complete%22:1,%22nodes%22:[{%22asi%22:%22notsy.io%22,%22sid%22:%22fd182d2f-e98c-448c-be3d-3d292004438e%22,%22hp%22:1}]}}],%22referrer%22:%22https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D%22} HTTP/1.1
Host: inv-nets.admixer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 42
Connection: keep-alive
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
X-Xss-Protection: 0
P3p: CP="NID DSP ALL COR"
Set-Cookie: am-uid=3ea4daee6dbc47c1bca879e13625aeb5; expires=Mon, 27 Feb 2023 03:01:38 GMT; domain=.admixer.net; secure; SameSite=None
Keep-Alive: timeout=25
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=0b6965c8-2d88-441d-babb-4bd5aacc7e65&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7478671970827705
200 OK 261 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=0b6965c8-2d88-441d-babb-4bd5aacc7e65&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7478671970827705
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5da03b732a9b4d80f91d3f16fdbe8206
362a50e24334364eb9c1de7ac6247a9f93344b12
06f7cf22ecc6d6c65feb163ca27f157fbaba74a1e68f6c0eedd36e3b190d0dd0
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2391010&size_id=15&alt_size_ids=10&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=0b6965c8-2d88-441d-babb-4bd5aacc7e65&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7478671970827705 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.pravda.com.ua
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB1MUMLD-15-FCEV; Domain=.rubiconproject.com; Path=/; Expires=Wed, 29-Nov-2023 03:01:38 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qosz2PU0CYROu9DtVM30fCgX9j0V4idhPtHTnoRflKPrj0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 29-Nov-2023 03:01:38 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 261
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 4f273b4771affbb386baa0f89682e2e3
f1cb414f17c19666970cac278d72ac55088c7939
46040d520feb12b2dee8956ad589082d60120e82b62822eaf90e38366e0e87b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4920
Cache-Control: max-age=124415
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:38 GMT
Etag: "6384a5d9-117"
Expires: Wed, 30 Nov 2022 13:35:13 GMT
Last-Modified: Mon, 28 Nov 2022 12:13:13 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 898de7d07076dcdd3388ddbd08c58dac
ac3fabc7871813b7a03022bd2c8f643ba058b7ae
e26da2cf9843d5e26609d8cc342e1f89e5a660c248ff2dca8611b322966f06b5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 20:51:36 GMT
Expires: Tue, 29 Nov 2022 20:51:36 GMT
ETag: "ac3fabc7871813b7a03022bd2c8f643ba058b7ae"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tlx.3lift.com/header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tmax=1000
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tmax=1000
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=4.43.4&referrer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tmax=1000 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 395
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform,sec-ch-viewport-width,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height
access-control-allow-origin: https://www.pravda.com.ua
access-control-allow-credentials: true
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8170830308996435
200 OK 241 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8170830308996435
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 82e63e5d565e4f38c24ce7aa5da527a0
9358ce725a2e3ba8575d7d54a23c83e8c84e6630
c0e55521ccc4adc49391332ecc079d8be24eb3aacd085c9e6715b73966a258b2
GET /a/api/fastlane.json?account_id=17352&site_id=421096&zone_id=2390920&size_id=15&rp_schain=1.0,1!notsy.io,fd182d2f-e98c-448c-be3d-3d292004438e,1,,,&rf=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&tk_flint=pbjs_lite_v4.43.4&x_source.tid=ca0ce5f8-fe90-4b15-97dd-24acdbdb3a75&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.8170830308996435 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.pravda.com.ua
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LB1MUMLG-4-3RBY; Domain=.rubiconproject.com; Path=/; Expires=Wed, 29-Nov-2023 03:01:38 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|SDziDG3X/EiulfpjJ7/Jo+9DtVM30fCgX9j0V4idhPtHTnoRflKPrj0DvfnhICHrw+D5R8hN6gAmGweUluV0N0Xw9PyuwhrFpmvllXEtYN4=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 29-Nov-2023 03:01:38 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 241
X-Firefox-Spdy: h2
cdn.membrana.media/currency_file.json
200 OK 540 B URL HTTP/2 cdn.membrana.media/currency_file.json
IP
ASN #34989 ServeTheWorld AS
File type JSON data\012- , ASCII text, with no line terminators
Hash 7a92426e6e528d9237dfe3b62197afbe
3623bea5ddb6e4b99ea1447b8e65ac2fbdc211f1
0c6c124ab322f40f580d52c4dbe1704c27fc8325ceba575b3aae9d99f0f74105
GET /currency_file.json HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: text/plain
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=86400
etag: W/"6384719d-b3"
last-modified: Mon, 28 Nov 2022 08:30:21 GMT
cdn-storageserver: DE-165
cdn-fileserver: 324
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/28/2022 08:30:34
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 80626b545e310ff30ac26520bade600c
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ap.lijit.com/rtb/bid?src=prebid_prebid_4.43.4
200 OK 6.3 kB URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_4.43.4
IP
File type JSON data\012- , ASCII text, with very long lines (13267), with no line terminators
Hash e487341ee91526c0cb61a3d693d5df24
00432b863b55d18b3d3216e3f775cc02a9b467e7
07838c43425d713c7c5c54ebf6cf6de272526ff773125733c248eff379869d20
POST /rtb/bid?src=prebid_prebid_4.43.4 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 779
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:38 GMT
Set-Cookie: ljtrtb=eJyrrgUAAXUA%2BQ%3D%3D;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
ljtrtb=;Version=1;Domain=.lijit.com;Path=/;Max-Age=0;Secure;Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Transfer-Encoding: chunked
X-Sovrn-Pod: ad_ap2ams1
ocsp.sectigo.com/
200 OK 282 B IP
Hash e86677884882d82ad8d7d099428aa0e8
330b073e8a34b98e026ceaaa32ef1fe09912c868
8bf6d545de7ac41c63287cd002dd0af441b44feecb679d7520d33dc40e572c20
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 18:32:35 GMT
Expires: Mon, 05 Dec 2022 18:32:34 GMT
Etag: "330b073e8a34b98e026ceaaa32ef1fe09912c868"
Cache-Control: max-age=573655,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771819938ff2b517-OSL
gaua.hit.gemius.pl/xgemius.js
200 OK 17 kB URL HTTP/2 gaua.hit.gemius.pl/xgemius.js
IP
File type ASCII text, with very long lines (417)
Hash cc96197f740a011ce79b43b1e76d502d
b6a91b45000b6ac6d1e657f8ef30d9f696191614
c8c24e98f5e1ed968596a8ac0a80760073b262ce6c433f512d272761d8d4e7b6
GET /xgemius.js HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
expires: Tue, 29 Nov 2022 15:01:38 GMT
server: GHC
accept-ranges: none
cache-control: max-age=43200
last-modified: Thu, 10 Nov 2022 11:36:49 GMT
vary: Accept-Encoding,Origin
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 17204
content-encoding: gzip
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&rl=&if=false&ts=1669690897446&sw=1280&sh=1024&at=
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&rl=&if=false&ts=1669690897446&sw=1280&sh=1024&at=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=177855928894402&ev=fb_page_view&dl=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&rl=&if=false&ts=1669690897446&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 29 Nov 2022 03:01:38 GMT
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 317 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 1eabd8d0b6736b87c377a672e58006c3
dff3391444b6cabd02a71558a464228d51ba9df7
5e251e50bdeda9dcd447541d39c16891445cb0521d11a2aebccac6f50cf7ee14
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: application/ocsp-response
Content-Length: 317
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 10:03:22 GMT
Expires: Sun, 04 Dec 2022 10:03:21 GMT
Etag: "dff3391444b6cabd02a71558a464228d51ba9df7"
Cache-Control: max-age=456702,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771819930e3bb4f3-OSL
ghb.adtelligent.com/v2/auction/
200 OK 2 B URL HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 604
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Tue, 29 Nov 2022 03:01:38 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 2
Access-Control-Allow-Origin: https://www.pravda.com.ua
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
gaua.hit.gemius.pl/fpdata.js?href=www.pravda.com.ua
200 OK 282 B URL HTTP/2 gaua.hit.gemius.pl/fpdata.js?href=www.pravda.com.ua
IP
Hash b1a1e0df01118427937db09092a368fb
e934168460bc1b63035bb8647c299a8d18681077
03956f5706219504841a3b1bf348541211e100b060a77edda2b1f89ddd9ac235
GET /fpdata.js?href=www.pravda.com.ua HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
expires: Thu, 29 Dec 2022 03:01:38 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 282
X-Firefox-Spdy: h2
ls.hit.gemius.pl/lsget.html
200 OK 2.7 kB URL HTTP/2 ls.hit.gemius.pl/lsget.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1259)
Hash 881ddbaa5d14c6a1fdbf05ef76095267
15c6475da14df3b46f18265c97c1cc0a956999ed
b64d763b6395a8d5f30c92a05e07f5bd4afb571d4b962e3f7ae327e76424eee9
GET /lsget.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:39 GMT
expires: Thu, 29 Dec 2022 03:01:39 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 2719
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=www.pravda.com.ua
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.pravda.com.ua
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.pravda.com.ua HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 29 Nov 2022 03:01:39 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.pravda.com.ua
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.pravda.com.ua
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.pravda.com.ua HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 29 Nov 2022 03:01:39 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ls.hit.gemius.pl/lsset.html
200 OK 1.9 kB URL HTTP/2 ls.hit.gemius.pl/lsset.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254)
Hash c4ea4510684d0bf1538b3e5708bc8014
f23cc3373982e59d04bf4eb9d61ccb31cd005ec3
8d489bf7581789563acc544a40ecbf56feff9d05353487e40252587cc7de326c
GET /lsset.html HTTP/1.1
Host: ls.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:39 GMT
expires: Thu, 29 Dec 2022 03:01:39 GMT
server: GHC
accept-ranges: none
cache-control: private, max-age=2592000
last-modified: Mon, 16 Jul 2012 10:03:40 GMT
etag: PRIVATE7520710249
vary: Accept-Encoding,Origin,User-Agent
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: text/html;charset=utf-8
content-length: 1869
content-encoding: gzip
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap=
301 Moved Permanently 0 B URL HTTP/2 gaua.hit.gemius.pl/_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 29 Nov 2022 03:01:39 GMT
expires: Mon, 28 Nov 2022 03:01:39 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlxniMXGQMQGjArAoUgsgdGissGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Tue, 06 Dec 2022 03:01:39 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
location: /__/_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap=
content-length: 0
X-Firefox-Spdy: h2
2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: 2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Tue, 29 Nov 2022 03:01:39 GMT
expires: Wed, 29 Nov 2023 03:01:39 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4247
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 03:01:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4247
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 03:01:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4247
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 03:01:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4247
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 03:01:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4247
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 03:01:39 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:40:08 GMT
age: 69691
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 73001f7390ae3a80bbbaa9d9bacbe488
f0410522b6dad8ebcbc2a64ff2193bafcfdc862e
49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6716
x-amzn-requestid: 51e9f59e-558e-4bb4-8db5-741e0272f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV3cHHwqIAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63856c4d-48ecac9a4da2995b41abec49;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 02:19:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wyF7fr2HqPh1eMePdqbRp2_SNhDOFYEki_pvMQGi0INPRR9QxznyGg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:33:53 GMT
etag: "f0410522b6dad8ebcbc2a64ff2193bafcfdc862e"
content-type: image/jpeg
age: 1666
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 03:31:10 GMT
age: 84629
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 415b1b1d5a29fc17b4114bb3df1d1c22
600859401c885cc2cdd1f199cccc198eb41d6a04
abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7549
x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP-7lHmsoAMF9lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -aUqAfyrtMO0hkr2J2lm5SNNFdtaJj-F2dpBULvXjfOV205Ksm0iHw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:42:03 GMT
age: 19176
etag: "600859401c885cc2cdd1f199cccc198eb41d6a04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.membrana.media/video/video.js
200 OK 82 kB URL HTTP/2 cdn.membrana.media/video/video.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (65536), with no line terminators
Hash a4dfe6d76e8103fa3e5dc913ac9802d4
9e932f495490652a4302301f8de81ae487b2cc69
b13db97a4651edba4f0865967e3fa4a5e9baa882bbc906f7c9f454f0d07259e2
GET /video/video.js HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"63853451-3bccd"
last-modified: Mon, 28 Nov 2022 22:21:05 GMT
cdn-storageserver: DE-199
cdn-fileserver: 224
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/28/2022 22:36:06
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 26fe4b573009f993711a55b2cfe1c905
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 823e92f62ff7b3c2093828817d7f2866
c501de9eaa581a10b0b5fce40b54bb10f57f7c29
7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8921
x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnwFYToAMFoWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: awi49MMMlK51wHPbyBrBkL4N4g9lX3ea40LxyrYbYxe_FsfqelTcTQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:57:05 GMT
etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29"
content-type: image/jpeg
age: 18274
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
gaua.hit.gemius.pl/__/_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap=
200 OK 169 B URL HTTP/2 gaua.hit.gemius.pl/__/_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap=
IP
Hash 77632fe0a2902a2c1cc234e0e57be080
89798c2bd555765f7b6eab7c5f56f16b4f602bcb
eef214b02500eed5bb712eb46b2d014ba510916f3eac035b1a247d26c8b1df24
GET /__/_1669690898459/rexdot.js?l=100&sendf=8&id=0sgwsqe5pzCIPQDb5wLO8sdRHUykaC7Km1v9.r46UA3.K7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=0&fv=-&href=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D&ref=&screen=1280x1024r1000&col=24&window=1280x939&vis=1&lsdata=-SETERR&fpdata=UTa8XO2KEIrR.Y.7YLN77wkZip4nODuw4brxIM1Rrdj.N7<ime=84&inner=_ver%3D331&exid=638576120246cb27&fpcap= HTTP/1.1
Host: gaua.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:39 GMT
expires: Mon, 28 Nov 2022 03:01:39 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlxPmMMGQMQGPcKyHUDsgdGissGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Tue, 06 Dec 2022 03:01:39 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
content-type: application/x-javascript
content-length: 169
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 6229b3523e932f0dae9e09fd61fd3f7c
6ab0df761999419be58da825ff24c06129bf4709
b84a7407dd6ccdecb0d5045a4c51e65947b59a5d7fa1058854e128ee62598ece
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6598
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Etag: "63852b78-138"
Last-Modified: Tue, 29 Nov 2022 01:11:41 GMT
Server: ECS (amb/6BC4)
X-Cache: HIT
Content-Length: 312
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 30 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
Hash 57094a698ea4c530bf1e159eb6e4569a
bc0a948f5bc4ac77d23b1fdd79208132cf011cc6
9d1709541bb2b8a3f3b7a252f8bc15bbfae093f9edc7dbb18d0f8837b224a747
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 03:01:39 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-16294"
expires: Wed, 30 Nov 2022 03:01:39 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8eec60cf10b776d60fec9678f714385d
e882140ff32769ccc4e37dc37a9be71984418d29
23d638a1f0a5e29a5ab3a71e338aee7f431d6ef971682494a2017aa45612957c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e8864674933b39029cfebb5295cec568
ab88f2142fc26d5dfa91e95f500264553fe3176e
915cf81e0a18f50aeeb5ab12a791be52b604f8c56d3fcd7745a7e13dc54f8a84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e8864674933b39029cfebb5295cec568
ab88f2142fc26d5dfa91e95f500264553fe3176e
915cf81e0a18f50aeeb5ab12a791be52b604f8c56d3fcd7745a7e13dc54f8a84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e8864674933b39029cfebb5295cec568
ab88f2142fc26d5dfa91e95f500264553fe3176e
915cf81e0a18f50aeeb5ab12a791be52b604f8c56d3fcd7745a7e13dc54f8a84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 190bcb4c44fd9e0e93baa80c9b2535b8
97bda56ddc8d6a00d19e1747d63325051f3fd144
b7677f820f06329e357561f570729fe4110af4ac5fb741b97567e20a0f533301
GET /rtv/012211060024000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61592
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:54 GMT
expires: Tue, 28 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 31965
etag: "a2fca7132416d151"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14697)
Hash ae1a9f090984c448deb0629cc2304ee3
e601825ccec746695f370ed68fa33325152e0d9f
6a947bfcdeea64faa6c795caea11ee09dbe00f5d4003b7b9d47e4945c05ac1e4
GET /rtv/012211060024000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5218
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:54 GMT
expires: Tue, 28 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 31965
etag: "abd4378f71571d78"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-form-0.1.mjs
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-form-0.1.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (41057)
Hash 2f873064835eed23708bde2a16830216
7559437b82b9b761e02549d8d51f9e3571e5ed2c
0f5d00ac674cc34652997f2e0dd7fb6eb1a5b22010989c35a81cd7a388c84fdd
GET /rtv/012211060024000/v0/amp-form-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12946
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:54 GMT
expires: Tue, 28 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 31965
etag: "0bacd3f1ce38a7db"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5046)
Hash 669c8592ef8f63e7404e45dd6ca56b71
3f6753966361bb86594193009c9097612c361064
d174ae2c0722ab8d4bf736f0200dc5b15d288f9500a706bb161b64f5a3b74f01
GET /rtv/012211060024000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1913
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:08:54 GMT
expires: Tue, 28 Nov 2023 18:08:54 GMT
cache-control: public, max-age=31536000
age: 31965
etag: "403438c4d550ee88"
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e8864674933b39029cfebb5295cec568
ab88f2142fc26d5dfa91e95f500264553fe3176e
915cf81e0a18f50aeeb5ab12a791be52b604f8c56d3fcd7745a7e13dc54f8a84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afdcfc5f3bd741d114596300d607f4cc
e82ea5829078ad9268cdf9c576c780b1c40c3696
1c80e7d28c6303b65a17bfa822163c5af3d6d5c480ee9f2e404b23119520eeb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afdcfc5f3bd741d114596300d607f4cc
e82ea5829078ad9268cdf9c576c780b1c40c3696
1c80e7d28c6303b65a17bfa822163c5af3d6d5c480ee9f2e404b23119520eeb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afdcfc5f3bd741d114596300d607f4cc
e82ea5829078ad9268cdf9c576c780b1c40c3696
1c80e7d28c6303b65a17bfa822163c5af3d6d5c480ee9f2e404b23119520eeb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash afdcfc5f3bd741d114596300d607f4cc
e82ea5829078ad9268cdf9c576c780b1c40c3696
1c80e7d28c6303b65a17bfa822163c5af3d6d5c480ee9f2e404b23119520eeb5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/simgad/4661262203753425514?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qk5011Bdpg7-2_6USUIdfA5RRjg4Q
200 OK 35 kB URL HTTP/2 tpc.googlesyndication.com/simgad/4661262203753425514?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qk5011Bdpg7-2_6USUIdfA5RRjg4Q
IP
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash 71a95e0c54f0408eee6496fc6934188f
1c5e436167b76cbb7edacf8e400bff9cbae38ca2
c9cebfe8e15ce4eed1de659795ef9e34d62bf75ff0138a14e9ae6faad8cd22e6
GET /simgad/4661262203753425514?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qk5011Bdpg7-2_6USUIdfA5RRjg4Q HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 35448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 20:42:02 GMT
expires: Tue, 28 Nov 2023 20:42:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 13:59:59 GMT
content-type: image/png
age: 22777
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/images/adchoices/en.png
200 OK 2.5 kB URL HTTP/2 tpc.googlesyndication.com/pagead/images/adchoices/en.png
IP
File type PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash ff862c0e7a4755adf3682da543bce1e4
9db9b9c9bb176aee7f639f5f4a4cd702105358b6
36133ca07927c88a7cc578fddbaed3c668ab75087834d0ca13dca5de4ec856c1
GET /pagead/images/adchoices/en.png HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
server: cafe
content-length: 2502
x-xss-protection: 0
date: Mon, 28 Nov 2022 20:55:44 GMT
expires: Tue, 29 Nov 2022 20:55:44 GMT
cache-control: public, max-age=86400
age: 21955
etag: 14819457070020093239
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/images/adchoices/icon.png
200 OK 295 B URL HTTP/2 tpc.googlesyndication.com/pagead/images/adchoices/icon.png
IP
File type PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced\012- data
Hash d848a2953307aa510bdad31f5bf84671
e9d6d8daa9255f99e4e778ff4c4b47806bdb18c1
7fd59024b6ca83f11f7a3448ec148309a13b705725716df134f699e60a96eb1b
GET /pagead/images/adchoices/icon.png HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
server: cafe
content-length: 295
x-xss-protection: 0
date: Mon, 28 Nov 2022 16:03:23 GMT
expires: Tue, 29 Nov 2022 16:03:23 GMT
cache-control: public, max-age=86400
age: 39496
etag: 426692510519060060
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/simgad/11453373409246181002?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qkBrR6aJpN_7tF_0qCQ5RKUgz2v_w
200 OK 70 kB URL HTTP/2 tpc.googlesyndication.com/simgad/11453373409246181002?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qkBrR6aJpN_7tF_0qCQ5RKUgz2v_w
IP
File type PNG image data, 300 x 600, 8-bit colormap, non-interlaced\012- data
Hash 6bed7f52b3d6a4aa6eb217f12a981c97
ec35d25923671a630a1ae402d88e36fe99c7b78f
82c9a5577ee4a96ad23c2d3975e265826ab207c7b16d8c535e0886ccec43afa4
GET /simgad/11453373409246181002?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qkBrR6aJpN_7tF_0qCQ5RKUgz2v_w HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 70434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 21:08:43 GMT
expires: Tue, 28 Nov 2023 21:08:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:00:00 GMT
content-type: image/png
age: 21176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 911aaee97cb711fd8c99c9d61640be4f
db0e0e9fee4f1c8eaf63b796dc069c0afd215d93
802d540d3777f91314f3a2ce0165eec299fb4d1020ec71c3dae0e7aee79a4156
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "802D540D3777F91314F3A2CE0165EEC299FB4D1020EC71C3DAE0E7AEE79A4156"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6724
Expires: Tue, 29 Nov 2022 04:53:44 GMT
Date: Tue, 29 Nov 2022 03:01:40 GMT
Connection: keep-alive
hal9000.redintelligence.net/zone/p4vicekg7740?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D
200 OK 4.2 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/p4vicekg7740?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1861), with CRLF line terminators
Hash 338c8b589163b16eb3159475f1fe7c98
5af2068c472bccdd23fca683add6d0ab63461667
61608f750a90c8dd62029d1f2a3322512812914c239e999b75560d0689b43333
GET /zone/p4vicekg7740?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:40 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4245
Connection: close
Content-Type: text/html; charset=UTF-8
hal900029.redintelligence.net/request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900029.redintelligence.net/request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 29 Nov 2022 03:01:40 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 29 Nov 2022 03:01:40 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=4e74020b83221ebd; expires=Mon, 27-Feb-2023 03:01:40 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
hal900029.redintelligence.net/request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 513 B URL HTTP/1.1 hal900029.redintelligence.net/request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 67d1d54091fbfb35b575814b6312d5c1
249a598ea10a88cc61cab9f0b78b5fc160b2e9b6
7e11d39a5199658dccc0fffa7a8a538151cd8ff41e0288b36c924fb92cadb0cb
GET /request.php?zone=p4vicekg7740&nw=20&renderingType=javascript&namespace=56ac9f9bf9&subid=&uid=18afb2a2b535845e&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=336x280&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCloFRE3aFY6zsDY2siQbG3L6AB8m5opxpzLzNztUP8C4QASD74LEqYMOEgICYGMgBCakCrkkcZgNXsT6oAwGqBJsCT9BviZ8Y9mHXViGezrH-0PTO83gS5fXlHUWExuzsakRQsmdrB1hIx6CAdYFy7gaGf1Y5J7sDXASflLnBjRynbub233rxsGOgNaXAQyUrOD9yDiOyAz9mPcPQHVquj6x2IMhKUeMoU7FcM7E1swq8-4_gz1G8G8Lzg6qF08NhQ-L6-7YbK6wVGJk19cVIBw-bl-KwqUPe7VVyRVY7si0XuMnmf2PCeHBeTg94z4dkRttyEy2qRh5cSORatTKIorJWvbyZewYK5v1KM9Ac5U1O5DBBN7uCrgaSe3J0TLsHgXv9GOgHZ1bWFL6-RIxnK_Gq6KVigsPhIVoYvii-HMtur1_hz_5bxB6IrYn3cp6_prFcTv0RiWtcTGOFkcAEwb2U_PMD4AQDkAYBoAZNgAesrfWfA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6SjsQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCBEIgOGAEBABGB0yAqoCOgKAQIAKA5gLAcgLAYAMAbATnKLNDtATANgTA9gUAdAVAfgWAYAXAQ%26ae%3D1%26num%3D1%26cid%3DCAQSSwDq26N9-ikL_TF6MreaC0BTLAcm5kxxUq5qMU87cUiL3-OH8-zHvx5ZkwNPod_joSLKCM8983zc1Ti06KdeF4K01j-2ocw0jinW1RgBIBM%26sig%3DAOD64_0rsbZtzsMJLx0BddgUXOGI6OnknQ%26client%3Dca-pub-1438233332030430%26dbm_c%3DAKAmf-BxBAajAnhJuLHnqfAB5jigUeftr7xt8pHG5FjhKeHluAErAq5dehhquBgc97ElalQARtlGzG3fJFL1dFQe_EhGjXfx_fYhUrIf6ZAWB7KGekvkumrpo5TzrEDsrL374CI9igPaoEll-McQ8oHcYoc13VorwDvCLyLeB2JT9QSbG3iaEvI%26cry%3D1%26dbm_d%3DAKAmf-CXMRmiGAhuwM2jMe29ymbhqxv0fgqJSZAjKEg4Pp-8XhO8fgINrNJXd_9FWGGfZH6jG5aKkEbTjPauicUHmVmUGnVxjQp-K5BzyyrYfr0-s7Q-o03BoJp4iGRC4lgZGptuLoVg34_9eaE3i-vlcPQT9r_4vAGRk836vvOz8HNi55-o84TrybS6GG69o6aph87XoWIHdsncJtQIIt_j77a440EHySrtQ_vK3L-becSG7f5zwrM9hfFV2UWiqb-5hCWX_FC9kzuHmqrw8LvbgfUdxAYLOy7tJf9hyVqvwVDls0KQjE11yQWFWDrGg7SqlncnQZGcmxXB1T35IiE0QRRKnxvtHLeORFbYzrMnKt5zptMLxXMXN4g3UYdtTdHQIztSQ8IZsnn3OELaYCidKLE4n9vmJ4ltiRQD1BXLhbxJ0Ut95asYfFR96YrckQgd-5f1-6547MV-IvX2q9LLKQ5GAUmlRdmuju6FpanP-y3bcDoX7rI3O11bVrI0IZKi5Yy6u9V-Y7N6wRcphGhBNPz9eJvGVVGa_OKIo8qqCjkWvUndp6URU-QHH37towi6rQ4geLcrlFvCs1gkIYKd9Ob-Q5kzju83wRo1qphipqM1GftLaKGV9zaSjX3O1lWqQOGn4VuDR-0YIpuikyMuQpsJeJre7eoh6XEGdsuOWyAC9jxbyF8%26adurl%3D&documentReferer=https%3A%2F%2Fwww.pravda.com.ua%2F&ancestorOrigins=null&random=4643344374716&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=4e74020b83221ebd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:40 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 29 Nov 2022 03:01:40 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=4e74020b83221ebd; expires=Mon, 27-Feb-2023 03:01:40 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 53434400007213704438340012158029
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 513
Connection: close
Content-Type: application/x-javascript; charset=utf-8
pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-BEzjr8ATjUOzHXoDVlsA4MXyhUzC785CeSbCMj8qfIj0aJTzbDjuqiJ6HMHK-5o85B9BpWDQFwB9bQgrTABLRNu8xxzV9cvELcSsIw7uS6Z94-i4I
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-BEzjr8ATjUOzHXoDVlsA4MXyhUzC785CeSbCMj8qfIj0aJTzbDjuqiJ6HMHK-5o85B9BpWDQFwB9bQgrTABLRNu8xxzV9cvELcSsIw7uS6Z94-i4I
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-BEzjr8ATjUOzHXoDVlsA4MXyhUzC785CeSbCMj8qfIj0aJTzbDjuqiJ6HMHK-5o85B9BpWDQFwB9bQgrTABLRNu8xxzV9cvELcSsIw7uS6Z94-i4I HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 03:01:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hal900029.redintelligence.net/request_content.php?s=53434400007213704438340012158029&a=c675dbe4
200 OK 1.4 kB URL HTTP/1.1 hal900029.redintelligence.net/request_content.php?s=53434400007213704438340012158029&a=c675dbe4
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 91dfa6701ed26109a964ee1d0dbbeb9b
1be444a17328e86ff80503d2ebd04684791f4e7a
e1694c188233ddb8cb1b05d836e6c21185223a58f77990537645805eabcc4fd2
GET /request_content.php?s=53434400007213704438340012158029&a=c675dbe4 HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2ac198477b7ceacc1733e8baf6070149.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=4e74020b83221ebd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:40 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 29 Nov 2022 03:01:40 +0100
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1412
Connection: close
Content-Type: text/html; charset=utf-8
ocsp.digicert.com/
200 OK 312 B IP
Hash 755842c4015cdf23ce448636e32277fb
ddb14148163258686b5a6c025fe97d3c35317c9a
593d877e82d7a28ad48561c84375e6dae5363877df5c70bd823dac6c39bbd385
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4744
Cache-Control: max-age=144045
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:41 GMT
Etag: "6384f33a-138"
Expires: Wed, 30 Nov 2022 19:02:26 GMT
Last-Modified: Mon, 28 Nov 2022 17:43:22 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:40 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=2y8UnF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdsWnhyQ0hlWE9LVlNXaGtnWVdEbU1EaHRvWjlFWGVaanZLJTJGOUc4ZkV4Qw; expires=Sun, 24 Dec 2023 03:01:41 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 318820
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
hal900029.redintelligence.net/viewability?s=53434400007213704438340012158029&a=30755712&vb=m
200 OK 0 B URL HTTP/1.1 hal900029.redintelligence.net/viewability?s=53434400007213704438340012158029&a=30755712&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=53434400007213704438340012158029&a=30755712&vb=m HTTP/1.1
Host: hal900029.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900029.redintelligence.net/request_content.php?s=53434400007213704438340012158029&a=c675dbe4
Cookie: 8lcfmzhxc8d6_uid=4e74020b83221ebd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 03:01:41 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 313 B IP
Hash 1f5f46408bac27f96414a74d778c5370
98ebc4ad130b1888fd4a70a9409b46a43c5e16c6
da06dba3803f907cafcf41fd8bbb591aa050f9f9972f45e8f44575331dc9ba10
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5001
Cache-Control: max-age=116555
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:41 GMT
Etag: "638486d7-139"
Expires: Wed, 30 Nov 2022 11:24:16 GMT
Last-Modified: Mon, 28 Nov 2022 10:00:55 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 1f5f46408bac27f96414a74d778c5370
98ebc4ad130b1888fd4a70a9409b46a43c5e16c6
da06dba3803f907cafcf41fd8bbb591aa050f9f9972f45e8f44575331dc9ba10
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6598
Cache-Control: max-age=118152
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:41 GMT
Etag: "638486d7-139"
Expires: Wed, 30 Nov 2022 11:50:53 GMT
Last-Modified: Mon, 28 Nov 2022 10:00:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
cdn.contentspread.net/24i/content/soberfb/EN/S-336x280.gif
200 OK 79 kB URL HTTP/1.1 cdn.contentspread.net/24i/content/soberfb/EN/S-336x280.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 336 x 280\012- data
Hash 2d8f4084666e5bd2e4b050d82b791c0e
1f9f90f623398be4f3b4c198c602ca127243d4e3
0a946d52ac8890900833e2996c926ddabba3d9aa7dd4d9d7a1b4e5cd1db8dd34
GET /24i/content/soberfb/EN/S-336x280.gif HTTP/1.1
Host: cdn.contentspread.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900029.redintelligence.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 03:01:41 GMT
Content-Type: image/gif
Content-Length: 79127
Last-Modified: Mon, 23 Jul 2018 15:19:52 GMT
Connection: close
ETag: "5b55f218-13517"
Accept-Ranges: bytes
dnacdn.net/dna
200 OK 447 B IP
File type JSON data\012- , ASCII text, with very long lines (497), with no line terminators
Hash d717fafaafe5199c3dbdaad915ece409
a61203469a4ea0404c3ede82cbf5a5f22a6d36ab
3e4c6be1e6f4e3828d866513e1b2e30c7ca65f8f59bfbb2faf18e575a08407f5
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=2y8UnF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdsWnhyQ0hlWE9LVlNXaGtnWVdEbU1EaHRvWjlFWGVaanZLJTJGOUc4ZkV4Qw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:41 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=LiKVpV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdsWnhyQ0hlWE9LVlNXaGtnWVdEbU5LMWJ6VWFNZndPQUltbkV4cGxOT0Q; expires=Sun, 24 Dec 2023 03:01:41 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 372456
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Server: nginx/1.18.0 (Ubuntu)
Access-Control-Allow-Origin: *
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Wed, 30 Nov 2022 03:01:44 GMT
Date: Tue, 29 Nov 2022 03:01:42 GMT
Connection: keep-alive
Vary: Accept-Encoding
ap.lijit.com/beacon?informer=13408038
302 Found 0 B URL HTTP/1.1 ap.lijit.com/beacon?informer=13408038
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?informer=13408038 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 29 Nov 2022 03:01:42 GMT
Set-Cookie: ljt_reader=FuuVqNZHQUoaB3IVTW6ZlS5w; Path=/; Domain=.lijit.com; Expires=Wed, 29-Nov-2023 03:01:42 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://ap.lijit.com/beacon?informer=13408038&dnr=1
Content-Length: 0
X-Sovrn-Pod: ad_ap2ams1
ocsp.digicert.com/
200 OK 279 B IP
Hash 8523c02a32e0f8622a5631ff451a92d1
56984f538ac107969e28317295457629073407c0
8ab763b46170a1109d1de884b00ae576a7f63d87f7b778d5f690a23a8916174b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 624
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:42 GMT
Etag: "63847fda-117"
Last-Modified: Tue, 29 Nov 2022 02:51:19 GMT
Server: ECS (amb/6BC4)
X-Cache: HIT
Content-Length: 279
eus.rubiconproject.com/usync.html
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Tue, 29 Nov 2022 03:01:42 GMT
Connection: keep-alive
Vary: Accept-Encoding
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:42 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ap.lijit.com/beacon?informer=13408038&dnr=1
204 No Content 0 B URL HTTP/1.1 ap.lijit.com/beacon?informer=13408038&dnr=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beacon?informer=13408038&dnr=1 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pravda.com.ua/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Tue, 29 Nov 2022 03:01:42 GMT
Set-Cookie: ljt_reader=FuuVqNZH1yOYLpHkQ1qoyXQ8; Path=/; Domain=.lijit.com; Expires=Wed, 29-Nov-2023 03:01:42 GMT; Max-Age=31536000;Secure;SameSite=None
Expires: Fri, 20 Mar 2009 00:00:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap2ams1
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (18728)
Hash e91aeb0f1959e4b37f615a31c8c1e5db
6c0b9704f6c549715c0c4d5e752b63d8652f882b
db4111a2564a975aa0dab2b701b99422fee2f5bf4685f22759290ff887a6ef61
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Tue, 29 Nov 2022 01:52:56 GMT
Content-Encoding: gzip
Content-Length: 10067
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=82277
Expires: Wed, 30 Nov 2022 01:52:59 GMT
Date: Tue, 29 Nov 2022 03:01:42 GMT
Connection: keep-alive
Vary: Accept-Encoding
js-sec.indexww.com/um/ixmatch.html
200 OK 1.4 kB URL HTTP/2 js-sec.indexww.com/um/ixmatch.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2920), with no line terminators
Hash 5afd6e52a87d99b7b9be7c2fc0b1a091
b6331e837ab190a6a2c616f940e56ef8e357aa77
8e48f6997aa3f9b4c3b853c8974843341b34ee4b50f9e84ac69ddf531b244158
GET /um/ixmatch.html HTTP/1.1
Host: js-sec.indexww.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:42 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 25 Jul 2022 19:18:26 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
cf-cache-status: HIT
age: 90
expires: Tue, 29 Nov 2022 07:01:42 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 771819aa09600b4d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 5f09cebeeeacd350902a847f93cf9899
61188aa40c646c2217e7013ea356d315ddc9cd80
b678d2c71b30cf5c6452065c6070c89a3712aaacb2c7d812b391ec11e8e00ba7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6282
Cache-Control: max-age=95864
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:42 GMT
Etag: "63843104-116"
Expires: Wed, 30 Nov 2022 05:39:26 GMT
Last-Modified: Mon, 28 Nov 2022 03:54:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 03:01:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: ae091365-1188-49c9-a8ff-5fa99163dc2f
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
302 Found 0 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js-sec.indexww.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 29 Nov 2022 03:01:42 GMT
content-length: 0
location: /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
cf-ray: 771819aaa94a0b49-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y4V2FoUEnzR51W7dxz2lWwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 29 Nov 2023 03:01:42 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1852; Path=/; Domain=casalemedia.com; Expires=Mon, 27 Feb 2023 03:01:42 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1852; Path=/; Domain=casalemedia.com; Expires=Mon, 27 Feb 2023 03:01:42 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8AApYgz%2FY7fa4NlRhAsb4puZwchXfMFbeNEdvK6q1YAJlDNBaPTa7B0W4CPNUuPbbEzeSKcBPlWDNTT1IqriWKqWqCB6AjjDm6vpuzOxkN3b2bet0zwzlb2KI2YaD1D5bR6yRzAsJNLqiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 5f09cebeeeacd350902a847f93cf9899
61188aa40c646c2217e7013ea356d315ddc9cd80
b678d2c71b30cf5c6452065c6070c89a3712aaacb2c7d812b391ec11e8e00ba7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1992
Cache-Control: max-age=91574
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:42 GMT
Etag: "63843104-116"
Expires: Wed, 30 Nov 2022 04:27:56 GMT
Last-Modified: Mon, 28 Nov 2022 03:54:44 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 315359702707063ad4dab2c0113b1105
160ab47762f9cb65e947d208c266b52da8752878
01b8a547526b9c5940eaad022ca9190ee5887831c9f7e2934e5dc7ce38359c31
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4589
Cache-Control: max-age=91314
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 03:01:42 GMT
Etag: "638425db-116"
Expires: Wed, 30 Nov 2022 04:23:36 GMT
Last-Modified: Mon, 28 Nov 2022 03:07:07 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
static.criteo.net/js/ld/publishertag.prebid.js
200 OK 30 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP
File type ASCII text, with very long lines (65354)
Hash 1e81f0c646ccc75fe6d9423738290103
51b7e1e9097fb2614b112c2ba47ef231db783190
090c332f8c779802b9e4ae59ac881c86d67d0628dcd5074a7b77517d0bdf0523
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 03:01:39 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-16294"
expires: Wed, 30 Nov 2022 03:01:39 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
200 OK 144 B URL HTTP/2 ssum-sec.casalemedia.com/usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 5f8e6e6c56ef68e09a7402270be3204b
979753a73bf90e90f942c51b9b7a24743215c73d
6adf6e2799139265c2e0070d7521f94b8d68d6f3bce2364633ff1cf3e1d75299
GET /usermatch?d=https%3A%2F%2Fwww.pravda.com.ua%2F&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js-sec.indexww.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:42 GMT
content-type: text/html
cf-ray: 771819aad9520b49-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3JICDh0p2yuL3hZ9embA5%2B9VBxluGrD%2FhpDPeTqfknC22XDvslecQYAQ9FiKAkeqfctCkjx99GrKAfd8Y9%2FJMBFo%2F09aYs5hGiYggcKC0ilZgIZ055w55n6V8Je145cI%2B9WdD5krHL3xBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D564534%26nid%3D5466%26put%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 03:01:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=0
AN-X-Request-Uuid: e58300a9-aa2b-4684-b747-1a335b0fcdcc
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
token.rubiconproject.com/token?pid=25470
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=25470
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=25470 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 2eb7d209ab67664d6226c75331547ba1
token.rubiconproject.com/token?pid=10362
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=10362
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=10362 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 2eb7d209ab67664d6226c75331547ba1
token.rubiconproject.com/token?pid=2249&pt=n
302 Found 39 B URL HTTP/1.1 token.rubiconproject.com/token?pid=2249&pt=n
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash 92109ef380890b20c6764abd5598457a
6903c30f326559a1c700d298d0dc7d3b1fbfd983
8551ff98c6da3873eb19a7e3a675be18e43aea2a19dd50f73512246ca7e78a45
GET /token?pid=2249&pt=n HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 2eb7d209ab67664d6226c75331547ba1
Location: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=
content-length: 0
token.rubiconproject.com/token?pid=2974&pt=n&a=1
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=2974&pt=n&a=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=2974&pt=n&a=1 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 54ab5e55007c9747024b4f039df5ce6b
pixel.mathtag.com/sync/img?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D35912%26puid%3D%5BMM_UUID%5D
302 Moved Temporarily 39 B URL HTTP/1.1 pixel.mathtag.com/sync/img?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D35912%26puid%3D%5BMM_UUID%5D
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash 00cf6ed1bb76f2251e1898a6f6d98240
e6ab94c16ed46807559fd5828bf821c0da51ac32
7ff8a56a6d2aaa364df4071ecf7d8a69d3d9f56635be90d410e1019e8736945c
GET /sync/img?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D35912%26puid%3D%5BMM_UUID%5D HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: image/gif
Content-Length: 0
Access-Control-Allow-Origin: *
Server: MT3 169 32252b7 master ord-pixel-x30 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: https://token.rubiconproject.com/token?pid=35912&puid=2a3b6385-7616-4b00-a11e-d9461dff23a4
Expires: Tue, 29 Nov 2022 03:01:41 GMT
Date: Tue, 29 Nov 2022 03:01:42 GMT
Connection: keep-alive
Set-Cookie: uuid=2a3b6385-7616-4b00-a11e-d9461dff23a4; domain=.mathtag.com; path=/; expires=Wed, 27-Dec-2023 03:01:42 GMT; SameSite=None; Secure
pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=0
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=564534&nid=5466&put=0 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 54ab5e55007c9747024b4f039df5ce6b
Content-Type: image/gif
token.rubiconproject.com/token?pid=35912&puid=2a3b6385-7616-4b00-a11e-d9461dff23a4
204 No Content 0 B URL HTTP/1.1 token.rubiconproject.com/token?pid=35912&puid=2a3b6385-7616-4b00-a11e-d9461dff23a4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /token?pid=35912&puid=2a3b6385-7616-4b00-a11e-d9461dff23a4 HTTP/1.1
Host: token.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 2eb7d209ab67664d6226c75331547ba1
cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=
302 Found 280 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 71ad89ad199a33e899f914d898872fe4
6ca9d2988115dbec1e30c337be9b67adea23732e
d780663f1202366919be361d8b4a9c47e234342d0bb6e55695172837a17c0418
GET /pixel?google_nid=rubicon&google_hm= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=&google_tc=
date: Tue, 29 Nov 2022 03:01:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 280
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 29-Nov-2022 03:16:42 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=&google_tc=
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=&google_tc=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=rubicon&google_hm=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Tue, 29 Nov 2022 03:01:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3e422ac2f6e59643a161f00186d616b1
d3557179ac03312cfa06e4f11895b809686ad370
1f3e32751c3683d9a4a488c2af2d44dc878bc68ab12051cc8fb37761530776ac
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121101
Date: Tue, 29 Nov 2022 03:01:42 GMT
Etag: "63849910-1d7"
Expires: Wed, 30 Nov 2022 12:40:03 GMT
Last-Modified: Mon, 28 Nov 2022 11:18:40 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: L085yBp01ifkI8DiOfdxoi7E7yqnX7Xwskc4tmhm2SSxJas_iAtdew==
Age: 4883
s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Tue, 29 Nov 2022 03:01:42 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 1P1BXHKYESX4D2C21N7Q
Set-Cookie: ad-id=Az24hA5bsUOejjUcRT_RkVo|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 03:01:42 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
sync.ipredictive.com/d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30
302 Found 144 B URL HTTP/1.1 sync.ipredictive.com/d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30
IP
File type HTML document, ASCII text
Hash be3c19940c99e4f186f9bbaeb54d61ba
59ba6ab580b4743ec2f2dc505e5bb7b01c0c3820
2aff2e233bccd79ddc21eec263eb93854f9aa5273da68b6657f227d6b47b4034
GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30 HTTP/1.1
Host: sync.ipredictive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Date: Tue, 29 Nov 2022 03:01:42 GMT
Location: https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=31b2ef45-2e5a-46cc-b184-bc827aa1e405&expires=30
Set-Cookie: cu=31b2ef45-2e5a-46cc-b184-bc827aa1e405|1669690902635; Path=/; Domain=ipredictive.com; Expires=Wed, 29 Nov 2023 03:01:42 GMT; Max-Age=31536000; SameSite=None; Secure
X-CI-RTID: d4f71bef-9c5b-463a-a054-8f11512634ca
Content-Length: 144
Connection: keep-alive
pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=31b2ef45-2e5a-46cc-b184-bc827aa1e405&expires=30
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=31b2ef45-2e5a-46cc-b184-bc827aa1e405&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=17149&nid=2861&put=31b2ef45-2e5a-46cc-b184-bc827aa1e405&expires=30 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 54ab5e55007c9747024b4f039df5ce6b
Content-Type: image/gif
s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&dcc=t
200 OK 43 B URL HTTP/1.1 s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&dcc=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6851dbf491ae442da3314f19e8aff085
ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eus.rubiconproject.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Tue, 29 Nov 2022 03:01:42 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: RN5SDM30RVE733J1GVWJ
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ib.adnxs.com/async_usersync?cbfn=queuePixels
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/async_usersync?cbfn=queuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /async_usersync?cbfn=queuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://acdn.adnxs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 03:01:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
AN-X-Request-Uuid: 460fb07e-5fca-4765-ae5d-1323d5c52cdd
Set-Cookie: uuid2=7306512305319822689; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 27-Feb-2023 03:01:43 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
200 OK 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acdn.adnxs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 29 Nov 2022 03:01:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: a1971bb6-4ed2-40f0-bb8a-8586d8f61546
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
cdn.membrana.media/upr/ym.js?v=4
200 OK 0 B URL HTTP/2 cdn.membrana.media/upr/ym.js?v=4
IP
ASN #34989 ServeTheWorld AS
Analyzer Verdict Alert fortinet Malware
GET /upr/ym.js?v=4 HTTP/1.1
Host: cdn.membrana.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 139012
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=86400
etag: W/"63851e55-5ef2c"
last-modified: Mon, 28 Nov 2022 20:47:17 GMT
cdn-storageserver: DE-169
cdn-fileserver: 252
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/28/2022 20:47:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e18c96b15ae75e763a4b83b64e0900b0
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=www.pravda.com.ua
IP
GET /syncframe?origin=publishertag&topUrl=www.pravda.com.ua HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:40 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=63aff908-9eb4-43e5-a5e5-3e5652c67f34; expires=Sun, 24 Dec 2023 03:01:40 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 535095
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
a4p.adpartner.pro/hb/bid?tag=8581,8580,8582&sizes=300x250,300x250|300x600,580x400|336x280&referer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D
200 OK 0 B URL HTTP/2 a4p.adpartner.pro/hb/bid?tag=8581,8580,8582&sizes=300x250,300x250|300x600,580x400|336x280&referer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D
IP
POST /hb/bid?tag=8581,8580,8582&sizes=300x250,300x250|300x600,580x400|336x280&referer=https%3A%2F%2Fwww.pravda.com.ua%2Feng%2Fnews%2F2022%2F11%2F27%2F7378184%2F%3Futm_source%3Ddlvr.it%26utm_medium%3D%5Btwitter%5D%26utm_campaign%3D%5Brogue_corq%5D HTTP/1.1
Host: a4p.adpartner.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 677
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.pravda.com.ua
set-cookie: apuid=f88d1b50-28dd-4cf6-8959-4c6ba9b99228; Path=/; Expires=Sat, 28 Jan 2023 03:01:38 GMT; Secure; SameSite=None
cache-control: no-store no-transform
content-encoding: br
X-Firefox-Spdy: h2
ym-tack.b-cdn.net/page_view?UPR;desktop;;page_desktop;d80353|f332b3
200 OK 0 B URL HTTP/2 ym-tack.b-cdn.net/page_view?UPR;desktop;;page_desktop;d80353|f332b3
IP
ASN #60068 Datacamp Limited
POST /page_view?UPR;desktop;;page_desktop;d80353|f332b3 HTTP/1.1
Host: ym-tack.b-cdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pravda.com.ua
Connection: keep-alive
Referer: https://www.pravda.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Tue, 29 Nov 2022 03:01:38 GMT
content-type: text/html
vary: Accept-Encoding
server: BunnyCDN-DE1-1054
cdn-pullzone: 749406
cdn-uid: ae2fd556-b96a-4dbc-a12f-7867877cff13
cdn-requestcountrycode: NO
cache-control: public, max-age=0
etag: W/"63850128-2b0"
cdn-storageserver: DE-197
cdn-fileserver: 469
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 405
cdn-cachedat: 11/29/2022 03:01:38
cdn-edgestorageid: 1049
cdn-status: 405
cdn-requestid: 4dda0bc9b5a2636e3a8c9e72a040e86e
content-encoding: br
X-Firefox-Spdy: h2
www.pravda.com.ua/eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq]
200 OK 0 B URL HTTP/2 www.pravda.com.ua/eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq]
IP
GET /eng/news/2022/11/27/7378184/?utm_source=dlvr.it&utm_medium=[twitter]&utm_campaign=[rogue_corq] HTTP/1.1
Host: www.pravda.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 03:01:36 GMT
content-type: text/html; charset=windows-1251
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-encoding: br
vary: Accept-Encoding
via: 1.1 google
cache-control: no-transform,public,max-age=86400
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
107.178.251.122
72.251.249.13
54.37.238.28
23.38.200.189
138.199.36.11
93.184.220.29
31.13.72.36
104.18.32.68
95.216.194.18
137.74.6.209