r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3321
Expires: Tue, 31 Jan 2023 11:30:59 GMT
Date: Tue, 31 Jan 2023 10:35:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2939
Expires: Tue, 31 Jan 2023 11:24:37 GMT
Date: Tue, 31 Jan 2023 10:35:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 09:43:17 GMT
content-type: application/json
age: 3141
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11508
Expires: Tue, 31 Jan 2023 13:47:26 GMT
Date: Tue, 31 Jan 2023 10:35:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GsyEYX1PgWYRAfGbxZJUQrkk6ZvchnIc2OekWWOXimzPERzhtAWTX5dUz0lOBlh9UUGklM5ud3I=
x-amz-request-id: RSTN48RH8GA8ZCYB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 10:22:11 GMT
age: 807
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 10:35:38 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 09:41:42 GMT
age: 3237
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.myfidelityexperts.com/
200 OK 16 kB URL HTTP/1.1 www.myfidelityexperts.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1051), with CRLF line terminators
Hash abfb81cef1b2dac3b78ec19b600f05c5
e7daf8d81d8303b46244c8f77f19071522e902ca
e9ffdf1029213dc89abeffe52184b0f11fa86fc56f8f2ef6255d6c7827933435
NIDS Severity Alert suricata high ET PHISHING Possible Phish - Mirrored Website Comment Observed
GET / HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; expires=Tue, 31-Jan-2023 12:35:38 GMT; Max-Age=7199; path=/; samesite=lax
bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D; expires=Tue, 31-Jan-2023 12:35:38 GMT; Max-Age=7199; path=/; httponly; samesite=lax
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11869
Expires: Tue, 31 Jan 2023 13:53:28 GMT
Date: Tue, 31 Jan 2023 10:35:39 GMT
Connection: keep-alive
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:39 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 388375
expires: Sun, 21 Jan 2024 10:35:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PShrqwbk91FUnN0cgd7L7jypVLjVhl013YcGAPPAhhIXya4AbcRV1tW0wBynnDlK9cW34JKdL6WBOdSNk0bOMSc7WxP4csqTsL5D9MnvWR39CTKtT%2F5pBpBDTisl8cRuKmzS2aFL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7921cd437961b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/assets/css/app.css
200 OK 38 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/css/app.css
IP
File type ASCII text, with very long lines (41724)
Hash 952763230b72abfd7b8dde40b308d010
c0a6d1fc274941296eadd287ecba06e07d9e60a9
13f8b27761cff8ddab60f88ae69ff082687c2591234b4e8e8310be54cbeec360
GET /temp/custom/assets/css/app.css HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: text/css
last-modified: Sun, 30 Jan 2022 20:51:48 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 38366
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js
200 OK 10 kB URL HTTP/2 s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js
IP
File type ASCII text, with very long lines (3066)
Hash 14e1ba7d617aa28ec722b457e29f2c23
bbee2f9931ef77a582a0315e1ca08bbc161b75d1
85132415cdd4464c3d3439eb3eff35f1d8ae570202deaa1a31ba30b99cac2df6
GET /external-embedding/embed-widget-forex-cross-rates.js HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 10458
date: Mon, 30 Jan 2023 10:47:34 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 30 Jan 2023 10:47:23 GMT
etag: "14e1ba7d617aa28ec722b457e29f2c23"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YmBK9X_PQzg8b3scragtHhl38bQrbGovX4m7BmQnexHeNdSCsp2f4g==
age: 85686
X-Firefox-Spdy: h2
s3.tradingview.com/external-embedding/embed-widget-market-overview.js
200 OK 11 kB URL HTTP/2 s3.tradingview.com/external-embedding/embed-widget-market-overview.js
IP
File type ASCII text, with very long lines (3066)
Hash 706313e6863b665e0584a4695229b522
27a0e52a26cc8c7bea9f1869e9217127098f4c4b
0b2e3265a04c5ede8e3e961d068f2148d82ea4e844d9d879794b034fb2051819
GET /external-embedding/embed-widget-market-overview.js HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 11178
date: Mon, 30 Jan 2023 10:47:34 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 30 Jan 2023 10:47:22 GMT
etag: "706313e6863b665e0584a4695229b522"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KoTWuNLt-0INVc3L2QbWYsie1II-Rkhhmachx14nMVzIa3aRaWaZdw==
age: 85686
X-Firefox-Spdy: h2
s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js
200 OK 11 kB URL HTTP/2 s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js
IP
File type ASCII text, with very long lines (3066)
Hash e0987380ac0fca8478a5d4aaed9fa286
8da5e8882993121e44557d815e76779974fc1cf5
f297139122eae436f4821d0b6ca590c1d0119f900cf1e6fa93dbc355f92250e0
GET /external-embedding/embed-widget-ticker-tape.js HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 11138
date: Mon, 30 Jan 2023 10:47:34 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 30 Jan 2023 10:47:27 GMT
etag: "e0987380ac0fca8478a5d4aaed9fa286"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6OaUPvgirvSitSAy-ZKmTGr3Vnp0M1vTV92-HInX0KAkMTQldMBMEw==
age: 85686
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/jquery.fancybox.min.css
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/jquery.fancybox.min.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/jquery.fancybox.min.css HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/css/fake-notification-min.css
200 OK 480 B URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/css/fake-notification-min.css
IP
File type ASCII text, with very long lines (643), with CRLF line terminators
Hash 7e245b94da92b4baae689d32d7d79303
3a303867ce63e8b80848f18b74b76a2342001f38
a9ddd33c0de3c3549f856cbdac94c78de64de1d5b68fef7bcae19d2e3df07c2a
GET /temp/custom/resource/views/home/home4/alert/css/fake-notification-min.css HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: text/css
last-modified: Wed, 24 May 2017 10:31:16 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 480
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/aos/dist/aos.css
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/aos/dist/aos.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/aos/dist/aos.css HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/style.css
200 OK 99 B URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/style.css
IP
File type ASCII text, with CRLF line terminators
Hash b2af816e3e0f297e4774c60a643f8f22
e4f70cf0595544f4bcdcca9c4a22cb258c10426c
85ccf1ee0abdc48514cfae474c059c7a25674729d223033bfbef48078e8e2f99
GET /temp/custom/style.css HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: text/css
last-modified: Tue, 14 Dec 2021 01:54:48 GMT
accept-ranges: bytes
content-length: 99
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/js/jquery.min.js
200 OK 34 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/js/jquery.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65480)
Hash ea0e51c890c47877ca8c754b9c59cb85
6542eec63eb6bb379f2ac21241b40caa1f52f0c2
51bac218bdfb4b92e39d8ce80fbc7ce71bb244be111f5abf7b1219d4f7c3999e
GET /temp/custom/js/jquery.min.js HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: application/javascript
last-modified: Sun, 26 Sep 2021 14:43:48 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 33537
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/css/animate.min.css
200 OK 2.6 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/css/animate.min.css
IP
File type ASCII text, with very long lines (16755)
Hash 422af3eb22843463ff9cf821e303052c
a1d469d244a238d1ae178b62d72db3654100287f
a5a4fdc12c653809edbe6c03ce72499471fc004c8e80c071acedb01360b31a6b
GET /temp/custom/resource/views/home/home4/alert/css/animate.min.css HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2017 04:23:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2640
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
code.tidio.co/eybkrrih361uluk00h3oel9z364milkg.js
301 Moved Permanently 134 B URL HTTP/1.1 code.tidio.co/eybkrrih361uluk00h3oel9z364milkg.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /eybkrrih361uluk00h3oel9z364milkg.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 31 Jan 2023 10:35:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://code.tidio.co:443/eybkrrih361uluk00h3oel9z364milkg.js
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C0OZXqg02SLwMJBL9smHglW6ndK54GfWyqQgKoxF7IdjY8cWBWTTvYfrrYVOdePNNzzU1zsWjasCkougrHuPNKs5jctbBVjnWFE61WlgVNXDKk5PXYgHax8g%2BBp0sNo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7921cd43cdd9b4f7-OSL
www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/js/jquery.fake-notification.min.js
200 OK 1.3 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/js/jquery.fake-notification.min.js
IP
File type ASCII text, with very long lines (1999), with CRLF line terminators
Hash f82ef31643c96760a46aa72ae0705580
790978bfd8d8031ccbae236ea74fefe426c2dc26
9e86d2d5f0db35c96ca53c487f2311692d1a3c0191daf75d04e6d1582fc65ec3
GET /temp/custom/resource/views/home/home4/alert/js/jquery.fake-notification.min.js HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: application/javascript
last-modified: Wed, 06 Nov 2019 19:18:40 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1312
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/js/app.js
200 OK 175 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/js/app.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 175 kB (174586 bytes)
Hash 2c2f00e093ed5e3dbc258e907fc90ce0
63a8a5fbe999a95ea93b594ebe58dc996ff45a98
49a8065e52b22f97ddfa8830b45f96b5b6c504d8d2ae3ee92b7923959d1e413e
GET /temp/custom/assets/js/app.js HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: application/javascript
last-modified: Thu, 14 Oct 2021 14:50:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 174586
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/js/jquery-3.2.1.min.js
200 OK 30 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/resource/views/home/home4/alert/js/jquery-3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 2b9c3a55026fa687fa8add847adc9703
f2d759f36127a585a1353362fc0888eb5ccc38f8
5a2a26016574209924c64a06714a35f93eb82a215bb635a98706e3421e5e305d
GET /temp/custom/resource/views/home/home4/alert/js/jquery-3.2.1.min.js HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2017 14:24:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 30229
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/indexAnimate.js
200 OK 101 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/indexAnimate.js
IP
File type Unicode text, UTF-8 text, with very long lines (4086)
Size 101 kB (100830 bytes)
Hash 41e94e3103a41097d7748d9fe8c8598a
3babcc4da57d435184e4839ef69e206049a944be
0f575294415570722611ad779481e049a7e6c658b833932932ac52ac10b3aeda
GET /temp/custom/indexAnimate.js HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: application/javascript
last-modified: Thu, 10 Jun 2021 14:01:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 100830
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.myfidelityexperts.com/temp/custom/assets/icons/sprite.svg
200 OK 19 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/icons/sprite.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (50209), with no line terminators
Hash c80f8b1363d214bcf75806735406ec93
9f2984b88c8222c8db6f42b58da75e23bb937f2f
e5bf42e8e7fa9bca05508ad5e1587817338a04a7b701ea81ca2a54e54eaabffc
GET /temp/custom/assets/icons/sprite.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/svg+xml
last-modified: Thu, 14 Oct 2021 14:49:34 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 19168
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/funds/1.png
200 OK 4.5 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/funds/1.png
IP
File type PNG image data, 258 x 192, 8-bit colormap, non-interlaced\012- data
Hash 562ff539510c580321426f6532d24e61
bccae524b8e8aeda15fc487e2fffc968c8f57abd
a3eff76292ec942c9f8bdf964a080dc860e84a91d68699f92d03a160bb6104a6
GET /temp/custom/assets/images/funds/1.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:48 GMT
accept-ranges: bytes
content-length: 4547
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/steps/2.png
200 OK 23 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/steps/2.png
IP
File type PNG image data, 486 x 190, 8-bit colormap, non-interlaced\012- data
Hash c4ee3bdcd7966a0985d18a48af069469
e118f3741f983ee77a190b0eed2bd08b7d741400
1a48f6c4d84091ed3fcef8a5e2f65354dbb1c1b6dc3ccdb13afd8ed0eb020bd4
GET /temp/custom/assets/images/steps/2.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:50:00 GMT
accept-ranges: bytes
content-length: 23246
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/storage/app/public/photos/pHivnM20221230_105320_0000.png1672395915
200 OK 43 kB URL HTTP/1.1 www.myfidelityexperts.com/storage/app/public/photos/pHivnM20221230_105320_0000.png1672395915
IP
File type PNG image data, 1500 x 1500, 8-bit/color RGBA, non-interlaced\012- data
Hash d9f4705085154b7e2495eef4ad158b09
6777ff7abcffd5290b843b1c04a015e8474da6d1
4821136f252d4e6921e435dad9d0d045563481c32e06600d2b033d22a4faa8cd
GET /storage/app/public/photos/pHivnM20221230_105320_0000.png1672395915 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: application/octet-stream
last-modified: Fri, 30 Dec 2022 10:25:16 GMT
accept-ranges: bytes
content-length: 42604
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/en.4571.9bb2cb4fabb82931346e.js
200 OK 797 B URL HTTP/2 static.tradingview.com/static/bundles/embed/en.4571.9bb2cb4fabb82931346e.js
IP
File type ASCII text, with very long lines (2778), with no line terminators
Hash bf6fee1bdfec94c4764ab2660dadf90d
4b0e2c3367409bd1adaf5de91fee70c48bdf702a
c4cc8118df6f90e7d01f69155309c3ec4a55bef5fbae6850767109f6172d10ed
GET /static/bundles/embed/en.4571.9bb2cb4fabb82931346e.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 797
date: Mon, 30 Jan 2023 10:49:05 GMT
last-modified: Mon, 30 Jan 2023 08:38:10 GMT
etag: "63d781f2-31d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 76kT2ap0iQq0fVoSVVqo6htNv2fKOkJkv5o9sSCOwfbiTUhITweWNw==
age: 85594
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/97532.539979dcf078d6273a99.js
200 OK 6.2 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/97532.539979dcf078d6273a99.js
IP
File type ASCII text, with very long lines (3072)
Hash cee35073ed84483c4d219ccaf440ad20
8483154ddd15f81f95206d6064a7f8d19d725113
34f28b0cde0400f50df2a8115876d1c5327970545e4b06a79cc2fbf946ec7753
GET /static/bundles/embed/97532.539979dcf078d6273a99.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 6196
date: Fri, 13 Jan 2023 10:34:05 GMT
last-modified: Fri, 13 Jan 2023 08:35:55 GMT
etag: "63c117eb-1834"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NRWL7tQ-DcCKs9kK9VGSNmYDUWAgjZZkk1ODDXjRYWOTLJeYPnXSWA==
age: 1555294
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/53748.06fcdc5a1b850f86a915.js
200 OK 5.2 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/53748.06fcdc5a1b850f86a915.js
IP
File type ASCII text, with very long lines (3071)
Hash 88f590630a9c04aafa92a8998a3ba46d
97224e6edc6ceaa37b99d9f3c4fe90852374d115
145cfc81e4942f308abe8eca757c036dfdc28c58645d4eb7ef0822e6abb39f6e
GET /static/bundles/embed/53748.06fcdc5a1b850f86a915.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5167
date: Mon, 07 Nov 2022 10:22:07 GMT
last-modified: Mon, 07 Nov 2022 08:37:36 GMT
etag: "6368c3d0-142f"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Qo8yYrbX3TNfN-8qnJl6Jnwz35qMObJuKAlcxBt8XPNhuKH2KdLT8A==
age: 7344812
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/43312.e9af1171f40e0899fffc.js
200 OK 10 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/43312.e9af1171f40e0899fffc.js
IP
File type Unicode text, UTF-8 text, with very long lines (3290)
Hash d389c17e1956c98d43caf2bfe71bed7f
4e825a70dd383067d384d80c61e1fa19a146a066
5cc73025c6880e8dc57a44c89d42f3b4b88593d4f1cc650cf56af435c4d919fa
GET /static/bundles/embed/43312.e9af1171f40e0899fffc.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 10242
date: Fri, 27 Jan 2023 10:07:05 GMT
last-modified: Fri, 27 Jan 2023 08:38:17 GMT
etag: "63d38d79-2802"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SlfPlVixdisvFYJfN-otFqioCfsLzdaz1agiaEC7KqiRVGw1bkcu7w==
age: 347313
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/88698.c1751595eef9be47dce2.js
200 OK 7.2 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/88698.c1751595eef9be47dce2.js
IP
File type Unicode text, UTF-8 text, with very long lines (5390)
Hash 4e8318aea95e9c71043359620b26b3d4
6b3cffa0c4ae80ef976c71fd2845e86265e1f892
4df5be87634a8f4fb0bbcb5c8f92ce0246c1b603272d60021c27cbeebb068925
GET /static/bundles/embed/88698.c1751595eef9be47dce2.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7211
date: Fri, 20 Jan 2023 10:14:05 GMT
last-modified: Fri, 20 Jan 2023 08:57:11 GMT
etag: "63ca5767-1c2b"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _C1F0h-lknRqNnPbxUuhvq1_I62q0eRuCww5ta35-IMqJk7nd-qtBA==
age: 951694
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a25560f8e2c7fd857b6383793e9950ac
a34f18bd3d9092acfe4fa1dedb4854309570bd6a
9e904eccbbc241f7f21be8e190bfde9f378c90ad95d9dea16413cf7af0c7b55b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 31 Jan 2023 10:35:39 GMT
Last-Modified: Tue, 31 Jan 2023 10:21:02 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RPYKi47pHee-WP3qQG0QVZF1KhCvy1TlgBG8WDP8a60_XhGl1xXy3Q==
Age: 877
www.myfidelityexperts.com/temp/custom/assets/images/logo/slogan-bg.png
200 OK 2.5 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/logo/slogan-bg.png
IP
File type PNG image data, 285 x 66, 8-bit colormap, non-interlaced\012- data
Hash 156a7bad7f67926d7dac3cf24ecbc0aa
bbf590f81333d5df8d33c1ae1c9a78b74af65662
92d9a45f530f1401ed84926d12d6f33d442a3efcffea91f7532019b5c3020e60
GET /temp/custom/assets/images/logo/slogan-bg.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:54 GMT
accept-ranges: bytes
content-length: 2488
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/19240.9336c626b12d6ce72dba.js
200 OK 8.5 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/19240.9336c626b12d6ce72dba.js
IP
File type ASCII text, with very long lines (3069)
Hash 9216b0a0b87778e02faeb2ff277498b2
b08244c80f7e353fa04fafb6cbfff4af88b5754c
19747b95e82723e01aef7b0c56e77fe2ee2b14b24577386ab5c6ee1b6818da1a
GET /static/bundles/embed/19240.9336c626b12d6ce72dba.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 8505
date: Thu, 19 Jan 2023 10:53:06 GMT
last-modified: Thu, 19 Jan 2023 10:06:58 GMT
etag: "63c91642-2139"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Y5ktdSogPPkbews1LHUPWjD1xIh15V0OoI2bx089e_LCDdlpSbdpEQ==
age: 1035753
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/84258.cc38cadc45775e01eebd.js
200 OK 8.2 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/84258.cc38cadc45775e01eebd.js
IP
File type Unicode text, UTF-8 text, with very long lines (16278)
Hash 5500b1282521e5580ea7bff5f9bfbd34
b5731dc435f5f657bad9d72cc55d1f3bd77822f1
c31981f4cf978b0ed5d5bb975ee163132eb142813acb44aeaaf3c1a3a210a1bb
GET /static/bundles/embed/84258.cc38cadc45775e01eebd.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 8242
date: Thu, 19 Jan 2023 10:53:06 GMT
last-modified: Thu, 19 Jan 2023 10:06:57 GMT
etag: "63c91641-2032"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Uh7LSbsiMwQrYXEt6c3QcGPvQON4A4ECUqxSWjXue_uVZs732sqgTA==
age: 1035753
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/forex-cross-rates/?locale=en
200 OK 10 kB URL HTTP/2 s.tradingview.com/embed-widget/forex-cross-rates/?locale=en
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10980)
Hash fbd7e05f22e382973a6a1eba3d503bd6
d7da36e7e47e75d9eabf4017ba8c6ef5433a3951
fecc7e4cbf4fcaab1b600280af6188e1d4f939c1588fb39d22c948842524a212
GET /embed-widget/forex-cross-rates/?locale=en HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Tue, 31 Jan 2023 10:33:52 GMT
expires: Tue, 31 Jan 2023 10:35:52 GMT
cache-control: max-age=120
content-security-policy: object-src 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-olKFUstFe+dJFrOnpD5t4Q=='; base-uri 'none'; default-src 'self' https: data: blob: wss: 'unsafe-inline'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _mh30JvLs9bSrZPREXc5cFKifBCKTbrNM8toRRgMCcLXpWy-DvV6Qw==
age: 107
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/34145.83330e98cd0f13f52e0f.css
200 OK 1.4 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/34145.83330e98cd0f13f52e0f.css
IP
File type ASCII text, with very long lines (9662), with no line terminators
Hash 88f981d4515d17d18a2edb4fd8942d13
8ff9f61ddd215081c2022095cc92ea4f6392fccd
be72f658e95a44000be53a7734d656f75cdb5c90feb7f163d979d4d49588e761
GET /static/bundles/embed/34145.83330e98cd0f13f52e0f.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1402
date: Mon, 19 Dec 2022 17:15:07 GMT
last-modified: Mon, 19 Dec 2022 16:46:08 GMT
etag: "63a09550-57a"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: RPj-EvvTfHZ5gYhaEyaoKGYFQWPRwZh4PzBM6QuwRnrhqd7aTaX6lA==
age: 3691232
X-Firefox-Spdy: h2
s.tradingview.com/embed-widget/market-overview/?locale=en
200 OK 11 kB URL HTTP/2 s.tradingview.com/embed-widget/market-overview/?locale=en
IP
Hash a4eb8e7aba8ed9e705343da3675d79f8
571cf49302b2426efb12f11d7bbb41f1a4e6e368
5d172911d6e94abb7afb9860d69bd7d87b8fb0dc5a249d4fe784fcec31a5f19a
GET /embed-widget/market-overview/?locale=en HTTP/1.1
Host: s.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Tue, 31 Jan 2023 10:34:14 GMT
expires: Tue, 31 Jan 2023 10:36:14 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-3PNBDI+LMcfFxRSzh8A5DQ=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ILPOREP0QIocABSzpPRAJNUCVqe09Y9Ax4_9iuOu-uvo4VvP-a5PQA==
age: 85
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/31755.721cbfb1a5d6784e3109.css
200 OK 564 B URL HTTP/2 static.tradingview.com/static/bundles/embed/31755.721cbfb1a5d6784e3109.css
IP
File type ASCII text, with very long lines (2185), with no line terminators
Hash 7ed223837884f5948564fd6dd3c5ff7f
86048f28dd4b3d8fc9f774e1aafe4fd122fe27ed
30ee848d4507d77674f2a72a9e18cba90abc9026beff1b8b8718818c9d05ac7a
GET /static/bundles/embed/31755.721cbfb1a5d6784e3109.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 564
date: Mon, 19 Dec 2022 17:15:07 GMT
last-modified: Mon, 19 Dec 2022 16:46:03 GMT
etag: "63a0954b-234"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: rxvuWyLrKZ1Jf7W7hkeMkzOSiXnzzZ2qDUGpTfL4HU-HWDj-Dn9YUg==
age: 3691232
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/76045.57ed1f0e14de0ce7dcbb.css
200 OK 353 B URL HTTP/2 static.tradingview.com/static/bundles/embed/76045.57ed1f0e14de0ce7dcbb.css
IP
File type ASCII text, with very long lines (868), with no line terminators
Hash 14c346d106707c0b3f0325f7ce52f520
3d4d8db04d8368ea24d5d2ec270abf332f77425b
66258299fb5e931a5e0b1edafaca840e6bd3f876f4f051422ae629c2ed3c122c
GET /static/bundles/embed/76045.57ed1f0e14de0ce7dcbb.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 353
date: Mon, 19 Dec 2022 17:15:10 GMT
last-modified: Mon, 19 Dec 2022 16:46:11 GMT
etag: "63a09553-161"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OvVDucApaGuWstm3maAXTgdP-6bPK_dteDXvgeO9pOMNA7x2EeB8wg==
age: 3691229
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/66690.c7183a76dc0599de9f42.css
200 OK 634 B URL HTTP/2 static.tradingview.com/static/bundles/embed/66690.c7183a76dc0599de9f42.css
IP
File type ASCII text, with very long lines (3872), with no line terminators
Hash 455d14dd2d025d0d89d3352a26ecd1f4
1de73ef272f245bce880277bcc0bad5c2d018b1a
48912ad688d52df0f8ffd18a9e7dcbfe8fe4c20398e53900a835f21ffdb3f599
GET /static/bundles/embed/66690.c7183a76dc0599de9f42.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 634
date: Mon, 19 Dec 2022 17:15:07 GMT
last-modified: Mon, 19 Dec 2022 16:46:03 GMT
etag: "63a0954b-27a"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: py0ipv_UUAhe8Uavoq8PznuHN6LqoKJEOOJCM4-UNCwbtroJOjf_zw==
age: 3691232
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.tradingview.com/static/bundles/embed/69550.dfd2d402de02e09aca70.js
200 OK 5.6 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/69550.dfd2d402de02e09aca70.js
IP
File type ASCII text, with very long lines (3069)
Hash bb6ce3a90cd84587b22836aec4388012
403dec337c058afbd05b99aa57c86280aa50d2e4
b0bc37ec5881cf1fd7ddf11e346265f847a56465ce260312a246eb8241129414
GET /static/bundles/embed/69550.dfd2d402de02e09aca70.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5551
date: Wed, 18 Jan 2023 11:05:07 GMT
last-modified: Wed, 18 Jan 2023 10:21:40 GMT
etag: "63c7c834-15af"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ifsJgdcOFWC84ihOHQJin0CIbV1J7QO8DqM1sckNiT_SlQ-3eQP7-g==
age: 1121432
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/embed_forex_cross_rates_widget.8709bb089f1bf3ce9ef8.js
200 OK 4.1 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/embed_forex_cross_rates_widget.8709bb089f1bf3ce9ef8.js
IP
File type ASCII text, with very long lines (3064)
Hash f65780d2387b323576157a434cda6656
19539b69eead8547d2e4738036e587b9d4c92d36
18b878de5c4a146fb666d714cbfa70ac04b91ddfc23cf9c6c5d53e5686e8dc43
GET /static/bundles/embed/embed_forex_cross_rates_widget.8709bb089f1bf3ce9ef8.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4141
date: Mon, 30 Jan 2023 10:49:08 GMT
last-modified: Mon, 30 Jan 2023 08:38:11 GMT
etag: "63d781f3-102d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8HZmhXG5dsrfneV1GUjHPpk9g6I0p8E0KVpbrJmTfhGHjDX5sky4fA==
age: 85591
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/47393.4688975c5b64b5291dc2.js
200 OK 5.8 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/47393.4688975c5b64b5291dc2.js
IP
File type ASCII text, with very long lines (3072)
Hash 5e959bd972b973f09a97e463a400eacc
48f7f4d8bb53bd442c8e232b7dfa7fd8bfd51589
856c2adb50beb024553244497df01bbc5a944eb95a46511f31c59309f6856256
GET /static/bundles/embed/47393.4688975c5b64b5291dc2.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5785
date: Mon, 30 Jan 2023 10:49:07 GMT
last-modified: Mon, 30 Jan 2023 08:38:13 GMT
etag: "63d781f5-1699"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: eazm7-adCP5babNasXu8tJ8kvBxwsTK2IFtZJTTVClqjFe9FPjUFYA==
age: 85592
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/52669.c69166c3f0d2b77c3979.css
200 OK 198 B URL HTTP/2 static.tradingview.com/static/bundles/embed/52669.c69166c3f0d2b77c3979.css
IP
File type ASCII text, with very long lines (352), with no line terminators
Hash 07e3277e0ea97eeebc8c0f82424d931d
615831d56bb725b932af98e033a9c58d68c50310
e0f36156cdd7cbc2cddd46ee08b246f3d5cfd2cc953d005de5f975f5412ba388
GET /static/bundles/embed/52669.c69166c3f0d2b77c3979.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 198
date: Mon, 19 Dec 2022 17:15:23 GMT
last-modified: Mon, 19 Dec 2022 16:46:04 GMT
etag: "63a0954c-c6"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: C9G9ZoLhGxVwrxnpA358LnFZvZMX9Q8Dx33KAB-akvjQCa801JtWQg==
age: 3691215
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/62387.6a8cbc22e0e846fafe1f.css
200 OK 195 B URL HTTP/2 static.tradingview.com/static/bundles/embed/62387.6a8cbc22e0e846fafe1f.css
IP
File type ASCII text, with very long lines (783), with no line terminators
Hash e0ed7d7a288bcfacd9205e97a7242cfa
3beb086d754e6581bb8285b5215d71eea84e8758
fb4113130bf3560ca95feb4a9c2565a00a3370c8cd20ba922a739ddb3973dae3
GET /static/bundles/embed/62387.6a8cbc22e0e846fafe1f.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 195
date: Fri, 13 Jan 2023 02:23:14 GMT
last-modified: Thu, 12 Jan 2023 08:43:55 GMT
etag: "63bfc84b-c3"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: fsrD22d8dqSvmJZU-uSO3vvyhqCvaHuGbO2hi3jD7VHuZMKXWSU27A==
age: 1584744
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/73127.775d0b88ac6d0e0ce150.css
200 OK 551 B URL HTTP/2 static.tradingview.com/static/bundles/embed/73127.775d0b88ac6d0e0ce150.css
IP
File type ASCII text, with very long lines (2643), with no line terminators
Hash 85760b437203ac66ca14267073314206
aa14d9c56ebe52a22bc0b9425b30332c4ab94162
8347eb112967638e6b02143bc2e232317622848cfedc0d558239e8e836269886
GET /static/bundles/embed/73127.775d0b88ac6d0e0ce150.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 551
date: Mon, 19 Dec 2022 17:15:08 GMT
last-modified: Mon, 19 Dec 2022 16:46:04 GMT
etag: "63a0954c-227"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: R4E-UoFLJeSIOYuLQyiCnFw6aIQrS2oeOGAp4_fNCqfb87_2j7pbRw==
age: 3691231
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/en.29610.e23cf83ffe2e4e97b106.js
200 OK 6.2 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/en.29610.e23cf83ffe2e4e97b106.js
IP
File type Unicode text, UTF-8 text, with very long lines (3071)
Hash ef4321adcdd0a08b25ede4eddd9f161d
1a15d1c6480ab8f2ce4855d0931ecfeae4c80070
c055a90311f1c787dd45c025df34ceb07ecb6ad723ff3e7016de4d9d03d3ad5b
GET /static/bundles/embed/en.29610.e23cf83ffe2e4e97b106.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 6189
date: Thu, 26 Jan 2023 11:08:06 GMT
last-modified: Thu, 26 Jan 2023 09:48:55 GMT
etag: "63d24c87-182d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qaATUG3ZgD1zxKoFCQSTkdGkvFG0INQO6vxfne7v4SRxQTruUqr6Vw==
age: 430053
X-Firefox-Spdy: h2
www.myfidelityexperts.com/assets/icons/sprite.svg
404 Not Found 2.3 kB URL HTTP/1.1 www.myfidelityexperts.com/assets/icons/sprite.svg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash c9c5d2135b93e247cf576a712767f9dc
ce081f9241173d5eb400030f76df55f681517bc3
c6a8278df1afe15262d0726880140bb02deecec060e80feb425211f34cd6027f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /assets/icons/sprite.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: no-cache, private
content-type: text/html; charset=UTF-8
content-length: 2309
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/runtime.f870b028d5eb60782063.js
200 OK 24 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/runtime.f870b028d5eb60782063.js
IP
File type Unicode text, UTF-8 text, with very long lines (3255)
Hash 8d9474792682f6acd57a28e768ee8595
d0c7747317662a72b6b17f07468b87fa04a09d53
e3083917b864643456076b60521116ce77b87b4906d2405ee8f8f7be696ef22e
GET /static/bundles/embed/runtime.f870b028d5eb60782063.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 24278
date: Mon, 30 Jan 2023 10:49:06 GMT
last-modified: Mon, 30 Jan 2023 08:38:11 GMT
etag: "63d781f3-5ed6"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _qXE3nbi1-ph_NO6_jr9_cgIfOtsFT32X0kzdB98dJMn31eyiTgwXQ==
age: 85593
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/assets/images/steps/1.png
200 OK 30 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/steps/1.png
IP
File type PNG image data, 600 x 233, 8-bit colormap, non-interlaced\012- data
Hash 7c7334408a7750bde8d6f5fab124d22d
b7077633931d6fa0a512d982853029518db94e52
d802ce8db43ae41e1e2cb5b9365b1f8586453a1bac39fe4d7204a8c8ffca518d
GET /temp/custom/assets/images/steps/1.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:50:00 GMT
accept-ranges: bytes
content-length: 29774
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/en.73717.1edce5cc655220d8d9ed.js
200 OK 2.9 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/en.73717.1edce5cc655220d8d9ed.js
IP
File type Unicode text, UTF-8 text, with very long lines (3071)
Hash c3be8cc67c2a125a0b586fcabb6514fc
1a82cd3a87d337c860f8474aa37320e30ba374fc
f530c9680e89c912c7dbac3249d12f4b122b4dabb95c159cba3f92549bbf6823
GET /static/bundles/embed/en.73717.1edce5cc655220d8d9ed.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 2899
date: Tue, 24 Jan 2023 11:29:06 GMT
last-modified: Tue, 24 Jan 2023 10:51:56 GMT
etag: "63cfb84c-b53"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lG6j3pZJfKpKZKdIoGIdRz3oNK-8G94vNuBiwAGvM9F50suCW4ZGxA==
age: 601593
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/46647.2979278b48af03e6d22b.js
200 OK 4.3 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/46647.2979278b48af03e6d22b.js
IP
File type ASCII text, with very long lines (12104)
Hash 629b16c9cebc9f6e700405f1075c7393
3f8b87467a90ebf9b045bd322b05a364144b2dbc
aa3cd78fb089637bc38697d7679e47daacf0872ba1c494ab3d140193c9abaca8
GET /static/bundles/embed/46647.2979278b48af03e6d22b.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 4252
date: Mon, 30 Jan 2023 10:49:05 GMT
last-modified: Mon, 30 Jan 2023 08:38:11 GMT
etag: "63d781f3-109c"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: RKIU0bK-OqUrWr3GtcYSWquEvFhQsc8-9052y5tRgmeiZBm82KN9ug==
age: 85594
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.tradingview.com/static/bundles/embed/962.c105f327045268286f99.js
200 OK 40 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/962.c105f327045268286f99.js
IP
File type ASCII text, with very long lines (3072)
Hash 5c1ebeb66a2023c9fff860122d6c4b52
0d38cbed9154de9fab6ff38ee00c457a7dc6fd8f
7284ea1dc61ebb6ccdcf1fa28e07e4b0fbe8d7c1c46cc3edbb869844eff6e3a8
GET /static/bundles/embed/962.c105f327045268286f99.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 40374
date: Wed, 07 Dec 2022 10:13:07 GMT
last-modified: Wed, 07 Dec 2022 08:32:28 GMT
etag: "63904f9c-9db6"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _hgUxw-ofUKo8vb48YT9WZf9_L9_2FhF9BALvmmfNQPVCKKqLg3FdQ==
age: 4753351
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/assets/fonts/ProximaNova/ProximaNova-Regular.woff
200 OK 52 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/fonts/ProximaNova/ProximaNova-Regular.woff
IP
File type Web Open Font Format, TrueType, length 52396, version 2.3\012- data
Hash 2d2ae2556b24a45ff8d5ed86b07b5783
0822c310a60c575dc88a74a53df20b46c8c97bd4
81c6d1a13227777d009f275f5ecb80bd6c780d2843b9b18fe2809ff9822a2066
GET /temp/custom/assets/fonts/ProximaNova/ProximaNova-Regular.woff HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: font/woff
last-modified: Thu, 14 Oct 2021 14:49:24 GMT
accept-ranges: bytes
content-length: 52396
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/intro/bremby.png
200 OK 3.9 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/intro/bremby.png
IP
File type PNG image data, 248 x 44, 8-bit colormap, non-interlaced\012- data
Hash f64a780f3ca61427efb9c9499880941a
b9a516f36bbd39fdd12c0e2eaec9b425d8852049
65813910e354480588b5fe3b4b36216fe0089a6da6b3a612d94e62af093a150a
GET /temp/custom/assets/images/intro/bremby.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:50 GMT
accept-ranges: bytes
content-length: 3854
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/en.12993.bc966b10da5172d38ba8.js
200 OK 557 B URL HTTP/2 static.tradingview.com/static/bundles/embed/en.12993.bc966b10da5172d38ba8.js
IP
File type ASCII text, with very long lines (1583), with no line terminators
Hash e23d2298e740f6b41d39f65d678b2836
38ff6872dfa0099f8d6aeda54632d6dca637f6c0
7b15130250180458145b54b515d7afdb2a0a6e26a7f26a4e15ba6ffbc12f63c4
GET /static/bundles/embed/en.12993.bc966b10da5172d38ba8.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 557
date: Wed, 18 Jan 2023 11:06:02 GMT
last-modified: Wed, 18 Jan 2023 10:21:40 GMT
etag: "63c7c834-22d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qGO_rl7YPQtsCL9IBkR1f6tb7Sx5xHpUUMe8lWxi-RoUQvsoKaLB_g==
age: 1121377
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.myfidelityexperts.com/temp/custom/assets/images/auth.png
200 OK 598 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/auth.png
IP
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 598 kB (598515 bytes)
Hash 31d4f65c0335c11181c8091a502eea31
b0c1d84dd3f438ea8cda2e970298844b2e4ab1c5
8ccb0271715dfe00fc0138194c139343f25ccbb2560163b5db6cc4eebe8ff85b
GET /temp/custom/assets/images/auth.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/png
last-modified: Tue, 01 Feb 2022 09:53:08 GMT
accept-ranges: bytes
content-length: 598515
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/en.98462.11ec3a6b68176cb2ebc6.js
200 OK 698 B URL HTTP/2 static.tradingview.com/static/bundles/embed/en.98462.11ec3a6b68176cb2ebc6.js
IP
File type ASCII text, with very long lines (2219), with no line terminators
Hash 712f0bc285bd0d4e376c90661b399812
ebeef824c7660fc98f7bc271aebe4a655dcb61be
e928225f5c485963baacee49859ed4e7d22fb5285b95baa1670abc31d4bf562f
GET /static/bundles/embed/en.98462.11ec3a6b68176cb2ebc6.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 698
date: Mon, 30 Jan 2023 10:49:07 GMT
last-modified: Mon, 30 Jan 2023 08:38:13 GMT
etag: "63d781f5-2ba"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: hTgS5rxyEiM-gJYS0Z8OeyvJSO3OMMPPdiCAqDAwa3KoShMc1QDowg==
age: 85592
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/24377.1ff0be7d5ad8cc3820d0.js
200 OK 3.1 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/24377.1ff0be7d5ad8cc3820d0.js
IP
File type ASCII text, with very long lines (3068)
Hash 28016e6519b486335638f735e4b5e552
7d0434d181b2a5df3801a10543fe72c01e0f5985
cc22da3d6042370027240c016a98ede97822cf173e065d68f37053ca09516cd1
GET /static/bundles/embed/24377.1ff0be7d5ad8cc3820d0.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3093
date: Thu, 22 Dec 2022 11:21:06 GMT
last-modified: Thu, 22 Dec 2022 10:52:17 GMT
etag: "63a436e1-c15"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZCOd22i_xgUN1ZVUENl1TAggmT1l5ObHiedh0VHcoji_HPPpElgBzg==
age: 3453272
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/23127.e1a5a557b0a07cfdd28e.js
200 OK 33 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/23127.e1a5a557b0a07cfdd28e.js
IP
File type Unicode text, UTF-8 text, with very long lines (3072)
Hash b756cb2dffe707810616e787ca376abb
ba31a25b3e19e93c22bbb9cb690a09ea60ae7929
220f6178e4d21c6307d75cd01ca6c46050cb1a064663171ae8144aaefb19b0a9
GET /static/bundles/embed/23127.e1a5a557b0a07cfdd28e.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 33012
date: Mon, 07 Nov 2022 10:22:06 GMT
last-modified: Mon, 07 Nov 2022 08:37:34 GMT
etag: "6368c3ce-80f4"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TM602LsJn4T_HMgHuK-i9JfwDTtTbnqooyvyiqKPnehwc6hQsZsAQQ==
age: 7344812
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/86981.19aa0ac24d19d5900500.js
200 OK 12 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/86981.19aa0ac24d19d5900500.js
IP
File type ASCII text, with very long lines (3065)
Hash 3a3005234ed77e61900792ac6d8c78b2
65d2f6fca4dffe84d4d622e56b7c17145f1e978c
8138cffddf96b0f69319d14a2590652fa4e7de1b622fedf08aa3d7298d35037a
GET /static/bundles/embed/86981.19aa0ac24d19d5900500.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 17228
date: Thu, 12 Jan 2023 10:42:06 GMT
last-modified: Thu, 12 Jan 2023 08:43:58 GMT
etag: "63bfc84e-434c"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qlP2OWc5wvtTGdCj_gqrLovtXt85Q8s1l5wt8LLLeu7TtWg9XCnqQA==
age: 1641212
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/99670.6b5aaa59ad8bc561b78c.js
200 OK 8.5 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/99670.6b5aaa59ad8bc561b78c.js
IP
File type ASCII text, with very long lines (3072)
Hash f67f1bddb302bc39c9e91d0cada15cd0
918968f86ad4443589685036dc4d6f6db0ed618a
c8302f0b8276009d5cd7cc6e885c0dff974cd41d00e432a9d5777cb1d1d7f8b7
GET /static/bundles/embed/99670.6b5aaa59ad8bc561b78c.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 8493
date: Mon, 16 Jan 2023 11:55:06 GMT
last-modified: Mon, 16 Jan 2023 11:00:15 GMT
etag: "63c52e3f-212d"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kbuy4khtqQftW-NuBymhMOhYhWYC2MckCDn41jjOk5rqvXIYtkl_qw==
age: 1291233
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/assets/images/investment/notebook.png
200 OK 4.9 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/investment/notebook.png
IP
File type PNG image data, 781 x 455, 8-bit colormap, non-interlaced\012- data
Hash 497d4f2b7616990a18ea385c7ec43988
f8d42e3fb99e2765aaff3f835d01f3c00848ebad
f72c1bd8b5e68e603cf32a93e0f7f135dc183f03ffb03377bd77508aaa8816ef
GET /temp/custom/assets/images/investment/notebook.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:52 GMT
accept-ranges: bytes
content-length: 4938
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/flag2.png
200 OK 106 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/flag2.png
IP
File type PNG image data, 1191 x 1624, 8-bit colormap, non-interlaced\012- data
Size 106 kB (106073 bytes)
Hash ceb1a52644b7a584d9b8d170899c94b0
fcf5b15e1e87ee60fb24a01979b4e885bc46e0b9
9e076fcab7f9ef001f9b923b9e6a53a792fa37273865b9ac954f63de806f1131
GET /temp/custom/assets/images/flag2.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:40 GMT
accept-ranges: bytes
content-length: 106073
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/decor.png
200 OK 109 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/decor.png
IP
File type PNG image data, 621 x 865, 8-bit colormap, non-interlaced\012- data
Size 109 kB (109200 bytes)
Hash 703d3c160a6110eb3c9ab430b1b99e31
5bb7ca21ab0b48919523a7fb7a08c4abf3853a3e
991d749ff2a480508e4f99c6d19305a40a45e1ab26f9a8306a6061cf9d140007
GET /temp/custom/assets/images/decor.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:38 GMT
accept-ranges: bytes
content-length: 109200
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/img/ps/pmusd.png
200 OK 14 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/img/ps/pmusd.png
IP
File type PNG image data, 831 x 271, 8-bit/color RGBA, non-interlaced\012- data
Hash f387bb310d1e2ecfaa1da3412ca68365
4069be02e7233854808afb85b92a3c66d26445c7
d8957acc94ac5ecc4025f36d5abd98c97da423ba2727364f2d41fcac1219593b
GET /temp/custom/img/ps/pmusd.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Wed, 02 Feb 2022 00:41:28 GMT
accept-ranges: bytes
content-length: 14517
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/check-line.svg
200 OK 254 B URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/check-line.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (377), with no line terminators
Hash 6afaf871eb8e93594629cf93154beab5
4b511db5c010e926221324b526c4a80f65081b77
fbef1da9a4ba12a53239de68e2a8f5bd4eb67a9245c2ec15f9c3e90d6819ecea
GET /temp/custom/assets/images/check-line.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Thu, 14 Oct 2021 14:49:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 254
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 00e1e16218a2f9360082cbe6c363be87
127f3e322ce75ec463798b3881f9b07b840280ab
3de6227461b264d5adef6c59586f1d8a49a69e6e9f6c72f1bbd76636db73b269
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=142258
Date: Tue, 31 Jan 2023 10:35:40 GMT
Etag: "63d86862-1d7"
Expires: Thu, 02 Feb 2023 02:06:38 GMT
Last-Modified: Tue, 31 Jan 2023 01:01:22 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kwxE3gjf3Sn4K3fxdlqiGIm_G6M_VBbporMqG2LUlixCu5UDq8NoKQ==
Age: 3916
www.myfidelityexperts.com/temp/custom/assets/images/funds/2.png
200 OK 7.6 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/funds/2.png
IP
File type PNG image data, 258 x 217, 8-bit colormap, non-interlaced\012- data
Hash 4428427e9fdb3e44500a1edebf0f68d9
ac8232a37aed6ec415309539e1446368fa1eeb39
6ce9df0b8ea8c9a1e15d61fbddf1c36fd2ab8b655be29e1caa70b6cf2b23e697
GET /temp/custom/assets/images/funds/2.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:48 GMT
accept-ranges: bytes
content-length: 7631
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
static.tradingview.com/static/bundles/embed/54872.4cdc0fe55e052a702f57.js
200 OK 3.3 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/54872.4cdc0fe55e052a702f57.js
IP
File type ASCII text, with very long lines (3068)
Hash e4c1aec6b22ed901a471d5907cc48fa8
94c39fceeaed6223bc05122ca04ecce71a0561fe
ef55edd582fbc93f2b67b8488b774877a30bb9beefcce7b41c519d0521b88642
GET /static/bundles/embed/54872.4cdc0fe55e052a702f57.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3293
date: Thu, 06 Oct 2022 10:22:10 GMT
last-modified: Thu, 06 Oct 2022 08:21:21 GMT
etag: "633e9001-cdd"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: vyiSb2X7L7qkAJj9RZdAEFy-N_S_xbmgxLCuraOGINIPBMCMkVcjVQ==
age: 10109608
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/11857.c9590548a312217c2cd6.js
200 OK 44 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/11857.c9590548a312217c2cd6.js
IP
File type Unicode text, UTF-8 text, with very long lines (3072)
Hash 8c13dc8c4398a2f48e2a62c8c0f68302
a4294c651d7de79e00b7de87e8f7c628519c8a61
a385f99e05ec24b42e9cecf85800b11a64d16cb46589a1371a7c7ee6652124a2
GET /static/bundles/embed/11857.c9590548a312217c2cd6.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 43473
date: Fri, 02 Dec 2022 10:12:10 GMT
last-modified: Fri, 02 Dec 2022 08:23:04 GMT
etag: "6389b5e8-a9d1"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jwzqiaOJmYoQx_lPFDNf8c6rV7Yj455GjuIZFHFL7fFz6IScmqrhfw==
age: 5185409
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/26089.aa7032f16d42725e431b.js
200 OK 12 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/26089.aa7032f16d42725e431b.js
IP
File type ASCII text, with very long lines (3072)
Hash f20a6659a1ea5ad128e9ddb5900078ea
e6af00293dcbb930b3feeffd4c95962a908bcb72
119df2e3d7dcec6e11e2270b547eb2bff6ca0ea04faecfdf7b21195f2c878e8c
GET /static/bundles/embed/26089.aa7032f16d42725e431b.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 12006
date: Wed, 25 Jan 2023 10:15:08 GMT
last-modified: Wed, 25 Jan 2023 09:01:35 GMT
etag: "63d0efef-2ee6"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aFP8FJSkTJd1VFwsYNPfq-mFWKSgCVtfoggyhqpOMArQkUtI_JLBhA==
age: 519631
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/89998.e5439eb32abf7ed7a867.js
200 OK 19 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/89998.e5439eb32abf7ed7a867.js
IP
File type ASCII text, with very long lines (4251)
Hash 4c2c573e75cb4c60e7ea8f965a89d28d
050ecb097fccec1d39d2e887c490fc9d061458e2
1ba948f370bec4735c50a5de6d46edd57b6daffde679a0c8a278552601f0aa97
GET /static/bundles/embed/89998.e5439eb32abf7ed7a867.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 18630
date: Wed, 25 Jan 2023 10:15:08 GMT
last-modified: Wed, 25 Jan 2023 09:01:35 GMT
etag: "63d0efef-48c6"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7eTxfOOyo6ZNz_Qe2cX-YStEFNCCTfuilXHbKVqzAU_KaAYWB_ClCg==
age: 519630
X-Firefox-Spdy: h2
fonts.gstatic.com/s/manrope/v13/xn7gYHE41ni1AdIRggexSg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/manrope/v13/xn7gYHE41ni1AdIRggexSg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24328, version 1.0\012- data
Hash e85a0263f681aafb7837205b6b0baaa8
d2c7aa9f963a65ad0ce6f969018ca569c3a81cc3
a3c9bb0126992129d561e6615234943f04520c69bdba33205c935ca70414c2ef
GET /s/manrope/v13/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 06:41:35 GMT
expires: Thu, 25 Jan 2024 06:41:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:14:32 GMT
content-type: font/woff2
age: 532445
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/assets/fonts/ProximaNova/ProximaNova-Bold.woff
200 OK 52 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/fonts/ProximaNova/ProximaNova-Bold.woff
IP
File type Web Open Font Format, TrueType, length 52068, version 2.3\012- data
Hash e2cf3dc2f079bf3d5185a02552f153c4
9e900ba7e0890a12a5697fc7ce86c058b145d215
99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1
GET /temp/custom/assets/fonts/ProximaNova/ProximaNova-Bold.woff HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: font/woff
last-modified: Thu, 14 Oct 2021 14:49:22 GMT
accept-ranges: bytes
content-length: 52068
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/funds/3.png
200 OK 6.0 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/funds/3.png
IP
File type PNG image data, 258 x 217, 8-bit colormap, non-interlaced\012- data
Hash 4dbc22849af350b597d33b52e2d8f769
810a18eb78033e0642a64594897893547dedbe73
ed1fd187e5f842730e1c71c7fac127ebf2df5b8274a272b89614f161f20131fa
GET /temp/custom/assets/images/funds/3.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:48 GMT
accept-ranges: bytes
content-length: 6019
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/company/certt.png
200 OK 159 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/company/certt.png
IP
File type PNG image data, 512 x 385, 8-bit/color RGBA, non-interlaced\012- data
Size 159 kB (159390 bytes)
Hash d7cc11838c625fbe9a95c1affcc8e0cc
81a333e084e344a314f9ac887c856d56451eeb57
c1264cadca358943549c8660f111c419251c937d6f1b3e7458045499976b5ec3
GET /temp/custom/assets/images/company/certt.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Tue, 25 Jan 2022 03:55:40 GMT
accept-ranges: bytes
content-length: 159390
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/img/ps/svg/usdttrc20.svg
200 OK 1.5 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/img/ps/svg/usdttrc20.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6436c89176c5b5d0367cb8026428f874
d690a8d491da63da3189c203f42405e25fc8097a
7d6163f83a61a55c7f5a119d07271d0372f16fcc58d40eb91d2b9564d9942c89
GET /temp/custom/img/ps/svg/usdttrc20.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Oct 2021 10:33:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1455
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/img/ps/svg/trx.svg
200 OK 822 B URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/img/ps/svg/trx.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cb2c5be5330d529f7802d6fb60554e5d
0c3746c0f521e845ad6d85c9428d0976c22f57b9
38d620ca578e8ce86588d23a0d40375bf1930984dee114c948fbe3f920e53672
GET /temp/custom/img/ps/svg/trx.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Oct 2021 10:33:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 822
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/img/ps/svg/doge.svg
200 OK 2.7 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/img/ps/svg/doge.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 79864eed70df09420fbf874b44652a6f
fa08ebb57447a4f9269886258f0b7217c2bf70bb
0dbef8a9dc40c381abe728da6d9ece9489a6278922743e82c68cd46d54f9e7d0
GET /temp/custom/img/ps/svg/doge.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Oct 2021 10:33:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2705
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fmarket-overview%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fmarket-overview%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F
IP
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Fmarket-overview%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: frcW5dGt3n+AOm+55f6iiA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 31 Jan 2023 10:35:40 GMT
Connection: upgrade
sec-websocket-accept: 4aJTsthkx6jgWlDheAk889scllI=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
static.tradingview.com/static/bundles/embed/57165.af8aa08dbe841990b9b4.js
200 OK 15 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/57165.af8aa08dbe841990b9b4.js
IP
File type ASCII text, with very long lines (3068)
Hash 69fd457c9988a968e59a4e8771a0ee6c
3243cf98f947d231d153bcb84b6c21ca7cd23f40
2019816ad0e25b24999e9770129e16483ef7459126a27485ec493d45cac638e4
GET /static/bundles/embed/57165.af8aa08dbe841990b9b4.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 15387
date: Mon, 30 Jan 2023 10:49:06 GMT
last-modified: Mon, 30 Jan 2023 08:38:11 GMT
etag: "63d781f3-3c1b"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: L5cP87183UUWWIC_nVa82e207a_Q8BgrkF7-kq1vYCB-dyN1FrueJw==
age: 85592
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/embed_market_overview_widget.dd3c318a2603b93acf53.js
200 OK 1.6 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/embed_market_overview_widget.dd3c318a2603b93acf53.js
IP
File type ASCII text, with very long lines (3043)
Hash 7d93e9a65bd5117a1116125c01808229
407fddc95be12eebd4a05a60d2041fc6cd67a3eb
45761726c2380056d54d54704efa48b3e89d03e842526668ef93a168facae67f
GET /static/bundles/embed/embed_market_overview_widget.dd3c318a2603b93acf53.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1578
date: Mon, 30 Jan 2023 10:49:07 GMT
last-modified: Mon, 30 Jan 2023 08:38:11 GMT
etag: "63d781f3-62a"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 65g8hAkpOtKSXYSE2Nt6QxaUUDMkHxkG01xPr-WjwYiID8xB-NtswA==
age: 85592
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;700;800&display=swap
200 OK 975 B URL HTTP/2 fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;700;800&display=swap
IP
File type ASCII text, with very long lines (772)
Hash 54f5278fca57937536e1d94a39051489
b647e059fbb6e46bc5781b1a7c302a570de86c84
be6b0e2b7b82573be891fc2fb4ef8c1f12ffb8177a7c293fb442dd39da943f81
GET /css2?family=Manrope:wght@300;400;500;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 10:35:39 GMT
date: Tue, 31 Jan 2023 10:35:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/96972.3ff50c27a31c85df6216.css
200 OK 384 B URL HTTP/2 static.tradingview.com/static/bundles/embed/96972.3ff50c27a31c85df6216.css
IP
File type ASCII text, with very long lines (1115), with no line terminators
Hash f1b4b15e1f060fbf92e61bbd0576bb65
356b23cec416941e9c0225661c17905b78e51f72
7439ac021df252663b0d3a34588c069818a202f4527120a70d3c413570d7fa36
GET /static/bundles/embed/96972.3ff50c27a31c85df6216.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 384
date: Mon, 19 Dec 2022 17:15:10 GMT
last-modified: Mon, 19 Dec 2022 16:46:02 GMT
etag: "63a0954a-180"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 0NHVsH0cAODyFzjdPdrULb94Y5GsUgo7OHGmPvTxTBNBhCSnPlHm2g==
age: 3691229
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/75398.2e21e39552e27b0c3f8d.css
200 OK 432 B URL HTTP/2 static.tradingview.com/static/bundles/embed/75398.2e21e39552e27b0c3f8d.css
IP
File type ASCII text, with very long lines (1933), with no line terminators
Hash c8e722ed8aa0917db95031e75082da01
8b92e1abd06633f2979738ff4163fc55b23c4896
8dd64b3904d0e40a53803b6afda37e1d369a393a78c84daff8bc969f89b585b4
GET /static/bundles/embed/75398.2e21e39552e27b0c3f8d.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 432
date: Mon, 19 Dec 2022 17:15:10 GMT
last-modified: Mon, 19 Dec 2022 16:46:04 GMT
etag: "63a0954c-1b0"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: G5qKmarQ6KV6aK96oOo-1IOo-_fNYzYB5ayhBOXtLbD_OYSv9pGrxw==
age: 3691229
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/81063.023d7fd5d9254d34efb3.css
200 OK 646 B URL HTTP/2 static.tradingview.com/static/bundles/embed/81063.023d7fd5d9254d34efb3.css
IP
File type ASCII text, with very long lines (2481), with no line terminators
Hash e964b726a712d5629629b6a57f61d41a
4b587680a1486c665598a4b889a3671aa4b6b719
d4d76a50150c9adb66339ff3740225bc815bf30ff3533042f10caa19bc875e49
GET /static/bundles/embed/81063.023d7fd5d9254d34efb3.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 646
date: Mon, 19 Dec 2022 17:15:10 GMT
last-modified: Mon, 19 Dec 2022 16:46:05 GMT
etag: "63a0954d-286"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: GPrxtzqQQMugVyLI7pwAm6nIGYrbMBdWkmitCm4xurn8vKsdxLsvKQ==
age: 3691229
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/69812.b5b8fd8a12a690d41c96.css
200 OK 72 B URL HTTP/2 static.tradingview.com/static/bundles/embed/69812.b5b8fd8a12a690d41c96.css
IP
File type ASCII text, with no line terminators
Hash a771999df87828e072542b3d8e795b55
fc0d327bc64e6eadcc5e885179a22a5ef95999f7
aaf4d8ef8df6ed738194fbc717c4eb98f5ab426fc4bfa4ce04ba3b3b30752ec2
GET /static/bundles/embed/69812.b5b8fd8a12a690d41c96.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 72
date: Mon, 19 Dec 2022 17:15:10 GMT
last-modified: Mon, 19 Dec 2022 16:46:03 GMT
etag: "63a0954b-48"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
accept-ranges: bytes
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: rX8nY9AHpDTv-AHBGF3g7QU7Bz_LyttUL1h21-QMO3NglCKQvlQdWw==
age: 3691229
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/64820.6a20bee7ae0cf14552d4.css
200 OK 1.9 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/64820.6a20bee7ae0cf14552d4.css
IP
File type ASCII text, with very long lines (11706), with no line terminators
Hash 963e6d61ef1edb5c554fc03f6c4c2ca9
0554b65d78b9e8358e40b6b36c1e15e04d70743a
f1f3cec8d879726e67f8d4223178db809d4cc07fb44512faa0e7eae6b4e90368
GET /static/bundles/embed/64820.6a20bee7ae0cf14552d4.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1855
date: Mon, 09 Jan 2023 10:17:08 GMT
last-modified: Mon, 09 Jan 2023 09:05:56 GMT
etag: "63bbd8f4-73f"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: a3HnKuI7oLLm0IoPD6QMRxTIYnjROAGUxBq2-ujhFp2ciVGapiZmvQ==
age: 1901910
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/26757.dcc8db7fa3fba51df704.css
200 OK 1.8 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/26757.dcc8db7fa3fba51df704.css
IP
File type ASCII text, with very long lines (9295), with no line terminators
Hash 1040a885e653449669e1631f18e0199d
180400e6d5bc4e7690c2bf45e16db9aa8cb0ded3
f04ca40e97cad45e46be8658dddf15b6b95de4419c3a7f0917f5ebed666da4fb
GET /static/bundles/embed/26757.dcc8db7fa3fba51df704.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1764
date: Mon, 09 Jan 2023 10:17:06 GMT
last-modified: Mon, 09 Jan 2023 09:05:57 GMT
etag: "63bbd8f5-6e4"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5qiMRK5QCYfi8GRUWTsRgfk34HhW3vwH85PyxG5mNSDqC-BKs2-WOA==
age: 1901913
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/47136.96f31234261068048b9d.css
200 OK 4.6 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/47136.96f31234261068048b9d.css
IP
File type ASCII text, with very long lines (32941), with no line terminators
Hash d914b759fc47c0de58ffb02ab8cc9ecd
4e3124c37aef7f9065f55b557d5816b5b1356093
e004ee55a929063b2e81e2a9bdc5ede7cc8fb28346390cd85706a45fe8eaf734
GET /static/bundles/embed/47136.96f31234261068048b9d.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 4563
date: Mon, 09 Jan 2023 10:17:08 GMT
last-modified: Mon, 09 Jan 2023 09:06:04 GMT
etag: "63bbd8fc-11d3"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7ZkGaUcNqAAT_SkJbKfKp8W0ZAXY3RC0pIn5YXRUM8lcAzHV5Hneow==
age: 1901911
X-Firefox-Spdy: h2
www.myfidelityexperts.com/temp/custom/video5.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video5.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video5.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/img/ps/svg/ltc.svg
200 OK 1.7 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/img/ps/svg/ltc.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash abc6429e877cc32d37b8b6ed98cec021
8c3d9cc52ca3cbfb3eb6493f36ec0c1efffc6a84
42533fa23185a24c506bd404395e4c73eaf5ae95599ca45b0a78e9234eb25513
GET /temp/custom/img/ps/svg/ltc.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Oct 2021 10:33:54 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1738
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/payments/payment.png
200 OK 31 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/payments/payment.png
IP
File type PNG image data, 572 x 472, 8-bit/color RGBA, non-interlaced\012- data
Hash e7e74180798a40edc45887a7b558ad7e
e559b43ae2ceeeb254743c6c74b7bd2167d5ad1f
a678b09ac6bb860198b42b8aa6bb4b295365daf56f6e10bb1a902a47d473b3f3
GET /temp/custom/assets/images/payments/payment.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Sat, 13 Nov 2021 22:43:22 GMT
accept-ranges: bytes
content-length: 31354
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video7.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video7.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video7.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.myfidelityexperts.com/temp/custom/video8.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video8.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video8.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video9.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video9.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video9.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/icons/box.svg
200 OK 355 B URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/icons/box.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (577), with no line terminators
Hash f7bd6de5b49536e7a9444fdc66ce927d
8fbbebf293944cc297bc9bda1e803b2840fda196
cccc05a328182fcf83fae19b81ad24332ceefc99aea797c2c3a2204052fbecd9
GET /temp/custom/assets/icons/box.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Thu, 14 Oct 2021 14:49:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 355
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/light2.png
200 OK 50 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/light2.png
IP
File type PNG image data, 786 x 1023, 8-bit colormap, non-interlaced\012- data
Hash bb0dad0f15f5b1d5f46c149c625dc688
452697f998b497778ee5376c2f900be0db4df057
4aa9fdb6f7054cd7f2bfca348d013a070c3b16cf6a7c9b5aecd03321e00078c2
GET /temp/custom/assets/images/light2.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:40 GMT
accept-ranges: bytes
content-length: 50537
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/cross-line.svg
200 OK 292 B URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/cross-line.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (530), with no line terminators
Hash 7fd71c2eb551bfc9ea874a43db4856b1
c8db3d28f17d46daf5a5f491008747d989b8a7ab
16dbb9fabcde16dcfeefd2bfdd7d7dc8a2d012024844e2d8d02560c78e5021c1
GET /temp/custom/assets/images/cross-line.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/svg+xml
last-modified: Thu, 14 Oct 2021 14:49:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 292
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/investment/notebook-shadow.png
200 OK 3.3 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/investment/notebook-shadow.png
IP
File type PNG image data, 1014 x 31, 8-bit colormap, non-interlaced\012- data
Hash c527ed45584353c3c5b53fd6943049b9
259606d0c8cb9fc0cd431d9ca1a99abe85463574
4c4c044dddc599dbe4427a1dd8e4fef1d0a97dc8b55719f463f41054404203f0
GET /temp/custom/assets/images/investment/notebook-shadow.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:52 GMT
accept-ranges: bytes
content-length: 3329
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/light1.png
200 OK 36 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/light1.png
IP
File type PNG image data, 923 x 935, 4-bit colormap, non-interlaced\012- data
Hash 396805e17da85a6ebb16319608eb4175
bc57986a68fc96139e31a05d9c99bdc4187b01eb
84e4c31f3f105397e084146d0659875bff20fb02e8c49008ade52b446697580a
GET /temp/custom/assets/images/light1.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/temp/custom/assets/css/app.css
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:40 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:40 GMT
accept-ranges: bytes
content-length: 35686
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video5.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video5.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video5.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video1.mp4
206 Partial Content 326 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video1.mp4
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 326 kB (326106 bytes)
Hash b41c4cfae7c68c11926e5d44148ba8bb
fed4e6300ea466c4b06311224aeb1c448ddfa241
53e962bb4f2d2e0c43c2bd9ad53da99efa40e7b6f5817b74ec61746b10ae9bed
GET /temp/custom/video1.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 206 Partial Content
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: video/mp4
last-modified: Mon, 28 Mar 2022 20:52:08 GMT
content-range: bytes 0-5860832/5860833
content-length: 5860833
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video4.mp4
206 Partial Content 156 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video4.mp4
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 156 kB (155771 bytes)
Hash df65c4e4ad49d707cbd654671c0aefeb
6444564d4a2c27ae2c75059cbb2837db03b4fbc6
342c9bff7401998b442d87dc1937bda47f109f963af87faacc820b7ec6e7565e
GET /temp/custom/video4.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 206 Partial Content
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: video/mp4
last-modified: Mon, 28 Mar 2022 20:52:04 GMT
content-range: bytes 0-1356243/1356244
content-length: 1356244
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.myfidelityexperts.com/temp/custom/video4.mp4
206 Partial Content 1.8 MB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video4.mp4
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 1.8 MB (1763923 bytes)
Hash 8a9b1e6bfc85e1b71d6088f9b64de57e
7fbc04d357a6d8dbae3bd3c6023340e69d663474
3941ca2be4ad0212e910364993d64d771acc0ce89dd19507f42e1a88e6731e7d
GET /temp/custom/video4.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 206 Partial Content
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: video/mp4
last-modified: Mon, 28 Mar 2022 20:52:04 GMT
content-range: bytes 0-1356243/1356244
content-length: 1356244
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/assets/icons/sprite.svg
404 Not Found 2.3 kB URL HTTP/1.1 www.myfidelityexperts.com/assets/icons/sprite.svg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash c9c5d2135b93e247cf576a712767f9dc
ce081f9241173d5eb400030f76df55f681517bc3
c6a8278df1afe15262d0726880140bb02deecec060e80feb425211f34cd6027f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /assets/icons/sprite.svg HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: no-cache, private
content-type: text/html; charset=UTF-8
content-length: 2309
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
code.tidio.co/eybkrrih361uluk00h3oel9z364milkg.js
302 Found 33 kB URL HTTP/2 code.tidio.co/eybkrrih361uluk00h3oel9z364milkg.js
IP
Hash f215e760702582252719de79918da768
3429f3a4025d09dc3e11117cca4ef43321966998
1bc799846ce9258bc67b87f391f46a2dcf8d897c6650eeb90ce0f9989b781075
GET /eybkrrih361uluk00h3oel9z364milkg.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.myfidelityexperts.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 31 Jan 2023 10:35:39 GMT
content-type: text/html
location: https://widget-v4.tidiochat.com/1_137_1/static/js/render.d653de6259cab871576f.js
cache-control: public, s-maxage=300, max-age=0
widget-cache-status: HIT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FlhGJ9FXYVZx4HlWwMUqqAQ%2FgKeCytRIRHN25k0ER%2FBJwZKVMMGtsDS274vuFAPoRpww6H%2FZpybFnmXRA%2FIsNux5iPb%2BB3PlfMfZcvAdp%2B2VYn3Fsa%2BFjUtYX9%2FB2fE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7921cd44cfa70b69-OSL
X-Firefox-Spdy: h2
code.createjs.com/createjs-2015.11.26.min.js
53 kB URL code.createjs.com/createjs-2015.11.26.min.js
IP
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash c6a4be765118157a9dddc3b3ee3eb20d
98b105b3882c3fa83bb91692589e761f26bd2986
5435705c22e74f1553318f85b183687cdfa7da70e256c3577e85b542a2c81490
GET /createjs-2015.11.26.min.js HTTP/1.1
Host: code.createjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
www.myfidelityexperts.com/temp/custom/video3.mp4
206 Partial Content 668 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video3.mp4
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 668 kB (667708 bytes)
Hash 1c0ff09cd474920a72bca1fbe8dd6659
5e33612910918fe1d1c83709cf85f20538c1ee4c
1508aad6ed870961d6f66309a52a8cee41d72d096b3623248940342402a7d8c3
GET /temp/custom/video3.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 206 Partial Content
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: video/mp4
last-modified: Mon, 28 Mar 2022 20:52:06 GMT
content-range: bytes 0-2897442/2897443
content-length: 2897443
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/assets/images/intro/robot.png
200 OK 172 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/assets/images/intro/robot.png
IP
File type PNG image data, 4268 x 4268, 8-bit/color RGBA, non-interlaced\012- data
Size 172 kB (171988 bytes)
Hash 2e32c80479d4bed505019c14eacaf480
f4a29b47546baa05e9a031c2e64de6a225439345
8ec39e3f0e4f8300ee7105898c4da61f180a5ffedd1f90d2d2f2603a15b702c1
GET /temp/custom/assets/images/intro/robot.png HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 07 Feb 2023 10:35:39 GMT
content-type: image/png
last-modified: Thu, 14 Oct 2021 14:49:50 GMT
accept-ranges: bytes
content-length: 122539
date: Tue, 31 Jan 2023 10:35:39 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video9.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video9.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video9.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video7.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video7.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video7.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
www.myfidelityexperts.com/temp/custom/video8.mp4
404 Not Found 1.2 kB URL HTTP/1.1 www.myfidelityexperts.com/temp/custom/video8.mp4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /temp/custom/video8.mp4 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 31 Jan 2023 10:35:40 GMT
server: LiteSpeed
widget.coinlib.io/widget?type=chart&theme=dark&coin_id=859&pref_coin_id=1505
200 OK 50 kB URL HTTP/2 widget.coinlib.io/widget?type=chart&theme=dark&coin_id=859&pref_coin_id=1505
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1949)
Hash f9638d11a73bc4629688eacce9a41de2
0f2b08065d2d73605a39f04f35f7345f23dbc2ca
098c51c447dc8426d3fba15c2961e81c31b25732ae6ea46674f6b8fdf4b60274
GET /widget?type=chart&theme=dark&coin_id=859&pref_coin_id=1505 HTTP/1.1
Host: widget.coinlib.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:40 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: must-revalidate
vary: User-Agent,Accept-Encoding
set-cookie: IDENTITY=550d8bcb28413cf653c85fd74b2f95f9d625f8d6
x-cached: MISS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BfmwhohaFyitC7SYOl1Ej6T8DvDSLNb2CTqHMHKnLp%2BKTNcgan27p4DDdBZ%2B7MrHt%2F7IUV%2Bds6AWr5eFODl5jqq5hjEz7q2OlxTJHX5%2B13iqKJTa9MmUgMqHhQu6NuJWjHn%2F3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7921cd46fc34b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6c15c2f4c3cdad0bbb521e7fdffd5c0
ae9686ecb6edca46848ba5f39b7f788667cca4fc
fdcae3e805555c31720159443a571ecd52068a5d4a4071f914f4a66c32432e47
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FDCAE3E805555C31720159443A571ECD52068A5D4A4071F914F4A66C32432E47"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1707
Expires: Tue, 31 Jan 2023 11:04:07 GMT
Date: Tue, 31 Jan 2023 10:35:40 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=UA-96861365-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-96861365-1
IP
File type ASCII text, with very long lines (1759)
Hash f6c3a8a5f4674d94a668ae1f48c13e8c
6d0c9129ace319c93eebd9282616150bc855d2f3
eb543c85899f1dcbabd612f206f07b955f5bc7c149ff899010cdf246d2f9f420
GET /gtag/js?id=UA-96861365-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.tradingview.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:40 GMT
expires: Tue, 31 Jan 2023 10:35:40 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44011
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/24966.415109541489380d12f6.css
200 OK 263 B URL HTTP/2 static.tradingview.com/static/bundles/embed/24966.415109541489380d12f6.css
IP
File type ASCII text, with very long lines (801), with no line terminators
Hash a5501dde4f0f8b021165f26294df2eed
456323dea6ee46ed2b826b4522e46ab66daa9b26
1e182c333d93a3cebe943dc8291a3e9378891255fc8ae3b85eb35bf71d0fba40
GET /static/bundles/embed/24966.415109541489380d12f6.css HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 263
date: Mon, 19 Dec 2022 17:15:14 GMT
last-modified: Mon, 19 Dec 2022 16:46:05 GMT
etag: "63a0954d-107"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: oWszsXuTd9nqfV1MJvO8dgY28_rlh-q2Z4Fr4FM3Z0APCAJMzuFq9A==
age: 3691226
X-Firefox-Spdy: h2
static.tradingview.com/static/bundles/embed/tradingview-copyright-data-impl.633dde454d123fa388d9.js
200 OK 2.2 kB URL HTTP/2 static.tradingview.com/static/bundles/embed/tradingview-copyright-data-impl.633dde454d123fa388d9.js
IP
File type ASCII text, with very long lines (3332)
Hash 43ba6c1f2bb68b71ff7379877bd627ab
f35080b5d8e580c7b7437782601a1ebd5458de88
d30121c6ef86241cddd1c6463bcff46c65469adecdf7e436067ec73dd5015d6a
GET /static/bundles/embed/tradingview-copyright-data-impl.633dde454d123fa388d9.js HTTP/1.1
Host: static.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2232
date: Wed, 21 Dec 2022 10:50:08 GMT
last-modified: Wed, 21 Dec 2022 10:09:18 GMT
etag: "63a2db4e-8b8"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KYQa-aNFVxyYx6191toAtXlMOfArvx2pJh6yoK921x9KpwuZLTmQcQ==
age: 3541532
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 702 B IP
Hash a8dd79c77dc52cff248afdb302958634
43dd1569eb9f1778b6d6e3b84709751232e2292f
8232d63dbb1e813fa41144d8ff1a5f54b0837eeebdabbf4501663f79c8fed467
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5051
Cache-Control: max-age=163869
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:41 GMT
Etag: "63d8b85f-118"
Expires: Thu, 02 Feb 2023 08:06:50 GMT
Last-Modified: Tue, 31 Jan 2023 06:42:39 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 924 B IP
Hash c98233feacdb8fd1ae05e68a3bf056e2
5560a25647651605af90e65dd557f0eeaa325def
5bd76822efea5dcad5573c54b77d1089a9a8b036bc072c4a4ec35225f80a740d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6108
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:41 GMT
Last-Modified: Tue, 31 Jan 2023 08:53:53 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6c15c2f4c3cdad0bbb521e7fdffd5c0
ae9686ecb6edca46848ba5f39b7f788667cca4fc
fdcae3e805555c31720159443a571ecd52068a5d4a4071f914f4a66c32432e47
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FDCAE3E805555C31720159443A571ECD52068A5D4A4071F914F4A66C32432E47"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19363
Expires: Tue, 31 Jan 2023 15:58:24 GMT
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 96 kB IP
Hash e6d2064b61b8126dd80f2d068770a88c
a354dd8ad2c8b0abc2d5073d450916a74eb25edc
2d30bcd08beb321a8422698c1fdd7895ed2e42fccd954d45a0b466ab65ea7c7f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-102435151-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-102435151-1
IP
File type ASCII text, with very long lines (1759)
Hash 6a2b0f70f3839c2b579e874b57f9c693
37055d692138f186d49b6ff28015739b31b21e05
002d15fd341fdd3490c5a85379c9f7e114a75eef535a3a6120c8ae007fa20275
GET /gtag/js?id=UA-102435151-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.tradingview.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:41 GMT
expires: Tue, 31 Jan 2023 10:35:41 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44096
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-K638SKQ
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-K638SKQ
IP
File type ASCII text, with very long lines (1759)
Hash da20ef722ce69bee0e5d345b2421ffe3
e90a89aab8b05aa627423a0e561c40c545741dcc
f26a1606af41209ad308c37e3189568fa52da7e69ef8dac79c98f04ce4c06603
GET /gtm.js?id=GTM-K638SKQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.coinlib.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:41 GMT
expires: Tue, 31 Jan 2023 10:35:41 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38094
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3110
Expires: Tue, 31 Jan 2023 11:27:31 GMT
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3110
Expires: Tue, 31 Jan 2023 11:27:31 GMT
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3110
Expires: Tue, 31 Jan 2023 11:27:31 GMT
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3110
Expires: Tue, 31 Jan 2023 11:27:31 GMT
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3110
Expires: Tue, 31 Jan 2023 11:27:31 GMT
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: djoQmYTv7Rlq9tKKkJ5U1J3YeVSIs5yzSts_xRN3bdi27Ra8UfM6OQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:44:45 GMT
age: 46256
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/EU.svg
200 OK 13 kB URL HTTP/2 s3-symbol-logo.tradingview.com/country/EU.svg
IP
Hash 6b460ed0f4c89746ea90f48dd8e5fe2a
058809e6fc9dc3b90e25416eee3b9dded0dd3199
50449e22107e7d7ba79f5223f536e9e33058618e4136b4d05a4f477642bc5559
GET /country/EU.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 870
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:01:40 GMT
x-amz-meta-hash: e9173ef4613c3da43c45885ea39c4b96
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 09:48:37 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "e9173ef4613c3da43c45885ea39c4b96"
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wHMv7QTVcTwpgIeH5c_mmRtn2pipuMNUu6wb6m-uxslyNPNHp8qs9g==
age: 2828
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/JP.svg
200 OK 215 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/JP.svg
IP
File type exported SGML document, ASCII text, with no line terminators
Hash dd1bc2f51b952d5c3421a69d6febe6ce
b501eef8705cc2c8e9d8b9a9ce431d70e1ef0f71
147aa1297638071607ef5cf0d722c1953c6716e61ef32f58e3fb7fd132ce84ee
GET /country/JP.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 215
date: Tue, 31 Jan 2023 09:40:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:00:59 GMT
etag: "dd1bc2f51b952d5c3421a69d6febe6ce"
x-amz-meta-hash: dd1bc2f51b952d5c3421a69d6febe6ce
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
server: AmazonS3
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: H6SPgEyqR0Y4AXnb1foJfY4tVep3fYKh0Dqg9-q8Hz9CpdJQRI7Rtg==
age: 3327
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mXlQ5A2PHadECkKglPquN9x68ubYk8s2to-_JjCgEQe7axfJo6K8Jw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:27:20 GMT
age: 11301
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/GB.svg
200 OK 468 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/GB.svg
IP
File type exported SGML document, ASCII text, with very long lines (468), with no line terminators
Hash 09bfac5408302ee8c52fa2ed008c4f13
ec2b53eba8ec1a31fc6745cd9c4fc09518db1c2f
b3e463d925abc879f5b76428144c0da44bc02fae2188f71bc9e7aa7ab6f46037
GET /country/GB.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 468
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:01:59 GMT
x-amz-meta-hash: 09bfac5408302ee8c52fa2ed008c4f13
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 10:30:54 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "09bfac5408302ee8c52fa2ed008c4f13"
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2PalcvpkPrsy8c9pxuY9SUF9HiE68yLsWOVE6-j2xYBnxv0FrdaNXA==
age: 288
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/CH.svg
200 OK 236 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/CH.svg
IP
File type exported SGML document, ASCII text, with no line terminators
Hash 2390cb6eb08128c8300b6a29c41f2842
de96debc38e1b541ef81692120f1099d1f1e9d20
3b66ebe14df724fa1f4efc29bf7b8658975e89be92202238d75fad8badc68d36
GET /country/CH.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 236
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:01:10 GMT
x-amz-meta-hash: 2390cb6eb08128c8300b6a29c41f2842
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 10:16:36 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "2390cb6eb08128c8300b6a29c41f2842"
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: k5lz1pBDYAJ-t6_r5ewD-DGdK8j0VfSy-wfEj2uqouLyG0tPAOSIPg==
age: 1161
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/AU.svg
200 OK 6.1 kB URL HTTP/2 s3-symbol-logo.tradingview.com/country/AU.svg
IP
Hash 4e6bb374e33d63a96739c9a6bc94a8bb
7400534c14d2fac89c7558ed1e27068cfe45c419
3ad6104fb53a2a526fb9da9ec044bf1b82b1bca4d22d8fdb79de56d56bcf0b5b
GET /country/AU.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 937
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:02:00 GMT
x-amz-meta-hash: ffaa89557725b51eb58753956db0a148
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 10:20:20 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "ffaa89557725b51eb58753956db0a148"
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VaXJkf51Qf3Ri6zzV6mxILiWrbtYsZbo2f4Ib38H9WWp4y1-CjZllw==
age: 926
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/NZ.svg
200 OK 11 kB URL HTTP/2 s3-symbol-logo.tradingview.com/country/NZ.svg
IP
File type gzip compressed data, from Unix\012- data
Hash 91559c81027c34b01bfce12273e52017
f89de882e0621bc67cc59f3d25ce7a41828038f3
1d023f2d6e7912eef3f572f986cdade5eef29d4ae78a12ab213cb1e644341a3e
GET /country/NZ.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 758
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:02:45 GMT
x-amz-meta-hash: 0e5e9551012f82040a663aae26aa2cd8
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 09:42:09 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "0e5e9551012f82040a663aae26aa2cd8"
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sTUlIatJwxBJiBPTEOWKts4-zoIcVp4gVJoqtkNOSEWW3ynSeTVBCg==
age: 3224
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 976dda397f9292a498ca9db5599c0378
dad9e9c3462907a2475046aee36d57f8309cd44e
7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6bbFjAsd03GN8zzBnAFBm7xA8igZ_xHJsOHzw7nwNgRxiWUDLPGjpQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:53:29 GMT
age: 31332
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/CN.svg
200 OK 434 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/CN.svg
IP
File type exported SGML document, ASCII text, with very long lines (434), with no line terminators
Hash 8ea3ac67cd773a94323070920d5a3794
530c18f6cbd795cbc9603ad8d0740c0bbf1bf9c3
991251c6f527ed5af6ffe76e6d8b63435ea972f986ef4a5d8908fef5fa9214fd
GET /country/CN.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 434
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:01:42 GMT
x-amz-meta-hash: 8ea3ac67cd773a94323070920d5a3794
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 09:41:57 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "8ea3ac67cd773a94323070920d5a3794"
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EvYqolk_p0a95tKXpZzaCJ7GI6K4pWg2crlNF6rph83-QmqtD0k2bQ==
age: 3224
X-Firefox-Spdy: h2
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fforex-cross-rates%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fforex-cross-rates%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F
IP
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Fforex-cross-rates%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NX7RpHPUcoPRUTituRWLQw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: upgrade
sec-websocket-accept: J8onoDeM5f1Onhko/ab0Axi4dy8=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 45138
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/CA.svg
200 OK 298 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/CA.svg
IP
File type exported SGML document, ASCII text, with no line terminators
Hash f0b4af400bc4e1017e56de16550915a8
60ab455990aa7f8bdbb54ecac4641202792e590e
47b7b7098df6ea46fb0d3d1fe816b196262ef4fe1378b227056a4075eb50e0f7
GET /country/CA.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 298
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:02:24 GMT
x-amz-meta-hash: f0b4af400bc4e1017e56de16550915a8
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 10:35:41 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "f0b4af400bc4e1017e56de16550915a8"
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tkwnN6tI65ZIwbvgEPEMH1dZfUHRtX8zd8Cz-KBfGQ2tdD5Wy7VKlw==
age: 1
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 31045
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1160f45d26f7273ae6bdc1e13d83b3a2
6fddcc1dd5d74483262416789ea4d7e58e25b8f3
4913026e1a2d011fb8494051dacb327cdf380ba9dd346f29fb509d44efe4a06f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106837
Date: Tue, 31 Jan 2023 10:35:41 GMT
Etag: "63d7d481-1d7"
Expires: Wed, 01 Feb 2023 16:16:18 GMT
Last-Modified: Mon, 30 Jan 2023 14:30:25 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 30rnrIFnvM-m7xP7iLsWDBilM2hSwFX0fatbhIzm2UVX8O7sNXOpzA==
Age: 6353
ocsp.digicert.com/
200 OK 279 B IP
Hash e5748273227c7a6233d5b4fb89e62fb7
d99a37682ebefb5684bef7756cc6675e1e30ef8c
e9ab58f0a08a8823c8517fa50188afd82fcad16992705378ac36fa17334a0caa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4988
Cache-Control: max-age=108749
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:41 GMT
Etag: "63d7e14e-117"
Expires: Wed, 01 Feb 2023 16:48:10 GMT
Last-Modified: Mon, 30 Jan 2023 15:25:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fticker-tape%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F
101 Switching Protocols 0 B URL HTTP/1.1 widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fticker-tape%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F
IP
ASN #199524 G-Core Labs S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/websocket?from=embed-widget%2Fticker-tape%2F&date=2023_01_30-11_26&page-uri=www.myfidelityexperts.com%2F HTTP/1.1
Host: widgetdata.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iUPBxIz40rLjibteff0avg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 31 Jan 2023 10:35:41 GMT
Connection: upgrade
sec-websocket-accept: G/JDC4nxGEGwR8LqSU+YpFBKyLE=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.tradingview.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 31 Jan 2023 09:45:20 GMT
expires: Tue, 31 Jan 2023 11:45:20 GMT
cache-control: public, max-age=7200
age: 3022
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.myfidelityexperts.com/storage/app/public/photos/giuNrOfavicon.png1644161897
404 Not Found 2.3 kB URL HTTP/1.1 www.myfidelityexperts.com/storage/app/public/photos/giuNrOfavicon.png1644161897
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Hash c9c5d2135b93e247cf576a712767f9dc
ce081f9241173d5eb400030f76df55f681517bc3
c6a8278df1afe15262d0726880140bb02deecec060e80feb425211f34cd6027f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /storage/app/public/photos/giuNrOfavicon.png1644161897 HTTP/1.1
Host: www.myfidelityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Cookie: XSRF-TOKEN=eyJpdiI6IktZenpIdTMyUXVRWDQrdkNBRHVRL3c9PSIsInZhbHVlIjoibVdPdDdJSVlEdnNnaE1ZNlpPVmlzRWxtMTBwRW5KSzBqT3pPQzdXblpWSEhoRUxFNGpoNXJ6ZjdmTmo0R2J5Z1U5d2N6QVIydTdKRm11cDVkRW8xVEQvQWo5eko1THVGSFllZllYdjk2Ui9oLzU1YkE3ZzI4NW5ZOEVzdUlTNk0iLCJtYWMiOiI2NDQ0MmJlMGVmYjFhMGQ2OWUyMDU0ZGUyOGE0Mzg5YmQ2NzM0MmNiY2QzYzIxOGNlYmJiMjJmNGUxNDExYTdiIn0%3D; bitcoin_investment_session=eyJpdiI6IlZMTzU1MDhxcENhUGJpbC9ZcjNuenc9PSIsInZhbHVlIjoicVBma0VQOHR5WDBDZTdiZGIwVDFCQWpMVGd4ZDg0c0ErQlVEYklMeW1YT1RYaGx5YXc0eW53R3hMdW9mTHgyckJYN2NrR1lLV21LQjUvY0FQQkxIZzh6alpDZ3lYNTg4TE5XTHhsNFlRLzZpVWkyYnJKb1QxZndsd05Nd2pxRHoiLCJtYWMiOiI3YTcyZGMzZDZjZmQzNzc1ZjNiZGNlY2I4N2RkOTgwNTUzMTUxNTRhNzMxMWE5NmFlZTJiYTQzNzBlYjg5Njk5In0%3D
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: no-cache, private
content-type: text/html; charset=UTF-8
content-length: 2309
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 31 Jan 2023 10:35:42 GMT
server: LiteSpeed
ocsp.digicert.com/
200 OK 279 B IP
Hash e5748273227c7a6233d5b4fb89e62fb7
d99a37682ebefb5684bef7756cc6675e1e30ef8c
e9ab58f0a08a8823c8517fa50188afd82fcad16992705378ac36fa17334a0caa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4989
Cache-Control: max-age=108749
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:35:42 GMT
Etag: "63d7e14e-117"
Expires: Wed, 01 Feb 2023 16:48:11 GMT
Last-Modified: Mon, 30 Jan 2023 15:25:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
widget-ws.coinlib.io/socket.io/?EIO=4&transport=websocket&sid=Arzzt0W68ISs8X13DLmB
101 Switching Protocols 0 B URL HTTP/1.1 widget-ws.coinlib.io/socket.io/?EIO=4&transport=websocket&sid=Arzzt0W68ISs8X13DLmB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /socket.io/?EIO=4&transport=websocket&sid=Arzzt0W68ISs8X13DLmB HTTP/1.1
Host: widget-ws.coinlib.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://widget.coinlib.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0jRv2BRWXvuOAM+m/vatxw==
Connection: keep-alive, Upgrade
Cookie: __cf_bm=pGwNU1S.0AfK.2u8uv29RLs4aUggByc7Ip3I2.yKs.c-1675161342-0-AXDD8W3GpI6TBpvzhv1eIwz13RzsKq7XRoa0oCJEMaoWN/wBASrZdPZWVEl2dOHMi4INipzuqiA6WNUVakB9R9CdpeiyPCfgEumGYYh4A4K75Fac+bGASm3OgaWFP3EL5wk9p5MnD5r6HL2cdDkIpIw=
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 31 Jan 2023 10:35:42 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HPMalNqAG5DrzGz8a4ZR/yDoShk=
Sec-WebSocket-Extensions: permessage-deflate
CF-Cache-Status: DYNAMIC
Server-Timing: cf-q-config;dur=6.0000002122251e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=utjWamEPTnGl7SDjMw2jR3jkqY9Uzf1xrDIz6VmHZbEkFrMQqZfvGgLCpX7F3BlRV87%2BIwVcFWOg2HXrYr%2BUgiBaWKUaK8H2%2FFvei179avHP786U%2BzCv2fd1SpkOTUzrfQX9h1qsKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7921cd561a0c0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
embed.tawk.to/6234c2a01ffac05b1d7f482a/1fuf1gh40
200 OK 18 kB URL HTTP/2 embed.tawk.to/6234c2a01ffac05b1d7f482a/1fuf1gh40
IP
File type ASCII text, with very long lines (36857), with no line terminators
Hash 465515fbe734c2b32dd912d453c7bffe
f7dfcbf2d14046d4db3cfb5c01472414fe5a5aa4
d3611e4f3b5abd39240e83362c1ee73e83f41625178a347f3568891159186b64
GET /6234c2a01ffac05b1d7f482a/1fuf1gh40 HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-63b77dcd282"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd51a9b7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
200 OK 94 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
IP
File type ASCII text, with no line terminators
Hash 913b447ec871ab7eec8bec1005ff8e77
f95d547853ca5c389299636dfc202157042bb4c5
49aee71bb91db74830cb43c94ad5aeaf0d1e4e82de7006266707bca0ef046155
GET /_s/v4/app/63b77dcd282/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd55aecdb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
200 OK 8.4 kB URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
IP
File type ASCII text, with very long lines (2306), with no line terminators
Hash c04e9c8a4d624485ab9f982631c945fe
cb6ad92dfe09d65fb92a06d888620083315e0cf6
570f64c4336dc31826790b70e5ac9ae086a858d0cfd84bbb5fa1ee22c802615d
GET /_s/v4/app/63b77dcd282/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"de21d01e9f8b6cc35ea67267d0ba80ec"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd55beebb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 476 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 431b61dbf9f1265036d7575e0a4cdd7b
a6785f8e3d6adacc46c08ceac6b3b5ccc5338d2b
7c3e9bb94e1ef5f69ea6eec8ede15a967122468488e27b375e35d968b5392d8e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89817
Date: Tue, 31 Jan 2023 10:35:43 GMT
Etag: "63d79c69-1d7"
Expires: Wed, 01 Feb 2023 11:32:40 GMT
Last-Modified: Mon, 30 Jan 2023 10:31:05 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p_lsi58JjLtitpBDAXKtxgrUxlQ5t58epEy4buie30xuAFsDn7rAig==
Age: 3695
widget-v4.tidiochat.com/1_137_1/static/js/chunk-WidgetIframe-d653de6259cab871576f.js
200 OK 91 kB URL HTTP/2 widget-v4.tidiochat.com/1_137_1/static/js/chunk-WidgetIframe-d653de6259cab871576f.js
IP
File type ASCII text, with no line terminators
Hash 4e8c9186a27d39bd21ea9d460391b36f
56f029a4dc4c67bf6415010602691527ef6d8e35
bd56e732407792c38342084b2f0996c3774c475c232bab23cd613e097bfe765c
GET /1_137_1/static/js/chunk-WidgetIframe-d653de6259cab871576f.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:43 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 08:23:15 GMT
vary: Accept-Encoding
etag: W/"63d389f3-563bd"
cache-control: max-age=691200
cf-cache-status: HIT
age: 539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QDpfUaWx%2FjrU50IpIsTi7EBXHDXKQqqZyUkAcUsHiea5ivxfDArNDzmnl1xbcVHjRi7j9kGU7gkXXtnt6Vx3iswiIjwd8kNbov2645Y4JNbIJg4kci6qXoVymSaI7%2F6qDvkE8bdn2gO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7921cd5a6944b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2
200 OK 32 kB URL HTTP/2 fonts.gstatic.com/s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2
IP
Hash a308e06a710a348d1b21bdbf97bd3769
61d98806db430f3468ba583931e3439ce4d49bd6
877b443a7a73d3486417241493176295945af07c793490e29b0bfc761da4ccf9
GET /s/mulish/v12/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27428
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 21:59:20 GMT
expires: Sat, 27 Jan 2024 21:59:20 GMT
cache-control: public, max-age=31536000
age: 304584
last-modified: Mon, 11 Jul 2022 18:57:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3-symbol-logo.tradingview.com/country/US.svg
200 OK 0 B URL HTTP/2 s3-symbol-logo.tradingview.com/country/US.svg
IP
GET /country/US.svg HTTP/1.1
Host: s3-symbol-logo.tradingview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 31 Jan 2023 09:43:53 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30
last-modified: Wed, 08 Sep 2021 09:01:07 GMT
etag: W/"2a945cbbe3767a4009ec5f2c655780a7"
x-amz-meta-hash: 2a945cbbe3767a4009ec5f2c655780a7
cache-control: max-age=2592000,s-maxage=3600
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: eytFkiN7E5ClzIq9TpiSVubpxnbWz34U4eoUapruahmJieoF1LYrZg==
age: 3109
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
IP
GET /_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"70dac54eca3bb2143032bc4db3237623"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd55aedab524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_hover=no
200 OK 0 B URL HTTP/2 widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_hover=no
IP
GET /widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_hover=no HTTP/1.1
Host: widget.coinlib.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:39 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: must-revalidate
vary: User-Agent,Accept-Encoding
set-cookie: IDENTITY=b166988519d670398cac2884323f97756c3b9dfa
x-cached: MISS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a2oEAU2zyZi5LncI2oavD2CimEu6CjEHdgepuJE04mB5ScF%2BPM2uxaPx7AICuLyuNLnVFEdbhnNbcLa9IsYm4xWj%2B3od3qCK1RhvKLMp%2BcLmxQrqOdtDJC%2BLwOzDwFCzrKxI6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7921cd44c97eb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget-v4.tidiochat.com/1_137_1/static/js/render.d653de6259cab871576f.js
200 OK 0 B URL HTTP/2 widget-v4.tidiochat.com/1_137_1/static/js/render.d653de6259cab871576f.js
IP
GET /1_137_1/static/js/render.d653de6259cab871576f.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.myfidelityexperts.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:40 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 08:23:15 GMT
vary: Accept-Encoding
etag: W/"63d389f3-570f"
cache-control: max-age=691200
cf-cache-status: HIT
age: 615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eCPo%2F6wHQiHcHGnPMahr3qRC9rVhgAq810xHFJUosocpHv%2BhrtKWL7VZuGO1WZdIlgy5mXr8XmIUSP28K7A%2BzGlhNQKBajwVOX5oQcLB8ako3GRMxdz8A9quk2RDuWUdkkhHf6ltb0JZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7921cd498acdb503-OSL
content-encoding: br
X-Firefox-Spdy: h2
widget-v4.tidiochat.com/1_137_1/static/js/widget.d653de6259cab871576f.js
200 OK 0 B URL HTTP/2 widget-v4.tidiochat.com/1_137_1/static/js/widget.d653de6259cab871576f.js
IP
GET /1_137_1/static/js/widget.d653de6259cab871576f.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:43 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 08:23:15 GMT
vary: Accept-Encoding
etag: W/"63d389f3-83bda"
cache-control: max-age=691200
cf-cache-status: HIT
age: 607
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=80TKLpNqIcIsrNeN8Y6lTA2zHwZ3KbXATaVG1Nl1QMbFGFOtLe26B3vNvMHLx3Avxi4wMlXhFx4z5maYSLI%2FByfbaT4seqv8%2FAbRyFv0c08kjlBQbDAkREZVuu%2F83xvvVSVeQZVCfIQ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7921cd5b1a30b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
serving.stat-rock.com/player.js
200 OK 0 B URL HTTP/2 serving.stat-rock.com/player.js
IP
GET /player.js HTTP/1.1
Host: serving.stat-rock.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.coinlib.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 10:35:40 GMT
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 11:45:54 GMT
vary: Accept-Encoding
etag: W/"638dd9f2-4e08a"
cache-control: public, max-age=600
content-encoding: gzip
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://widget.coinlib.io
Connection: keep-alive
Referer: https://widget.coinlib.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:41 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7921cd4d9d26b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
widget-ws.coinlib.io/socket.io/?EIO=4&transport=polling&t=OO7PSvd
200 OK 0 B URL HTTP/2 widget-ws.coinlib.io/socket.io/?EIO=4&transport=polling&t=OO7PSvd
IP
GET /socket.io/?EIO=4&transport=polling&t=OO7PSvd HTTP/1.1
Host: widget-ws.coinlib.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://widget.coinlib.io
Connection: keep-alive
Referer: https://widget.coinlib.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:41 GMT
content-type: text/plain; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://widget.coinlib.io
access-control-allow-credentials: true
testing-boi: https://widget.coinlib.io
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pY%2BfoWl9krtD7VPrUdfumBkXgMbV2aINLPW175k0oIwZBmPR3SJfwx69iZNJMvrfCdtTry8YUsIK29SVNy1NGrJ9pJDvAvekgvrGzytJw2mwGFyPSxYxcXcUZYBbLlOZ3kr%2Bm4WkAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7921cd512f3ab4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
IP
GET /_s/v4/app/63b77dcd282/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd55aecfb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
IP
GET /_s/v4/app/63b77dcd282/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"385105148a50079bafff97e9c9476109"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd55bee4b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
IP
GET /_s/v4/app/63b77dcd282/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.myfidelityexperts.com
Connection: keep-alive
Referer: http://www.myfidelityexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:35:42 GMT
content-type: application/javascript
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Fri, 06 Jan 2023 01:49:34 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7921cd55beedb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.160.162
78.140.185.30
145.239.206.227
93.123.102.147
23.36.77.32