redir.tealwinds.xyz/click/invalid/?tid=48&subid=48.110
302 Found 222 B URL HTTP/1.1 redir.tealwinds.xyz/click/invalid/?tid=48&subid=48.110
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with no line terminators
Hash 0c9e1d82d734ec8b4e2a0699a0c4777f
0cab14788eb4d5007b405b43d07a8817637d658d
3b80b645103faf7175803daa42d76ada01525d7d275b13e8b04ebea29e57b41a
GET /click/invalid/?tid=48&subid=48.110 HTTP/1.1
Host: redir.tealwinds.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Location: https://t2.lowtid.com/l.php?p=c:1ighcayppnss2p5b2&d=63526ec4faf797126b433250&s=48
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 222
Date: Fri, 28 Oct 2022 04:34:11 GMT
Connection: keep-alive
Keep-Alive: timeout=5
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e997bec759570aa0db03e31bf013cc2
948fd8263ab0b40f75eaf9495f76a7f39f39d5f9
853f97990fe10ccb34066b1e73e93dac45794f42fb745b266b6a46b9e26d52e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853F97990FE10CCB34066B1E73E93DAC45794F42FB745B266B6A46B9E26D52E9"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3555
Expires: Fri, 28 Oct 2022 05:33:26 GMT
Date: Fri, 28 Oct 2022 04:34:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 221b3fe9a6458de64d8bbfcd4a8e2f36
988c93428ff15108d46a11865e1c7e2782fbae34
a5ff1b60b9ef85086d0c6617d9d39cf17ae45855bf7b0ee24ec49ad5a863c18e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 376
Cache-Control: max-age=104593
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:12 GMT
Etag: "635a4fdd-1d7"
Expires: Sat, 29 Oct 2022 09:37:25 GMT
Last-Modified: Thu, 27 Oct 2022 09:31:09 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 221b3fe9a6458de64d8bbfcd4a8e2f36
988c93428ff15108d46a11865e1c7e2782fbae34
a5ff1b60b9ef85086d0c6617d9d39cf17ae45855bf7b0ee24ec49ad5a863c18e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 376
Cache-Control: max-age=104593
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:12 GMT
Etag: "635a4fdd-1d7"
Expires: Sat, 29 Oct 2022 09:37:25 GMT
Last-Modified: Thu, 27 Oct 2022 09:31:09 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42d84e61e6aa4d3cce623adccfafc3e2
0dba69e98be53c153a6726ff934b2d55feb20d75
2f53662c68c9ea7be85837310861c8007fd039e5e4d8eb8f0d8948d5d1571a03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F53662C68C9EA7BE85837310861C8007FD039E5E4D8EB8F0D8948D5D1571A03"
Last-Modified: Thu, 27 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3902
Expires: Fri, 28 Oct 2022 05:39:14 GMT
Date: Fri, 28 Oct 2022 04:34:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DZRJuqHyMcy+UrsE+0d7go/toLNCPPn3CDBQb3YyvGvOrXeYVJMs8hRZhl+yWlwXsvHo+EnI1sw=
x-amz-request-id: ZHW5DSWF5V1HNH6C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 28 Oct 2022 04:10:07 GMT
age: 1445
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 04:34:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a1e8b6259fa8c992799bdd54b5a8088
55e2ec0a360f8aaa38062e375580fafd88fca1ab
faefbea2bbaece9bf5b4f840c2548b871ff7091ea8391045708d1778b4dfa411
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAEFBEA2BBAECE9BF5B4F840C2548B871FF7091EA8391045708D1778B4DFA411"
Last-Modified: Wed, 26 Oct 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18723
Expires: Fri, 28 Oct 2022 09:46:15 GMT
Date: Fri, 28 Oct 2022 04:34:12 GMT
Connection: keep-alive
t2.lowtid.com/l.php?p=c:1ighcayppnss2p5b2&d=63526ec4faf797126b433250&s=48
302 Found 0 B URL HTTP/1.1 t2.lowtid.com/l.php?p=c:1ighcayppnss2p5b2&d=63526ec4faf797126b433250&s=48
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /l.php?p=c:1ighcayppnss2p5b2&d=63526ec4faf797126b433250&s=48 HTTP/1.1
Host: t2.lowtid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 28 Oct 2022 04:34:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 1217p3t0dz
Raund: 1yh
Location: https://ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5522cf6f8babb73cfe46d65c4e8d5f0a
dd061f874345ea41209659d1e929cc5c6e997101
1f23736fd0c2e4c0ed574412d95c6f3ab0877b05fbc3893a76b0fdbb7376ead3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F23736FD0C2E4C0ED574412D95C6F3AB0877B05FBC3893A76B0FDBB7376EAD3"
Last-Modified: Thu, 27 Oct 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12067
Expires: Fri, 28 Oct 2022 07:55:19 GMT
Date: Fri, 28 Oct 2022 04:34:12 GMT
Connection: keep-alive
ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48
200 OK 489 B URL HTTP/1.1 ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (536)
Hash f07bb7975281df97207ca0a2cd981eac
ab585e840cf56c0fa9988be8e1b56a0b22ae07b2
d5963474a1a0aee05becc16ff8f36763b000e12148fec93e1a49e2a7356a008c
Analyzer Verdict Alert quad9 Sinkholed
GET /f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48 HTTP/1.1
Host: ron.trffclb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 28 Oct 2022 04:34:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: bt-603611c5b7eaf46891533240=635b5bc4e2fd2559351f020c; expires=Mon, 31-Oct-2022 04:34:12 GMT; Max-Age=259200; path=/; domain=ron.trffclb.com; HttpOnly
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash d72d2f5d05f03753594e43fd34398221
ac6795c1c33f3fa2139e7f8dc601c3e6de6029a5
036c965156cf07faecc342cb2e30b7a20def68ad4a10423951ce871a7a3a6777
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5441
Cache-Control: max-age=104598
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:12 GMT
Etag: "635a3c19-1d7"
Expires: Sat, 29 Oct 2022 09:37:30 GMT
Last-Modified: Thu, 27 Oct 2022 08:06:49 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48&bv=1
302 Found 0 B URL HTTP/1.1 ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48&bv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48&bv=1 HTTP/1.1
Host: ron.trffclb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48
Cookie: bt-603611c5b7eaf46891533240=635b5bc4e2fd2559351f020c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 28 Oct 2022 04:34:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: bt-603611c5b7eaf46891533240=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=ron.trffclb.com; HttpOnly
Round: 119cdtswvl
Raund: 2g2
Location: https://popcash.net/world/go/134600/317194
ocsp.digicert.com/
200 OK 280 B IP
Hash 2c655054d23db9be5066c52655da3bfe
1bd1c2bc3faf78903a0f228551f6b082fbb1bac0
d7f2167d215cd1f12240dea48410d4f8b752ecef56d3e8620cc1ff12db388259
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3050
Cache-Control: max-age=166276
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:12 GMT
Etag: "635b365e-118"
Expires: Sun, 30 Oct 2022 02:45:28 GMT
Last-Modified: Fri, 28 Oct 2022 01:54:38 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 280
ron.trffclb.com/favicon.ico
200 OK 20 B URL HTTP/1.1 ron.trffclb.com/favicon.ico
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: ron.trffclb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ron.trffclb.com/f.php?p=c:9qopki6xwqp7b0yj1&d=603611c5b7eaf46891533240&s=ys-48
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 28 Oct 2022 04:34:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
popcash.net/world/go/134600/317194
301 Moved Permanently 162 B URL HTTP/2 popcash.net/world/go/134600/317194
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /world/go/134600/317194 HTTP/1.1
Host: popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ron.trffclb.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 28 Oct 2022 04:34:13 GMT
content-type: text/html
content-length: 162
location: http://ps.popcash.net/go/134600/317194
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tgujB8u1wNFPACqiAf80fbvHXTdCC6oqENsDv4vuoNzadFUQue%2BkTjzc0%2By68hC0DdFkzNyVuOipU25zibJLcr3zsNPdUXu%2BVOGUoPyNWMmiB%2BzAOmsGpMKVDHkZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7610f52e9cb571ec-LHR
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vO5qukWtAB3HhIW1IFgl3w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Prs7xjAbuhUSdWtFszRrYbEPf+c=
ps.popcash.net/go/134600/317194
200 OK 271 B URL HTTP/1.1 ps.popcash.net/go/134600/317194
IP
File type HTML document, ASCII text
Hash 3730c05fc40618bc2f6e9677cb34e4da
3362ab9e685d2e6225a13de30720eeb2dbbc48f7
6568c66bd4037d0b82b0dbdd687dc4c8aa6f9ca5e7bb39e605402e47309e840f
Analyzer Verdict Alert fortinet Malware
GET /go/134600/317194 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/html
Date: Fri, 28 Oct 2022 04:34:13 GMT
Server: nginx
Vary: Accept-Encoding
Content-Length: 271
Connection: keep-alive
ps.popcash.net/ad/ad?p=134600&w=317194&t=4b4c16eb1fdb34e5&r=&vw=1280&vh=0
303 See Other 0 B URL HTTP/1.1 ps.popcash.net/ad/ad?p=134600&w=317194&t=4b4c16eb1fdb34e5&r=&vw=1280&vh=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ad/ad?p=134600&w=317194&t=4b4c16eb1fdb34e5&r=&vw=1280&vh=0 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ps.popcash.net/go/134600/317194
Upgrade-Insecure-Requests: 1
HTTP/1.1 303 See Other
Date: Fri, 28 Oct 2022 04:34:13 GMT
Location: http://bilqi-omv.com/zcvisitor/c62a35cc-5679-11ed-9948-12cdb5e0662f/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=267937c0-5501-11ed-b011-12beee04f19b#pc151445
Server: nginx
Content-Length: 0
Connection: keep-alive
bilqi-omv.com/zcvisitor/c62a35cc-5679-11ed-9948-12cdb5e0662f/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=267937c0-5501-11ed-b011-12beee04f19b
302 0 B URL HTTP/1.1 bilqi-omv.com/zcvisitor/c62a35cc-5679-11ed-9948-12cdb5e0662f/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=267937c0-5501-11ed-b011-12beee04f19b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zcvisitor/c62a35cc-5679-11ed-9948-12cdb5e0662f/7fcf9220-c93c-11e7-9820-0e06c6fba698?campaignid=267937c0-5501-11ed-b011-12beee04f19b HTTP/1.1
Host: bilqi-omv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Date: Fri, 28 Oct 2022 04:34:13 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Location: https://med.etoro.com/B12087_A72681_TClick.aspx
Server: ESbQIUYQ
med.etoro.com/B12087_A72681_TClick.aspx
301 Moved Permanently 186 B URL HTTP/1.1 med.etoro.com/B12087_A72681_TClick.aspx
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 1685b41007e5e598163c934190411ed5
8af22827fd2be2f15e75dac45fc0ba877791d2bb
d671f6417489af2018d1f8691bbe0046d5ac524aec586eb6704fe8d0bd1e440f
GET /B12087_A72681_TClick.aspx HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 186
Location: http://med.etoro.com/aw.aspx?B=12087&A=72681&Task=Click
X-Robots-Tag: noindex
Expires: Fri, 28 Oct 2022 04:34:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 28 Oct 2022 04:34:13 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=12087&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=12087&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=12087&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=12087&A=72681&Task=Click
Expires: Fri, 28 Oct 2022 04:34:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 28 Oct 2022 04:34:13 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=12087&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=12087&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=12087&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com?utm_medium=Networks&utm_source=72681&utm_content=12087&utm_serial=&utm_campaign=&utm_term=
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Fri, 28 Oct 2022 04:34:13 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 28 Oct 2022 04:34:13 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=ma5vr2z2aihuyj3m50eypq1a; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoro.com; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoro.com.cn; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etorocn.com.cn; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoroasia-securities.com; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoroasia.cn; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoroasia.com; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoroasia.com.cn; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; domain=.etoroasia-Investing.com; expires=Tue, 27-Dec-2022 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=12087&a=72681&task=click; domain=.etoro.com; expires=Sun, 27-Nov-2022 00:00:00 GMT; path=/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Fri, 28 Oct 2022 07:07:52 GMT
Date: Fri, 28 Oct 2022 04:34:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Fri, 28 Oct 2022 07:07:52 GMT
Date: Fri, 28 Oct 2022 04:34:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Fri, 28 Oct 2022 07:07:52 GMT
Date: Fri, 28 Oct 2022 04:34:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Fri, 28 Oct 2022 07:07:52 GMT
Date: Fri, 28 Oct 2022 04:34:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Fri, 28 Oct 2022 07:07:52 GMT
Date: Fri, 28 Oct 2022 04:34:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5dac341-2b9d-4d07-ab3f-dafe74f88664.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5dac341-2b9d-4d07-ab3f-dafe74f88664.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2193431d88baf9af6829421cd13743ff
a192ab139ad0dc5cf206986eb06028ddad224e46
c535e09fb4a53ca580f5f5926d1494c50b6ad6c7c9ec78df6b7015213852b737
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5dac341-2b9d-4d07-ab3f-dafe74f88664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9720
x-amzn-requestid: 6b4749ca-bcb9-4274-a309-e6d463851a6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aV_n6FOSIAMFroA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63524632-56186f1f2a0bf68f6dba843b;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 07:11:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DjRLNrY4BFc3GwHGBW40LIyh-RYT3hshdKPxXok4KE97fGvatXN6yQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 11:05:53 GMT
age: 62901
etag: "a192ab139ad0dc5cf206986eb06028ddad224e46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8626fba0-a7c4-4dc6-bf12-c0729c021a4e.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8626fba0-a7c4-4dc6-bf12-c0729c021a4e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2fd6da7ee9edf699043f459c5222890
fe98ecc73d8d3d4cb3cb2e544219551d21dea9a8
9f643aa4ce0b1527bd820eaf3d4fa42fb531f4f8aa0f393e0307172223fe0375
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8626fba0-a7c4-4dc6-bf12-c0729c021a4e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9928
x-amzn-requestid: 5198ff9e-5292-4c63-ac2d-ce11c5959f6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv1_FUvIAMFtfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9bf-3ac07df1496453695a0b5bf8;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:35:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZBHu0-r4506nO6xxbqjAWtDWKjnINBPem06anr8ZxxWhFyVy-cVUGA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:41:18 GMT
age: 24776
etag: "fe98ecc73d8d3d4cb3cb2e544219551d21dea9a8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b104e69-491c-4f53-9fae-fa41129f2f85.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b104e69-491c-4f53-9fae-fa41129f2f85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc2c93221654ead6c53327eede97fe64
2bf9f4a515624ce9c25ec72b8240d29a42dbefe8
7fa00658dda757daff0f6128c1bee4367c70d18769952f2eb5c066df6b56d379
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b104e69-491c-4f53-9fae-fa41129f2f85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7422
x-amzn-requestid: 108f56ce-0454-4f91-8713-e2b6599b96c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv3YFTsIAMF2Ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9c8-4c46b93363b0dd0d7aaa9831;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:36:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J-xtYZ3VNTdma0utzBEvDkNp8AKyIP7_C0NoBXleVdUFTgMi7mfyIA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:41:18 GMT
age: 24776
etag: "2bf9f4a515624ce9c25ec72b8240d29a42dbefe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13bafc15fa2fe97e27115e17bce8b22f
9d0fc7b50cbb96a3e85ccb501ed1d60a39a164d3
734419d9f9c28185501c25db3e0df01f2dc901a1a87bcdd066028392c8c82cf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14602
x-amzn-requestid: f3e186c6-4734-4c1b-a432-aa799a12ed4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv9yGaMoAMFZ4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9f1-05c8bdc2153acd8915e04826;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -LtByCyKdn883A5CbwMzP1WXAsdL1X8sDa8qyRWuDmYGUNS-u9xTJA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:28:50 GMT
age: 21924
etag: "9d0fc7b50cbb96a3e85ccb501ed1d60a39a164d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7425e2fe-72f2-47ed-8c24-ca3882b64ca1.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7425e2fe-72f2-47ed-8c24-ca3882b64ca1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 21fd2ff471cab32871d4174e8fc656ba
ee6362f36470fea2a8a3432c12520f9a10175b68
01c3e63861073442cdbc414358415d2989ecffd9c3989e7946baec540b1066c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7425e2fe-72f2-47ed-8c24-ca3882b64ca1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4876
x-amzn-requestid: a6461ca9-ee65-420f-b066-681535c670ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv9wECHoAMFRmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9f1-657e9e40753d916d02adf799;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:36:49 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XKBFWTsqFqE48-bnCpCV2QLQaUGbRcR27yZ-ophBDl6ud3jQSh9eDQ==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:41:29 GMT
age: 24765
etag: "ee6362f36470fea2a8a3432c12520f9a10175b68"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36abb19bfc8dc656604d1aaf0f9535f8
2a9686597b6baded54a9dbead224193825d2fddf
d1577656aafce56a2088479a357df0df8bfef92952290cef14cca89d43043ab8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8759
x-amzn-requestid: b8158571-eda8-4aec-9595-a4082b7bee5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arwwIEdzIAMFvnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb33-7f65d3997faa3c5520e6b51f;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:11 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U7Xxk7NDKFyC4jUkSmUBeLvBTqqEnQOR8tzfKAzyf2sFbw9JOQ7QWw==
via: 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:27:25 GMT
age: 22009
etag: "2a9686597b6baded54a9dbead224193825d2fddf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/assets/css/onetrust.css
200 OK 2.7 kB URL HTTP/2 marketing.etorostatic.com/cache1/assets/css/onetrust.css
IP
File type ASCII text, with very long lines (885)
Hash b3f403de6d79b34f32dba5e4effaabc2
7b436b6060e88daf19f12bd27cbe2533d25a2343
3ec0cde05873dde93c16f4b4f3b7ca7e236ba4e82ab595ee8f13b959f5b2813a
GET /cache1/assets/css/onetrust.css HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7vqiIPn64ptqVNwIM1fvJGjbv11IUdsOT6JKR8Cyxsr81DT/4uax9s7iGzI7fTeV0SwX20GmqJE=
x-amz-request-id: Z3V5BX28EG5962WS
x-amz-replication-status: COMPLETED
last-modified: Thu, 16 Jun 2022 12:30:17 GMT
etag: "66e8b2c112ebb5bb9b4fc326d3d5f87b"
x-amz-meta-sha256: 55c8a3b763077bf16466a3a9af5b7e5b2baba7d345cd90b50403058a633bda48
x-amz-meta-s3b-last-modified: 20220616T122823Z
x-amz-version-id: Qcu9.b5PJ70a2SNFK2gJjtsbcFrk1Lur
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 2655
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2-1.png
200 OK 11 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2-1.png
IP
File type PNG image data, 744 x 504, 8-bit colormap, non-interlaced\012- data
Hash 5a95a095169c27431449bf549b99993d
91a11cffc857dcaa2b38fa901423b227870ac1e4
681caf8f93ff1be67796803a478cd4cb5df61fc228bd7388056599430d44a708
GET /cache1/hp/v_250/images/instruments/t2-1.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: K4TQrvgv6tHAKlL+ySccGF7oIFbHIm62RTqZ2kB54E9ph5Z0n4O9Fr37Li7vBlcPNEqBlNn15Zg=
x-amz-request-id: BJSS8ZSZ4K6J87Q8
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:24 GMT
etag: "5a95a095169c27431449bf549b99993d"
x-amz-meta-sha256: 681caf8f93ff1be67796803a478cd4cb5df61fc228bd7388056599430d44a708
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: 6s15Jbvt_YhVTfS.Qm19BI1gvokKxcHz
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 11234
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2-2.png
200 OK 21 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2-2.png
IP
File type PNG image data, 668 x 938, 8-bit colormap, non-interlaced\012- data
Hash beb13238cf465f668c413a022f5633c8
31760dac17b8e58942c79708a4616c3a1df4b233
88e45ef77d50a2091ec00708b669d6d306bf4dc8ea78984a2a9bc14318abe6db
GET /cache1/hp/v_250/images/instruments/t2-2.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ky3vrANJhtTj+F60HsRTmFy7QMNFEWRYKVWaE2DyXeaBTBmkZn6svQRqLkPAK6t0vCsNwJQ9vwY=
x-amz-request-id: BJSN4THC2967ZG2T
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:24 GMT
etag: "beb13238cf465f668c413a022f5633c8"
x-amz-meta-sha256: 88e45ef77d50a2091ec00708b669d6d306bf4dc8ea78984a2a9bc14318abe6db
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: 42HIJXJNQSkchYiJUGINB9CQEa72HNtD
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 21388
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2-2a.png
200 OK 1.5 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2-2a.png
IP
File type PNG image data, 136 x 132, 8-bit colormap, non-interlaced\012- data
Hash 6bedb1b3afc69447f7ea0c00993b53a8
1281f1fd5df23a9a19bd8573619007d04f6047ac
55900142e5def76acbb70acdb21d824b8b06f6d90a9a52fee556a5c3d3e1dab4
GET /cache1/hp/v_250/images/instruments/t2-2a.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Ufl333+IK+sRnq39yz/zLZBDDGAqJ3hqjeULNbOsy81coHYrh0pPuwNsCqrWwdm0Uvjiqbr3ti0=
x-amz-request-id: BJSJSH4E3B2X317K
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:24 GMT
etag: "6bedb1b3afc69447f7ea0c00993b53a8"
x-amz-meta-sha256: 55900142e5def76acbb70acdb21d824b8b06f6d90a9a52fee556a5c3d3e1dab4
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: uxnagM4KgutOS.DThfIN7h9TDKtsInO0
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1473
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2bg.jpg
200 OK 67 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t2bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1933x1230, components 3\012- data
Hash 19c57357b906758af6469a6b2a2c8846
e360a5922a6d44ca6066ff5dff01ef2440fd7368
358be7efee5b5551b4c5a7d977226283bfc40d89b01417e354aa1bfc098da8a2
GET /cache1/hp/v_250/images/instruments/t2bg.jpg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CzOhkgu5Y0R6HoaBI3spOEsIC0ULFFWfQP/StDzqj7O8zeKrbqTF2gmrAiXeQrLylU+M0/ANeRM=
x-amz-request-id: BJSZ59B0WDG7GH0E
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:25 GMT
etag: "19c57357b906758af6469a6b2a2c8846"
x-amz-meta-sha256: 358be7efee5b5551b4c5a7d977226283bfc40d89b01417e354aa1bfc098da8a2
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: RNRY.bWk105UAkjO4Db33xjz7lHZilcf
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 66908
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3-2.png
200 OK 21 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3-2.png
IP
File type PNG image data, 436 x 390, 8-bit colormap, non-interlaced\012- data
Hash dad8f4f5e1f7c6afaa7a1d02bbad4aae
7c47738ec815ba441c70d30967035c1a2c3a34ff
82d364f0c185402cc8da9b63d834ba5056a6e814d452879c1df6cd9cfbf8d2b5
GET /cache1/hp/v_250/images/instruments/t3-2.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: vYYw4/nX6J0XwQyBd7Bxo8ppBa11euWIhuDvwJG3+nyQlemDKpJ4ol5vRCRWMd3J1rhCuy9Zzfk=
x-amz-request-id: BJSG6VSZV3NPRZZ5
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:25 GMT
etag: "dad8f4f5e1f7c6afaa7a1d02bbad4aae"
x-amz-meta-sha256: 82d364f0c185402cc8da9b63d834ba5056a6e814d452879c1df6cd9cfbf8d2b5
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: .ea0J.LF3Tey.FSpyPfEDCWl6aYThAFP
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 21261
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3bg.jpg
200 OK 59 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1933x1230, components 3\012- data
Hash 6d94c8cb40dfa33fccc8b4800f2c7e0e
745c0d98d4cde90d8717feadfa120e0cc20dab1f
a0bb83d719f2fdf76bae2c031b6a10875676bf1d0c47dae43c8182b7b8f95eda
GET /cache1/hp/v_250/images/instruments/t3bg.jpg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: XyBWTcKB6ZnhqlKK/cUvo3Mkusx8tebxk8v4iJZ1SngSydT4rYfmHqKA1NPou6jsVLdVHFTSpuc=
x-amz-request-id: BJSW4ZMF254PA5ET
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:26 GMT
etag: "6d94c8cb40dfa33fccc8b4800f2c7e0e"
x-amz-meta-sha256: a0bb83d719f2fdf76bae2c031b6a10875676bf1d0c47dae43c8182b7b8f95eda
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: pyA8G.VrAE4shNTZPyu3hFkUKsSZGk39
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 59017
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3-3.png
200 OK 11 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3-3.png
IP
File type PNG image data, 322 x 432, 8-bit colormap, non-interlaced\012- data
Hash b7322c639dcf276550e310727cf76893
136b5f1a82788708f04b74a30fcefdadaff00e43
6123cab143cf8d85ef530972afd495cac11d35c417b90d8ec05724db5bd4bd3c
GET /cache1/hp/v_250/images/instruments/t3-3.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ynBcBZLuM0g8KM2F3SRl5wWRChG7u8muIqcCU58ccgoEdfV0x23Je45/tjxzNW1Pv46uF30VAQQ=
x-amz-request-id: BJSN68QDJ2WRDK40
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:26 GMT
etag: "b7322c639dcf276550e310727cf76893"
x-amz-meta-sha256: 6123cab143cf8d85ef530972afd495cac11d35c417b90d8ec05724db5bd4bd3c
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: r9skgKWaP8RVY9nRMto5PlKboL4BQb73
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 11012
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3-4.png
200 OK 43 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t3-4.png
IP
File type PNG image data, 660 x 684, 8-bit colormap, non-interlaced\012- data
Hash 43f62ee21492814c91e306a57be05ee7
77e0ddcffc72c83f9c6690f521a4594d0eacdf7a
55dc7c105ed71ed3781f433e6dd1943311e87e7d7330f9f11f10f0e502c170aa
GET /cache1/hp/v_250/images/instruments/t3-4.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CQyOioDgEwsXle/cn0DSfXbIj4PtX6wwvvY03kgw+sPBr5gMr79OxJ6rVKvDrcsLStc69BjQXWU=
x-amz-request-id: BJSNRPZPM3RB1Y56
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:26 GMT
etag: "43f62ee21492814c91e306a57be05ee7"
x-amz-meta-sha256: 55dc7c105ed71ed3781f433e6dd1943311e87e7d7330f9f11f10f0e502c170aa
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: ZJ9bAs_aawgIHhTc3zcLSZS.lxwDFu4K
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 42876
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 7.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (21747)
Hash 7b4564ae957eef3a8302343f44c5cfb3
296c38b2ae23a31d80201b32a38c02e75de27c91
15155c8652fe9654c2d2813743ae09ff93a469d790d3424a6b090f876b3d9bb2
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: e0VkrpV+7zqDAjQ/RMXPsw==
last-modified: Thu, 27 Oct 2022 18:34:40 GMT
etag: 0x8DAB849E88F0321
x-ms-request-id: a1a9abaa-301e-0033-1c3c-ea81cb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 12586
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f5369a590a2c-ARN
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/f72d065d-437e-4ee9-87c6-475882c9f118/OtAutoBlock.js
200 OK 2.1 kB URL HTTP/2 cdn.cookielaw.org/consent/f72d065d-437e-4ee9-87c6-475882c9f118/OtAutoBlock.js
IP
File type ASCII text, with very long lines (2829)
Hash b9eadb6d05b9bafe419aa99f68097df2
d850dc819264475c6d1cbe6e8419a1016a659db2
a4592788dd762df3672b970f81802bf8325dfca74ed394118867bc4946983f61
GET /consent/f72d065d-437e-4ee9-87c6-475882c9f118/OtAutoBlock.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: application/x-javascript
content-length: 2072
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: uerbbQW5uv5BmqmfaAl98g==
last-modified: Tue, 14 Dec 2021 12:34:46 GMT
etag: 0x8D9BEFE1D111A88
x-ms-request-id: e0ef595e-d01e-0010-1ce7-f0ee00000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 720
expires: Fri, 28 Oct 2022 08:34:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f5369a5f0a2c-ARN
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t1-3.png
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t1-3.png
IP
File type PNG image data, 450 x 392, 8-bit colormap, non-interlaced\012- data
Hash f61c9d2ed729320b71af181ff331cb79
182f5c37accdde48b36e7803de6251cc92319b86
11cf27e9710e187df6c25c3ed4ce130f8d35d9126dbacd711f68b0d2b7996763
GET /cache1/hp/v_250/images/instruments/t1-3.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 92R24GLatFUU0eh05veMnGqcA2KrIVfsdBz9zWssCytuT0e3Lb7tPc2v9A+iyx7fTZjRCEWnHVc=
x-amz-request-id: BJSJMDWMK7ZCK773
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:23 GMT
etag: "f61c9d2ed729320b71af181ff331cb79"
x-amz-meta-sha256: 11cf27e9710e187df6c25c3ed4ce130f8d35d9126dbacd711f68b0d2b7996763
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: YkW8_gVG77z0IkOnT2pWi2camXx3AgiY
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 31786
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/cover-desktop-half.jpg
200 OK 94 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/cover-desktop-half.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x2160, components 3\012- data
Hash b05c8e47e71ba8a0fe73a0da54f010ef
f26455efe60bcf1e74e693574e482b0a952e3de9
2c763340f1c0aa9c8bbd9b138ea1a054282b17e1fd2831efed5bbd74c09438d7
GET /cache1/hp/v_250/images/hp-2022/cover-desktop-half.jpg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: zqCA8I7VwQ4OM57SeL41enO3ZjqGkwlCS7cjlH8/RylZXzy3zQnrVtSi0iaVUFdNRZjfpzfdllE=
x-amz-request-id: XSS69QHT5BYHDT0P
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 16:16:38 GMT
etag: "b05c8e47e71ba8a0fe73a0da54f010ef"
x-amz-meta-sha256: 2c763340f1c0aa9c8bbd9b138ea1a054282b17e1fd2831efed5bbd74c09438d7
x-amz-meta-s3b-last-modified: 20220920T161111Z
x-amz-version-id: VChvjEsOHCDhESR_vRlWIZZI9qChCEb_
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 94463
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/logger/logger.js
200 OK 2.3 kB URL HTTP/2 marketing.etorostatic.com/others/logger/logger.js
IP
File type ASCII text, with very long lines (5055), with no line terminators
Hash f620bec033fe844135374191b331937d
ef75dd9e7bddaaa53d9171c7b6869f5d72553f51
c61b3f992c23497120340e96694c29b94ca8b2576820677e0432031b636eee87
GET /others/logger/logger.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rFRtyRRvy8awZWbEw8KKBuYcsMr0FOn3VrHsw7WXTDWRDWcW8NmTXAtMX967njSth5isxYRudTE=
x-amz-request-id: 114803B553D57FD9
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Jan 2020 16:04:01 GMT
etag: "3a046ce8f3379b2e5a5fa5ee3ed02808"
x-amz-meta-s3b-last-modified: 20200115T160219Z
x-amz-version-id: RlsNx2j0zjqTyHD11R2PocORgBI_87x2
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Fri, 28 Oct 2022 04:39:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 2285
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30c5107c8f49f7471978d43d30847010
9f5c74e117f8cd972c5ca0983bc4023910601113
1c4451ea36f959819a5d50296603c2352c380ff89bf8812db857df6b8ac7bf69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/consent/f72d065d-437e-4ee9-87c6-475882c9f118/f72d065d-437e-4ee9-87c6-475882c9f118.json
200 OK 1.5 kB URL HTTP/2 cdn.cookielaw.org/consent/f72d065d-437e-4ee9-87c6-475882c9f118/f72d065d-437e-4ee9-87c6-475882c9f118.json
IP
File type JSON data\012- , ASCII text, with very long lines (4265), with no line terminators
Hash 6439835da3e85cb6917ac06b2dab2b37
b65ad002a7c48559e9124256295c1c688e8f3084
bd2d9654f22da1c44528cfd8a925b24a3b015d80bee375849d1e8800a8970c21
GET /consent/f72d065d-437e-4ee9-87c6-475882c9f118/f72d065d-437e-4ee9-87c6-475882c9f118.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: application/x-javascript
content-length: 1490
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: ZDmDXaPoXLaResBrLasrNw==
last-modified: Tue, 14 Dec 2021 12:34:46 GMT
etag: 0x8D9BEFE1D14004E
x-ms-request-id: edb28e74-e01e-0158-2fe7-f09ac8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 187
expires: Fri, 28 Oct 2022 08:34:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f536eac20a2c-ARN
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=GTM-55ZB4XN
200 OK 44 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=GTM-55ZB4XN
IP
File type ASCII text, with very long lines (1588)
Hash f55f2f531e5785adb93e715af248adb1
978fd65187a49522e3f3c06dc53152d53eebf3b8
274937fc3777c2f67b855b773175b2e55825f1624c2c565540a1cc3f4012e1c5
GET /optimize.js?id=GTM-55ZB4XN HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 28 Oct 2022 04:34:14 GMT
expires: Fri, 28 Oct 2022 04:34:14 GMT
cache-control: private, max-age=900
last-modified: Fri, 28 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43920
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t1-2.png
200 OK 280 B URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t1-2.png
IP
Hash 1f34c23cc4afbe1b6900486e1d6f3e1a
46a7a925888f9ccb1bc9146e93046e7cd3dbae5a
b06350b3843e17010c93be1c5b8a643bc8d96fcb2aaffcfce5a240de8a50c8b3
GET /cache1/hp/v_250/images/instruments/t1-2.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CLncvM4L18ZkiKjHvjGrOYpGKksF2UJqMLsRtr7/JixW0QqS6mNX7SWENSlm9Aj8le9WdCqQ7XM=
x-amz-request-id: BJSTAV1CC0CZR8SW
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:23 GMT
etag: "a0edff04cdbe03fe84f35b2368beedd9"
x-amz-meta-sha256: 51a46214b92336ada7340f10305a167388d3421a6cd322090db15d5703dfa7d7
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: gsLHL9_akY3qvzziYmuZ43tVdbQ8cOch
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 115422
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30c5107c8f49f7471978d43d30847010
9f5c74e117f8cd972c5ca0983bc4023910601113
1c4451ea36f959819a5d50296603c2352c380ff89bf8812db857df6b8ac7bf69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.fonts.net/t/1.css?apiType=css&projectid=1be8a670-63f2-11ec-84cb-06c8b378e9d2
200 OK 0 B URL HTTP/2 cdn.fonts.net/t/1.css?apiType=css&projectid=1be8a670-63f2-11ec-84cb-06c8b378e9d2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=1be8a670-63f2-11ec-84cb-06c8b378e9d2 HTTP/1.1
Host: cdn.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: text/css
content-length: 0
x-amz-id-2: cJFzZZrD7ev3HArlbm991uwKKQWX4b+C7tn8aCTDfTvniRP1gJUjTY17kOqe0a785QrZxl0MjuE=
x-amz-request-id: DMV470Q17VXTNTHF
last-modified: Thu, 20 Oct 2022 08:49:27 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=300
cf-cache-status: HIT
age: 602891
expires: Fri, 28 Oct 2022 04:39:14 GMT
accept-ranges: bytes
set-cookie: __cf_bm=VECmXoHZpDOILzxfQ7aMlHR8nh_5Vb2XrzC83FoLEVE-1666931654-0-AbEzp4IuMxbNFNh42d8WL+1Pl/8f9WEx5kAFlkQ4uPCNTwEucq0RBZgOOaB06hM0lFUHKmKeK3yzLPij5HDFYbg=; path=/; expires=Fri, 28-Oct-22 05:04:14 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7610f5375ff20a28-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash df81c0d3535a89a04561890247b2e5bf
6906f32e0b673e2c4a69627a451892665b86db02
983b2c517d763209d36bf750a0626e7accb8a507e458bb0e8c3060a547abbd04
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3547
Cache-Control: max-age=113165
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:14 GMT
Etag: "635a64f8-117"
Expires: Sat, 29 Oct 2022 12:00:19 GMT
Last-Modified: Thu, 27 Oct 2022 11:01:12 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t1bg.jpg
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/instruments/t1bg.jpg
IP
File type Web Open Font Format (Version 2), TrueType, length 31960, version 1.0\012- data
Hash 4a61fe67108ddbb01a2ceaf3687ba30e
3a60eb0e91c3f79e58c93ac63f040f07c5c4e058
2be6e9d5643e9857ffdb9f65021173c77f920dac2e106ee31b2f38608d5ac661
GET /cache1/hp/v_250/images/instruments/t1bg.jpg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: YFTNty5SIcdhKq450TYHwf7SRkH10wCrNu6VxS0n04wBpLStduNxmbhS13gnNaIasJR4Ietz9UY=
x-amz-request-id: BJSVX197ACP9V7RR
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:24 GMT
etag: "2b8c66295f644aad1bbd97bffcf8f910"
x-amz-meta-sha256: 923d9c95a2e280eafb71ef8bae9001ce3bc574272986250090409b8e10b78472
x-amz-meta-s3b-last-modified: 20220907T173456Z
x-amz-version-id: rXQsdf5tcUphlZZ7QaAie.wlAbWxbLl7
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 72188
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 17 kB URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Hash 58c6caf17cdd9ed393594fd8df3007ae
5d56d2ec12c2fae215a40cda299f2f1fe9387d7a
40f68a3f8ffd101077f3adb97821126b8263e8d5f473b87b705e384e52abf95a
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7610f53789a49918-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/tusker/TuskerGrotesk-3500Medium.woff2
200 OK 12 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/tusker/TuskerGrotesk-3500Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11992, version 1.0\012- data
Hash 1f385d1ea2e1c06cda506bafc17a4a94
0dc0ebf0502018976383091908379054b5a3cfed
e71acf0321143c30f016a710cfb525b48b2ba940ac7d83660614082eb06880ca
GET /cache1/fonts/tusker/TuskerGrotesk-3500Medium.woff2 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: TnE1OvfRhb4wemqIMdAklRBV9anTek/CjSVpczlM56PMWdd3Awm6/s25i8C/yNMd3Kztf88tMvY=
x-amz-request-id: 0RKDVHM0FMVA32ZS
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 06 Feb 2022 22:24:49 GMT
etag: "1f385d1ea2e1c06cda506bafc17a4a94"
x-amz-meta-sha256: e71acf0321143c30f016a710cfb525b48b2ba940ac7d83660614082eb06880ca
x-amz-meta-s3b-last-modified: 20220206T231742Z
x-amz-version-id: U.WW5Nm_KS0r7k_Vxl0S9.MycmUEi2Pu
accept-ranges: bytes
content-type: application/font-woff2
server: AmazonS3
content-length: 11992
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/tusker/TuskerGrotesk-4700Bold.woff2
200 OK 12 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/tusker/TuskerGrotesk-4700Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12028, version 1.0\012- data
Hash ee570da55652b90a2222880a1ece7323
d9a81b65239041b42c6aed22f5809797f0574c1e
26c2ac92dcf7740f3239e5c1dc01c2e90bf468aacaea52438db80c031af94962
GET /cache1/fonts/tusker/TuskerGrotesk-4700Bold.woff2 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: xDtdJzSi21sF7CpiuxjIbrQdQrHfCf0qZSuIYVXllN38HVN7OiOcLrLEIAOZRHPfr0UXkqds/bQ=
x-amz-request-id: 0RKEXE4EJ8774W83
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 06 Feb 2022 22:24:52 GMT
etag: "ee570da55652b90a2222880a1ece7323"
x-amz-meta-sha256: 26c2ac92dcf7740f3239e5c1dc01c2e90bf468aacaea52438db80c031af94962
x-amz-meta-s3b-last-modified: 20220206T231740Z
x-amz-version-id: _nNBWNk.b.aBJaK32Y.ScZnJcz4Is6Dl
accept-ranges: bytes
content-type: application/font-woff2
server: AmazonS3
content-length: 12028
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/madera2/Madera-Light.woff2
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/madera2/Madera-Light.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31636, version 1.0\012- data
Hash e20f6e1c0681c07f69d37c428c0684d3
4aa36ecd12f2e7d3592807a0a3879914252faeb5
c2dfcbd62bd88bad9f09d80b0d1b2de5bf8276e6586a5431839c7ce9393fd4f7
GET /cache1/fonts/madera2/Madera-Light.woff2 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: TVzcGMyrSRRAiX3OtO+JaeCIIWTuUd+EwTnEzNsZ7AgFflv7+H3xjLd4Nk7ctVtZpx+Ie+enpiQ=
x-amz-request-id: EXZTJQVA4Y4CV0JC
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 03 Feb 2022 18:32:26 GMT
etag: "e20f6e1c0681c07f69d37c428c0684d3"
x-amz-meta-sha256: c2dfcbd62bd88bad9f09d80b0d1b2de5bf8276e6586a5431839c7ce9393fd4f7
x-amz-meta-s3b-last-modified: 20220203T192738Z
x-amz-version-id: TUjDnqX6S_vwWlvloC3aK3KdDGBYmBw_
accept-ranges: bytes
content-type: application/font-woff2
server: AmazonS3
content-length: 31636
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/madera2/Madera-Medium.woff2
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/madera2/Madera-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31844, version 1.0\012- data
Hash 9d7f82d9510b57b2d00f328d87ef3869
2a031c8ae51e62d8dc30fa0bb47f57a3695224c1
c464ce47b2b31c08077e73656eb309e07cecd335cbc93c87efe552e281de0815
GET /cache1/fonts/madera2/Madera-Medium.woff2 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: d6poWwwwj9abPq/ES4oNvQTY1I4y2hMv1EdVnTf07kpNv7a2N1tn1ySx9pMV8KWPcG6wwi1unZI=
x-amz-request-id: K8KWP566ERFJBVE1
x-amz-replication-status: COMPLETED
last-modified: Thu, 03 Feb 2022 18:32:29 GMT
etag: "9d7f82d9510b57b2d00f328d87ef3869"
x-amz-meta-sha256: c464ce47b2b31c08077e73656eb309e07cecd335cbc93c87efe552e281de0815
x-amz-meta-s3b-last-modified: 20220203T192736Z
x-amz-version-id: VMc3owpvYk5nHUjZ.xX4Wq.u2RPawBMa
accept-ranges: bytes
content-type: application/font-woff2
server: AmazonS3
content-length: 31844
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/madera2/Madera-Bold.woff2
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/madera2/Madera-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31920, version 1.0\012- data
Hash db85a0ddc6f6973df4bc98a1b2ed9d65
c6bba41edc8501b76aed9bff58597edef1c2502f
26902b4d0a3ba49a4a9b3aa0c8f9c185270ee162252f78cec00c831c9f5b05f8
GET /cache1/fonts/madera2/Madera-Bold.woff2 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: WQ8beP0j6j+XiswbzEpXZzamytHc5Av0QHRr7qawf362iuN3koZ3ealTS4jkLvOGZ6OcInkYl0Y=
x-amz-request-id: RB02FFVVAVWJVG5D
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 03 Feb 2022 18:32:24 GMT
etag: "db85a0ddc6f6973df4bc98a1b2ed9d65"
x-amz-meta-sha256: 26902b4d0a3ba49a4a9b3aa0c8f9c185270ee162252f78cec00c831c9f5b05f8
x-amz-meta-s3b-last-modified: 20220203T192740Z
x-amz-version-id: zGguxQ5kSDF0NdIOnvToUoLZcOnV9szR
accept-ranges: bytes
content-type: application/font-woff2
server: AmazonS3
content-length: 31920
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/js/waypoints.min.js
200 OK 2.6 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/js/waypoints.min.js
IP
File type ASCII text, with very long lines (8887), with no line terminators
Hash 1d2137aea2d4a9fca68a7b135e2cb9f3
e97ca29d385352fc286f1711bbdc45584161a316
ea701f82ca58f8a09ebd7d00a58deb97c1c2a09ecdd3a5486e91dab13f98113e
GET /cache1/hp/v_250/js/waypoints.min.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 9lFezzLGhy5accCsGYcyDyckewdqZE6Df8H6ytpCQuSWrMcKQiCNX7H2YhvOccJk0UxxBNsnPHo=
x-amz-request-id: 5E8B8NFW9H2EH0EG
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:43:00 GMT
etag: "1b79decba8cf0c886b7be539cfdbaa16"
x-amz-meta-sha256: 291c0fb451ed0410d515b7c4f0eeb429cae40f52a560a67aed3de8d7210e75a3
x-amz-meta-s3b-last-modified: 20200803T094544Z
x-amz-version-id: OAj0wpBsOOe0r5kxCMrusioy2xpCNFTE
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 2635
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/js/slick.min.js
200 OK 9.6 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/js/slick.min.js
IP
File type ASCII text, with very long lines (32034), with CRLF line terminators
Hash 17232e2fe3e81d95e6f1cb7c4d5b9e57
510e1569ab0187ef5712a7630d673536e8c519ac
4bd093df7a16ca8f4d58c12a14859fdc0ef3f8ffb58c9b82126031787f2f5132
GET /cache1/hp/v_250/js/slick.min.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: JlrnGLJ6W/UxGhdYSC8CH8xghXbLPjPNChhyxW9KZUfoGKU71X7LjptjjFXM/+ltoatY8umxNmk=
x-amz-request-id: 5E85XVS4GHHW1N8V
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:43:00 GMT
etag: "823f2a98db35550b1d2a78f530b1c633"
x-amz-meta-sha256: 0cf4b4cdcf20a06c8cfb25a84b84e0c7e81f51cd78de9b6231a1b54ed0e0935b
x-amz-meta-s3b-last-modified: 20200803T094544Z
x-amz-version-id: YetQublaGzZokQiJoN6572gELuBFGXNz
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 9568
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/js/jquery-3.5.1.min.js
200 OK 31 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/js/jquery-3.5.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash e96fc85ce0a9070920b87b1072dd9e1d
afd9871c95caf6a26ae56e8c661789d00c510162
43e3ac1190912814c4b67ca3512c14745d1b41ce4740d3df73ead62561ca31dd
GET /cache1/hp/v_250/js/jquery-3.5.1.min.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: e54UiWLmzXf08GlFZQOwNLmjw248K84CkHRaduvC3FXRYfpbzInEkKvkHjrXjI1R6iLGr6Oq0hk=
x-amz-request-id: 5E8854E5AX589C4N
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:57 GMT
etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a"
x-amz-meta-sha256: f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
x-amz-meta-s3b-last-modified: 20210919T132249Z
x-amz-version-id: 4aWmwoVEWdk_DjJ9o9.1cbellEQnGA4x
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 30950
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash f6eaa408c3d6f76f05944dda5815d272
f0a7c045bd56a07a571e7a057216d539e7e21dfc
fb2d480aed8f70967526c75524b91f9a50b6646c217ae450887d5298e834c957
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6579
Cache-Control: max-age=132369
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:14 GMT
Etag: "635aa424-2d7"
Expires: Sat, 29 Oct 2022 17:20:23 GMT
Last-Modified: Thu, 27 Oct 2022 15:30:44 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 727
marketing.etorostatic.com/cache1/hp/v_250/images/favicon/apple-touch-icon.png
200 OK 5.0 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/favicon/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash 8d34d8eb122958024d6319988331e68a
e79ac403f17e240360be6f5540b8e7dd4a5bb9a6
f14f9af8a7d4a1acaea97621a6d43cc34f1c430b318be76f58898d98efd9ab90
GET /cache1/hp/v_250/images/favicon/apple-touch-icon.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: zS7BtNRDYQQ8zMJHkYU73f6dvQrBR4/jG9pLiV2+ECAWJIWOshj7kabGoiH6CH3KtwiY7bnoVT4=
x-amz-request-id: 85NM0JGJ52A3JDYD
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:41:47 GMT
etag: "8d34d8eb122958024d6319988331e68a"
x-amz-meta-sha256: f14f9af8a7d4a1acaea97621a6d43cc34f1c430b318be76f58898d98efd9ab90
x-amz-meta-s3b-last-modified: 20200803T094544Z
x-amz-version-id: Q2EbxWG5EYMEKf0iJz44VFOyVRrx2PXV
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 4959
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/favicon/favicon-16x16.png
200 OK 1.0 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/favicon/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 6f73b13c53883dda26ced7b25bdf69ef
a4743cd740ba05c518cc754a3ab2715f6a23d762
4470f15d8d0268f1cf44bfc45a544baa38a6aa114dab9ad02b76b48034d156b9
GET /cache1/hp/v_250/images/favicon/favicon-16x16.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: q9Fv8gRd6+b337XtoTpjf0lXha/xDl8MDnEInDhNQHkRs5JLXmey+zDMgkhZFANHULI0QMT1Yxk=
x-amz-request-id: 85NZMGGA0Z9XBNVH
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:41:48 GMT
etag: "6f73b13c53883dda26ced7b25bdf69ef"
x-amz-meta-sha256: 4470f15d8d0268f1cf44bfc45a544baa38a6aa114dab9ad02b76b48034d156b9
x-amz-meta-s3b-last-modified: 20200803T094544Z
x-amz-version-id: 8hLOOpLCaCPyjH8.y7Cb39Asiw_Qt5uv
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1020
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
script.hotjar.com/modules.5a17f10e21dd3fd3b841.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.5a17f10e21dd3fd3b841.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash f784e2f70f455f7e613fcb9f757607c4
44c87de224e98901c88434e10cbe88e18000943f
3c167e79d789a1fd56a4dd863f94690b5124a2dcd8c1e06e3e0ad9f35fd1d49a
GET /modules.5a17f10e21dd3fd3b841.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 66091
date: Wed, 26 Oct 2022 11:38:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "f784e2f70f455f7e613fcb9f757607c4"
last-modified: Wed, 26 Oct 2022 11:37:54 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oAClER-vnhAemGBZ-uK2vnNKxLMj-dojPdBjydOe8WQCqftZShaJqg==
age: 147368
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/css/style-newhp.min.css?v=1666613359
200 OK 8.2 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/css/style-newhp.min.css?v=1666613359
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (58067)
Hash f953d5c71910c6ac52b43b461396312a
4f05910e43fe46b681cda2c81af778b5cd2d28b2
26a8ffd9765eda92a46eee6f2fd622e562ff124b394101c0118118ecca68c09c
GET /cache1/hp/v_250/css/style-newhp.min.css?v=1666613359 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: RfoPvqKXzaq3HI+vj6CoefVvf/rn2n4Ybn6GKCGCDpFtSSsEb3ieUmiGkL2VP8WWZnbBJe+joTo=
x-amz-request-id: YFFS03YFYAZHRAFH
x-amz-replication-status: COMPLETED
last-modified: Wed, 21 Sep 2022 11:22:06 GMT
etag: "eb05627089f6248f125b58845182861e"
x-amz-meta-sha256: a9f2f6aa1eda10879c3d4149f011cb5529f07bb4ab43c09bd61e5d81c88b0012
x-amz-meta-s3b-last-modified: 20220920T204059Z
x-amz-version-id: BS1lBzQzv2GL0QuRJy7fh_FPT1FP8XXD
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 8214
X-Firefox-Spdy: h2
vars.hotjar.com/box-c1417f7b48595d0dbca01c86f95d6dbb.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-c1417f7b48595d0dbca01c86f95d6dbb.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash d2c298a660a1ee92f094a3d504e3e2e6
13fd39d202cf3e00be906a798921386b403e15c5
4aa80b9ea27a402072083d23dd118c6be178b90efb7ff0014c8b87c180655bdb
GET /box-c1417f7b48595d0dbca01c86f95d6dbb.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Tue, 18 Oct 2022 09:12:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "d2c298a660a1ee92f094a3d504e3e2e6"
last-modified: Tue, 18 Oct 2022 09:11:19 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9DuxPPFrkvXSm7yoBq5rlEqNwAyLGQSMmihan_mf3jHhLDQoRjB1lQ==
age: 847328
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/social-icon.svg
200 OK 5.1 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/social-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2125)
Hash 750fadde7ed0d8a59cb37992f69df5b7
c59d2044108d649ce3c10e1ae1084f20eaa7b6b4
aea9129059463c32ea4bba24765fcebc7f607697a6e6ddfe45396a5d8c79ff27
GET /cache1/hp/v_250/images/hp-2022/social-icon.svg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/cache1/hp/v_250/css/style-newhp.min.css?v=1666613359
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-amz-id-2: l1YrXFKswOQZpSqx+stH8lJL+DWQ6RcFIQ0aNHXxJZeQxjwSOLOKtG9cBtzfRtOx6ohGxo31gvc=
x-amz-request-id: P36XX1E9T43RS2YY
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:16 GMT
etag: "750fadde7ed0d8a59cb37992f69df5b7"
x-amz-meta-sha256: aea9129059463c32ea4bba24765fcebc7f607697a6e6ddfe45396a5d8c79ff27
x-amz-meta-s3b-last-modified: 20220312T200400Z
x-amz-version-id: nRgy5otmVkjeop3w29cK3B5sQq32WsQv
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 5136
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/reliability-icon.svg
200 OK 7.7 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/reliability-icon.svg
IP
Hash 8c891fa8bc9a8c289f8a969a78e72075
74edbeb2d0339b230a77df07cec1be238ccedb52
9e7352f949583aea6d40227ef5dd625e78cc3b59118c12257aa5050d810c3257
GET /cache1/hp/v_250/images/hp-2022/reliability-icon.svg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/cache1/hp/v_250/css/style-newhp.min.css?v=1666613359
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-amz-id-2: LzbecIzhwvBoQ7BWygJldYYYM6We6Ivc0s9yeELNTux/bvYN3Yt+4RBXo+6y+IJIMyE0XHUm5Ew=
x-amz-request-id: P36RY7P00A1N12Z3
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:15 GMT
etag: "0a6e20a299b321b57e48a9c83871cc0c"
x-amz-meta-sha256: f63e3109498dbf1f9ff656b0b151cf3a9ae0c22cb74369a32f1cd726dde79a19
x-amz-meta-s3b-last-modified: 20220312T200400Z
x-amz-version-id: YLr9yDu4y6poTawQ7WP7MojiYbCk.0rk
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 2891
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/reputation-icon.svg
200 OK 3.9 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/reputation-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (774)
Hash 7dc0a2667b5de60ff9a96c6ebcca9a7b
cf77125f3a15d8e1ef12bd5ffaabfb020b439c4b
fcd6bf6244f1c8d6344c40b4222142f6fe020a3c8539c97c0db2b3bb18c7e92f
GET /cache1/hp/v_250/images/hp-2022/reputation-icon.svg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/cache1/hp/v_250/css/style-newhp.min.css?v=1666613359
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Ihx3lBRD+qT3COxacNhADs25840cosw7qQjWNARp2NEbhy2sQGGC6bcDQn8R8zkCgoXq9Qg6fjs=
x-amz-request-id: P36HSNCC0CCGYRB4
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:16 GMT
etag: "7dc0a2667b5de60ff9a96c6ebcca9a7b"
x-amz-meta-sha256: fcd6bf6244f1c8d6344c40b4222142f6fe020a3c8539c97c0db2b3bb18c7e92f
x-amz-meta-s3b-last-modified: 20220312T200400Z
x-amz-version-id: sr2qY5Yx1bOPXsrLw8D.ycZfr6bVRigS
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 3894
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/globe-icon.svg
200 OK 3.4 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/images/hp-2022/globe-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (575)
Hash d8016306372e33ba7354032b4de316ac
7caeb070e9f95ab00ca267ad95c37530d3be361e
3c0a8e3833fe2d4d7d1223b97cd931988d4069eb89071d4d55b3a1434a02d571
GET /cache1/hp/v_250/images/hp-2022/globe-icon.svg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/cache1/hp/v_250/css/style-newhp.min.css?v=1666613359
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-amz-id-2: zEZql33RdFD015QzhOK47P8wzFLSFm/IcV6Blksieco1+krqTMPmOXsvpWNCUzjqRe5kvLJGWuU=
x-amz-request-id: P36N4Q9BMY5E42PD
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 17:42:11 GMT
etag: "d8016306372e33ba7354032b4de316ac"
x-amz-meta-sha256: 3c0a8e3833fe2d4d7d1223b97cd931988d4069eb89071d4d55b3a1434a02d571
x-amz-meta-s3b-last-modified: 20220312T200400Z
x-amz-version-id: qXWG2jxf6eO4.Ee8JU9epi0qWNdNYdex
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 3405
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/socials/socials.ttf?qtqow1
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/socials/socials.ttf?qtqow1
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, socials \012- data
Hash 379e2da7fbcf7192af131dab8664fa44
191a7c64f76a91ab3ac7418ef12e16155ffe916b
8c31b82294313eacadc653a0eeac4cc2c911b75c8f3792453823e72c3c73b3f2
GET /cache1/fonts/socials/socials.ttf?qtqow1 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VqG8Xoz+PNUpc5ek0EHqjuCErGzCqKx3w2Mb/U3IRKb02qkQEhEC1dsBPpa357J3lamLhU00/dI=
x-amz-request-id: ABP0NYTQMK8XRN5V
x-amz-replication-status: COMPLETED
last-modified: Tue, 11 Jan 2022 19:09:35 GMT
etag: "379e2da7fbcf7192af131dab8664fa44"
x-amz-meta-sha256: 8c31b82294313eacadc653a0eeac4cc2c911b75c8f3792453823e72c3c73b3f2
x-amz-meta-s3b-last-modified: 20220111T153358Z
x-amz-version-id: 64DCSoh81dgHS5BU7pf3T55ups5kO3ge
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
content-length: 2232
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/fonts/socials/socials.woff?qtqow1
200 OK 2.3 kB URL HTTP/2 marketing.etorostatic.com/cache1/fonts/socials/socials.woff?qtqow1
IP
File type Web Open Font Format, TrueType, length 2308, version 1.0\012- data
Hash b63c50623057857a66071527d3d19e34
60a97e3734cf76a48f1605076590257bfd370f5e
1e0140569fe23bdc3e016d72430447b3ce26f9edc0ab13d468c0b0588f9cffcc
GET /cache1/fonts/socials/socials.woff?qtqow1 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: SbuN5uTeAbiLvwg0l6RWT5GcWDZBpW5c/cufnxT2YwGTrQ28ARdF3bRVi+0p5zOx3aqQYMQ0XQ8=
x-amz-request-id: P9HV07KX2C62PBM9
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 11 Jan 2022 19:09:35 GMT
etag: "b63c50623057857a66071527d3d19e34"
x-amz-meta-sha256: 1e0140569fe23bdc3e016d72430447b3ce26f9edc0ab13d468c0b0588f9cffcc
x-amz-meta-s3b-last-modified: 20220111T153358Z
x-amz-version-id: k7ckggrGpXnM_OQiM5sA8.VZMQT0daDq
accept-ranges: bytes
content-type: application/octet-stream
server: AmazonS3
content-length: 2308
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
acsbapp.com/apps/app/dist/js/app.js
200 OK 142 kB URL HTTP/2 acsbapp.com/apps/app/dist/js/app.js
IP
File type Unicode text, UTF-8 text, with very long lines (59778), with no line terminators
Size 142 kB (142281 bytes)
Hash c7a2bc5a539e9cf84bd08948e4b85fc6
ed0af98b6410956599424c97283e14d85823c0d9
3faae7feb50d28fd285d65a07fef6161f581f50734e6396c402f6bc912a766a6
GET /apps/app/dist/js/app.js HTTP/1.1
Host: acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Sat, 29 Oct 2022 04:34:14 GMT
content-type: application/x-javascript
last-modified: Sun, 16 Oct 2022 18:20:28 GMT
etag: "6af44-634c4b6c-af3ebb833015feec;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 142281
date: Fri, 28 Oct 2022 04:34:14 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=marketingSites HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 487
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-length: 0
server: Kestrel
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin
access-control-allow-origin: https://www.etoro.com
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/videos/cover-desktop-half.mp4
206 Partial Content 36 kB URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/videos/cover-desktop-half.mp4
IP
Hash d2ac9aa4d77b9430c5ad19d0c1546076
8bae7ca2e0ad65ac49cc0de9c6c5887c59f4db60
7483a4524ee20681692af93c354ace8d5c67137e8403f36f826049850da89b0a
GET /cache1/hp/v_250/videos/cover-desktop-half.mp4 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2588672-
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
x-amz-id-2: k0S3PTtQ6A7+7DCDF0jarhfLPTSbwVz1bTqEGKIUxZtmifOjl4sOuF9FVlox4Ojv2OaWaUfjwJU=
x-amz-request-id: VAB4HZ7XE1BNTWVP
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 16:16:56 GMT
etag: "53205974fecdfed20a25d53ffbfd6bef"
x-amz-meta-sha256: 086a1f99f93c021b8bd1aa13042c342054e3da9302fc41c00c55b31f7c7058ae
x-amz-meta-s3b-last-modified: 20220920T155830Z
x-amz-version-id: 5gD_fe1tCLrWjg18GcLMs5qAtl1xDeyt
accept-ranges: bytes
content-type: video/mp4
server: AmazonS3
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-range: bytes 2588672-2625182/2625183
content-length: 36511
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.27.0/otBannerSdk.js
200 OK 78 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.27.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash f1e687b418a03f55376f8dabb88831b1
59e7de3f39b2bd1d3cff8b1286f317d913a03fac
a8f0ed59befb0dc3da4e194382166d61584fc77442140cdbe734a761ca07ded2
GET /scripttemplates/6.27.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: application/javascript
content-length: 78056
content-encoding: gzip
content-md5: 8eaHtBigP1U3b42ruIgxsQ==
last-modified: Mon, 29 Nov 2021 20:31:00 GMT
etag: 0x8D9B37727F240FD
x-ms-request-id: 7f82bfc5-f01e-0048-0667-33ea7b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 12835
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f53b6f3c0a2c-ARN
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/f72d065d-437e-4ee9-87c6-475882c9f118/f3b2c177-d411-4b76-a21a-21650b13ebf4/en.json
200 OK 14 kB URL HTTP/2 cdn.cookielaw.org/consent/f72d065d-437e-4ee9-87c6-475882c9f118/f3b2c177-d411-4b76-a21a-21650b13ebf4/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Hash 7b4d0389cd3bdfc36b615a0b060eed3c
a13bee7f9604f7dc3b55ddbbad915fd605ab9a4b
bd7cccf2a2ad2ff6c00b8fd8238da52e11e19f36d1e30447f7c4561576788a57
GET /consent/f72d065d-437e-4ee9-87c6-475882c9f118/f3b2c177-d411-4b76-a21a-21650b13ebf4/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-type: application/x-javascript
content-length: 14384
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: e00Dic0738NrYVoLBg7tPA==
last-modified: Tue, 14 Dec 2021 12:34:59 GMT
etag: 0x8D9BEFE24E4B72A
x-ms-request-id: 363ba68b-501e-0168-1a27-02c0e2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 7411
expires: Fri, 28 Oct 2022 08:34:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f53ca80b0a2c-ARN
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=marketingSites HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 578
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-length: 0
server: Kestrel
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin
access-control-allow-origin: https://www.etoro.com
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash a51a3dbd94e8cdddda0d8d16d1155ef0
2886d22b1a529112092ef440876a3ecd97afe833
6e4c636e96c204f53bad98d8b4cd7734262de9dcbd7da80d02b275dfae62c141
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6032
Cache-Control: max-age=110971
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:15 GMT
Etag: "635a52b2-118"
Expires: Sat, 29 Oct 2022 11:23:46 GMT
Last-Modified: Thu, 27 Oct 2022 09:43:14 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 280
cdn.cookielaw.org/scripttemplates/6.27.0/assets/otFlat.json
200 OK 3.0 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.27.0/assets/otFlat.json
IP
File type JSON data\012- , ASCII text, with very long lines (10843)
Hash 5521c152bc1efa1baa93129bb8717e19
d89a1ebb0aa8417a5d0f27e172935bf743d8e42e
10e8c409d6b57eb0e5a7fa941b14b2a59b1437e37a16bb51f08adc3f65e807ba
GET /scripttemplates/6.27.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-type: application/json
content-length: 2950
content-encoding: gzip
content-md5: VSHBUrwe+huqkxKbuHF+GQ==
last-modified: Mon, 29 Nov 2021 20:30:50 GMT
etag: 0x8D9B3772216FA2F
x-ms-request-id: 2be3d4f6-501e-0023-11ed-ecb72d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f53d184a0a2c-ARN
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.27.0/assets/v2/otPcCenter.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.27.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (37703)
Hash 71e3871d634182b17c1b15ca3d58f7e4
4063bf0afb25a8c96bdd33f6d24ca832067c7806
c20f40887a2fdad6ea7070063acf1150881e18405c91338338e88be4195583b5
GET /scripttemplates/6.27.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-type: application/json
content-length: 11602
content-encoding: gzip
content-md5: ceOHHWNBgrF8GxXKPVj35A==
last-modified: Mon, 29 Nov 2021 20:30:52 GMT
etag: 0x8D9B377239B4147
x-ms-request-id: 411515d2-b01e-0140-791f-2ab75d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 5777
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f53d184d0a2c-ARN
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f5497592ce53132f2886b54e3977582c
87930b39a191efe1b65b2d7184ec1250386dbcd1
5a46c21d0291e7446659cfe71524ce3898b2d2b2d20dfc3d1a2d37d65b609ee7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127748
Date: Fri, 28 Oct 2022 04:34:15 GMT
Etag: "635a94c2-1d7"
Expires: Sat, 29 Oct 2022 16:03:23 GMT
Last-Modified: Thu, 27 Oct 2022 14:25:06 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pZyHSZeCQYUCUpq0Z6qetxjx9nXZO6i7v7kdvi16sdeHiWqTlpZtew==
Age: 5898
js-agent.newrelic.com/nr-spa-1216.min.js
200 OK 18 kB URL HTTP/2 js-agent.newrelic.com/nr-spa-1216.min.js
IP
File type ASCII text, with very long lines (32010)
Hash 6561a2403142205f966207d61576f1a6
1310e72f494e12ab63a4280fc1600a2c89dc9bb8
0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 28 Oct 2022 04:34:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 1266
x-timer: S1666931655.450894,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
cdn.acsbapp.com/cache/app/etoro.com/config.json
200 OK 158 B URL HTTP/2 cdn.acsbapp.com/cache/app/etoro.com/config.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ee862b9deb01bea5457468cd6aa30fd0
8f4321cf3eb543b782892df31d010ce8e8f686aa
2b1a1522849463249add6cfcb0e459c674eb75f6edc1ca7caa728ae6822184c5
GET /cache/app/etoro.com/config.json HTTP/1.1
Host: cdn.acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Sat, 29 Oct 2022 04:34:15 GMT
content-type: application/json
last-modified: Fri, 28 Oct 2022 04:33:11 GMT
etag: "9e-635b5b87-b4a84ad732490e2d;;;"
accept-ranges: bytes
content-length: 158
date: Fri, 28 Oct 2022 04:34:15 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 167 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 167 kB (166800 bytes)
Hash 46da52b95f75e24cc3b81fa826508a2d
a19756483bbe1a6bc975b612bc9b6f6419ac7a8a
43fca711e76540be04fbc19852c3e86ab9384d5ce7e5db39063e0f141f322830
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 28 Oct 2022 04:34:15 GMT
expires: Fri, 28 Oct 2022 04:34:15 GMT
cache-control: private, max-age=900
last-modified: Fri, 28 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103451
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 17cc62f55ca7f48cf8273cf225c58f39
3ea58d6c3e2be55d95576f3c415d531103190452
6ed05db0cdf4664b64dde55b8f764f3fc1abdaaaba2821a80ba8fd7d57d87611
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3422
Cache-Control: max-age=150827
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635af895-1d7"
Expires: Sat, 29 Oct 2022 22:28:03 GMT
Last-Modified: Thu, 27 Oct 2022 21:31:01 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
in.hotjar.com/api/v2/client/sites/1871831/visit-data?sv=6
200 OK 32 kB URL HTTP/2 in.hotjar.com/api/v2/client/sites/1871831/visit-data?sv=6
IP
Hash ac728760ca628cafa450cc0627732593
ed56bf59e6f6b1edc96d93e8de01af80ff939724
023b457ca049c57e5e2cf3e198029ce251bc6008a31cc9a977fbfbf22033f3d2
POST /api/v2/client/sites/1871831/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 146
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Fri, 28 Oct 2022 04:39:16 GMT
date: Fri, 28 Oct 2022 04:34:16 GMT
content-length: 2209
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 8.8 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (25360), with no line terminators
Hash e9a9d4e245fb5df1ac33be19306752e8
246e5996a63a71ce325dff7ca6c9ef71f324b62f
64211912b65ff9a15aa212c8e8f5d4e60b86629d305c130f8824eb55837b8d4a
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 8764
server: CloudFront
date: Fri, 28 Oct 2022 04:34:16 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Sat, 29 Oct 2022 03:19:42 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5eWZuq11nSxaoXzRj-Xzn8g0eTATJffc0_-AIdcJViVp1c2nwevIew==
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash d385d741401b6f91f7163653e335fd2a
780a85109489e25f5f9193115b808f0e919ee951
63faa35e0ee826ea5782dc92a9aa7088113ee5fd67590a0cdd9277b76c8dca07
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "63FAA35E0EE826EA5782DC92A9AA7088113EE5FD67590A0CDD9277B76C8DCA07"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7366
Expires: Fri, 28 Oct 2022 06:37:02 GMT
Date: Fri, 28 Oct 2022 04:34:16 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash d385d741401b6f91f7163653e335fd2a
780a85109489e25f5f9193115b808f0e919ee951
63faa35e0ee826ea5782dc92a9aa7088113ee5fd67590a0cdd9277b76c8dca07
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "63FAA35E0EE826EA5782DC92A9AA7088113EE5FD67590A0CDD9277B76C8DCA07"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7366
Expires: Fri, 28 Oct 2022 06:37:02 GMT
Date: Fri, 28 Oct 2022 04:34:16 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash d385d741401b6f91f7163653e335fd2a
780a85109489e25f5f9193115b808f0e919ee951
63faa35e0ee826ea5782dc92a9aa7088113ee5fd67590a0cdd9277b76c8dca07
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "63FAA35E0EE826EA5782DC92A9AA7088113EE5FD67590A0CDD9277B76C8DCA07"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7366
Expires: Fri, 28 Oct 2022 06:37:02 GMT
Date: Fri, 28 Oct 2022 04:34:16 GMT
Connection: keep-alive
status.thawte.com/
200 OK 471 B IP
Hash cdb0d00b3eabd414874293319a20f029
90601797a18da0ee92d86c4807568c94cf8a8d6a
2a698a5b7ac1f70952ba8852f23a2e189dbfcff1640e6f0523beaf4da4e2b1e0
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5436
Cache-Control: max-age=120409
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a79e5-1d7"
Expires: Sat, 29 Oct 2022 14:01:05 GMT
Last-Modified: Thu, 27 Oct 2022 12:30:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e5124b2c271566d13c9369c954b403ef
d72a4361b39b1383f1123738e9be1f26ce68ad9a
b72d9cd6f2c65dc55871070a971325964c3d4289917ac87a22c2c172f307132a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 27 Oct 2022 22:44:19 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: P5nmzXPnpwktGbS5Ht0lh7jxj0yhUM5pXtN-6QpPsy9pu_7a4v8vgA==
Age: 20999
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
200 OK 398 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (562), with no line terminators
Hash 5a9998dc3732f15d817b24017d169287
825636fb778c372628fbf3f119c26cd8002631db
d5c63dc0ce384f7306f7e3fc43f893fd13e2a71fcfebdc6af26a039e976dc810
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 398
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 28-Oct-2022 04:49:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e5124b2c271566d13c9369c954b403ef
d72a4361b39b1383f1123738e9be1f26ce68ad9a
b72d9cd6f2c65dc55871070a971325964c3d4289917ac87a22c2c172f307132a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 30bc5dd4562c1c4569dec3f1efed36a8
bcc6e9d92080e97c6ebee153841053e795c42705
606f06c39f2ad2e02b69e91fbc62594e621186c81510a22e13b21b983785d335
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 644
Cache-Control: max-age=91530
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a1bd0-1d7"
Expires: Sat, 29 Oct 2022 05:59:46 GMT
Last-Modified: Thu, 27 Oct 2022 05:49:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 30bc5dd4562c1c4569dec3f1efed36a8
bcc6e9d92080e97c6ebee153841053e795c42705
606f06c39f2ad2e02b69e91fbc62594e621186c81510a22e13b21b983785d335
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: max-age=97084
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a1bd0-1d7"
Expires: Sat, 29 Oct 2022 07:32:20 GMT
Last-Modified: Thu, 27 Oct 2022 05:49:04 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
cdn.acsbapp.com/cache/app/en.build.json
200 OK 26 kB URL HTTP/2 cdn.acsbapp.com/cache/app/en.build.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65461), with no line terminators
Hash 3cf534df601af018ddb127575958c948
9a4464161c56763a8fbadda32244d664d9709d73
31f77dfc0c5ad21e3d6cbd6b9d0cd1b5405698e85e261aefafb150913638a417
GET /cache/app/en.build.json HTTP/1.1
Host: cdn.acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Sat, 29 Oct 2022 04:34:16 GMT
content-type: application/json
last-modified: Sun, 16 Oct 2022 18:24:04 GMT
etag: "3b8a2-634c4c44-5f6d38cdb4e16fc2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 25909
date: Fri, 28 Oct 2022 04:34:16 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 30bc5dd4562c1c4569dec3f1efed36a8
bcc6e9d92080e97c6ebee153841053e795c42705
606f06c39f2ad2e02b69e91fbc62594e621186c81510a22e13b21b983785d335
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 644
Cache-Control: max-age=91530
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a1bd0-1d7"
Expires: Sat, 29 Oct 2022 05:59:46 GMT
Last-Modified: Thu, 27 Oct 2022 05:49:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 30bc5dd4562c1c4569dec3f1efed36a8
bcc6e9d92080e97c6ebee153841053e795c42705
606f06c39f2ad2e02b69e91fbc62594e621186c81510a22e13b21b983785d335
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 644
Cache-Control: max-age=91530
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a1bd0-1d7"
Expires: Sat, 29 Oct 2022 05:59:46 GMT
Last-Modified: Thu, 27 Oct 2022 05:49:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
c0.adalyser.com/tracking/track/v3/p?stm=1666931654701&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fps.popcash.net%2F&cid=etoro&p=%7B%22et%22%3A1666931654699%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212087%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2285878987-8433-457f-9452-5faf83c48d36%22%2C%22duid%22%3A%222167ec1b-77d4-4cf0-8894-0cd73ab03bd0%22%2C%22cw%22%3A1666931654699%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1666931654701&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fps.popcash.net%2F&cid=etoro&p=%7B%22et%22%3A1666931654699%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212087%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2285878987-8433-457f-9452-5faf83c48d36%22%2C%22duid%22%3A%222167ec1b-77d4-4cf0-8894-0cd73ab03bd0%22%2C%22cw%22%3A1666931654699%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1666931654701&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fps.popcash.net%2F&cid=etoro&p=%7B%22et%22%3A1666931654699%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212087%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2285878987-8433-457f-9452-5faf83c48d36%22%2C%22duid%22%3A%222167ec1b-77d4-4cf0-8894-0cd73ab03bd0%22%2C%22cw%22%3A1666931654699%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=e7fd48e8-2b80-4d7c-a84f-a44c24fdd2d2&u_sclid=6edcfb18-150d-42f1-a908-927cf63f1253
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=e7fd48e8-2b80-4d7c-a84f-a44c24fdd2d2&u_sclid=6edcfb18-150d-42f1-a908-927cf63f1253
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=e7fd48e8-2b80-4d7c-a84f-a44c24fdd2d2&u_sclid=6edcfb18-150d-42f1-a908-927cf63f1253 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------341183469835751657273940132714
Content-Length: 2603
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBiREAIQgDwIqYkQRzZzn4VUHx7oIbhJZNYFjcQ8vfr50vGhh7pWeVSxp0dVV7kp2VNDIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 5
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/12085f6/hcaptcha.js
200 OK 82 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/12085f6/hcaptcha.js
IP
Hash 68224cfdaa8aca4f251b45588889af83
86ecb3fbc3e63bcacc3cd7e2e8051ba9e1f3404d
37c535f373b359ddba80a0c374655cafd6cfb824f0f20d5bc4b175e5735e0b90
GET /captcha/v1/12085f6/hcaptcha.js HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
Cookie: __cf_bm=ZF.y2YRiHUQhXOHJJnZbu9AxM6_7gHDveiI0vYu8SK0-1666931656-0-AXXSZ8MiLEgXdtKktWoxk+eO3nmeA0cSFIajvcdCGyrkxOCzJhqQrpul4Xiy4Dv1DjoLRX/YodK2/GQWx7JVlYE=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: application/javascript
cf-ray: 7610f5447aa70a31-ARN
access-control-allow-origin: *
age: 46422
cache-control: max-age=1209600
etag: W/"5ab4b08736cc84a24e057a5ac94d054f"
last-modified: Wed, 26 Oct 2022 15:08:23 GMT
strict-transport-security: max-age=0
via: 1.1 350f2b5d7e6ee985da330b123098fd88.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: OLPlzSzArNwxlPWd-g3LaTXeEo0cVIcZT8xSqmtQ_MF6Zj1piYYPzw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 30bc5dd4562c1c4569dec3f1efed36a8
bcc6e9d92080e97c6ebee153841053e795c42705
606f06c39f2ad2e02b69e91fbc62594e621186c81510a22e13b21b983785d335
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 644
Cache-Control: max-age=91530
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a1bd0-1d7"
Expires: Sat, 29 Oct 2022 05:59:46 GMT
Last-Modified: Thu, 27 Oct 2022 05:49:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 399 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (561), with no line terminators
Hash aafbe00c9237405a89209c023ecf0e9f
73cedd4fd162051ba33aa05103826a641e11b888
5c63f827ce3f4a9601091587fd7b5a85afdf1443a0b93fd06c4e8a226bc6b90c
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 399
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
web1.acsbapp.com/apps/app/dist/media/logomono.svg
200 OK 1.2 kB URL HTTP/2 web1.acsbapp.com/apps/app/dist/media/logomono.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash 5a1c5c803738f6acbab0a79379c92c10
9f4639325d9e8e69ccc2bfc30d0f83d7dd11cd79
04009697f389893748179c149cad7b1e399d23a2284637350fe07ad94ffa5350
GET /apps/app/dist/media/logomono.svg HTTP/1.1
Host: web1.acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Sat, 28 Oct 2023 04:34:16 GMT
content-type: image/svg+xml
last-modified: Mon, 26 Sep 2022 21:02:04 GMT
etag: "1034-6332134c-7705bf7dfc5e498d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1210
date: Fri, 28 Oct 2022 04:34:16 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c14c3f7d8817b44fda85ba769cc83062
bf41520c5a807058748db49621e7d6ee4ecf5729
eb15bf461ab810e1487ece424600f22d33bebc4f438ef6a10927df18dda0d216
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bam.nr-data.net/1/8e1edcd9e2?a=16546562&v=1216.487a282&to=YlBWMEJQWEoFUENcVlsaYRZZHl9XAFZPG0ldRQ%3D%3D&rst=2760&ck=1&ref=https://www.etoro.com/&ap=9&be=809&fe=1896&dc=1160&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1666931651628,%22n%22:0,%22f%22:576,%22dn%22:577,%22dne%22:634,%22c%22:634,%22s%22:644,%22ce%22:660,%22rq%22:660,%22rp%22:771,%22rpe%22:771,%22dl%22:777,%22di%22:1141,%22ds%22:1159,%22de%22:1163,%22dc%22:1896,%22l%22:1896,%22le%22:1899%7D,%22navigation%22:%7B%22ty%22:255%7D%7D&fcp=974&at=ThdVRgpKS0Q%3D&jsonp=NREUM.setToken
200 OK 72 B URL HTTP/1.1 bam.nr-data.net/1/8e1edcd9e2?a=16546562&v=1216.487a282&to=YlBWMEJQWEoFUENcVlsaYRZZHl9XAFZPG0ldRQ%3D%3D&rst=2760&ck=1&ref=https://www.etoro.com/&ap=9&be=809&fe=1896&dc=1160&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1666931651628,%22n%22:0,%22f%22:576,%22dn%22:577,%22dne%22:634,%22c%22:634,%22s%22:644,%22ce%22:660,%22rq%22:660,%22rp%22:771,%22rpe%22:771,%22dl%22:777,%22di%22:1141,%22ds%22:1159,%22de%22:1163,%22dc%22:1896,%22l%22:1896,%22le%22:1899%7D,%22navigation%22:%7B%22ty%22:255%7D%7D&fcp=974&at=ThdVRgpKS0Q%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 107d93e382e2c9b00fbf9fb0edc65d86
77e750e3ebf9706f4f6dd253785602d70be17c6c
a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /1/8e1edcd9e2?a=16546562&v=1216.487a282&to=YlBWMEJQWEoFUENcVlsaYRZZHl9XAFZPG0ldRQ%3D%3D&rst=2760&ck=1&ref=https://www.etoro.com/&ap=9&be=809&fe=1896&dc=1160&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1666931651628,%22n%22:0,%22f%22:576,%22dn%22:577,%22dne%22:634,%22c%22:634,%22s%22:644,%22ce%22:660,%22rq%22:660,%22rp%22:771,%22rpe%22:771,%22dl%22:777,%22di%22:1141,%22ds%22:1159,%22de%22:1163,%22dc%22:1896,%22l%22:1896,%22le%22:1899%7D,%22navigation%22:%7B%22ty%22:255%7D%7D&fcp=974&at=ThdVRgpKS0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 04:34:16 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7610f542888e09a7-ARN
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=dd7dc3479bb8108f; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
amplify.outbrain.com/cp/obtp.js
200 OK 3.5 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8656), with no line terminators
Hash 6cff2cb49ee772adf066904fd18efd9a
8b876016198b0fc9862d2b6e29a80251c5422e72
85d26923c638ce50f36f7b69f9f50d2a6d6863abed574af143e24a14a343f9d2
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "0d5508c59e34b5d35cde5aea2aa1c2fd:1665301953.026714"
Last-Modified: Sun, 09 Oct 2022 07:50:08 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Fri, 28 Oct 2022 04:54:16 GMT
Date: Fri, 28 Oct 2022 04:34:16 GMT
Content-Length: 3471
Connection: keep-alive
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 21 kB URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&upid=jxpewqr&upv=1.1.0&td1=visit
IP
Hash 7b4db536c28a444174200b4c7103997f
50a1ae13298c6a26efdba79e9f6bc6cab7bf5042
457f90bb6104a19f8a8ba5ce96ea1ff48ad6bc641db200c1c6345a228edc6f54
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=7883cd7c-51f3-4147-8600-41f5f9087267; domain=.adsrvr.org; expires=Sat, 28-Oct-2023 04:34:16 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (58483)
Hash b2e9aaa470149afe6f0276014c1cff21
b7dec807158831820487cda04b35ed2473b35a85
4986d5a2af7b2d7cf032f0bd537a6d2b2f0e303394c3ed55b7d6fcc80f6ca24d
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sNmGVpdAmq0AXnHElJ17zgN0cCBnYMXKTwo6c1qG44DIeVmDxhVBXc19qULrfR7Ny7XFo+hNNOY=
x-amz-request-id: 9PGPEZ7JZSTPMYDT
x-amz-replication-status: PENDING
last-modified: Sun, 23 Oct 2022 11:21:10 GMT
etag: "1b9608b81b26a2106d45b223ef11da4f"
x-amz-version-id: OeDiQYtYba2keWyTIYqwbZAbibZrVm80
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 28 Oct 2022 04:34:16 GMT
via: 1.1 varnish
age: 40
x-served-by: cache-bma1671-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666931657.697786,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 2
content-length: 17942
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
200 OK 1.3 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1357)
Hash 0ff8b331c77dc6d98af3d2c433b1ff9b
2a155d8dc8a46597c09b03868e7927aab94aaee8
f59be5c47b66b8147e70969e4099b76aff1f71ad6d0d849068cd5a4ff2457d92
GET /captcha/v1/12085f6/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: text/html
cf-ray: 7610f543b9cb0a31-ARN
access-control-allow-origin: *
age: 46420
cache-control: max-age=1209600
last-modified: Wed, 26 Oct 2022 15:08:23 GMT
strict-transport-security: max-age=0
via: 1.1 a363bcf8a299e9ee68092f31207f8870.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: e7qR63PZQDzaELRw0dF2ZHovFZ_dhVFx9GcpcUKLU5Q6eG54H44sVA==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=L2gir4l4LXYUsiggFs63P4B9fKY4Sjcntc9CuVe8aFY-1666931656-0-ATnadOiE53PA7iELxNal3avxbO8DuAGLS6D1fyDMPWgpCBDvL4ag7PUscmpxDYGEbetj0maZ60ubFth3uxVF+uA=; path=/; expires=Fri, 28-Oct-22 05:04:16 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4310918d6232571380ecdee01460a00
fde570a320de2d68089611ea286d8638d55dcb31
fc0209573f8bc2b00eadf4c750f336102d4d34cc4ea65fe60dfeb789970fcba1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Fri, 28 Oct 2022 04:34:16 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1644-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
tr.snapchat.com/collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com
200 OK 12 kB URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (38905), with no line terminators
Hash 1eea464032e488a529efa4e7aba9ea21
354a3cf561e760461360615eaa7a0c863b0c43c6
28ceb0dc8e62a11a4466a263ad0f0613348d0abc1c8e39bf2cb2d268739e3bc7
GET /collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 575d42e9df3f270b64e3999372e9bfe6
1ad6fc69ec286fc7c088b36cb76a51119770ffc0
ef816ea342e04adc3438c1e38f0e7a164b835ddad1515b41f642f4820b58959d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5521
Cache-Control: max-age=145333
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635adaed-1d7"
Expires: Sat, 29 Oct 2022 20:56:29 GMT
Last-Modified: Thu, 27 Oct 2022 19:24:29 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=88866475.1666931655>m=2oeaq0&aip=1&z=85988212
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=88866475.1666931655>m=2oeaq0&aip=1&z=85988212
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=88866475.1666931655>m=2oeaq0&aip=1&z=85988212 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
200 OK 28 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (62431)
Hash 37f112de73b503d5f8560b5ae5248676
aeb4bd35b0184ea98c1e746d56249c83248d4e75
03289b7ad6bdaea857d7a2b461c1f6dbe7201cbd5400592a0f338c805652af30
GET /captcha/v1/12085f6/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: text/html
cf-ray: 7610f543d9e50a31-ARN
access-control-allow-origin: *
age: 46420
cache-control: max-age=1209600
last-modified: Wed, 26 Oct 2022 15:08:23 GMT
strict-transport-security: max-age=0
via: 1.1 a363bcf8a299e9ee68092f31207f8870.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: e7qR63PZQDzaELRw0dF2ZHovFZ_dhVFx9GcpcUKLU5Q6eG54H44sVA==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=JX1oC0BlYKJN5iC9dSJp1SuAaIOwDu_5kK_Q8uTsOW4-1666931656-0-AYE5ALdIsWZnReae6u7S+3X2v7k/qpCCvOYittFGf6Ip7bDOgHPTPY0VzxOfe2W+Bt66pGBa02HSXJKuw5Pk25k=; path=/; expires=Fri, 28-Oct-22 05:04:16 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
200 OK 1.3 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
IP
Hash 3b10348c4ec006285d1ec2cf50a41e07
1a114de9a16c9bc3d618540a0af117e36902b8dc
421b6ec140d6f57cb5fb6c31f08430355a1f2600f9564572b0840916e9341c50
GET /captcha/v1/12085f6/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: text/html
cf-ray: 7610f543d9e70a31-ARN
access-control-allow-origin: *
age: 46420
cache-control: max-age=1209600
last-modified: Wed, 26 Oct 2022 15:08:23 GMT
strict-transport-security: max-age=0
via: 1.1 a363bcf8a299e9ee68092f31207f8870.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: e7qR63PZQDzaELRw0dF2ZHovFZ_dhVFx9GcpcUKLU5Q6eG54H44sVA==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=JJBYa9DlYH8UgJq4zaP4Jj6uDxrgD05.cKYqgfAKUSU-1666931656-0-AYSLVhOxe3vI1Nn1ltamhaRj7L/jdX6w18+X8pVF8ofFAl+xX/54miBn+6Wm4W7TFFqVYuQQgww/r1npNXaOGqM=; path=/; expires=Fri, 28-Oct-22 05:04:16 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 575d42e9df3f270b64e3999372e9bfe6
1ad6fc69ec286fc7c088b36cb76a51119770ffc0
ef816ea342e04adc3438c1e38f0e7a164b835ddad1515b41f642f4820b58959d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5521
Cache-Control: max-age=145333
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635adaed-1d7"
Expires: Sat, 29 Oct 2022 20:56:29 GMT
Last-Modified: Thu, 27 Oct 2022 19:24:29 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 89b0AYCQRx84QDqt9OtzpP9guZP5/vef+bIOuLo8inTFzui50r9KSJpBUC+BqNqan/UdSG4g0ww=
x-amz-request-id: R9883MF63P9NPKSY
date: Fri, 28 Oct 2022 04:03:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 1862
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:16 GMT
expires: Fri, 28 Oct 2022 04:34:16 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 0ff6c1899d5d30908d949f022ce55344
6852cc1d5a456151028d9ae9545c896acc3c6713
21620b09c4a1a04c6310d45b795daf52aa31c44c8f21c4f4cef76c635e73215e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3759
Cache-Control: max-age=112982
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a636f-13a"
Expires: Sat, 29 Oct 2022 11:57:18 GMT
Last-Modified: Thu, 27 Oct 2022 10:54:39 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash 0ff6c1899d5d30908d949f022ce55344
6852cc1d5a456151028d9ae9545c896acc3c6713
21620b09c4a1a04c6310d45b795daf52aa31c44c8f21c4f4cef76c635e73215e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6051
Cache-Control: max-age=115274
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Etag: "635a636f-13a"
Expires: Sat, 29 Oct 2022 12:35:30 GMT
Last-Modified: Thu, 27 Oct 2022 10:54:39 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 314
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e83a28b4cf3704ed7ee9b5b209caec6
9da8bd6baa00c240f5fe8511be7ebdc5166c18cf
021e6992122fcdc5803bd23e45f2fbb7b26f2c7d1d027dd5f9163d90f9fd6a36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1666931654599&hl=1&op=0&ag=1317291471&rand=530075827589007028000752716766201551250180991672222281728092500198119124285&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fps.popcash.net%2F&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=n0DRoVXYYg&pto=2972&ver=48&gac=-&mei=&ap=&duid=1.1666931654.eaICGbzlk95er1Mm&suid=1.1666931654.7VKStHAaOAS4tVKW&tuid=1.1666931654.JjDy2iFLP20ORqcY&fbc=->m=WyJPbmVUcnVzdExvYWRlZCIsIk9wdGFub25Mb2FkZWQiLCJPbmVUcnVzdEdyb3Vwc1VwZGF0ZWQiXQ%3D%3D&it=60%2C2807%2C30&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.0 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1666931654599&hl=1&op=0&ag=1317291471&rand=530075827589007028000752716766201551250180991672222281728092500198119124285&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fps.popcash.net%2F&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=n0DRoVXYYg&pto=2972&ver=48&gac=-&mei=&ap=&duid=1.1666931654.eaICGbzlk95er1Mm&suid=1.1666931654.7VKStHAaOAS4tVKW&tuid=1.1666931654.JjDy2iFLP20ORqcY&fbc=->m=WyJPbmVUcnVzdExvYWRlZCIsIk9wdGFub25Mb2FkZWQiLCJPbmVUcnVzdEdyb3Vwc1VwZGF0ZWQiXQ%3D%3D&it=60%2C2807%2C30&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (2974), with no line terminators
Hash 5de8788be57159e158d11b85cd421bfe
c927737f3b2bf54cc1b78d16fa3b014340e93546
6aa7e7bca6bceb3dd1db089f4580880feb8e986fe4570a46b74cd45f54109a6d
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1666931654599&hl=1&op=0&ag=1317291471&rand=530075827589007028000752716766201551250180991672222281728092500198119124285&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fps.popcash.net%2F&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=n0DRoVXYYg&pto=2972&ver=48&gac=-&mei=&ap=&duid=1.1666931654.eaICGbzlk95er1Mm&suid=1.1666931654.7VKStHAaOAS4tVKW&tuid=1.1666931654.JjDy2iFLP20ORqcY&fbc=->m=WyJPbmVUcnVzdExvYWRlZCIsIk9wdGFub25Mb2FkZWQiLCJPbmVUcnVzdEdyb3Vwc1VwZGF0ZWQiXQ%3D%3D&it=60%2C2807%2C30&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Fri, 28 Oct 2022 04:34:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=4fb0d875ecf2630fcfb8f8ea1b046c79; Max-Age=29030400; Path=/; Expires=Fri, 29 Sep 2023 04:34:16 GMT; HttpOnly; Secure; SameSite=None
content-length: 1013
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=88866475.1666931655>m=2oeaq0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=88866475.1666931655>m=2oeaq0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=88866475.1666931655>m=2oeaq0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Fri, 28 Oct 2022 04:34:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=88866475.1666931655&jid=2065617339&gjid=39231564&_gid=786241684.1666931655&_u=YADAAEAAAAAAACAEK~&z=646650381
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=88866475.1666931655&jid=2065617339&gjid=39231564&_gid=786241684.1666931655&_u=YADAAEAAAAAAACAEK~&z=646650381
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=88866475.1666931655&jid=2065617339&gjid=39231564&_gid=786241684.1666931655&_u=YADAAEAAAAAAACAEK~&z=646650381 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 28 Oct 2022 04:34:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oeaq0&_p=591089146&_gaz=1&ul=NA&cid=88866475.1666931655&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1666931654&sct=1&seg=0&dr=http%3A%2F%2Fps.popcash.net%2F&dt=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fps.popcash.net%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.session_referer=http%3A%2F%2Fps.popcash.net%2F
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oeaq0&_p=591089146&_gaz=1&ul=NA&cid=88866475.1666931655&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1666931654&sct=1&seg=0&dr=http%3A%2F%2Fps.popcash.net%2F&dt=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fps.popcash.net%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.session_referer=http%3A%2F%2Fps.popcash.net%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oeaq0&_p=591089146&_gaz=1&ul=NA&cid=88866475.1666931655&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1666931654&sct=1&seg=0&dr=http%3A%2F%2Fps.popcash.net%2F&dt=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fps.popcash.net%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.session_referer=http%3A%2F%2Fps.popcash.net%2F HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Fri, 28 Oct 2022 04:34:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e83a28b4cf3704ed7ee9b5b209caec6
9da8bd6baa00c240f5fe8511be7ebdc5166c18cf
021e6992122fcdc5803bd23e45f2fbb7b26f2c7d1d027dd5f9163d90f9fd6a36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/i/adsct?bci=3&eci=2&event_id=3ed9c6d9-f958-4b8e-8507-c7edd001034a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=3ed9c6d9-f958-4b8e-8507-c7edd001034a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=3ed9c6d9-f958-4b8e-8507-c7edd001034a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=60802431-b7dc-412b-a0de-5c5798bdae73; Max-Age=63072000; Expires=Sun, 27 Oct 2024 04:34:16 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 94a22bc2f5224e5d
strict-transport-security: max-age=0
x-response-time: 110
x-connection-hash: df3bac2499e3da6d33bca93e2b4ad81f8ef85cec72b8bae10b48fe5db5532aaa
X-Firefox-Spdy: h2
bam.nr-data.net/events/1/8e1edcd9e2?a=16546562&v=1216.487a282&to=YlBWMEJQWEoFUENcVlsaYRZZHl9XAFZPG0ldRQ%3D%3D&rst=3635&ck=1&ref=https://www.etoro.com/
200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/8e1edcd9e2?a=16546562&v=1216.487a282&to=YlBWMEJQWEoFUENcVlsaYRZZHl9XAFZPG0ldRQ%3D%3D&rst=3635&ck=1&ref=https://www.etoro.com/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/8e1edcd9e2?a=16546562&v=1216.487a282&to=YlBWMEJQWEoFUENcVlsaYRZZHl9XAFZPG0ldRQ%3D%3D&rst=3635&ck=1&ref=https://www.etoro.com/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1157
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 04:34:17 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 7610f547cc2e09a7-ARN
Access-Control-Allow-Origin: https://www.etoro.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 070519b9c599260cf64522951070a879
14bf298f5462eae3a17cf094dc35a41b11d35d92
6b4cf61e4265fae684e2ad48aa0046c079e333842fe84dc8b8a94713f49c854e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 28 Oct 2022 04:34:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 27 Oct 2022 20:08:09 GMT
Expires: Fri, 28 Oct 2022 20:08:09 GMT
ETag: "14bf298f5462eae3a17cf094dc35a41b11d35d92"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cloudflare.hcaptcha.com/checksiteconfig?v=12085f6&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1
200 OK 522 B URL HTTP/2 cloudflare.hcaptcha.com/checksiteconfig?v=12085f6&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1
IP
Hash c20c48d44502aa222d6c41db6804650d
3cd8bef0400794d05f8e75b522533270441c184d
bfc7c9468c24fff070a333938f0eec79ab8011d11059a3db5a18a8aab7b9334a
POST /checksiteconfig?v=12085f6&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1 HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://cf-assets.hcaptcha.com
Connection: keep-alive
Referer: https://cf-assets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: application/json
access-control-allow-origin: https://cf-assets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent, challenge-bypass-token, cf-chl-bypass, challenge-bypass-token, challenge-bypass-host, challenge-bypass-path
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7610f5470d8c9902-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=n0DRoVXYYg&ts=776&cb=1666931655375
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=n0DRoVXYYg&ts=776&cb=1666931655375
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=n0DRoVXYYg&ts=776&cb=1666931655375 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=4fb0d875ecf2630fcfb8f8ea1b046c79
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 28 Oct 2022 04:34:17 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.old.min.js
200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.old.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.old.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 24 Oct 2022 21:02:26 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=33453
date: Fri, 28 Oct 2022 04:34:17 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=3384609F3B65687103D172D43A906979; domain=.bing.com; expires=Wed, 22-Nov-2023 04:34:17 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 65750D633B0A4DCFA1B71C46E0C9FA2C Ref B: OSL30EDGE0209 Ref C: 2022-10-28T04:34:17Z
date: Fri, 28 Oct 2022 04:34:16 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=b3e41941-8a17-4cd7-926e-be2e992f1da4&sid=c7429d60567911ed97cc13ca6611629a&vid=c74292c0567911ed82b6dbc944cd5f5d&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Crypto,%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&p=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&r=http%3A%2F%2Fps.popcash.net%2F<=1899&evt=pageLoad&sv=1&rn=698563
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=b3e41941-8a17-4cd7-926e-be2e992f1da4&sid=c7429d60567911ed97cc13ca6611629a&vid=c74292c0567911ed82b6dbc944cd5f5d&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Crypto,%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&p=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&r=http%3A%2F%2Fps.popcash.net%2F<=1899&evt=pageLoad&sv=1&rn=698563
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=b3e41941-8a17-4cd7-926e-be2e992f1da4&sid=c7429d60567911ed97cc13ca6611629a&vid=c74292c0567911ed82b6dbc944cd5f5d&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Crypto,%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&p=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&r=http%3A%2F%2Fps.popcash.net%2F<=1899&evt=pageLoad&sv=1&rn=698563 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=088AEF8D8BE06DF529ACFDC68A156C83; domain=.bing.com; expires=Wed, 22-Nov-2023 04:34:17 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A4CF680974C440BABC8094B9C6377598 Ref B: OSL30EDGE0209 Ref C: 2022-10-28T04:34:17Z
date: Fri, 28 Oct 2022 04:34:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0e1b81fcc7a70f4aa2d9951ef290017c
bfa146eb28fbde7c3f7a08a63e5560091938a107
35f4482a0989b04bd4dd86d0895a276cb94309708f45a20804cde74c4890a9e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=88866475.1666931655&jid=2065617339&_u=YADAAEAAAAAAACAEK~&z=1258974573
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=88866475.1666931655&jid=2065617339&_u=YADAAEAAAAAAACAEK~&z=1258974573
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=88866475.1666931655&jid=2065617339&_u=YADAAEAAAAAAACAEK~&z=1258974573 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash fe1ccccf489449b6106afd3cbadd43c0
a36a24acda5d97f330b0b350d4160b508cf37771
fe99260efcf2a005693495855925af5425a3204d138446eb8c87b4b8cf27f5b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5629
Cache-Control: max-age=155885
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:17 GMT
Etag: "635b03b9-139"
Expires: Sat, 29 Oct 2022 23:52:22 GMT
Last-Modified: Thu, 27 Oct 2022 22:18:33 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash fe1ccccf489449b6106afd3cbadd43c0
a36a24acda5d97f330b0b350d4160b508cf37771
fe99260efcf2a005693495855925af5425a3204d138446eb8c87b4b8cf27f5b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6480
Cache-Control: max-age=156736
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:17 GMT
Etag: "635b03b9-139"
Expires: Sun, 30 Oct 2022 00:06:33 GMT
Last-Modified: Thu, 27 Oct 2022 22:18:33 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
sp.analytics.yahoo.com/sp.pl?a=10000&b=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&e=http%3A%2F%2Fps.popcash.net%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&e=http%3A%2F%2Fps.popcash.net%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&e=http%3A%2F%2Fps.popcash.net%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:17 GMT
expires: Fri, 28 Oct 2022 04:34:17 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBMlbW2MCEHdL0EOBXYkRfI5vDrodhcgFEgEBAQGtXGNlYwAAAAAA_eMAAA&S=AQAAAibQYQd4wzUJMCgN95F9NTc; Expires=Sat, 28 Oct 2023 10:34:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2028%20Oct%202022%2004%3A34%3A15%20GMT&n=0&b=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&e=http%3A%2F%2Fps.popcash.net%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2028%20Oct%202022%2004%3A34%3A15%20GMT&n=0&b=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&e=http%3A%2F%2Fps.popcash.net%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2028%20Oct%202022%2004%3A34%3A15%20GMT&n=0&b=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&e=http%3A%2F%2Fps.popcash.net%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:17 GMT
expires: Fri, 28 Oct 2022 04:34:17 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBMlbW2MCECSGMjwhT0y-XloiDtJrpfcFEgEBAQGtXGNlYwAAAAAA_eMAAA&S=AQAAAtdKLusxRCyLwO0DWeBwEWs; Expires=Sat, 28 Oct 2023 10:34:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&rl=http%3A%2F%2Fps.popcash.net%2F&if=false&ts=1666931655572&sw=1280&sh=1024&v=2.9.88&r=stable&ec=0&o=28&fbp=fb.1.1666931655571.671929408&it=1666931655196&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&rl=http%3A%2F%2Fps.popcash.net%2F&if=false&ts=1666931655572&sw=1280&sh=1024&v=2.9.88&r=stable&ec=0&o=28&fbp=fb.1.1666931655571.671929408&it=1666931655196&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&rl=http%3A%2F%2Fps.popcash.net%2F&if=false&ts=1666931655572&sw=1280&sh=1024&v=2.9.88&r=stable&ec=0&o=28&fbp=fb.1.1666931655571.671929408&it=1666931655196&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 28 Oct 2022 04:34:17 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1666931655600&cv=11&fst=1666931655600&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fps.popcash.net%2F&tiba=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&auid=2119971857.1666931654&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1666931655600&cv=11&fst=1666931655600&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fps.popcash.net%2F&tiba=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&auid=2119971857.1666931654&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2326), with no line terminators
Hash f15527acb35a7730b399ffd0c7c63440
ad57232d801b1d61d68c16bce35b9800ff2bc210
770bf5057921088cb0a410f897dcf39f97b6fd05ce87a2071b34978056259659
GET /pagead/viewthroughconversion/745546367/?random=1666931655600&cv=11&fst=1666931655600&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fps.popcash.net%2F&tiba=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&auid=2119971857.1666931654&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1083
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 28-Oct-2022 04:49:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1666931655616&cv=11&fst=1666931655616&fmt=3&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fps.popcash.net%2F&tiba=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro>m_ee=1&auid=2119971857.1666931654&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1666931655616&cv=11&fst=1666931655616&fmt=3&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fps.popcash.net%2F&tiba=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro>m_ee=1&auid=2119971857.1666931654&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1666931655616&cv=11&fst=1666931655616&fmt=3&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fps.popcash.net%2F&tiba=Crypto%2C%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro>m_ee=1&auid=2119971857.1666931654&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 04:34:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 28-Oct-2022 04:49:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 3cd879a73f8178dde465b01157320ca6
353e25c69bb1858b31e3844e136b21d8fdadfd21
d1d2353a76e7dce172fc6c71ea0bb8fe17d9d7ea562232705000e55e00268e6c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4423
Cache-Control: max-age=113663
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:17 GMT
Etag: "635a6381-1d7"
Expires: Sat, 29 Oct 2022 12:08:40 GMT
Last-Modified: Thu, 27 Oct 2022 10:54:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 3cd879a73f8178dde465b01157320ca6
353e25c69bb1858b31e3844e136b21d8fdadfd21
d1d2353a76e7dce172fc6c71ea0bb8fe17d9d7ea562232705000e55e00268e6c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5066
Cache-Control: max-age=114306
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:17 GMT
Etag: "635a6381-1d7"
Expires: Sat, 29 Oct 2022 12:19:23 GMT
Last-Modified: Thu, 27 Oct 2022 10:54:57 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=3ed9c6d9-f958-4b8e-8507-c7edd001034a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=3ed9c6d9-f958-4b8e-8507-c7edd001034a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=3ed9c6d9-f958-4b8e-8507-c7edd001034a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_YAhZGxAoH2ilubA40pfJTg=="; Max-Age=63072000; Expires=Sun, 27 Oct 2024 04:34:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: a034cf679ddded01
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: 7ac59aa9c1aeb24e3fd937d6f90d9236e752620f732479226817ffe3264390de
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=2e352b66-1ef8-47a6-a824-a47ee6f984ee&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=2e352b66-1ef8-47a6-a824-a47ee6f984ee&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=2e352b66-1ef8-47a6-a824-a47ee6f984ee&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9160eb99-5b36-4445-b14e-e08f0200941f&tw_document_href=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_flyR5kUZ6qr/o0wiLQ8cJw=="; Max-Age=63072000; Expires=Sun, 27 Oct 2024 04:34:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 48037c5fe2356333
strict-transport-security: max-age=631138519
x-response-time: 117
x-connection-hash: 7ac59aa9c1aeb24e3fd937d6f90d9236e752620f732479226817ffe3264390de
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1666931655558%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252F%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12087%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%2523pc151445%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJhn7txXTzAiAAAAYQc3oqA-WGImZwPwr9FCvQhxOVfoFk31Bk1_EsNlb7nZS3kzSU93PjuwFLnfw; Max-Age=2592000; Expires=Sun, 27 Nov 2022 04:34:17 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLpVpjreQRbtgAAAYQc3oqA_JqZBBOf-W5Wpz2Mi1ITjURG274w_6jZ0YbpYHQzUQ9znvLA1EgDkCX1XJCTiQ; Max-Age=2592000; Expires=Sun, 27 Nov 2022 04:34:17 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&40df5ae4-a987-44e8-8606-9685cc1072bc"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 28-Oct-2023 04:34:17 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2367:u=1:x=1:i=1666931657:t=1667018057:v=2:sig=AQGLx10nZsynpm6qrWOv525Cs0aHXAPy"; Expires=Sat, 29 Oct 2022 04:34:17 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXsEMVM4t2DJMQD1M0BoQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F3AB6150C92345E48857CD896B927FCF Ref B: OSL30EDGE0509 Ref C: 2022-10-28T04:34:17Z
date: Fri, 28 Oct 2022 04:34:17 GMT
content-length: 0
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/i/bc030dc/e
200 OK 110 kB URL HTTP/2 cf-assets.hcaptcha.com/i/bc030dc/e
IP
Size 110 kB (109953 bytes)
Hash 6682168f3cbb6964c4397cf4fa524a1d
a1fd38ad077b1f524760a00c74b14746610bd087
0c531af7d3bd28d8f69b451b1566f7644d5c8e893dd837e92aad9c8851a014d3
GET /i/bc030dc/e HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
Connection: keep-alive
Cookie: __cf_bm=ZF.y2YRiHUQhXOHJJnZbu9AxM6_7gHDveiI0vYu8SK0-1666931656-0-AXXSZ8MiLEgXdtKktWoxk+eO3nmeA0cSFIajvcdCGyrkxOCzJhqQrpul4Xiy4Dv1DjoLRX/YodK2/GQWx7JVlYE=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:17 GMT
content-type: application/octet-stream
content-length: 109953
cf-ray: 7610f54aefc00a31-ARN
accept-ranges: bytes
access-control-allow-origin: *
age: 86703
cache-control: max-age=1209600
etag: "6682168f3cbb6964c4397cf4fa524a1d"
last-modified: Wed, 26 Oct 2022 07:36:38 GMT
strict-transport-security: max-age=0
via: 1.1 163a559a90b919cdbd95acf4deecc98a.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: 2D4YTQhUOLCycgB10WJxhIIbNyE_utqF678Xn8vE7PnUF2pIKl5oIw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 04:34:17 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: fcc88d8b63fbc68c6eb7681d793ce83d
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&optOut=false&bust=035104369211820197&referrer=http%3A%2F%2Fps.popcash.net%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&optOut=false&bust=035104369211820197&referrer=http%3A%2F%2Fps.popcash.net%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=1.10.0&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&optOut=false&bust=035104369211820197&referrer=http%3A%2F%2Fps.popcash.net%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 04:34:17 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: cd36751b90dc09d8a76e629a41982bb6
content-encoding: gzip
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1666931655558%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252F%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12087%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%2523pc151445%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1666931655558%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252F%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12087%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%2523pc151445%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1666931655558%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252F%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12087%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%2523pc151445%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&c954df31-19b4-46d8-8c04-f77d0822c033"; Domain=.linkedin.com; Expires=Sat, 28-Oct-2023 04:34:17 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202210280434172fc03bed-8663-48e4-8dd1-e2ac893c7727AQGhS00FWSBkUW2wJR5PJvLaH87bCVZ9"; Domain=.www.linkedin.com; Expires=Sat, 28-Oct-2023 04:34:17 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjY5MzE2NTc7MjswMjG7EtZxUG2XfCftbXK8MKRnGyYJ7vmTguoPbw3AUUg+HA==; Domain=.linkedin.com; Expires=Wed, 26 Apr 2023 04:34:17 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2406:u=1:x=1:i=1666931657:t=1667018057:v=2:sig=AQF_HHHyzsQ7s4iKRPW_OldHec9hLq4i"; Expires=Sat, 29 Oct 2022 04:34:17 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com *.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXsEMVQJsW2HKww4Y1UFw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 36D66327CAE54D458FCDBDB17DF4CF06 Ref B: OSL30EDGE0509 Ref C: 2022-10-28T04:34:17Z
date: Fri, 28 Oct 2022 04:34:17 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash f1731a1587e45e9ee776def91c39333c
7f61dc0ebeae12b3e6a6bef60410860f04bdca8d
782df5eec446007fbf91212068daaf24f977724794aafece60dcad6a2498fb7c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 04:34:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 02:54:24 GMT
Expires: Wed, 02 Nov 2022 02:54:23 GMT
Etag: "7f61dc0ebeae12b3e6a6bef60410860f04bdca8d"
Cache-Control: max-age=425405,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7610f54ce8b80a35-ARN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1666931655558&url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&e3e5b1d0-e461-4141-8ac2-4dc063004b10"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 28-Oct-2023 04:34:17 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2406:u=1:x=1:i=1666931657:t=1667018057:v=2:sig=AQF_HHHyzsQ7s4iKRPW_OldHec9hLq4i"; Expires=Sat, 29 Oct 2022 04:34:17 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXsEMVVUGvcUcdAdCM+zg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5FC93B4B1E1F49C38B36519BAA3FF099 Ref B: OSL30EDGE0509 Ref C: 2022-10-28T04:34:17Z
date: Fri, 28 Oct 2022 04:34:17 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1617
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=4fb0d875ecf2630fcfb8f8ea1b046c79
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Fri, 28 Oct 2022 04:34:18 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1612
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=4fb0d875ecf2630fcfb8f8ea1b046c79
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Fri, 28 Oct 2022 04:34:18 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 0db6c0007b962ec7e8e5c25e072ee8e8
07405782d9aeff7ae94702251fef756d5948b194
4e9f04793ec032c7eb691247d191f83d7df43add580608bc9a3e759f609cf51f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5175
Cache-Control: max-age=153285
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:18 GMT
Etag: "635afb58-2d7"
Expires: Sat, 29 Oct 2022 23:09:03 GMT
Last-Modified: Thu, 27 Oct 2022 21:42:48 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 727
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP
File type ASCII text, with very long lines (755)
Hash bea784dce86d30e1f2e59387f85cccb6
90665d4cc2e3f1e8c6da1247096c0af28b70ae04
b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduuBce22UUtR3uJIkli6NVtwk5cazi7sfqkg88yfHf9nHvxfxRdwJbEEOWcm6BxY-PqagjXyWqc0OWsrLyB3bcS2cfibPOk
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Fri, 28 Oct 2022 04:31:10 GMT
expires: Fri, 28 Oct 2022 04:41:10 GMT
cache-control: public,max-age=600
age: 188
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1638&scd=13&ssd=1&est=1666931655119&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1666931656759&vi=1666931655117&ri=8ea977488b0e84d5ec213a321e472310&ref=http%3A%2F%2Fps.popcash.net%2F&cv=20221023-7-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1638&scd=13&ssd=1&est=1666931655119&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1666931656759&vi=1666931655117&ri=8ea977488b0e84d5ec213a321e472310&ref=http%3A%2F%2Fps.popcash.net%2F&cv=20221023-7-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1638&scd=13&ssd=1&est=1666931655119&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1666931656759&vi=1666931655117&ri=8ea977488b0e84d5ec213a321e472310&ref=http%3A%2F%2Fps.popcash.net%2F&cv=20221023-7-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 28 Oct 2022 04:34:18 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=88866475.1666931655&shpt=Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%2288866475.1666931655%22%2C%22shpt%22%3A%22Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro%22%2C%22dcm_cid%22%3A%221666931654.1%22%2C%22dcm_gid%22%3A%22786241684.1666931655%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22ao%22%3A%7B%22s_ecid%22%3A%22MCMID%7Cundefined%22%7D%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A2%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1666931654.1&dcm_gid=786241684.1666931655&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=24304408069526810term%3Dvalue
200 OK 2.0 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=88866475.1666931655&shpt=Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%2288866475.1666931655%22%2C%22shpt%22%3A%22Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro%22%2C%22dcm_cid%22%3A%221666931654.1%22%2C%22dcm_gid%22%3A%22786241684.1666931655%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22ao%22%3A%7B%22s_ecid%22%3A%22MCMID%7Cundefined%22%7D%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A2%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1666931654.1&dcm_gid=786241684.1666931655&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=24304408069526810term%3Dvalue
IP
Hash 1d7bfbc6c97dcf3c3a24b35fd66f56b3
4eb152edce57cfe969d8022418775f9d1f0b26b9
8e2e3a61af5b3266f41de1fda9360856060d0b72eab210fe6a4141ca70af53ae
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=88866475.1666931655&shpt=Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%2288866475.1666931655%22%2C%22shpt%22%3A%22Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro%22%2C%22dcm_cid%22%3A%221666931654.1%22%2C%22dcm_gid%22%3A%22786241684.1666931655%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22ao%22%3A%7B%22s_ecid%22%3A%22MCMID%7Cundefined%22%7D%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A2%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1666931654.1&dcm_gid=786241684.1666931655&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=24304408069526810term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 28 Oct 2022 04:34:18 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=c9341b35-5679-11ed-bd4f-d7d913613954;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash d65d381d297f067ea073c0de938cd0a3
6a89f23d2b68ca93c18522558340f46a9bc32c39
1532d3ea93330fb65598d615d37d0234cf13d97e79b89a1c8b52b0f3159f0c41
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 28 Oct 2022 04:34:18 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1612
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=4fb0d875ecf2630fcfb8f8ea1b046c79
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Fri, 28 Oct 2022 04:34:20 GMT
content-length: 0
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=88866475.1666931655&shpt=Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%2288866475.1666931655%22%2C%22shpt%22%3A%22Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro%22%2C%22dcm_cid%22%3A%221666931654.1%22%2C%22dcm_gid%22%3A%22786241684.1666931655%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22ao%22%3A%7B%22s_ecid%22%3A%22MCMID%7Cundefined%22%7D%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A2%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1666931654.1&dcm_gid=786241684.1666931655&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=1666931658502354&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1666931659205
200 OK 6.9 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=88866475.1666931655&shpt=Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%2288866475.1666931655%22%2C%22shpt%22%3A%22Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro%22%2C%22dcm_cid%22%3A%221666931654.1%22%2C%22dcm_gid%22%3A%22786241684.1666931655%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22ao%22%3A%7B%22s_ecid%22%3A%22MCMID%7Cundefined%22%7D%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A2%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1666931654.1&dcm_gid=786241684.1666931655&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=1666931658502354&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1666931659205
IP
Hash 7006f16ad93428e24ef7a4c0c5efc9b2
854809fe851c00bd25a4c294d0fa9dc1fe9f5802
4b72eea2b203d2d6796fbd11f74eb3270e3c39a8a60a37e19e7a79a46454e5f7
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=88866475.1666931655&shpt=Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%2288866475.1666931655%22%2C%22shpt%22%3A%22Crypto%20Stocks%20%26%20Beyond!%20The%20power%20of%20social%20investing%20%7C%20eToro%22%2C%22dcm_cid%22%3A%221666931654.1%22%2C%22dcm_gid%22%3A%22786241684.1666931655%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22ao%22%3A%7B%22s_ecid%22%3A%22MCMID%7Cundefined%22%7D%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A2%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1666931654.1&dcm_gid=786241684.1666931655&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=1666931658502354&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1666931659205 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 28 Oct 2022 04:34:19 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt=MzIwODE6MTY2Njg5NTUwMiwzMzEzOToxNjY2ODg5MDIwLDMwMTg2OjE2NjY5MTAyMDMsMzAxODc6MTY2NjkxMDIwMywzMTk1MDoxNjY2OTEzNjc1;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
ocsp.digicert.com/
200 OK 279 B IP
Hash de88586f48e6d10e3e5a3e0aede208e8
e147a8a25a2a26b55d233e5ff8d4ec67a97cf894
bcf4817ebd4477bc2d5092e2c8c9669355705ee2d836c9da755c2652f9d00cb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3334
Cache-Control: max-age=159363
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 04:34:21 GMT
Etag: "635b1a4a-117"
Expires: Sun, 30 Oct 2022 00:50:24 GMT
Last-Modified: Thu, 27 Oct 2022 23:54:50 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
tr.snapchat.com/init?pids=2b300842-74be-4e72-8ed5-3bab9449a996
200 OK 0 B URL HTTP/2 tr.snapchat.com/init?pids=2b300842-74be-4e72-8ed5-3bab9449a996
IP
GET /init?pids=2b300842-74be-4e72-8ed5-3bab9449a996 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
marketing.etorostatic.com/cache1/hp/v_250/js/script.min.js?v=1666613359
200 OK 0 B URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/js/script.min.js?v=1666613359
IP
GET /cache1/hp/v_250/js/script.min.js?v=1666613359 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UstjKmYHGN8WYkG4pmB/h9V8h19OUGh2i1FjFliBykUGT8I/5sV5tTJfxJJZrQoeJnxvynArGRo=
x-amz-request-id: F7QGAR8H44KYKRW6
x-amz-replication-status: COMPLETED
last-modified: Wed, 28 Sep 2022 12:51:07 GMT
etag: "57f5dcf3502cfebc456129a3dda31b0e"
x-amz-meta-sha256: 569eb69f141bb73e2a8a26b17eac9225b107485d936601eaf2571740898714a6
x-amz-meta-s3b-last-modified: 20220928T124714Z
x-amz-version-id: PgqNRpUIgU8eF2OAyi4TWyrPd9U26uVw
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
X-Firefox-Spdy: h2
cloudflare.hcaptcha.com/checksiteconfig?v=12085f6&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1
200 OK 0 B URL HTTP/2 cloudflare.hcaptcha.com/checksiteconfig?v=12085f6&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1
IP
POST /checksiteconfig?v=12085f6&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1 HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://cf-assets.hcaptcha.com
Connection: keep-alive
Referer: https://cf-assets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: application/json
access-control-allow-origin: https://cf-assets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent, challenge-bypass-token, cf-chl-bypass, challenge-bypass-token, challenge-bypass-host, challenge-bypass-path
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7610f547be0b9902-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
200 OK 0 B URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
IP
GET /captcha/v1/12085f6/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: text/html
cf-ray: 7610f543d9e80a31-ARN
access-control-allow-origin: *
age: 46420
cache-control: max-age=1209600
last-modified: Wed, 26 Oct 2022 15:08:23 GMT
strict-transport-security: max-age=0
via: 1.1 a363bcf8a299e9ee68092f31207f8870.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: e7qR63PZQDzaELRw0dF2ZHovFZ_dhVFx9GcpcUKLU5Q6eG54H44sVA==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=ZF.y2YRiHUQhXOHJJnZbu9AxM6_7gHDveiI0vYu8SK0-1666931656-0-AXXSZ8MiLEgXdtKktWoxk+eO3nmeA0cSFIajvcdCGyrkxOCzJhqQrpul4Xiy4Dv1DjoLRX/YodK2/GQWx7JVlYE=; path=/; expires=Fri, 28-Oct-22 05:04:16 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1666931655127&data=%7B%22id%22%3A778%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1666931655117%2C%22cv%22%3A%2220221023-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2F%22%2C%22e%22%3A%22http%3A%2F%2Fps.popcash.net%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1666931655127%2C%22ref%22%3A%22http%3A%2F%2Fps.popcash.net%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1666931655127&data=%7B%22id%22%3A778%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1666931655117%2C%22cv%22%3A%2220221023-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2F%22%2C%22e%22%3A%22http%3A%2F%2Fps.popcash.net%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1666931655127%2C%22ref%22%3A%22http%3A%2F%2Fps.popcash.net%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1666931655127&data=%7B%22id%22%3A778%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1666931655117%2C%22cv%22%3A%2220221023-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2F%22%2C%22e%22%3A%22http%3A%2F%2Fps.popcash.net%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1666931655127%2C%22ref%22%3A%22http%3A%2F%2Fps.popcash.net%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A13%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 28 Oct 2022 04:34:17 GMT
via: 1.1 varnish
x-served-by: cache-bma1671-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666931657.136585,VS0,VE106
vary: Accept-Encoding
x-vcl-time-ms: 106
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=24304408069526810term=value
200 0 B URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=24304408069526810term=value
IP
GET /spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fps.popcash.net%2F&plh=https%3A%2F%2Fwww.etoro.com%2F%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12087%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%23pc151445&cb=24304408069526810term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Fri, 28 Oct 2022 04:34:16 GMT
connection: close
marketing.etorostatic.com/cache1/hp/v_250/videos/cover-desktop-half.mp4
206 Partial Content 0 B URL HTTP/2 marketing.etorostatic.com/cache1/hp/v_250/videos/cover-desktop-half.mp4
IP
GET /cache1/hp/v_250/videos/cover-desktop-half.mp4 HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
x-amz-id-2: k0S3PTtQ6A7+7DCDF0jarhfLPTSbwVz1bTqEGKIUxZtmifOjl4sOuF9FVlox4Ojv2OaWaUfjwJU=
x-amz-request-id: VAB4HZ7XE1BNTWVP
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 16:16:56 GMT
etag: "53205974fecdfed20a25d53ffbfd6bef"
x-amz-meta-sha256: 086a1f99f93c021b8bd1aa13042c342054e3da9302fc41c00c55b31f7c7058ae
x-amz-meta-s3b-last-modified: 20220920T155830Z
x-amz-version-id: 5gD_fe1tCLrWjg18GcLMs5qAtl1xDeyt
accept-ranges: bytes
content-type: video/mp4
server: AmazonS3
cache-control: max-age=31536000
expires: Sat, 28 Oct 2023 04:34:14 GMT
date: Fri, 28 Oct 2022 04:34:14 GMT
content-range: bytes 0-2625182/2625183
content-length: 2625183
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.27.0/assets/otCommonStyles.css
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.27.0/assets/otCommonStyles.css
IP
GET /scripttemplates/6.27.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-type: text/css
content-md5: Ye6OeZcNyuFoWog7CYs00A==
last-modified: Mon, 29 Nov 2021 20:31:07 GMT
x-ms-request-id: cde2642a-f01e-0147-2f10-2a41d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 8275
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7610f53d18520a2c-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/c/fab06e07/hsw.js
200 OK 0 B URL HTTP/2 cf-assets.hcaptcha.com/c/fab06e07/hsw.js
IP
GET /c/fab06e07/hsw.js HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf-assets.hcaptcha.com/captcha/v1/12085f6/static/hcaptcha.html
Cookie: __cf_bm=ZF.y2YRiHUQhXOHJJnZbu9AxM6_7gHDveiI0vYu8SK0-1666931656-0-AXXSZ8MiLEgXdtKktWoxk+eO3nmeA0cSFIajvcdCGyrkxOCzJhqQrpul4Xiy4Dv1DjoLRX/YodK2/GQWx7JVlYE=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:16 GMT
content-type: application/javascript
cf-ray: 7610f547bdb60a31-ARN
access-control-allow-origin: *
age: 100
cache-control: max-age=1209600
etag: W/"52529960ab1b4955ae1e8084082df4ff"
last-modified: Thu, 27 Oct 2022 11:39:39 GMT
strict-transport-security: max-age=0
via: 1.1 a363bcf8a299e9ee68092f31207f8870.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: _xdz1HoIf85J8nTRn9x12dYM3t79DWcGj-tYfhCOsxq6r0tCCKQ5Fw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
www.etoro.com/?utm_medium=Networks&utm_source=72681&utm_content=12087&utm_serial=&utm_campaign=&utm_term=
200 OK 0 B URL HTTP/2 www.etoro.com/?utm_medium=Networks&utm_source=72681&utm_content=12087&utm_serial=&utm_campaign=&utm_term=
IP
GET /?utm_medium=Networks&utm_source=72681&utm_content=12087&utm_serial=&utm_campaign=&utm_term= HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12087&SubAffiliateID=&Custom=&ClickDateTime=2022-10-28T04:34:13.7975612Z&UserUniqueIdentifier=c062ad30-988c-4049-b40a-ce56d6bae66c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12087&a=72681&task=click
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:14 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
set-cookie: TS01047baf=01d53e5818ad91cd5ede782a9854ea56b7afeaad751662c52417dce717f16e56da936d12a1bf9d1accf3003824967e26171e41ec5e; Path=/
__cf_bm=nxWxoCeIcyxfGo8LErIo5Dp1arlXPB6xGQEkCnTs9f4-1666931654-0-Aari4s8f/bczd8vpYvD16Zp7cAdInTxDb41C6VRNqMA462PU78ii/pW++2n6fJdKC4BzjvbBq1j53ijsklCdR/7ZF5TjcPjcG/L5G17q//j0; path=/; expires=Fri, 28-Oct-22 05:04:14 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgwA1TpJETgtkrE6Q; SameSite=None; Secure; path=/; expires=Sat, 29-Oct-22 03:34:14 GMT; HttpOnly
__cfruid=e31d2300300f70e7404c805298b74bce34cce082-1666931654; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7610f5352efa9914-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1871831.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-1871831.js?sv=6
IP
GET /c/hotjar-1871831.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Fri, 28 Oct 2022 04:34:12 GMT
cache-control: max-age=60
etag: W/90f3ff339a971ce85dfa623717686bf9
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7_GlO4MONrrF9o7q2BRbJjtzhyJMcEk6Nk_732rGMJfUFZDf1x_R3Q==
age: 30
X-Firefox-Spdy: h2
cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
200 OK 0 B URL HTTP/2 cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
IP
GET /1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:15 GMT
content-type: application/javascript
cf-ray: 7610f53d1f649902-ARN
access-control-allow-origin: *
age: 0
cache-control: max-age=120
etag: W/"5ab4b08736cc84a24e057a5ac94d054f"
last-modified: Wed, 26 Oct 2022 15:08:23 GMT
strict-transport-security: max-age=0
via: 1.1 350f2b5d7e6ee985da330b123098fd88.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: OLPlzSzArNwxlPWd-g3LaTXeEo0cVIcZT8xSqmtQ_MF6Zj1piYYPzw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: F7po60Y3/bkkfgKpEuO1twYtyxt1Jip4rL9ri9PNpz97Lr6V0oe+xRHZWnyeLHrnRz+tXR3Ktcw=
x-amz-request-id: NEXG00EHFX0ENXKT
date: Fri, 28 Oct 2022 04:15:22 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1135
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
IP
GET /track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 04:34:20 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
198.211.113.186
23.36.76.121
104.16.149.64
63.34.106.143
51.83.143.92
188.125.94.206
20.54.209.212
93.184.220.29
51.161.115.163