r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67f508aae634a023b587a7129a5b8039
2ff7e1d29b497147941d0abf581411cbd2722d7b
eee5fda5214bd4f75b0934bb1f14429fe01251628026fd0f18f117b38848601c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE5FDA5214BD4F75B0934BB1F14429FE01251628026FD0F18F117B38848601C"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10891
Expires: Sun, 25 Dec 2022 18:26:33 GMT
Date: Sun, 25 Dec 2022 15:25:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb20c18681040b740ab1730562beb45c
abedefb801b0e13987d6619a77e0368771f9dfcb
288c1832db391da57e3d74ffa893ec2c47ef9c1945f85b88473c563b55a3dfb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "288C1832DB391DA57E3D74FFA893EC2C47EF9C1945F85B88473C563B55A3DFB3"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8425
Expires: Sun, 25 Dec 2022 17:45:27 GMT
Date: Sun, 25 Dec 2022 15:25:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 25 Dec 2022 14:46:23 GMT
content-type: application/json
age: 2319
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b1d63d9d906daa309dc263b4991bbe9
04680ddd86781d46dfe6a9671571b3ad1f3758f3
46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4932
Expires: Sun, 25 Dec 2022 16:47:15 GMT
Date: Sun, 25 Dec 2022 15:25:03 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +earizjkw2o1/ntLi9hVZiGia5OZtEm8lRbg77mq0h37BOKHhwL/eyFP3w8aU4aVbvBua6NdPQw=
x-amz-request-id: 1SZNEPM8JN0RBMQ3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 25 Dec 2022 14:57:03 GMT
age: 1680
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Dec 2022 15:25:03 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
imp.optimum-installer.com/impression.do/?user_id=ab0a6884-a96d-40a0-932b-fdca8f4e3133&event=offer_0_accepted_&spsource=dsnr_downloadmngr-US&traffic_source=dsnr&offer_id=DownloadManager
302 Found 11 B URL HTTP/1.1 imp.optimum-installer.com/impression.do/?user_id=ab0a6884-a96d-40a0-932b-fdca8f4e3133&event=offer_0_accepted_&spsource=dsnr_downloadmngr-US&traffic_source=dsnr&offer_id=DownloadManager
IP
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /impression.do/?user_id=ab0a6884-a96d-40a0-932b-fdca8f4e3133&event=offer_0_accepted_&spsource=dsnr_downloadmngr-US&traffic_source=dsnr&offer_id=DownloadManager HTTP/1.1
Host: imp.optimum-installer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 25 Dec 2022 15:25:02 GMT
location: http://ciar-kep.com/zcvisitor/4d728754-8468-11ed-abc0-12c17c1208bb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
server: nginx
set-cookie: sid=4d661e48-8468-11ed-b896-d7883f1126af; path=/; domain=.optimum-installer.com; expires=Fri, 12 Jan 2091 18:39:10 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 25 Dec 2022 14:33:29 GMT
age: 3094
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ciar-kep.com/zcvisitor/4d728754-8468-11ed-abc0-12c17c1208bb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
200 1.1 kB URL HTTP/1.1 ciar-kep.com/zcvisitor/4d728754-8468-11ed-abc0-12c17c1208bb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 180046fc7990615afca02342d6825bcb
9dd77f0c79bd297dd90311a84130481ab220a4c2
636c3143b6c4848a3c44454cd8fdbf277764584056416c4c62fa55b58a1c1ecb
Analyzer Verdict Alert quad9 Sinkholed
GET /zcvisitor/4d728754-8468-11ed-abc0-12c17c1208bb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51 HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 25 Dec 2022 15:25:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: AuxfGsyO
ocsp.digicert.com/
200 OK 471 B IP
Hash bdc6ddd27a64c85bd15f78b39a79874c
965b8f1b763483b4b4dfe35526d27393d1fdf05c
d2f4dee4d920109e0751634731bea278c9ea9e6c0120ac07969eba74ddbfe615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1910
Cache-Control: max-age=152015
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:03 GMT
Etag: "63a812a8-1d7"
Expires: Tue, 27 Dec 2022 09:38:38 GMT
Last-Modified: Sun, 25 Dec 2022 09:06:48 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JEg18qxKhRipICdx9t2iAA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QaVHSro1tlmd0kjLZp9EdrCvxhQ=
ciar-kep.com/zcredirect?visitid=4d728754-8468-11ed-abc0-12c17c1208bb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 692 B URL HTTP/1.1 ciar-kep.com/zcredirect?visitid=4d728754-8468-11ed-abc0-12c17c1208bb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash e631a2b0c5f03f79aaf4c5d8d95d473a
adde0483c9288eb95755c13625b86071ae3b209c
3c266b8745abc818155910f8d2e104f41352a46671ed6929b35c567d3a3bcc52
Analyzer Verdict Alert quad9 Sinkholed
GET /zcredirect?visitid=4d728754-8468-11ed-abc0-12c17c1208bb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ciar-kep.com/zcvisitor/4d728754-8468-11ed-abc0-12c17c1208bb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 25 Dec 2022 15:25:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: KYRCDWqY
selymer-sperts.com/zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB12300_A72681_TClick.aspx_click_id%3Dw8sgf8311bped7eli8k5d0bg&caid=2caa955f-111f-45db-8afd-edee2c3b3e29&zpid=4d728754-8468-11ed-abc0-12c17c1208bb&cid=w8sgf8311bped7eli8k5d0bg&rt=R
302 Found 0 B URL HTTP/2 selymer-sperts.com/zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB12300_A72681_TClick.aspx_click_id%3Dw8sgf8311bped7eli8k5d0bg&caid=2caa955f-111f-45db-8afd-edee2c3b3e29&zpid=4d728754-8468-11ed-abc0-12c17c1208bb&cid=w8sgf8311bped7eli8k5d0bg&rt=R
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB12300_A72681_TClick.aspx_click_id%3Dw8sgf8311bped7eli8k5d0bg&caid=2caa955f-111f-45db-8afd-edee2c3b3e29&zpid=4d728754-8468-11ed-abc0-12c17c1208bb&cid=w8sgf8311bped7eli8k5d0bg&rt=R HTTP/1.1
Host: selymer-sperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ciar-kep.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 25 Dec 2022 15:25:04 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://med.etoro.com/B12300_A72681_TClick.aspx_click_id=w8sgf8311bped7eli8k5d0bg
pragma: no-cache
set-cookie: cc-v4=fmgDHzM5Vdg51SGuBa6cOkR9iXiyz6Q93kkk0MW1jkTaqdESTPDauovvUrXlTEFHD8Rs3QuhtgWqF8fL1SFaw6X2zX5HGPxczqXK2%2B8zXaFe3UrGvtFjz1B2mRxahO%2F%2FO6JmRr2jCvbBXMCqZn%2BI3w%3D%3D; Max-Age=31536000; Expires=Mon, 25-Dec-2023 15:25:04 GMT; Domain=selymer-sperts.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ciar-kep.com/favicon.ico
404 653 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ciar-kep.com/zcredirect?visitid=4d728754-8468-11ed-abc0-12c17c1208bb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Sun, 25 Dec 2022 15:25:04 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: EKXoYMOq
med.etoro.com/B12300_A72681_TClick.aspx_click_id=w8sgf8311bped7eli8k5d0bg
301 Moved Permanently 186 B URL HTTP/1.1 med.etoro.com/B12300_A72681_TClick.aspx_click_id=w8sgf8311bped7eli8k5d0bg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a43b4a8045545920027d08e5eda05ab6
7ba6e0c67a22962d64ff3f6cd8793b659c2fa429
9ff0aeb9b236853cc20cd47f808df4747fa1614f3d549500b31beae25560325c
GET /B12300_A72681_TClick.aspx_click_id=w8sgf8311bped7eli8k5d0bg HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 186
Location: http://med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
X-Robots-Tag: noindex
Expires: Sun, 25 Dec 2022 15:25:04 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Dec 2022 15:25:04 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=12300&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ciar-kep.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
Expires: Sun, 25 Dec 2022 15:25:04 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Dec 2022 15:25:04 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=12300&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://content.etoro.com/lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Sun, 25 Dec 2022 15:25:04 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Dec 2022 15:25:04 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=2xq0ixj0j5g5qrupc3dlojwc; path=/; HttpOnly
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoro.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoro.com.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etorocn.com.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoroasia-securities.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoroasia.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoroasia.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoroasia.com.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; domain=.etoroasia-Investing.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; domain=.etoro.com; expires=Tue, 24-Jan-2023 00:00:00 GMT; path=/
ocsp.digicert.com/
200 OK 727 B IP
Hash 9f495bd2be9aac581bfdd682d1284e44
94bb81010c4a6fa2065de18cdc898b30dc55c0f5
acef96ef5608db47a7aba6b9533b571f74cc81b5f494526ad425ce7af77e8e1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1293
Cache-Control: max-age=99549
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:04 GMT
Etag: "63a74820-2d7"
Expires: Mon, 26 Dec 2022 19:04:13 GMT
Last-Modified: Sat, 24 Dec 2022 18:42:40 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash 9f495bd2be9aac581bfdd682d1284e44
94bb81010c4a6fa2065de18cdc898b30dc55c0f5
acef96ef5608db47a7aba6b9533b571f74cc81b5f494526ad425ce7af77e8e1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1293
Cache-Control: max-age=99549
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:04 GMT
Etag: "63a74820-2d7"
Expires: Mon, 26 Dec 2022 19:04:13 GMT
Last-Modified: Sat, 24 Dec 2022 18:42:40 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 727
content.etoro.com/lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
301 Moved Permanently 3.7 kB URL HTTP/2 content.etoro.com/lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
IP
File type gzip compressed data, from Unix\012- data
Hash f4692a6e9b8217afc5eb66d6ebc99d61
e301e61a47cd4a78412de5bff5eb0353eb8a1055
140645d2b8263275e23fba001dda6c7812d8aafc2f0646e36b454a433b3f9357
GET /lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term= HTTP/1.1
Host: content.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 25 Dec 2022 15:25:04 GMT
content-type: text/html; charset=UTF-8
location: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
set-cookie: __cf_bm=6FnkQOKzd8HDXAJxQ6ugGlSOlu4RnI7gyFVEvQaP6NA-1671981904-0-AZiWI6aR9Y85wZkAuAgjOjp4k0zOb6MbF3BgiQ8HEY9Nb/czLn9E9gs4jDi2b0ED6SAYixQM3FqwsA9Yp0VkgojtENTsqHS+2kAayjSYW0aT; path=/; expires=Sun, 25-Dec-22 15:55:04 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cfruid=4f05a7bcba9248fb2d90c0c9f18fd02eca48461d-1671981904; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 77f29658086bb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3631
Expires: Sun, 25 Dec 2022 16:25:36 GMT
Date: Sun, 25 Dec 2022 15:25:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3631
Expires: Sun, 25 Dec 2022 16:25:36 GMT
Date: Sun, 25 Dec 2022 15:25:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3631
Expires: Sun, 25 Dec 2022 16:25:36 GMT
Date: Sun, 25 Dec 2022 15:25:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3631
Expires: Sun, 25 Dec 2022 16:25:36 GMT
Date: Sun, 25 Dec 2022 15:25:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3631
Expires: Sun, 25 Dec 2022 16:25:36 GMT
Date: Sun, 25 Dec 2022 15:25:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90be501d-93e5-40ba-98d6-b790fc50966b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90be501d-93e5-40ba-98d6-b790fc50966b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d780f4b4a5928afafeea1348a117ab7
f0623d0355e6b57a5b9bed048b93e1b6b102dfe9
ad6dd8216b30147c99abfff2d1672d731ff940b2fb1da015d3fd5b0b96d11d0d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90be501d-93e5-40ba-98d6-b790fc50966b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10502
x-amzn-requestid: 93c0b9d3-6c3a-4ee0-b534-04bac0605c9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dlF8zECooAMFs5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a51d1e-33fe89cb2bc2652425f43eec;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 03:14:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HnMBSKP2dFjT7X90aHvAnnSKwWuoy-PaGE-gHW-6fnda4M2XEeqeqQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 03:42:15 GMT
age: 42170
etag: "f0623d0355e6b57a5b9bed048b93e1b6b102dfe9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2a1f057-d23b-436a-bff6-82977d1d5527.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2a1f057-d23b-436a-bff6-82977d1d5527.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8dee6282a859a55ad30148c8e36e3cc8
c55bdd00c0d39f468908bd22a62a6e9b3182e4b8
4d951f758f425e3a8f127d2bc6e43558ee9ad775f147e8aae6f016007fbf4160
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2a1f057-d23b-436a-bff6-82977d1d5527.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11084
x-amzn-requestid: ee635254-6e82-4c96-b4b3-590fabf5b188
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEXGT9IAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12882-248a27d00736e6c643109714;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S6mFYvEmYwHUKOBz8giYoDKd_RosfbWoLm44osvq6tPohJJn11qiWg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 14:43:02 GMT
age: 2523
etag: "c55bdd00c0d39f468908bd22a62a6e9b3182e4b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09c8810b-667c-45b5-b2d1-f4afc3505a7a.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09c8810b-667c-45b5-b2d1-f4afc3505a7a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0ab1bb58f592edab2abf55836383389
266ca036a6ff4a0f6be79fd1281e8c61ecdc5fab
73456092e6c143a996789bf1b0513c817daf01219bfa310cfbf212d565b0644b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09c8810b-667c-45b5-b2d1-f4afc3505a7a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6632
x-amzn-requestid: c71a05e8-4730-4539-ac91-d332a3fe50cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: do7dcGYHoAMFwCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a6a5ef-4f3248ff0c1d933e0e335a56;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 07:10:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qoUnYyqaWxzD_4jGCtr3jbbci3-GseN1X4pE-NT7CIpYS_3FKHuCLw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 07:29:24 GMT
age: 28541
etag: "266ca036a6ff4a0f6be79fd1281e8c61ecdc5fab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfcc8c32-c58e-4619-a571-4fe67835fb5a.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfcc8c32-c58e-4619-a571-4fe67835fb5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f05951322bb0251f4d30ee5aa2358247
53c51221619a43a05a613eeac66ed5d63eb7fcb0
f5f17d41c12c5392e1f354e0ed599197d532aeac0c3064e68f9edbdbb1f34891
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfcc8c32-c58e-4619-a571-4fe67835fb5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9903
x-amzn-requestid: a6333cc9-7adc-4148-bd04-2ebf413ddb9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnPzH5XoAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f31-1104e20a41c9311c37e15c8e;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2RZJgt5jOfNivPtfxAIfKAonhilxJlZrNv7gGm_0Lk6Tnst0tnu_NA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:48:58 GMT
age: 63367
etag: "53c51221619a43a05a613eeac66ed5d63eb7fcb0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98adc653-f9a6-4ecb-ac9e-bc2f050bce18.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98adc653-f9a6-4ecb-ac9e-bc2f050bce18.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f8c72ec1e9749463326e11f003982211
a76cc3e7d6ca04b4e1d1c947c25ad10a11e9750c
afeea88b39c0fa6957e58d13562222415705d408f89583adcf428a02140abbdd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98adc653-f9a6-4ecb-ac9e-bc2f050bce18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8691
x-amzn-requestid: e8b31f4c-cf9e-4027-ba28-86dcc5ac5190
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnRDHvSIAMF9Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f39-06c81a124ae007023d03c375;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ukk1KAfPyoU8ml-m2Etsyqga5bkkVdLL8PQLzuQb7lDA_to8GinuOw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:50:56 GMT
age: 63249
etag: "a76cc3e7d6ca04b4e1d1c947c25ad10a11e9750c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 060f377fc7bb087a495ce5bb536d246f
64d4ff943882dd8f80e860505218e321d2951465
36566e692827354e1d91c9223e3c3ddc78de454b7a2ba3a4240f93869bc021ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10071
x-amzn-requestid: aa09cbf1-f89b-402c-b014-c17404a0676a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dn64WEBjIAMFdOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a63e9b-224e38700848e0817cd669f0;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 23:49:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -h9cEs7nEIfCGsovkUoFtSUkxLFY9EIGB2uPR1FrgENNTg308T3mIQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 02:15:50 GMT
age: 47355
etag: "64d4ff943882dd8f80e860505218e321d2951465"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/runtime-es2015.162f77144e4e42fba0c7.js
200 OK 2.9 kB URL HTTP/2 marketing.etorostatic.com/landingpages/runtime-es2015.162f77144e4e42fba0c7.js
IP
File type ASCII text, with very long lines (5046), with no line terminators
Hash accd8e65ad554cb358718c45a980fa3b
20f8ec400475be3d7be23713b80db607ddd0e147
1f4292a87ba0ffe1f7388cb0a5cd736f6dde9e83e1bd820547a31f871dd8be52
GET /landingpages/runtime-es2015.162f77144e4e42fba0c7.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vBXPsYYzVUgdalJKYw1O6okKGQ3Yhi5hVGC5d7HxkCSWsuKP5S1XuwGktK5zsYqctuvqU0x1mVE=
x-amz-request-id: 9M8CP801WB81ES3D
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Dec 2022 11:33:04 GMT
etag: "45d4a0c7debd531f6a610bd4a9c74a9f"
x-amz-version-id: B0rrZjlYWpsMGxIZixyAwajD6DIMo_tG
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 2895
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/polyfills-es2015.3e1ba76a6f03ff4d1cc5.js
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/landingpages/polyfills-es2015.3e1ba76a6f03ff4d1cc5.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 75d4096bbaf2d984273cf74343819180
e787227d20001b8aeaab2efc8f81121a094ada11
1b0efaa03cbcb407f83f3fad1cdd5a90074d63dba0b8878301ae9fa1545ffa87
GET /landingpages/polyfills-es2015.3e1ba76a6f03ff4d1cc5.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0h9iT0Gn4Fisa31t6TCsGMuOSFAFdXxUudDWZMriyqHQSk02hHMl78AQLZUcAzNkTO94+KqFyqQ=
x-amz-request-id: PE4T7PESVR32X6M9
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Mon, 31 Oct 2022 13:38:44 GMT
etag: "c7c8e74d09161deae349aefcd33fe1b7"
x-amz-version-id: TPFjfoyqtnUb69VXUDc1SmzLq6gmvHMu
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 32283
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/styles.4159b2ff516aba5c48ab.css
200 OK 15 kB URL HTTP/2 marketing.etorostatic.com/landingpages/styles.4159b2ff516aba5c48ab.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 32e55da414604a1ed757a63b9776ff26
518f36ca5aa46261e153818ecc3c3f5308fd0b86
a5fe579cd6285a3a62e55e77c634cb93d5f92e17421bdcc82602ba836e2989a9
GET /landingpages/styles.4159b2ff516aba5c48ab.css HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CwGYF0g1EYd7jB0ZKdYCXLvupexhVCoqJ+H6gwpFe9iuy1nFZsmnSJLhDN3005yAnJVwiY+fcw0=
x-amz-request-id: 2BJFKTJX9EZHF11N
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 13:44:33 GMT
etag: "eaefbf053d2af2c6e1fc8e711162bce1"
x-amz-version-id: NPgBWsHnMabFC.TpEgGlMCbtZXQ5vyEN
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 14764
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/main-es2015.63b8f5733107d55974c1.js
200 OK 152 kB URL HTTP/2 marketing.etorostatic.com/landingpages/main-es2015.63b8f5733107d55974c1.js
IP
Size 152 kB (151698 bytes)
Hash c88759e44c061c01e5008f8e3a1c3359
1a8fcc7e2cbd46efd29ba19459144c36439cbbba
705bfe983cf7d103a42715aa2d9d97bccb9ccfd6477a9b20d5f62b1a0bcecabc
GET /landingpages/main-es2015.63b8f5733107d55974c1.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: fqGYwHHrZsIivkPd6aBIdBLpsr3g0ZDlrO2x1kMNhApnSvDKrIfjTPi9icGzGoW+tUBG5iGSA68=
x-amz-request-id: 6SASDV2YWBYN8V7R
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Dec 2022 10:55:52 GMT
etag: "30bbdb2fb14e80f4a13d3864bdc4c313"
x-amz-version-id: sQHklhqn8e75Jfy5LdOx7QCLslyX16iZ
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/general_images/logos/etoro-logo-new-green.svg
200 OK 985 B URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/general_images/logos/etoro-logo-new-green.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2351), with no line terminators
Hash 9ea843b771a1377348645dddb7bdf7e3
e8a461139873746992776a63f4eb6c7116d9fb71
716be7311d45bac625c5a8fd43008f7730eacfba8eff3caf7c0182f10959b91d
GET /studio/content/lp/cache_1/etoro-lps/general_images/logos/etoro-logo-new-green.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: PwA+7IVlB+ByBhpxbxYWskL2olteVcBbqdRFv1m5NB+sRPs0wAHA1I7BM8O/kisMUs6Oqlyd328=
x-amz-request-id: MN2M7MMVSV3HJ5GY
x-amz-replication-status: COMPLETED
last-modified: Wed, 23 Feb 2022 08:30:20 GMT
etag: "2f81173921eb7c27be1f465a830404f0"
x-amz-meta-sha256: d326e618548d8ac6892a1e8c5ce11d39016d58264d4bae8a252730a0d130e5e8
x-amz-meta-s3b-last-modified: 20220223T082909Z
x-amz-version-id: OwOa4OVeQCkctL2IgpC4LODkH.61JBgU
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 15:25:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 985
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16080, version 1.6554\012- data
Hash f3515b8fcce21d4bbb0da28b297495ed
808769b38614943b5116b559ac7528386b7cb020
efdf47ca1d1eee9ad503d589c6931daf40228fcac1817eb13e6559750ef830b8
GET /web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IyNgB46QF9lTndlq0U0nC+00SDIae1eyKMIbe5YFHksRDdpZsnBbft0xZK48a3FZitXfSnm7sL8=
x-amz-request-id: MW48XEZXQ2AR34H5
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 13:10:06 GMT
etag: "f3515b8fcce21d4bbb0da28b297495ed"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 13:09:21 GMT
x-amz-version-id: otYh1Ncyl7G3ih0ct3Y9fsdhm4R1ysiw
accept-ranges: bytes
content-type: application/octet-stream
content-length: 16080
server: AmazonS3
cache-control: max-age=2592000
expires: Tue, 24 Jan 2023 15:25:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg
200 OK 379 kB URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1912x975, components 3\012- data
Size 379 kB (379017 bytes)
Hash 444db7330e5f6c6174dd99517d426901
caa3955e521aeea7c64d4047aa79dc4e655f3612
6634917012d16e2ea2c3ef7377aea5d218ba44aec83ba0234190721867e788bd
GET /studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: zEIWYTEmf1PF+1dj/lU871tVPWmtVZRmjgXZDx+AYV3CIzWY2TsEVVl1GN4e+BZzJjVibHR8AYA=
x-amz-request-id: G36VTHATEVRBMG8H
x-amz-replication-status: COMPLETED
last-modified: Sun, 21 Apr 2019 08:43:33 GMT
etag: "444db7330e5f6c6174dd99517d426901"
x-amz-meta-s3b-last-modified: 20190417T112337Z
x-amz-version-id: wSGGDjjTkxo89gmM615DGwzx7J9Na0NG
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 379017
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 15:25:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16212, version 1.6554\012- data
Hash aa21f9964cd88c7d6a03b32c11e6bf3e
14a380d9ddfdee7aecf38c241c450bfe813d94e5
30427ab021a9d28d0f9724a8565c2463ee5a3938417dd0750d58ab79ac07cf12
GET /web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: tk21VJGuue4wpX19OmEddxD0J//URAQorcuQUEX2bNHwngx5HA/1uNEq9FrO9Oy8U0fn+lMqTXI=
x-amz-request-id: GX1E2T5Q1DKXJ7M4
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 13:10:06 GMT
etag: "aa21f9964cd88c7d6a03b32c11e6bf3e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 13:09:02 GMT
x-amz-version-id: MkWGLAQn6l9OArJd9xvShnWsj3x_Qdqn
accept-ranges: bytes
content-type: application/octet-stream
server: AmazonS3
content-length: 16212
cache-control: max-age=2592000
expires: Tue, 24 Jan 2023 15:25:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/1-es2015.42bb491a1fb29763db90.js
200 OK 3.2 kB URL HTTP/2 marketing.etorostatic.com/landingpages/1-es2015.42bb491a1fb29763db90.js
IP
File type ASCII text, with very long lines (9402), with no line terminators
Hash 096b85daf24610a2d87e696ca6523e77
809d6a51fffcb5418cc648c3440c64998d80a080
74122803c4b01501c031032821f07b2e3c47b96e2f9a4e0fdab56796e120fef8
GET /landingpages/1-es2015.42bb491a1fb29763db90.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Lcv75lJlQ5gb8K6NW/TF4t4VhhxNf8/vKidWje3adeVb8wzANSvLLj3iWWFTuiVpnn+bZgb0f54=
x-amz-request-id: G9T36TF7XCMHAA2P
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Apr 2022 13:15:47 GMT
etag: "6a3aab6fc18dcccf333d21422adcb4fd"
x-amz-version-id: jZ2FD6xKBuzO98ifc7RfAZFH0Nbw9y6Y
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 3234
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/0-es2015.1637544fc36ab1554aa7.js
200 OK 11 kB URL HTTP/2 marketing.etorostatic.com/landingpages/0-es2015.1637544fc36ab1554aa7.js
IP
File type HTML document, ASCII text, with very long lines (40370), with no line terminators
Hash 51b29c69a7edcf9b242e770e2ab2284c
516f26a47b9d1dd1f43e45da115d72fdfad379c6
7e8a1f780131c29a4387001c0f9aaf7c4f8b302c4cd02605c1a6cfc268815a8c
GET /landingpages/0-es2015.1637544fc36ab1554aa7.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VygD5rFUBV88j4GUT6mnenXAurDL+BXFvf+pYfvSTkQ//ODm610rT+8xSZT8eNVu4n+NVWfCGOo=
x-amz-request-id: 5TNZD1DPPVNKC300
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Dec 2022 11:33:02 GMT
etag: "04ef60e08a6fbb9c20fb683d7e21a58c"
x-amz-version-id: orjZZW6DBziApCc0ps4m1h8Ac.vWJlQP
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 10839
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/2-es2015.8b467e0cdf0be9e73e47.js
200 OK 23 kB URL HTTP/2 marketing.etorostatic.com/landingpages/2-es2015.8b467e0cdf0be9e73e47.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4be7f33891c0eb5c888ba1f294db51ac
77fce23fd2bd4ebe7f9f6202d0187d392310c0bc
842c5468e24c8fbb65ea5af7d386b2ae5be60dd76e8dd5036ffe728fd1e26c10
GET /landingpages/2-es2015.8b467e0cdf0be9e73e47.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2RXt4T6cKvMaP+2cRG6QYT0nZacg4HHBNJ+pcJPfWIsOO349rbLF/WOSljLSWCDCNSm63ooJacpmUNAGpHkxdQ==
x-amz-request-id: 6ZPPC2460M2CMARR
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Dec 2022 11:33:03 GMT
etag: "ac01d078998af9d17378a3ac299169da"
x-amz-version-id: xKwLKnZWeRLUdYk99daLAfujbaSvG_va
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 23438
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/60-es2015.a2b2af1d949410711a3d.js
200 OK 10 kB URL HTTP/2 marketing.etorostatic.com/landingpages/60-es2015.a2b2af1d949410711a3d.js
IP
File type ASCII text, with very long lines (48140), with no line terminators
Hash 878b4ef825f1eb325498328cdfa234f0
6f8f1e77772df66791f5dafba240c5cadba4cf48
bf583691c06214eae3727a5aaecea43e534d5d4da6b08c555ac6501082482e1e
GET /landingpages/60-es2015.a2b2af1d949410711a3d.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: HtEpLZnrY9CgH20vj0f4LDsG8bsLhK5UbS8668drlMiakPod05cOOt/QR0zeZLddj8R+pUcA1mQ=
x-amz-request-id: 5AFAE5R2385Z5H67
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Dec 2022 10:55:51 GMT
etag: "46b916abec33da0e1b5bb633f6eb2af9"
x-amz-version-id: _Tsomay34gu8cm.Uey1sEClpk9wtMM0Y
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
content-length: 10076
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9527d889a5b94c28b4dcd8809ffba513
b2ee81348df6ebc3f72fcd64b7767df0a1903fb5
9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16276, version 1.6554\012- data
Hash 73437ad44345f889f45e27c428d618d8
578d7b5ff3816f7f666984e303364c81be0771d0
f164941997fbc7f7ed7d2a7c3e86b997d647f1910d93fdc2462dd86fd5affa48
GET /s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 09:39:02 GMT
expires: Sat, 23 Dec 2023 09:39:02 GMT
cache-control: public, max-age=31536000
age: 193563
last-modified: Mon, 27 Apr 2015 23:45:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15572, version 1.6554\012- data
Hash e64cab167bbdc04807429d10873901a0
afc44700053c9a28f9ab26f6aec4862ac1d0795d
60f9b5203842a4fe2d52f7c96f3c57b755bbf8f347535469739bcc6f95a9c4b5
GET /s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:20 GMT
expires: Sat, 23 Dec 2023 13:33:20 GMT
cache-control: public, max-age=31536000
age: 179505
last-modified: Mon, 27 Apr 2015 23:46:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
go.etoro.com/favicon.ico
200 OK 775 B IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash c51e8432d3ea1b9cfafbc7d535d49d3f
6bfdf34b6df4a8ab0c50e3f27d14f3a4bfaa2e7b
640ffaf99ccae6ec1b549047e5cab7c55b9b3eae0ef1911a9cdfa9582ead4f37
GET /favicon.ico HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; __cf_bm=6FnkQOKzd8HDXAJxQ6ugGlSOlu4RnI7gyFVEvQaP6NA-1671981904-0-AZiWI6aR9Y85wZkAuAgjOjp4k0zOb6MbF3BgiQ8HEY9Nb/czLn9E9gs4jDi2b0ED6SAYixQM3FqwsA9Yp0VkgojtENTsqHS+2kAayjSYW0aT; __cfruid=4f05a7bcba9248fb2d90c0c9f18fd02eca48461d-1671981904; ai_user=cisgNyhxAU39NL6t7YqEQp|2022-12-25T15:25:02.896Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Sun, 18 Dec 2022 11:29:38 GMT
etag: W/"47e-18524ff20d0"
content-encoding: gzip
content-length: 775
expires: Sun, 25 Dec 2022 15:25:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 15:25:05 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9527d889a5b94c28b4dcd8809ffba513
b2ee81348df6ebc3f72fcd64b7767df0a1903fb5
9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.etoro.com//assets/i18n/general/en-gb.json?disableClientId=true
200 OK 25 kB URL HTTP/2 go.etoro.com//assets/i18n/general/en-gb.json?disableClientId=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65282), with no line terminators
Hash f667084f0c29fc27b97e5d41cbca4de6
519e8c0b9733e6c5c2cf3cd5630667cae4ed1070
397e9208bba7676bfbb997ef78668ab49ce2efc1672444d49d888401623afc63
GET //assets/i18n/general/en-gb.json?disableClientId=true HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |18c0c5bc5afb457981bb656f4f7cb199.a91718b06a504817
traceparent: 00-18c0c5bc5afb457981bb656f4f7cb199-a91718b06a504817-01
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; __cf_bm=6FnkQOKzd8HDXAJxQ6ugGlSOlu4RnI7gyFVEvQaP6NA-1671981904-0-AZiWI6aR9Y85wZkAuAgjOjp4k0zOb6MbF3BgiQ8HEY9Nb/czLn9E9gs4jDi2b0ED6SAYixQM3FqwsA9Yp0VkgojtENTsqHS+2kAayjSYW0aT; __cfruid=4f05a7bcba9248fb2d90c0c9f18fd02eca48461d-1671981904; ai_user=cisgNyhxAU39NL6t7YqEQp|2022-12-25T15:25:02.896Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Sun, 18 Dec 2022 11:29:38 GMT
etag: W/"1a58f-18524ff20d0"
content-encoding: gzip
content-length: 25297
expires: Sun, 25 Dec 2022 15:25:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 15:25:05 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
go.etoro.com//assets/i18n/practiceAccount/en-gb.json?disableClientId=true
200 OK 161 B URL HTTP/2 go.etoro.com//assets/i18n/practiceAccount/en-gb.json?disableClientId=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4d7b5343b18b66af32ad04df3af0f141
e48d9cf3fe26179965bb67651ce10681cbc5e4f0
a226c2d50f701f61dc7e94c18696e5b61ee5e54e4e6e45cf636676b143a46086
GET //assets/i18n/practiceAccount/en-gb.json?disableClientId=true HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |18c0c5bc5afb457981bb656f4f7cb199.a0c717476b334965
traceparent: 00-18c0c5bc5afb457981bb656f4f7cb199-a0c717476b334965-01
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T15:25:04.5245738Z&UserUniqueIdentifier=3781c6b1-8153-48ae-a57b-b0bb8549287a; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; __cf_bm=6FnkQOKzd8HDXAJxQ6ugGlSOlu4RnI7gyFVEvQaP6NA-1671981904-0-AZiWI6aR9Y85wZkAuAgjOjp4k0zOb6MbF3BgiQ8HEY9Nb/czLn9E9gs4jDi2b0ED6SAYixQM3FqwsA9Yp0VkgojtENTsqHS+2kAayjSYW0aT; __cfruid=4f05a7bcba9248fb2d90c0c9f18fd02eca48461d-1671981904; ai_user=cisgNyhxAU39NL6t7YqEQp|2022-12-25T15:25:02.896Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 161
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Sun, 18 Dec 2022 11:29:38 GMT
etag: W/"a1-18524ff20d0"
expires: Sun, 25 Dec 2022 15:25:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 15:25:05 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3fe4743f9a53cff9cc725d5da6fef2f
21f8c945671d492d20d3ae73535b44b80393bab4
27baee9b01e7877fd04130c0485cac8e3b14c17f8bfb5882d51cb470ea007db8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 104 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35498)
Size 104 kB (104352 bytes)
Hash b5f970deb501f6f645cddf7948504509
b3c8cff620b2169c076efdea666b4145c8037590
ac564ce5642f93b98f7f98c84a0d8d00161a8aef708b7a2d79d5326aa5c1c49a
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Dec 2022 15:25:05 GMT
expires: Sun, 25 Dec 2022 15:25:05 GMT
cache-control: private, max-age=900
last-modified: Sun, 25 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104352
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3fe4743f9a53cff9cc725d5da6fef2f
21f8c945671d492d20d3ae73535b44b80393bab4
27baee9b01e7877fd04130c0485cac8e3b14c17f8bfb5882d51cb470ea007db8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 15:30:06 GMT
date: Sun, 25 Dec 2022 15:25:06 GMT
content-length: 2209
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=GTM-55ZB4XN
200 OK 46 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-55ZB4XN
IP
File type ASCII text, with very long lines (1921)
Hash 0cd0d3cdea1fac3c7923d0ec2350d499
e18547268fc4fdb1a93053226c44622248795da9
0ca199cc2dd1e0a97939b9e1169263a06e57b6338317f17ddd0d53fa7a61916a
GET /gtm/optimize.js?id=GTM-55ZB4XN HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Dec 2022 15:25:06 GMT
expires: Sun, 25 Dec 2022 15:25:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45792
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (30920), with no line terminators
Hash 5c1e6ef321052f9ef17baa3b17775b15
dc24d4674334a60c2b9d1cd9aae0b6ed1bbb09ea
12a2c25fdde940fdbf0dcf5f2743c615bf8acac3ce6d19bf8b55102526bf763f
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13268
server: CloudFront
date: Sun, 25 Dec 2022 15:25:06 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Mon, 26 Dec 2022 13:29:59 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VYdpZXBmf9hyJDKXJbQpOO8LXnlo7gTHyUlNIpZkeIyLuiaVQohEyQ==
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 24 Dec 2022 15:54:34 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Mo7c4tJKjpnJpzAPG0Je-gviXpumjHFJ-tw9XyZokwTo2HawhkIFjg==
Age: 84633
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da055607364974f4b660aeb4bc19755d
e626d97ade789bc97c52b41637f8c6d91a747243
d8ca2aaf500b3a18ff0817957f2cb0ea36b4b91add856a84e9929feea6c7ff67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
200 OK 275 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (561), with no line terminators
Hash c9bc1f42dbf4cbe6ba6b92944aeae607
e09a693aef3dc66868e26fccc6d5f571492a4c7d
3837f32c918aece92492488a62bf03b3d660cf9a914f673603b4d53f645e87a3
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:06 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Dec-2022 15:40:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a464bf2beebc03c8c0d95a2cc8522bc0
381e7a97f121883b0c01e1aa6f3feade19f91481
0795559aee460950a03b505b74db41dd440ead59b06e78215522500c00408204
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2221
Cache-Control: max-age=144062
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a7f263-1d7"
Expires: Tue, 27 Dec 2022 07:26:08 GMT
Last-Modified: Sun, 25 Dec 2022 06:49:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash a464bf2beebc03c8c0d95a2cc8522bc0
381e7a97f121883b0c01e1aa6f3feade19f91481
0795559aee460950a03b505b74db41dd440ead59b06e78215522500c00408204
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2221
Cache-Control: max-age=144062
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a7f263-1d7"
Expires: Tue, 27 Dec 2022 07:26:08 GMT
Last-Modified: Sun, 25 Dec 2022 06:49:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 053d823f7711d8ea2bd92bf05cf34eec
05e6ec1def7f9e030df3eac2294345f6d8249704
5d9ccf018429677e4c47b73f86b69292cb29c5099b7a5b55be917d75e6a60ca1
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3909
Cache-Control: max-age=169834
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a85077-1d7"
Expires: Tue, 27 Dec 2022 14:35:40 GMT
Last-Modified: Sun, 25 Dec 2022 13:30:31 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash a464bf2beebc03c8c0d95a2cc8522bc0
381e7a97f121883b0c01e1aa6f3feade19f91481
0795559aee460950a03b505b74db41dd440ead59b06e78215522500c00408204
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2543
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Last-Modified: Sun, 25 Dec 2022 14:42:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da055607364974f4b660aeb4bc19755d
e626d97ade789bc97c52b41637f8c6d91a747243
d8ca2aaf500b3a18ff0817957f2cb0ea36b4b91add856a84e9929feea6c7ff67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bbb20d43447f907bd2c667676c30ec0f
cd190ad8d868a1d76fcd21ba93f6c6b1adc5ac34
f1dc07694779a4b52b3e345d7895e3a321622b4141c38ec4a5923c9a18f798d3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109440
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a773d2-1d7"
Expires: Mon, 26 Dec 2022 21:49:06 GMT
Last-Modified: Sat, 24 Dec 2022 21:49:06 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -BQanyeQYuuCDIshbG3HaKqEz0gg_5CBY1kcqALq8YSOL0hkQii7Zg==
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=81d1888e-3d5f-467e-9752-b51de2181637&u_sclid=4aff1f8f-dd01-45e2-a0b4-8193d73a909f
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=81d1888e-3d5f-467e-9752-b51de2181637&u_sclid=4aff1f8f-dd01-45e2-a0b4-8193d73a909f
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=81d1888e-3d5f-467e-9752-b51de2181637&u_sclid=4aff1f8f-dd01-45e2-a0b4-8193d73a909f HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ec1233b7456781e4e2fb3e8dfea4860
bf61533c9ec2a6310d80457b1231400cf8631868
820ff717f6d3609bf61e238fda2ecfd8fd9aaf77e85760c0154f72461b33de6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 30 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash bbf12f5d9b89f3c0c8b3d7bd445cfcbb
c3979a6e1c61a65f017279d12fa1926bd1eca260
2aa420f8725b71fcf2877ba23310d35279fc81bff5be050edc49fdeecbcf3411
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 30231
content-encoding: gzip
server: Caddy
date: Sun, 25 Dec 2022 08:41:39 GMT
cache-control: max-age=43200
expires: Sun, 25 Dec 2022 20:41:16 GMT
etag: "14351-RIWjsv313PWYI4RyEPNyETuIUAc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bW3D0MCLqKUze7VUNm7i-kTLFDi3CP6S07mGYNNXXml_zZVgkJkrtg==
age: 24230
X-Firefox-Spdy: h2
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://go.etoro.com/
200 OK 276 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://go.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (560), with no line terminators
Hash 217d83a50d0266d58598d81ba3afe890
78c4d0a483249cd58477e295b300a1b6faa97ee1
33bdf78d7a32308de512a539746009990a4ff3d0ad31dec93e8a9fd8fcccf8a4
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://go.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:06 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 276
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 622
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
access-control-allow-origin: https://go.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ0AIAgDsItIQCewc9CEKzjedoP7xAvJIgS8LXV0SYP52Ii7asY8jGlUH/3URRhZMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 7
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a464bf2beebc03c8c0d95a2cc8522bc0
381e7a97f121883b0c01e1aa6f3feade19f91481
0795559aee460950a03b505b74db41dd440ead59b06e78215522500c00408204
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2221
Cache-Control: max-age=144062
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a7f263-1d7"
Expires: Tue, 27 Dec 2022 07:26:08 GMT
Last-Modified: Sun, 25 Dec 2022 06:49:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ec1233b7456781e4e2fb3e8dfea4860
bf61533c9ec2a6310d80457b1231400cf8631868
820ff717f6d3609bf61e238fda2ecfd8fd9aaf77e85760c0154f72461b33de6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/tracking/track/v3/p?stm=1671981903765&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fciar-kep.com%2F&cid=etoro&p=%7B%22et%22%3A1671981903762%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212300%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22281d904a-b891-41a5-aad7-880471f7830f%22%2C%22duid%22%3A%22d73e0d7a-cef1-41c4-a79d-89514f0911c5%22%2C%22cw%22%3A1671981903762%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=go.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1671981903765&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fciar-kep.com%2F&cid=etoro&p=%7B%22et%22%3A1671981903762%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212300%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22281d904a-b891-41a5-aad7-880471f7830f%22%2C%22duid%22%3A%22d73e0d7a-cef1-41c4-a79d-89514f0911c5%22%2C%22cw%22%3A1671981903762%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=go.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1671981903765&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fciar-kep.com%2F&cid=etoro&p=%7B%22et%22%3A1671981903762%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212300%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22281d904a-b891-41a5-aad7-880471f7830f%22%2C%22duid%22%3A%22d73e0d7a-cef1-41c4-a79d-89514f0911c5%22%2C%22cw%22%3A1671981903762%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=go.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 0 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,sdk-context
Referer: https://go.etoro.com/
Origin: https://go.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: POST
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sun, 25 Dec 2022 15:25:06 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcf8604a2e2524ce2ec88b3069229507
74921ac0ddce6f7e98f5a5b5994130ef9817226d
2d79eec59ae587d9986860b35bff8b1bbbc11bf1a642b9cb82d9d574316dbd14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dc.services.visualstudio.com/v2/track
200 OK 96 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 04433ec1ff671159abfc4515498ce810
912c15f4f6359fcc1a830cea7feecb50b0096695
90d4582122c25303fff98bc5bb393a6545d9c4a872225587978be8e0c234bcef
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Sdk-Context: appId
Content-Length: 3578
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: 76B90A57-3249-4440-A742-8CCA6D88BC52
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sun, 25 Dec 2022 15:25:06 GMT
content-length: 96
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 636 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
Hash 1269aa86d891eae04fbe8b2314626438
087bde8a5ad221ccc0b3cf7844078638a691ec1c
bb1f0529e4e8618ef910866590ae0dc5fa19f9bd0b55fee663da912b93069cb2
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 25 Dec 2022 15:25:06 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=e99d726b-3ece-4206-8fe0-d40ebede91ff; domain=.adsrvr.org; expires=Mon, 25-Dec-2023 15:25:06 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcf8604a2e2524ce2ec88b3069229507
74921ac0ddce6f7e98f5a5b5994130ef9817226d
2d79eec59ae587d9986860b35bff8b1bbbc11bf1a642b9cb82d9d574316dbd14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.7 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash bf269a225d9de1d11c6e2747d12ffbfb
f3edd2899cced3e0ae6107c6837e954d8b4f1d86
38bcbdd59ce5cac7da632ad8788f5c520aa88d30a53af4cedeb9a989af4d0986
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 18:31:06 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=11707
date: Sun, 25 Dec 2022 15:25:06 GMT
content-length: 4654
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8d9beefec3e2f63cf7f1439d318f7af7
3c3029bd028ca62dce33fab5f559e52d15e56fd2
f4b7a3f5cff5d06b2f742f854d3c8226c663c6f51c4932b4abf34372eb6faa7b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5477
Cache-Control: max-age=168916
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a846c1-1d7"
Expires: Tue, 27 Dec 2022 14:20:22 GMT
Last-Modified: Sun, 25 Dec 2022 12:49:05 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash b77f77f4f821a11c0a501be8d6a19659
7bba3d65db27d7c0e050bbf2294021433221de5d
e80b6b1a2f792de4681310088abf8d9172a81ee10a54965c8eb602fae2d92319
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11472
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=0986941360BD634A3AEA869661486267; domain=.bing.com; expires=Fri, 19-Jan-2024 15:25:06 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EDC331BEF117421B98E54AD44B904DC8 Ref B: OSL30EDGE0511 Ref C: 2022-12-25T15:25:06Z
date: Sun, 25 Dec 2022 15:25:06 GMT
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 25 Dec 2022 15:45:06 GMT
Date: Sun, 25 Dec 2022 15:25:06 GMT
Content-Length: 5269
Connection: keep-alive
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Sun, 25 Dec 2022 15:25:06 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1681-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=454043200.1671981904>m=2oebu0&aip=1&z=1775455449
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=454043200.1671981904>m=2oebu0&aip=1&z=1775455449
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=454043200.1671981904>m=2oebu0&aip=1&z=1775455449 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: x9/Bqf+/KKKjwNVxqQ/EdGjQGGMg/cyfSLsGyn+cEnF+ve4RyhoLDi8xtcXEYydKiwG3LyhxJwilGl3ucRa5jw==
priority: u=3,i
content-length: 27298
x-fb-trip-id: 2074150462
date: Sun, 25 Dec 2022 15:25:06 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (59106)
Hash 262d91aed864127daafb26c7636188ef
6d08ddb8ab899b5e521d2364647499731c9bc8ad
6a67331a0e8bf791485da65ab2d35ea7c9df7ba99ebf53d19f340819dd73194b
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +CyGAo3G20QeT9vT9psoroPE1zbUED5wAzLPZhkwsAXR0fGYAcV2/KQKf7GDQdfkqimMgFiIdAY=
x-amz-request-id: 4738WBWC45MNVWQQ
x-amz-replication-status: PENDING
last-modified: Sun, 25 Dec 2022 11:23:04 GMT
etag: "c244ef403c5f2019a65df1335d5ab93f"
x-amz-version-id: Qf03KlOLTVMj0X7CMhSFGMfK8h0Jd5GY
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 15:25:06 GMT
via: 1.1 varnish
age: 14515
x-served-by: cache-bma1674-BMA
x-cache: HIT
x-cache-hits: 35
x-timer: S1671981907.878318,VS0,VE0
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 55
content-length: 18204
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8d9beefec3e2f63cf7f1439d318f7af7
3c3029bd028ca62dce33fab5f559e52d15e56fd2
f4b7a3f5cff5d06b2f742f854d3c8226c663c6f51c4932b4abf34372eb6faa7b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5477
Cache-Control: max-age=168916
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Etag: "63a846c1-1d7"
Expires: Tue, 27 Dec 2022 14:20:22 GMT
Last-Modified: Sun, 25 Dec 2022 12:49:05 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1693966840&_gaz=1&ul=NA&cid=454043200.1671981904&sr=1280x1024&_s=1&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1671981903&sct=1&seg=0&dr=http%3A%2F%2Fciar-kep.com%2F&dt=eToro%20practice%20account&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fciar-kep.com%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.session_referer=http%3A%2F%2Fciar-kep.com%2F
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1693966840&_gaz=1&ul=NA&cid=454043200.1671981904&sr=1280x1024&_s=1&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1671981903&sct=1&seg=0&dr=http%3A%2F%2Fciar-kep.com%2F&dt=eToro%20practice%20account&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fciar-kep.com%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.session_referer=http%3A%2F%2Fciar-kep.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1693966840&_gaz=1&ul=NA&cid=454043200.1671981904&sr=1280x1024&_s=1&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1671981903&sct=1&seg=0&dr=http%3A%2F%2Fciar-kep.com%2F&dt=eToro%20practice%20account&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fciar-kep.com%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.session_referer=http%3A%2F%2Fciar-kep.com%2F HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://go.etoro.com
date: Sun, 25 Dec 2022 15:25:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 761041525aee0daf7ef158f620a4ed8f
a5ad2672e31c5060beef9261ff8e0bff967d04f8
470e6ae3c16ee45d69d207ff38cc4912507f80c860515a4ba5026f086ed08a23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 6.4 kB IP
File type gzip compressed data, from Unix\012- data
Hash 885b01ecccbfd5928312ac0cc570bdb4
44dd9462dc43a884fdfd3b39d5a96c942c70fb02
06dcdce5e7bff95ae4b6e71eab4fc7403b2261d662c95d557f9dec15fb5338c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1122180573&gjid=110829937&_gid=429491021.1671981904&_u=YADAAEAAQAAAACAEK~&z=1424740180
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1122180573&gjid=110829937&_gid=429491021.1671981904&_u=YADAAEAAQAAAACAEK~&z=1424740180
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1122180573&gjid=110829937&_gid=429491021.1671981904&_u=YADAAEAAQAAAACAEK~&z=1424740180 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://go.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 25 Dec 2022 15:25:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=454043200.1671981904>m=2oebu0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=454043200.1671981904>m=2oebu0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=454043200.1671981904>m=2oebu0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://go.etoro.com
date: Sun, 25 Dec 2022 15:25:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671981903841&hl=2&op=0&ag=1317291471&rand=238156785122078578612868201992991801181917612200626596817182555721129567679&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fciar-kep.com%2F&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=%7B%7D&cri=T5NnsXg2Jf&pto=2427&ver=48&gac=454043200.1671981904&mei=&ap=&duid=1.1671981903.x4gPGaewKlX0DqhL&suid=1.1671981903.UnR0taoJFrUhs2Tr&tuid=1.1671981903.gzYSwGVcd3egN2bC&fbc=->m=W10%3D&it=60%2C1970%2C333&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.0 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671981903841&hl=2&op=0&ag=1317291471&rand=238156785122078578612868201992991801181917612200626596817182555721129567679&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fciar-kep.com%2F&ss=1280x1024&nc=0&at=&di=W1siZWYiLDM4NjRdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDEsMCwwLDEsMCwzLDYsMCwyLDAsMCwyLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDUsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsNCJdLFstMSwiTGludXggeDg2XzY0Il0sWy0yLCItIl0sWy0zLCJbXSJdLFstNCwiLSJdLFstNSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcIndlYnBhY2tKc29ucFwiLFwiX19jb3JlLWpzX3NoYXJlZF9fXCIsXCJjb3JlXCIsXCJab25lXCIsXCJfX3pvbmVfc3ltYm9sX19Qcm9taXNlXCIsXCJfX3pvbmVfc3ltYm9sX19ab25lQXdhcmVQcm9taXNlXCIsXCJfX3pvbmVfc3ltYm9sX19mZXRjaFwiLFwiX196b25lX3N5bWJvbF9fc2V0VGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJUaW1lb3V0XCIsXCJfX3pvbmVfc3ltYm9sX19zZXRJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fcmVxdWVzdEFuaW1hdGlvbkZyYW1lXCIsXCJfX3pvbmVfc3ltYm9sX19jYW5jZWxBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fYWxlcnRcIixcIl9fem9uZV9zeW1ib2xfX3Byb21wdFwiLFwiX196b25lX3N5bWJvbF9fY29uZmlybVwiLFwiX196b25lX3N5bWJvbF9fTXV0YXRpb25PYnNlcnZlclwiLFwiX196b25lX3N5bWJvbF9fSW50ZXJzZWN0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ZpbGVSZWFkZXJcIixcIl9fem9uZV9zeW1ib2xfX29ub25hYm9ydHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hbmltYXRpb25jYW5jZWxwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYW5pbWF0aW9uZW5kcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFuaW1hdGlvbml0ZXJhdGlvbnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hdXhjbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25iZWZvcmVpbnB1dHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25ibHVycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNhbnBsYXlwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2FucGxheXRocm91Z2hwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmN1ZWNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jbG9zZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jb250ZXh0bWVudXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kYmxjbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFncGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRyYWdlbmRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJhZ2VudGVycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRyYWdsZWF2ZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFnb3ZlcnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcm9wcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmR1cmF0aW9uY2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmVtcHRpZWRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZW5kZWRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZXJyb3JwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZm9jdXNwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZ290cG9pbnRlcmNhcHR1cmVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uaW5wdXRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uaW52YWxpZHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25rZXlkb3ducGF0Y2hlZFwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTcsIi0iXSxbLTgsIi0iXSxbLTksIisiXSxbLTEwLCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W119Il0sWy0xMiwiXCJ1bnNwZWNpZmllZFwiIl0sWy0xMywiLSJdLFstMTQsIi0iXSxbLTE1LCItIl0sWy0xNiwiMCJdLFstMTcsIjE2Il0sWy0xOCwiWzEsMCwwLDBdIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDAyLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCw5MzksMCwwLDAsMCxcIi1cIixcIi1cIl0iXSxbLTIwLCI0NTQwNDMyMDAuMTY3MTk4MTkwNCJdLFstMjEsIi0iXSxbLTIyLCJbXCItXCIsXCJuXCJdIl0sWy0yMywiKyJdLFstMjQsIltdIl0sWy0yNSwiLSJdLFstMjYsIi0iXSxbLTI3LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTI5LCItIl0sWy0zMCwiW1widlwiLDBdIl0sWy0zMSwiZmFsc2UiXSxbLTMyLCIwIl0sWy0zMywiLSJdLFstMzQsIi0iXSxbLTM1LCJbMTY3MTk4MTkwMzgxNywwXSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy0zNywiLSJdLFstMzgsImMsLTEsLTEsODY1LDAsMywwLDExNCwyNiwyNCwtMSwwLCwxNTU4LDI0MDMsMjQwMyJdLFstMzksIltcIjIwMTAwMTAxXCIsMCxcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCwwXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNDIsIjE3NzAwNTAwODEiXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDExMTEwMDEwMCJdLFstNDQsIjAsNSwwLDUiXSxbLTQ1LCItIl0sWy00NiwiMCJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTQ4LCIwLDAiXSxbLTQ5LCItIl0sWy01MCwiLSJdLFstNTEsIi0iXSxbLTUyLCItIl0sWy01MywiMDEwIl0sWy01NCwie1wiaFwiOltcIl8zXCIsXCIyODcyODk5MzIwXCJdLFwiZFwiOltdLFwiYlwiOltcIl8xXCIsXCI1ODY2OTI2OTNcIl0sXCJzXCI6MX0iXSxbImRkYiIsIjAsMCwwLDAsMiwyLDAsMCwxLDAsMCwwLDAsMCwwLDAsMSwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsNSwwLDAsMSwxLDAsMCwxLDAsMCwwLDEsMSwwLDAsMTUsMCwyLDAsMCwwLDAsMCJdLFsiYm5jaCIsNjRdLFsiYWJuY2giLDY1XV0%3D&dep=0&pre=0&sdd=%7B%7D&cri=T5NnsXg2Jf&pto=2427&ver=48&gac=454043200.1671981904&mei=&ap=&duid=1.1671981903.x4gPGaewKlX0DqhL&suid=1.1671981903.UnR0taoJFrUhs2Tr&tuid=1.1671981903.gzYSwGVcd3egN2bC&fbc=->m=W10%3D&it=60%2C1970%2C333&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3078), with no line terminators
Hash db59280e1fa3dbe43834349b37ba4b2c
3aeed89b568e50b7315a14b09ccb30af803bc5d4
3816685c7408f1e916047d57b3518778486afb483cae7fa7b8de81ecb881d583
GET /ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671981903841&hl=2&op=0&ag=1317291471&rand=238156785122078578612868201992991801181917612200626596817182555721129567679&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fciar-kep.com%2F&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=%7B%7D&cri=T5NnsXg2Jf&pto=2427&ver=48&gac=454043200.1671981904&mei=&ap=&duid=1.1671981903.x4gPGaewKlX0DqhL&suid=1.1671981903.UnR0taoJFrUhs2Tr&tuid=1.1671981903.gzYSwGVcd3egN2bC&fbc=->m=W10%3D&it=60%2C1970%2C333&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sun, 25 Dec 2022 15:25:06 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=3de593243842ab76f56f7a358d74a6d5; Max-Age=29030400; Path=/; Expires=Sun, 26 Nov 2023 15:25:06 GMT; HttpOnly; Secure; SameSite=None
content-length: 1042
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be8f0ec43455138c0c17a20e9d90b541
21fa5f5df0b8cbf7cd77b1932bf82fb2913a19f4
0bb8177c477a31188f16732747ef20758863be5d7fe657624f8b50c5499706e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash e67340f2c10d98a646281f2f349c7377
6c5fc8a7904c7f047de10f82a2c681ea93a4be8f
3b848b5d73f36556b2bc2fe4e778f205802c3794f8d9bf72701570abc2b9463a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4670
Cache-Control: max-age=164845
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Etag: "63a83a02-138"
Expires: Tue, 27 Dec 2022 13:12:32 GMT
Last-Modified: Sun, 25 Dec 2022 11:54:42 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash e67340f2c10d98a646281f2f349c7377
6c5fc8a7904c7f047de10f82a2c681ea93a4be8f
3b848b5d73f36556b2bc2fe4e778f205802c3794f8d9bf72701570abc2b9463a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2054
Cache-Control: max-age=162229
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Etag: "63a83a02-138"
Expires: Tue, 27 Dec 2022 12:28:56 GMT
Last-Modified: Sun, 25 Dec 2022 11:54:42 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
cdn.linkedin.oribi.io/partner/2929684/domain/go.etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/go.etoro.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/2929684/domain/go.etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://go.etoro.com/
Origin: https://go.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Sun, 25 Dec 2022 01:41:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WRCEcIhQ6dXuqPBpzHJ3C2ZQj7XmmJOYY4vTbWE6wsbTNPUrSghgzQ==
age: 49444
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4aEO6G0idmjqvlk5s6UjO1LwJvw+FtL6C+RJXE4ZefpKDgdH3t9hmEuSFKXBZQrAIJnTPElNyKY=
x-amz-request-id: HF9HQ96BBY94ZPF1
date: Sun, 25 Dec 2022 15:13:52 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 676
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=T5NnsXg2Jf&ts=537&cb=1671981904378
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=T5NnsXg2Jf&ts=537&cb=1671981904378
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=T5NnsXg2Jf&ts=537&cb=1671981904378 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=3de593243842ab76f56f7a358d74a6d5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sun, 25 Dec 2022 15:25:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=291f8f85-9d98-4e42-837a-9faa906576e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=291f8f85-9d98-4e42-837a-9faa906576e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=291f8f85-9d98-4e42-837a-9faa906576e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:07 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=05d7d294-11ed-4bf0-b0f1-8ec31890f31f; Max-Age=63072000; Expires=Tue, 24 Dec 2024 15:25:07 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 716afb6c4bc94b90
strict-transport-security: max-age=0
x-response-time: 109
x-connection-hash: 408f048b8fe76656f138a1b23173c673e338e1f2e172f0ae445a60b1de2537cb
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=b6398420-6166-4aa4-b5f1-553ef7a3ffe8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=b6398420-6166-4aa4-b5f1-553ef7a3ffe8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=b6398420-6166-4aa4-b5f1-553ef7a3ffe8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=93ed7d48-42c0-4f0f-81f1-c971f670aa3a; Max-Age=63072000; Expires=Tue, 24 Dec 2024 15:25:07 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: dfe67969f042d3e2
strict-transport-security: max-age=0
x-response-time: 112
x-connection-hash: 408f048b8fe76656f138a1b23173c673e338e1f2e172f0ae445a60b1de2537cb
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c771fd78a5045f9ca7afd3d43a5bbc7b
4c0ccc281d935145f28ca9200c5bfebfdbcfcbd5
6cd22e7df0e889db7bf5dae52396f3ad6294a9a3e3fc4d17d0af65500f1e6d55
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 25 Dec 2022 15:25:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 24 Dec 2022 20:28:13 GMT
Expires: Sun, 25 Dec 2022 20:28:13 GMT
ETag: "4c0ccc281d935145f28ca9200c5bfebfdbcfcbd5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=6ee7e8a2-6d43-4082-8b0d-ee7a53f3eb34&sid=4e394b90846811eda525790d3210cdcc&vid=4e397bd0846811ed9597415166e033fc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fciar-kep.com%2F<=1926&evt=pageLoad&sv=1&rn=863652
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=6ee7e8a2-6d43-4082-8b0d-ee7a53f3eb34&sid=4e394b90846811eda525790d3210cdcc&vid=4e397bd0846811ed9597415166e033fc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fciar-kep.com%2F<=1926&evt=pageLoad&sv=1&rn=863652
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=6ee7e8a2-6d43-4082-8b0d-ee7a53f3eb34&sid=4e394b90846811eda525790d3210cdcc&vid=4e397bd0846811ed9597415166e033fc&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fciar-kep.com%2F<=1926&evt=pageLoad&sv=1&rn=863652 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=27C9331E3CB46F833698219B3D416E90; domain=.bing.com; expires=Fri, 19-Jan-2024 15:25:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BBF1AA62820D445D9C2545919F9533D9 Ref B: OSL30EDGE0511 Ref C: 2022-12-25T15:25:07Z
date: Sun, 25 Dec 2022 15:25:06 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 7c27507b6cfe4b4ad32b4ee68dec3600
5bbdea83f640a78e7e6ff1693546c6a47d6c90fd
42da467927f7ef9b03717e63f5eee4a2851e203a7ac491b2977fccd8901b45d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3955
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Last-Modified: Sun, 25 Dec 2022 14:19:12 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 313
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=3D933EA932466F5110AC2C2C33B36EB8; domain=.bing.com; expires=Fri, 19-Jan-2024 15:25:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BA98C72729C747E9AF3A610579992D73 Ref B: OSL30EDGE0511 Ref C: 2022-12-25T15:25:07Z
date: Sun, 25 Dec 2022 15:25:06 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7fd6ef320514aba7ae7c9bb625cc68b8
37ce04a6e471dd435ad84e6ad8d2b061cd5fc6e9
39973c7fc556eedf2b081f338342f9476424c9ef4905b7a1985120f15435af19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7fd6ef320514aba7ae7c9bb625cc68b8
37ce04a6e471dd435ad84e6ad8d2b061cd5fc6e9
39973c7fc556eedf2b081f338342f9476424c9ef4905b7a1985120f15435af19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Dec-2022 15:40:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671981904464&cv=11&fst=1671981904464&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&auid=1732383645.1671981903&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 963 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671981904464&cv=11&fst=1671981904464&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&auid=1732383645.1671981903&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2193), with no line terminators
Hash d2b162bb00faa8525c21e4899883dbff
07e45dd3e635b1f91dd1e0a186519fd650e46108
0fc1fdb33785d9179d0060d5722ece1847816d4f38bba525e31a4cbe68731aa3
GET /pagead/viewthroughconversion/745546367/?random=1671981904464&cv=11&fst=1671981904464&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&auid=1732383645.1671981903&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 963
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Dec-2022 15:40:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7fd6ef320514aba7ae7c9bb625cc68b8
37ce04a6e471dd435ad84e6ad8d2b061cd5fc6e9
39973c7fc556eedf2b081f338342f9476424c9ef4905b7a1985120f15435af19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671981904579&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671981904578.1871338691&it=1671981904321&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671981904579&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671981904578.1871338691&it=1671981904321&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671981904579&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671981904578.1871338691&it=1671981904321&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 25 Dec 2022 15:25:07 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=Scroll50&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671981904582&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=28&fbp=fb.1.1671981904578.1871338691&it=1671981904321&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=Scroll50&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671981904582&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=28&fbp=fb.1.1671981904578.1871338691&it=1671981904321&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=Scroll50&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671981904582&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=28&fbp=fb.1.1671981904578.1871338691&it=1671981904321&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 25 Dec 2022 15:25:07 GMT
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1122180573&_u=YADAAEAAQAAAACAEK~&z=2081074485
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1122180573&_u=YADAAEAAQAAAACAEK~&z=2081074485
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1122180573&_u=YADAAEAAQAAAACAEK~&z=2081074485 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/745546367/?random=1671981904474&cv=11&fst=1671981904474&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=1732383645.1671981903&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1387354548&_u=aDDAAUABQAAAACAEK~&z=2102311084
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1387354548&_u=aDDAAUABQAAAACAEK~&z=2102311084
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=454043200.1671981904&jid=1387354548&_u=aDDAAUABQAAAACAEK~&z=2102311084 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/745546367/?random=1671981904464&cv=11&fst=1671980400000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=870825656&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/745546367/?random=1671981904464&cv=11&fst=1671980400000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=870825656&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/745546367/?random=1671981904464&cv=11&fst=1671980400000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=870825656&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671981904202%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJ9p24Rx15GagAAAYVJ4z2CyuvEkdNDbZvkROWuK0ISVvGFTbyC5wcn_UYVCd3xU9s8_mzxXT1dgA; Max-Age=2592000; Expires=Tue, 24 Jan 2023 15:25:07 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQILGzEsc1D1wgAAAYVJ4z2CSLlD9z0mJ3YcGhzaw5JfnxfgmJv2Ho_gkdEZgTVYvWLg5X5hrO3OMZdspsbwQg; Max-Age=2592000; Expires=Tue, 24 Jan 2023 15:25:07 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&8e47a3a8-d592-4e73-8696-15385fa68031"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 25-Dec-2023 15:25:07 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2438:u=1:x=1:i=1671981907:t=1672068307:v=2:sig=AQG-tWEo4-Ncdk-S9EN_bo0dAIRqjafT"; Expires=Mon, 26 Dec 2022 15:25:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXwqJ+oIlDIuNUJBcCInw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CCC55B60F0B9410FA876BFF5D1E66B43 Ref B: OSL30EDGE0505 Ref C: 2022-12-25T15:25:07Z
date: Sun, 25 Dec 2022 15:25:07 GMT
content-length: 0
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 9f2afbc2bce621012d6b32b1ea207f58
b44ca2b95aa8f3d0266663d9a4d008641f85224c
cebf1bfe97b84811efa1a145f3ac404a30c43861135461cfd901d3aa2828df4c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1879
Cache-Control: max-age=109166
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Etag: "63a76b6a-1d7"
Expires: Mon, 26 Dec 2022 21:44:33 GMT
Last-Modified: Sat, 24 Dec 2022 21:13:14 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2025%20Dec%202022%2015%3A25%3A04%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fciar-kep.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2025%20Dec%202022%2015%3A25%3A04%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fciar-kep.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Sun%2C%2025%20Dec%202022%2015%3A25%3A04%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fciar-kep.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:07 GMT
expires: Sun, 25 Dec 2022 15:25:07 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBFNrqGMCED_BFufTYbweAxv8Mj0NkSAFEgEBAQG8qWOyYwAAAAAA_eMAAA&S=AQAAAr8HWMI8ChDmnsamEW1xi0M; Expires=Mon, 25 Dec 2023 21:25:07 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=291f8f85-9d98-4e42-837a-9faa906576e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=291f8f85-9d98-4e42-837a-9faa906576e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=291f8f85-9d98-4e42-837a-9faa906576e1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_lMi+4PgfCOSl3h+YB2u3iQ=="; Max-Age=63072000; Expires=Tue, 24 Dec 2024 15:25:07 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 65ce7255fd7b5039
strict-transport-security: max-age=631138519
x-response-time: 108
x-connection-hash: 670821a6cf2aa64ebb21e569def84a0cb3109289e613605d1cbcefa685ba28d5
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 9f2afbc2bce621012d6b32b1ea207f58
b44ca2b95aa8f3d0266663d9a4d008641f85224c
cebf1bfe97b84811efa1a145f3ac404a30c43861135461cfd901d3aa2828df4c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1879
Cache-Control: max-age=109166
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:07 GMT
Etag: "63a76b6a-1d7"
Expires: Mon, 26 Dec 2022 21:44:33 GMT
Last-Modified: Sat, 24 Dec 2022 21:13:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=b6398420-6166-4aa4-b5f1-553ef7a3ffe8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=b6398420-6166-4aa4-b5f1-553ef7a3ffe8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=b6398420-6166-4aa4-b5f1-553ef7a3ffe8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a9c2fd25-383b-46ee-8d0f-fe7ca0d4f96a&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_TCSsaX1t/h3IJS3kYPZHvQ=="; Max-Age=63072000; Expires=Tue, 24 Dec 2024 15:25:07 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: dde11ed094822d81
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: 670821a6cf2aa64ebb21e569def84a0cb3109289e613605d1cbcefa685ba28d5
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=14909070719814820term=value
200 OK 4.5 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=14909070719814820term=value
IP
File type ASCII text, with very long lines (1873)
Hash 2416dbd26965b6426cce349867386583
e4cb87bd19e3f802346722f7ca3332d7c8f12546
cdb3656fe2944b3d85c7e7e46f02ecde0d34283ce8fa19dbaffe2f20a4499566
GET /spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=14909070719814820term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sun, 25 Dec 2022 15:25:07 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671981904202%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671981904202%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671981904202%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&40fbed70-5786-4cbf-87ee-9b49a3165504"; Domain=.linkedin.com; Expires=Mon, 25-Dec-2023 15:25:07 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221225152507a60695b8-f7a1-49b7-8481-ff8c4cc237baAQHfwCzhpgfQRXPMNtfzGrHoz0xrTxpw"; Domain=.www.linkedin.com; Expires=Mon, 25-Dec-2023 15:25:07 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzE5ODE5MDc7MjswMjGiPCunhlCx0Nwb+9Qp+AM7R8oN9/sSO+PJGq6PF01ybg==; Domain=.linkedin.com; Expires=Fri, 23 Jun 2023 15:25:07 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2438:u=1:x=1:i=1671981907:t=1672068307:v=2:sig=AQG-tWEo4-Ncdk-S9EN_bo0dAIRqjafT"; Expires=Mon, 26 Dec 2022 15:25:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXwqJ+qwUUh4f22xKeDVw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 35B489FEBDFF45DEA0E77BAA86252B3C Ref B: OSL30EDGE0505 Ref C: 2022-12-25T15:25:07Z
date: Sun, 25 Dec 2022 15:25:07 GMT
content-length: 0
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=09681318706413459&referrer=http%3A%2F%2Fciar-kep.com%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=09681318706413459&referrer=http%3A%2F%2Fciar-kep.com%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=09681318706413459&referrer=http%3A%2F%2Fciar-kep.com%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 15:25:07 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 4703974c8269e01142c186b951db3420
content-encoding: gzip
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 15:25:07 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: e04364e48f0d788ff70a58c062669756
content-encoding: gzip
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1671981904202&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&03fc4da0-96c3-4f0a-8786-9283b5a03ddc"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 25-Dec-2023 15:25:07 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1671981907:t=1672068307:v=2:sig=AQGdgu6bWcLKCBguWds2Ox1IMXq-3pCL"; Expires=Mon, 26 Dec 2022 15:25:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXwqJ+vKlkpvFf3E6MZWQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A558454F5D6C4414BF763BC43455B168 Ref B: OSL30EDGE0505 Ref C: 2022-12-25T15:25:07Z
date: Sun, 25 Dec 2022 15:25:07 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1595
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=3de593243842ab76f56f7a358d74a6d5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 15:25:08 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1590
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=3de593243842ab76f56f7a358d74a6d5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 15:25:08 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 462b26e7b1f99c738f6ad07e7d60ff0a
1b64c7e1a751cbcfd3a7c7bbefcbac70985e38bc
346f81091684995bc1b91cff9aff845c090ae1630fc47766e08a110b275e0d4c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 15:25:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 24 Dec 2022 14:54:26 GMT
Expires: Sat, 31 Dec 2022 14:54:25 GMT
Etag: "1b64c7e1a751cbcfd3a7c7bbefcbac70985e38bc"
Cache-Control: max-age=515956,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77f2966c5c16b51e-OSL
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1554&scd=100&ssd=1&est=1671981904287&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671981905843&vi=1671981904282&ri=28bcbedb7b51480596cd6cf347d31334&ref=http%3A%2F%2Fciar-kep.com%2F&cv=20221222-8-RELEASE&item-url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1554&scd=100&ssd=1&est=1671981904287&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671981905843&vi=1671981904282&ri=28bcbedb7b51480596cd6cf347d31334&ref=http%3A%2F%2Fciar-kep.com%2F&cv=20221222-8-RELEASE&item-url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1554&scd=100&ssd=1&est=1671981904287&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671981905843&vi=1671981904282&ri=28bcbedb7b51480596cd6cf347d31334&ref=http%3A%2F%2Fciar-kep.com%2F&cv=20221222-8-RELEASE&item-url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 25 Dec 2022 15:25:08 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://go.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=454043200.1671981904&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22454043200.1671981904%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671981903.1%22%2C%22dcm_gid%22%3A%22429491021.1671981904%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671981903.1&dcm_gid=429491021.1671981904&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=14909070719814820term%3Dvalue
200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=454043200.1671981904&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22454043200.1671981904%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671981903.1%22%2C%22dcm_gid%22%3A%22429491021.1671981904%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671981903.1&dcm_gid=429491021.1671981904&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=14909070719814820term%3Dvalue
IP
File type ASCII text, with very long lines (2321)
Hash 6a7a3e540633c0087ce965c188aa492e
2c5e07bb98f3920e89c017026ebbb813d2cab295
a54a9d21bd4cc68d506f89a1af1c5bc38ccc7b525da167b7f2f3ef810aeeb3e2
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=454043200.1671981904&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22454043200.1671981904%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671981903.1%22%2C%22dcm_gid%22%3A%22429491021.1671981904%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671981903.1&dcm_gid=429491021.1671981904&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=14909070719814820term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 25 Dec 2022 15:25:08 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=50e91074-8468-11ed-9441-1f68466bd864;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
transfer-encoding: chunked
ocsp.digicert.com/
200 OK 727 B IP
Hash 937a8d0d1ee282e8ed2c0c3f48774fa0
a248447047fa2b08619eac818a8670a431d9371f
22634c0777079d15146f8b28a63e63a09e4b2f25e75e4eb81ecb54823096dee7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 403
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:08 GMT
Etag: "63a7806d-2d7"
Last-Modified: Sun, 25 Dec 2022 15:18:25 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 727
cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
IP
File type ASCII text, with very long lines (755)
Hash caa762087e9d75cecc34b5d6626cb7b9
fcc68d485c2f42e0f880260c3e104cedf50d0d11
dc0ec55efae4c1f0ff095cf05133cc835e1cc4ff7906d3b7a2d0d86789bfe145
GET /libs/mixpanel-2-latest.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtdAub5hhnErinKWrIcy4XBE9K0hMTHBv3WqG442WQU1pRSCcY89rKSCwCAWnL-OGjhdTsHpMAn2-5gR4NRojsAQA
x-goog-generation: 1645129310876382
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=PPVzJA==, md5=yqdiCH6ddc7MNLXWYmy3uQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Sun, 25 Dec 2022 15:16:01 GMT
expires: Sun, 25 Dec 2022 15:26:01 GMT
cache-control: public,max-age=600
age: 547
last-modified: Thu, 17 Feb 2022 20:21:50 GMT
etag: "caa762087e9d75cecc34b5d6626cb7b9"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 937a8d0d1ee282e8ed2c0c3f48774fa0
a248447047fa2b08619eac818a8670a431d9371f
22634c0777079d15146f8b28a63e63a09e4b2f25e75e4eb81ecb54823096dee7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 403
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 15:25:08 GMT
Etag: "63a7806d-2d7"
Last-Modified: Sun, 25 Dec 2022 15:18:25 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 727
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash 5e36800f1d101316456aabd292354ee3
92c735f174372d9d94f065539789a615944be04b
4f9c3d952d8b1a37d24f48ae6ba2065e70170ec2d3da4575dc85e464c6b31b1b
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 25 Dec 2022 15:25:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1590
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=3de593243842ab76f56f7a358d74a6d5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 15:25:10 GMT
content-length: 0
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=454043200.1671981904&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22454043200.1671981904%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671981903.1%22%2C%22dcm_gid%22%3A%22429491021.1671981904%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671981903.1&dcm_gid=429491021.1671981904&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1671981908727817&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1671981909482
200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=454043200.1671981904&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22454043200.1671981904%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671981903.1%22%2C%22dcm_gid%22%3A%22429491021.1671981904%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671981903.1&dcm_gid=429491021.1671981904&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1671981908727817&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1671981909482
IP
File type ASCII text, with very long lines (3401), with no line terminators
Hash 8066c7c529857176f94e68a5708d906d
7a59f4dc2adc31949c7092519e36cfe91bbc5315
40329f3d25df48478eb5983bfbb9b97d85776c477359d5a573c6559c5fde37df
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=454043200.1671981904&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22454043200.1671981904%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671981903.1%22%2C%22dcm_gid%22%3A%22429491021.1671981904%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671981903.1&dcm_gid=429491021.1671981904&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1671981908727817&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1671981909482 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 25 Dec 2022 15:25:10 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt=MzE0OTA6MTY3MTc4Mzc1NSwzMjEzMToxNjcxNzUyNTM1LDMzODc2OjE2NzE3NDI3OTUsMzE1NDI6MTY3MTc4ODYxMiwzMDgwNzoxNjcxODExMTQzLDIyNzc4OjE2NzE4NDA5NTYsMzA1ODk6MTY3MTc4MzU2NSwzMTM3MzoxNjcxNzg3MzI2LDMwNzUwOjE2NzE3NDU0NDksMzE5NTA6MTY3MTgwNTE3MSwzMjAxNDoxNjcxODg5NDg3;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 14
server: istio-envoy
connection: close
transfer-encoding: chunked
insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
200 OK 70 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:10 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=etoro-landing-pages HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1085
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:10 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://go.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=4559&scd=100&ssd=1&est=1671981904287&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1671981908847&vi=1671981904282&ri=28bcbedb7b51480596cd6cf347d31334&ref=http%3A%2F%2Fciar-kep.com%2F&cv=20221222-8-RELEASE&item-url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=4559&scd=100&ssd=1&est=1671981904287&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1671981908847&vi=1671981904282&ri=28bcbedb7b51480596cd6cf347d31334&ref=http%3A%2F%2Fciar-kep.com%2F&cv=20221222-8-RELEASE&item-url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=4559&scd=100&ssd=1&est=1671981904287&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1671981908847&vi=1671981904282&ri=28bcbedb7b51480596cd6cf347d31334&ref=http%3A%2F%2Fciar-kep.com%2F&cv=20221222-8-RELEASE&item-url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 25 Dec 2022 15:25:11 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://go.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 51 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 14407ec1190c28e1955ed75c0e9c1085
f454c261305c77aab73b4f765f720d5170b04d5a
257a956a04c6d4e9bb0c4452c175d5f032370c558d260f946109cfaee680906c
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=utf-8
Content-Length: 15576
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: D52DF0E0-FA08-4DB7-A13B-3F8BC2FAF55C
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sun, 25 Dec 2022 15:25:11 GMT
content-length: 51
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2929684/domain/go.etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/go.etoro.com/token
IP
GET /partner/2929684/domain/go.etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Sun, 25 Dec 2022 12:35:17 GMT
access-control-allow-origin: *
cache-control: public, max-age=35998
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -en0xcT7-ufi7WD3RCCkfDk7TdzyJyu5-cNVyz3lqoRmY5tcCnA3rQ==
age: 10190
X-Firefox-Spdy: h2
match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
200 OK 0 B URL HTTP/2 match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
GET /track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1671981904297&data=%7B%22id%22%3A210%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671981904282%2C%22cv%22%3A%2220221222-8-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671981904291%2C%22ref%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1671981904297&data=%7B%22id%22%3A210%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671981904282%2C%22cv%22%3A%2220221222-8-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671981904291%2C%22ref%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1671981904297&data=%7B%22id%22%3A210%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671981904282%2C%22cv%22%3A%2220221222-8-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671981904291%2C%22ref%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A6%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 15:25:07 GMT
via: 1.1 varnish
x-served-by: cache-bma1674-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671981907.223418,VS0,VE98
vary: Accept-Encoding
x-vcl-time-ms: 98
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf
200 OK 0 B URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf
IP
GET /studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: nblT89t0u5uwevTGLaU+eog/wH9xflAljrdcDrqCcjA1Zvspu4vaMAZfVa9+65eN/1JBbSNznbs=
x-amz-request-id: MN2THFD78W4RQFT5
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 16 Jan 2022 07:07:48 GMT
etag: "d5888614c5b3d758ef59fa6600e7425e"
x-amz-meta-sha256: d144af5ebf9f2ce2c4e6eca89b38e8fc5961014e66d4d76ea46e832be3d6f959
x-amz-meta-s3b-last-modified: 20220116T070301Z
x-amz-version-id: YMg5tZdevSXydv6Mb5hXds7Amba8krCd
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 15:25:05 GMT
date: Sun, 25 Dec 2022 15:25:05 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
200 OK 0 B URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 15:25:06 GMT
access-control-allow-origin: https://go.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
78.41.204.27
34.160.144.191
104.88.18.91
212.82.100.181
104.18.35.149
93.184.220.29
23.38.201.117
18.193.146.82