www.pieepic.com/
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.pieepic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 25 Nov 2022 11:18:00 GMT
Server: Apache
Strict-Transport-Security: max-age=0
X-Frame-Options: sameorigin
Permissions-Policy: camera(none), microphone(none), geolocation(none)
Location: http://www.exclusivenet.com
Cache-Control: max-age=3600
Expires: Fri, 25 Nov 2022 12:18:00 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expect-CT: max-age=0
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 0
Keep-Alive: timeout=15, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4762
Expires: Fri, 25 Nov 2022 12:37:22 GMT
Date: Fri, 25 Nov 2022 11:18:00 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4928
Cache-Control: max-age=88518
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:01 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:53:19 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 11:17:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 35
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15423
Expires: Fri, 25 Nov 2022 15:35:04 GMT
Date: Fri, 25 Nov 2022 11:18:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EdkR7pVPZUdNkP6lePB3F/74bjHHKuLPRUwUaWuwVL38xvTOjWZISxcnKSNf8hfQV2qij5VY7XU=
x-amz-request-id: SDQ849EMKB37HX8J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 10:40:46 GMT
age: 2235
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.exclusivenet.com/
200 OK 4.7 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (309)
Hash e5269beef378f8bf16c79648971eb5a2
e4c2c4e5992fd16d89ca598c0eec9a1cfb22b1e8
8cdf7825fcf057e9cee705d1fa299ea49ddb5731d919b232806d4139d3eb5140
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 25 Nov 2022 11:18:01 GMT
content-type: text/html; charset=utf-8
content-length: 4692
vary: Accept-Language
content-language: en
connection: close
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 11:11:11 GMT
cache-control: public,max-age=3600
age: 410
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.exclusivenet.com/mtm/async/.eJxdi0sOwjAMBe_iZYkSlnzEWZCJ3NZSfiRuE6ni7qTAit3MG70NlsxwAQMKME-lY6dMI2XKX5ljkXtAT11rrZqadUvhlQKJttHvT2spSe9CTcws3ilMybFF4RhM25dD-1-9uz5vR31W7HEigyuPP6z0SGoww6ef4PUG_wo4Fg:1oyWiX:2_ogdtqz-iPIgQVebQLadP7AzdA/1/
200 OK 435 B URL HTTP/1.1 www.exclusivenet.com/mtm/async/.eJxdi0sOwjAMBe_iZYkSlnzEWZCJ3NZSfiRuE6ni7qTAit3MG70NlsxwAQMKME-lY6dMI2XKX5ljkXtAT11rrZqadUvhlQKJttHvT2spSe9CTcws3ilMybFF4RhM25dD-1-9uz5vR31W7HEigyuPP6z0SGoww6ef4PUG_wo4Fg:1oyWiX:2_ogdtqz-iPIgQVebQLadP7AzdA/1/
IP
File type ASCII text, with very long lines (435), with no line terminators
Hash 730b5a42c61ba06202a4f1492af6e1a8
d8356adbc0bd5063576b3b13254cf403abb69917
25af598a79cc52f8d816e70f01440b31dad73a10d90fde3184165c1421241176
Analyzer Verdict Alert fortinet Malware
GET /mtm/async/.eJxdi0sOwjAMBe_iZYkSlnzEWZCJ3NZSfiRuE6ni7qTAit3MG70NlsxwAQMKME-lY6dMI2XKX5ljkXtAT11rrZqadUvhlQKJttHvT2spSe9CTcws3ilMybFF4RhM25dD-1-9uz5vR31W7HEigyuPP6z0SGoww6ef4PUG_wo4Fg:1oyWiX:2_ogdtqz-iPIgQVebQLadP7AzdA/1/ HTTP/1.1
Host: www.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.exclusivenet.com/
Connection: keep-alive
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 25 Nov 2022 11:18:01 GMT
content-type: text/html; charset=utf-8
content-length: 435
x-mtm-path: 4
x-mtm-prov: 300:0.00;308:16.49
x-mtm-rd: 0.90
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1oyWiX:niG92ypr8Fo2PcxwotRtIXqUJbk; expires=Fri, 25-Nov-2022 12:18:01 GMT; Max-Age=3600; Path=/
connection: close
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5000
Cache-Control: max-age=169930
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:01 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 10:30:11 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: od3z+UPdHToQG56QMKY18A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3WtyL5Zk+5WTFpVXKo6+XGCWH5U=
www1.exclusivenet.com/?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0
200 OK 2.5 kB URL HTTP/1.1 www1.exclusivenet.com/?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2258)
Hash a6911b6b8a9a6180f283a8507b29a693
7a3a9794d322b8a0780eaad8a9959a956d85fd5f
0d3790e34047c4d9ea30e37bef64a6e2cebc902d4b8393c0d9ac173cd157df80
GET /?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0 HTTP/1.1
Host: www1.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.exclusivenet.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 11:18:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
200 OK 1.1 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (506)
Hash 64b79b43df8fbf2c5d082964b9116a68
dc3c763519baf0f4c32bb60bfc429651a491ea01
c57e9feec209e3ea5eb1d75a1ba6fa277242a3df250055be8446052b51e58637
Analyzer Verdict Alert fortinet Malware
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.exclusivenet.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1134
Connection: keep-alive
Server: nginx
Date: Fri, 25 Nov 2022 04:54:34 GMT
Last-Modified: Tue, 17 Aug 2021 09:17:22 GMT
Accept-Ranges: bytes
ETag: "611b7ea2-46e"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EXV1n8iYl0CJnKG4ucoXIQExTSfbz-x6_XHp5lendZGX1acBH5ZGog==
Age: 23008
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 11:18:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 11:18:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 11:18:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 11:18:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 11:18:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 8f679d7f-2ea5-4e47-b78d-79af59435a62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFPHYHkAIAMFpBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec562-26108a785e910dc3355d58f1;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NKwpIdw2RZNZNh69AF5GNvunA_QfRGClvzcRP3zYwn7c8BLBlt097g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:37:15 GMT
age: 9648
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 33035
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8784bb7a8b88736a6016f712e3183bf3
b0ddc1555d2506177adcdcea77864d75f1245d07
8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11743
x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cICD-F7joAMFqmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:45 GMT
age: 48198
etag: "b0ddc1555d2506177adcdcea77864d75f1245d07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b6ee13d43732f7c764a49500d092865
5d15fd672e968d59b541e4d5d0d01cd5e69f4075
fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: q53jN1uOtSdeThbk2_0UF6Rl3g4_-_TW7uK1_6Z5oDwSTSRk8XRjyQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:08 GMT
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
age: 49375
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6292a2988fb4505d0098553b8e99ddc
9b8aafcda0e22edcc16d3048f4b88659d3b42419
16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:22:46 GMT
age: 14117
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:47:08 GMT
age: 48655
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www1.exclusivenet.com/track.php?domain=exclusivenet.com&toggle=browserjs&uid=MTY2OTM3NTA4MS44MjQ6Mjk4NjI5NzBjOGE1YmEwMTljMTI5NWQxM2M0MWY5Yjg0Y2U4ZGM2YTdhZjE3ZjA4NDhlMTFhNjVmOGQzNjhkMjo2MzgwYTQ2OWM5MmFm
200 OK 20 B URL HTTP/1.1 www1.exclusivenet.com/track.php?domain=exclusivenet.com&toggle=browserjs&uid=MTY2OTM3NTA4MS44MjQ6Mjk4NjI5NzBjOGE1YmEwMTljMTI5NWQxM2M0MWY5Yjg0Y2U4ZGM2YTdhZjE3ZjA4NDhlMTFhNjVmOGQzNjhkMjo2MzgwYTQ2OWM5MmFm
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=exclusivenet.com&toggle=browserjs&uid=MTY2OTM3NTA4MS44MjQ6Mjk4NjI5NzBjOGE1YmEwMTljMTI5NWQxM2M0MWY5Yjg0Y2U4ZGM2YTdhZjE3ZjA4NDhlMTFhNjVmOGQzNjhkMjo2MzgwYTQ2OWM5MmFm HTTP/1.1
Host: www1.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.exclusivenet.com/?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 11:18:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.exclusivenet.com/ls.php
201 Created 0 B URL HTTP/1.1 www1.exclusivenet.com/ls.php
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /ls.php HTTP/1.1
Host: www1.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2210
Origin: http://www1.exclusivenet.com
Connection: keep-alive
Referer: http://www1.exclusivenet.com/?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0
HTTP/1.1 201 Created
Date: Fri, 25 Nov 2022 11:18:03 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 6380a46b5dcaae556641c125
Charset: utf-8
Access-Control-Allow-Origin: http://www1.exclusivenet.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Thox/uQXrf0Ty5feQn+sSR7jj2ehT8XxMz/u6/Pt1quOFfMRMbUpmmIrfs6KnXWihBL8kMqEmGHrsAkLxo7vWQ==
www1.exclusivenet.com/favicon.ico
200 OK 0 B URL HTTP/1.1 www1.exclusivenet.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.exclusivenet.com/?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 11:18:03 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
www1.exclusivenet.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=exclusivenet.com&uid=MTY2OTM3NTA4MS44MjQ6Mjk4NjI5NzBjOGE1YmEwMTljMTI5NWQxM2M0MWY5Yjg0Y2U4ZGM2YTdhZjE3ZjA4NDhlMTFhNjVmOGQzNjhkMjo2MzgwYTQ2OWM5MmFm&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzgwYTQ2OWM5MjlhfHx8MTY2OTM3NTA4Mi4xNTI4fGNmZmIwNGQ2MTRmYmRlMzQxMTBkNmQ4NDVkNzdjMmIyNmViNDZiOTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxmZDkwOWU5MWRlZmM1MTMxOTk4OGRhNmI1MDI5OTgzMDA1ZmJjZTJlfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
200 OK 20 B URL HTTP/1.1 www1.exclusivenet.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=exclusivenet.com&uid=MTY2OTM3NTA4MS44MjQ6Mjk4NjI5NzBjOGE1YmEwMTljMTI5NWQxM2M0MWY5Yjg0Y2U4ZGM2YTdhZjE3ZjA4NDhlMTFhNjVmOGQzNjhkMjo2MzgwYTQ2OWM5MmFm&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzgwYTQ2OWM5MjlhfHx8MTY2OTM3NTA4Mi4xNTI4fGNmZmIwNGQ2MTRmYmRlMzQxMTBkNmQ4NDVkNzdjMmIyNmViNDZiOTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxmZDkwOWU5MWRlZmM1MTMxOTk4OGRhNmI1MDI5OTgzMDA1ZmJjZTJlfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=exclusivenet.com&uid=MTY2OTM3NTA4MS44MjQ6Mjk4NjI5NzBjOGE1YmEwMTljMTI5NWQxM2M0MWY5Yjg0Y2U4ZGM2YTdhZjE3ZjA4NDhlMTFhNjVmOGQzNjhkMjo2MzgwYTQ2OWM5MmFm&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzgwYTQ2OWM5MjlhfHx8MTY2OTM3NTA4Mi4xNTI4fGNmZmIwNGQ2MTRmYmRlMzQxMTBkNmQ4NDVkNzdjMmIyNmViNDZiOTh8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxmZDkwOWU5MWRlZmM1MTMxOTk4OGRhNmI1MDI5OTgzMDA1ZmJjZTJlfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.exclusivenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.exclusivenet.com/?tm=1&subid4=1669375081.0282520000&KW1=Elite%20Dating%20Services&KW2=Get%20An%20Online%20Degree&KW3=Online%20Career%20Counseling%20Programs&KW4=Make%20Money%20From%20Home&KW5=Lowest%20Car%20Insurance%20Rates&KW6=Lowest%20Car%20Insurance%20Rates&KW7=Social%20Media%20Automation%20Marketing%20Software&KW8=Elite%20Dating%20Service&KW9=Social%20Media%20Automation%20Marketing%20Software&searchbox=0&backfill=0
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 11:18:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
dipaka-ead.com/zcvisitor/d316f8f1-6cb2-11ed-8d67-0a00850e23e5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889
200 1.1 kB URL HTTP/1.1 dipaka-ead.com/zcvisitor/d316f8f1-6cb2-11ed-8d67-0a00850e23e5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0adaa02cf742927ca8de9b94ecbb3b3a
7cfe59dc60173b53faf34bf7f37b21e3b5235c36
191905949612ce426d27aaf5f9e6d9d72fcc7cff8906ecbd32233bffe0545832
GET /zcvisitor/d316f8f1-6cb2-11ed-8d67-0a00850e23e5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889 HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.exclusivenet.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Fri, 25 Nov 2022 11:18:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: aqscDzMw
dipaka-ead.com/zcredirect?visitid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 830 B URL HTTP/1.1 dipaka-ead.com/zcredirect?visitid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (372)
Hash 426a63e6bb848dbfa5762fc44038dd32
91180628ecbac7239ae4fc82318d5c4218031d18
a429daed5629c992bc428c2e4548b3e2eb7189b47479b450ea93a6805c6f3b0f
GET /zcredirect?visitid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcvisitor/d316f8f1-6cb2-11ed-8d67-0a00850e23e5/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Fri, 25 Nov 2022 11:18:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: zgPruiOR
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3eea5d9a2eb861787781a96300b8cbc0
87c4278b2e34bd301957b901382ceda7e0cce2a3
f1c68c9389ce82c2b483af77ad3eaac2baabc7d1ca81f6e687d781127db688c9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=92915
Date: Fri, 25 Nov 2022 11:18:04 GMT
Etag: "637f6c5f-1d7"
Expires: Sat, 26 Nov 2022 13:06:39 GMT
Last-Modified: Thu, 24 Nov 2022 13:06:39 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: n7ArR2f9IjwTbqmuuElw9d8DED84w2kOpvKAx9vCCpYwpsjU01vhXQ==
dipaka-ead.com/favicon.ico
404 653 B URL HTTP/1.1 dipaka-ead.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcredirect?visitid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Fri, 25 Nov 2022 11:18:04 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: SofRcVRS
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 75c11b6fc0efa5bbb26f05383b0b9aaf
98daa997081c51ab360c50994f0d73143b807f5f
b5b58bfc4427f4fd61c45e56a1a0b68858fde2b2c2dd6c5310934bb8b9d8f63d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B58BFC4427F4FD61C45E56A1A0B68858FDE2B2C2DD6C5310934BB8B9D8F63D"
Last-Modified: Fri, 25 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21547
Expires: Fri, 25 Nov 2022 17:17:11 GMT
Date: Fri, 25 Nov 2022 11:18:04 GMT
Connection: keep-alive
affiliate.iqbroker.com/redir/?aff=1055&instrument=forex&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u
302 Found 0 B URL HTTP/2 affiliate.iqbroker.com/redir/?aff=1055&instrument=forex&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?aff=1055&instrument=forex&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u HTTP/1.1
Host: affiliate.iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 25 Nov 2022 11:18:04 GMT
content-length: 0
location: https://iqbroker.com/lp/forex-trading/?aff=1055&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u&aff_model=
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
set-cookie: visid_incap_2683110=kSh2DLzrRpmAzKsTClyce2ykgGMAAAAAQUIPAAAAAADlq8HlHCzcahKAL0shVpEU; expires=Fri, 24 Nov 2023 22:15:14 GMT; HttpOnly; path=/; Domain=.iqbroker.com
incap_ses_7235_2683110=NjnFV/jXiywtJwmRr+JnZGykgGMAAAAAOcXpWpzMwbKq7MBSI0xuMQ==; path=/; Domain=.iqbroker.com
x-cdn: Imperva
x-iinfo: 13-57338386-57338389 NNNN CT(24 52 0) RT(1669375084148 20) q(0 0 1 0) r(1 1) U5
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.cdnroute.io/lp/forex-trading/static/withdrawal_visa.svg
200 OK 879 B URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/withdrawal_visa.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (878)
Hash 2369213734dc5a921850b345c4c2f625
1d5f14b4986fdddda4fb4b9d06fd9b53de8c147f
e7dec4d8501c1eade84841a2171328096df17b55388044a80e26505b3c43866f
GET /lp/forex-trading/static/withdrawal_visa.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
content-length: 879
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.95
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/review2.png
200 OK 5.1 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/review2.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Hash 5b55365551c501ab6778af0a29fc7220
e10aeda318f55d58b413d96ef87591645e823adf
7c3b42a448af454edcf6f2ab61c918043183a95459a8dc1d411dbef10a465139
GET /lp/forex-trading/static/review2.png HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 5123
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.60.69.3
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/withdrawal_maestro.svg
200 OK 1.1 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/withdrawal_maestro.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2162)
Hash 30c5dd78d4d06e9d14cd9c6ca7e0ad79
c27f9b9a624d99e426123b7ec0713dc370cf6d91
f4a6fbe6cc5511f02edf0d68aa5121d0677150ba3425beef409c4fa4f79b9fc3
GET /lp/forex-trading/static/withdrawal_maestro.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.207
content-encoding: gzip
content-length: 1093
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/withdrawal_neteller.svg
200 OK 805 B URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/withdrawal_neteller.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (804)
Hash 8e605b8de55e766d9c6d8e2ac54285e7
d4a11f2f73aaf292f13cb6c83925d99901919180
d307118dce8c93702b37ad3c198e3419465885c0c529eabe1f6fb7a37805c8ac
GET /lp/forex-trading/static/withdrawal_neteller.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
content-length: 805
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.205
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/_next/static/H5KL_IXA90_5MHU-iO2sf/pages/index.js
200 OK 148 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/H5KL_IXA90_5MHU-iO2sf/pages/index.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (147766 bytes)
Hash 54c9bb9746a27acd810632c0dae921dc
b976fdf4cb6c46891afef622bb3074da82024716
fce86d2b947185a94e7745d1cb03bc0366a54682fb2c0ee094145466d3116d7e
GET /lp/forex-trading/_next/static/H5KL_IXA90_5MHU-iO2sf/pages/index.js HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.3.90.101
content-encoding: gzip
content-length: 147766
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/_next/static/runtime/webpack-e9ef7d1fc2501b770153.js
200 OK 1.2 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/runtime/webpack-e9ef7d1fc2501b770153.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2342), with no line terminators
Hash 2e17c0956ecf158a2ef3d8c5bf0cc676
db7d30673b7517c4f043cfa2515f335f02580c51
197f10667ad3adbe76a4ecd8262995daa1a957bec0a70e072890e554219a7108
GET /lp/forex-trading/_next/static/runtime/webpack-e9ef7d1fc2501b770153.js HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/pt/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.105
content-encoding: gzip
content-length: 1202
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/item1_poster.jpg
200 OK 37 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/item1_poster.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Hash 4b883b4c13e7e8f281d73a726de2b7ad
36a5e8f06d76322df612172ac0c81e19ad2ef2df
035d2b69ada23bc1a9a34d657cc76d0b0a926b9f548fee25179d24c0a73555f5
GET /lp/forex-trading/static/item1_poster.jpg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 36702
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.60.69.2
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/static/common/fonts/WorkSans/worksans_semibold.woff2
200 OK 17 kB URL HTTP/2 static.cdnroute.io/lp/static/common/fonts/WorkSans/worksans_semibold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 16608, version 1.0\012- data
Hash b43a5fcbd5ad006cf8a66c3d4bb1e756
d944bf7ad6a7c07a4ac15e30e2dc34aa68886220
5a3fdd33eef5a838c25b2afe031bc8478dd97dcd175ce9b9d99c2a77163b6748
GET /lp/static/common/fonts/WorkSans/worksans_semibold.woff2 HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff2
content-length: 16608
last-modified: Mon, 21 Nov 2022 16:33:20 GMT
backend: arbitre_v4
remote-addr: 2.21.240.133
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Origin
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: Overwrite, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-Range, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, If-None-Match, X-File-Name, Cache-Control, Location, Lock-Token, Chrome-Proxy
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-allow-origin: https://iqbroker.com
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/static/common/fonts/WorkSans/worksans_regular.woff2
200 OK 15 kB URL HTTP/2 static.cdnroute.io/lp/static/common/fonts/WorkSans/worksans_regular.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 15112, version 1.0\012- data
Hash a7ba1db101d3cc661d43c04191aefd2c
6c9e97ac6982e2ef865a9a1c28a55dd8b2c27688
6a645c93a587df5075444babe7d852b13ed4e4d24e339e307551acf743e214ec
GET /lp/static/common/fonts/WorkSans/worksans_regular.woff2 HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: font/woff2
content-length: 15112
last-modified: Mon, 21 Nov 2022 16:33:20 GMT
backend: arbitre_v4
remote-addr: 2.21.240.89
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Origin
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: Overwrite, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-Range, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, If-None-Match, X-File-Name, Cache-Control, Location, Lock-Token, Chrome-Proxy
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-allow-origin: https://iqbroker.com
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/_next/static/images/icon_firefox-b0f8b2fa60edff7aaafb770787ac9c2c.svg
200 OK 4.3 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/images/icon_firefox-b0f8b2fa60edff7aaafb770787ac9c2c.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (12313)
Hash 2f22c8e243d8d58cbddc50268fb67eb8
3f65d8fbb96c65e9c13aa79e07baac4e5042905f
fbadf87c42ddc44e6d3f14f3ff53762aa2f678dd5c7713119918786648b05412
GET /lp/forex-trading/_next/static/images/icon_firefox-b0f8b2fa60edff7aaafb770787ac9c2c.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/pt/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.3.90.108
content-encoding: gzip
content-length: 4323
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/withdrawal_webmoney.svg
200 OK 1.1 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/withdrawal_webmoney.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2263)
Hash d261056dc5c874ab70f702b03dff8670
0e48f041c8d1904531ea0ad01edcf8f3115d7b4a
b7860c0e2c895b0303405e169ec106092af0e9d1d348e85faec207cf328c02d7
GET /lp/forex-trading/static/withdrawal_webmoney.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.60.69.10
content-encoding: gzip
content-length: 1103
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/static/common/fonts/WorkSans/worksans_bold.woff2
200 OK 17 kB URL HTTP/2 static.cdnroute.io/lp/static/common/fonts/WorkSans/worksans_bold.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 16576, version 1.0\012- data
Hash 2bbec02ba4bdd9cc9b88135e9f302a10
5ccfa9047b97de5a1ea9a2003e320b825b7475fe
a25e14865126cb8fb6fba6ec8e05a94bf93b5f999bcc8785a80b54001d120eb5
GET /lp/static/common/fonts/WorkSans/worksans_bold.woff2 HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: font/woff2
content-length: 16576
last-modified: Mon, 21 Nov 2022 16:33:20 GMT
backend: arbitre_v4
remote-addr: 2.21.240.204
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Origin
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: Overwrite, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-Range, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, If-None-Match, X-File-Name, Cache-Control, Location, Lock-Token, Chrome-Proxy
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-allow-origin: https://iqbroker.com
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/withdrawal_visa_electron.svg
200 OK 1.3 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/withdrawal_visa_electron.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2599)
Hash d5dd1763c630c5cbe9bc7d64a428fc57
81e7085bce03fc37d336e42b72ba03553789e947
0d1b47e036d193e6e40ed02842bc983ac10f6233726cdd270f6cec77d13ac289
GET /lp/forex-trading/static/withdrawal_visa_electron.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.60.69.13
content-encoding: gzip
content-length: 1297
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/item2_poster.jpg
200 OK 33 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/item2_poster.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Hash 42281e9e887105c6d11381da78c5949c
28dcb685720812b00f56dbc9d06ba495772d77dd
eb12a99a681a8eb03df78bbb401d174e564bf5a591ed79214f37db7cd7c8b6b2
GET /lp/forex-trading/static/item2_poster.jpg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 33028
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.125
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/withdrawal_skrill.svg
200 OK 651 B URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/withdrawal_skrill.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1101)
Hash fab3a3afc438e6a3ef344f31a0926b36
533301716f9d68ca10f11d77420fe173934eaf6c
7fc138ef21574de9bc652e8dc0f3cad59bcb4f85416e01c255f8b0684287507b
GET /lp/forex-trading/static/withdrawal_skrill.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.95
content-encoding: gzip
content-length: 651
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/item3_poster.jpg
200 OK 36 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/item3_poster.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Hash 4f1158f0ab0d91c956216cecce232784
7a0616b53183c74ee082594d51ddf96f21064a9c
d0712722861db01ab4c769ee3fa1d3a06c2eb9c20ebd14e86b1805e712886db3
GET /lp/forex-trading/static/item3_poster.jpg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 35485
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.95
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/review3.png
200 OK 5.2 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/review3.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Hash a1972f0409aa2c8d33a4076feac6fda6
adda20f875c49041a51e140ade59c386b55bae74
9fb3350ee66b2d575fa3f80bb1f9fee3374bad2faf9d98b07cf374f0189a0aaf
GET /lp/forex-trading/static/review3.png HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 5233
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.212
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/review1.png
200 OK 4.5 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/review1.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Hash f5688931f63a4d4d9c4deeb4c856c29e
00c3c6b833ecf0afe888afd23ed73ef03dd59148
b65b4c179e82aedf35705ef6ba102ffdab1a53dfa29fd69251be0635f4040886
GET /lp/forex-trading/static/review1.png HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 4466
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.60.69.3
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/_next/static/H5KL_IXA90_5MHU-iO2sf/pages/_app.js
200 OK 7.4 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/H5KL_IXA90_5MHU-iO2sf/pages/_app.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (18068), with no line terminators
Hash 7a24c85fc9aaecaa4a93ee81ab5430fd
49276018fa662c4cf2e349a2820c7403d35a3f62
bc13ac89a73d7ea9dd00002909fb6c2cf3053d19f6a4e32d1aafa13ab26c6270
GET /lp/forex-trading/_next/static/H5KL_IXA90_5MHU-iO2sf/pages/_app.js HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.231
content-encoding: gzip
content-length: 7363
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/_next/static/runtime/main-9f9cf067ba24aa0c3062.js
200 OK 5.2 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/runtime/main-9f9cf067ba24aa0c3062.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13340), with no line terminators
Hash 0093509b17e8693c8ab81849d1f8a6c4
f6d45f2912ed8cec663682d9529f48c3b1495ec8
3db16399d45ca818904c7532efa39ac4e1ed8308fcd5682794a86e7efde11cf4
GET /lp/forex-trading/_next/static/runtime/main-9f9cf067ba24aa0c3062.js HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.3.90.110
content-encoding: gzip
content-length: 5238
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/bgr.jpg
200 OK 70 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/bgr.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4364x2178, components 3\012- data
Hash 43690a9d27671d9e21e8576d2f8a8bce
dff80eee0e4c25c358d7a58584f057ba6c0db284
2c6a13e34a6d107fb9789da429450f3b820f1536e1558deac86a808ef15d3a61
GET /lp/forex-trading/static/bgr.jpg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 70367
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.3.90.109
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/_next/static/images/platform_desktop-105b0d5af86910fcb5259c1a6f826adf.svg
200 OK 38 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/images/platform_desktop-105b0d5af86910fcb5259c1a6f826adf.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d58ab4ee2eb2139b8afdbccf78ae8fd9
1cdaf2992e9c2368a2d7166b5b2c302bf77e6424
bc0625bc434367fe7c82f9b6a293505e691d11b5b81ab704c71d829f9a01efea
GET /lp/forex-trading/_next/static/images/platform_desktop-105b0d5af86910fcb5259c1a6f826adf.svg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/pt/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.212
content-encoding: gzip
content-length: 37906
date: Fri, 25 Nov 2022 11:18:04 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/item2_video.webm
206 Partial Content 648 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/item2_video.webm
IP
ASN #20940 Akamai International B.V.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 648 kB (647597 bytes)
Hash 1b81f0a47a68878ca5483f22b7eafb91
8f46a39494ff12a80321f06c935708b57bf9aa92
e571e377c67c95f135e3201abcf7d76286d0a9bcaac9c72db08401c00da9f14a
GET /lp/forex-trading/static/item2_video.webm HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
content-type: video/webm
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.3.90.101
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
content-range: bytes 0-647596/647597
content-length: 647597
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/item1_video.webm
206 Partial Content 487 kB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/item1_video.webm
IP
ASN #20940 Akamai International B.V.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 487 kB (486626 bytes)
Hash 3d9e4b2f4d5bf38586db29bf3539f66a
cefe8c83119630442d70769291772b23cd058025
5ea54e503b131752cffc43b2458c24c1346f8952f714d68e585b3c4418ec6967
GET /lp/forex-trading/static/item1_video.webm HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
content-type: video/webm
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/es/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.97
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
content-range: bytes 0-486625/486626
content-length: 486626
x-provider-name: Akamai
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/item3_video.webm
206 Partial Content 1.0 MB URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/item3_video.webm
IP
ASN #20940 Akamai International B.V.
File type WebM\012- EBML file, creator webmB\20\012- data
Size 1.0 MB (1000810 bytes)
Hash 87b388d756dd5c1c17f6e0b763095f79
1d1ff76228a7a9745fa9cbd73a7d213575658687
7ba6e80cda5ee27fb97f4409e858cf0c580dc643d0bd21ce7c15f1dc0162d73a
GET /lp/forex-trading/static/item3_video.webm HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx
content-type: video/webm
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/es/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.231
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
content-range: bytes 0-1000809/1000810
content-length: 1000810
x-provider-name: Akamai
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.cdnroute.io/lp/forex-trading/_next/static/images/favicon-16x16-35eb524c3ef37951f7c6725f2faf9ac1.png
200 OK 429 B URL HTTP/2 static.cdnroute.io/lp/forex-trading/_next/static/images/favicon-16x16-35eb524c3ef37951f7c6725f2faf9ac1.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 35eb524c3ef37951f7c6725f2faf9ac1
b97ac7225ab30a831998b29556e8a3361d44a9a1
543c6de6d1378fef8237ba0eae724a8823a6d7542276462c2efbc8ba25760f6c
GET /lp/forex-trading/_next/static/images/favicon-16x16-35eb524c3ef37951f7c6725f2faf9ac1.png HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/png
content-length: 429
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 2.21.240.95
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:05 GMT
set-cookie: IsAppStoreCountry=true; expires=Sun, 25 Dec 2022 11:18:05 GMT; domain=.iqoption.com; path=/; secure; SameSite=None
connection_track=308a611da16d1ceb40e7159c3da12d8b
x-provider-name: Akamai
X-Firefox-Spdy: h2
eu.iqoption.com/lp/api/cookies
200 OK 108 B URL HTTP/2 eu.iqoption.com/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: eu.iqoption.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=e6b76b0c90827737810a752b466ea888
X-Firefox-Spdy: h2
iq-option.com/lp/api/cookies
200 OK 108 B URL HTTP/2 iq-option.com/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iq-option.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 6559e380e5b41d79161bf59e68b43968
5e4a59bb62fe8dc4df39c5fa374bf586e69603a5
64cf1c792ca4294e41c2acfbfe40be4018f7b3aaa217820747b2c413cec95244
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2220
Cache-Control: max-age=96946
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:05 GMT
Etag: "637f7373-2d7"
Expires: Sat, 26 Nov 2022 14:13:51 GMT
Last-Modified: Thu, 24 Nov 2022 13:36:51 GMT
Server: ECS (amb/6B76)
X-Cache: HIT
Content-Length: 727
iq-options.com/lp/api/cookies
200 OK 108 B URL HTTP/2 iq-options.com/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iq-options.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
iqoption.co.th/lp/api/cookies
200 OK 108 B URL HTTP/2 iqoption.co.th/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iqoption.co.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
iqbroker.co/lp/api/cookies
200 OK 108 B URL HTTP/2 iqbroker.co/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iqbroker.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
static.cdnroute.io/lp/forex-trading/static/video_screen.jpg
200 OK 108 B URL HTTP/2 static.cdnroute.io/lp/forex-trading/static/video_screen.jpg
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/forex-trading/static/video_screen.jpg HTTP/1.1
Host: static.cdnroute.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 41501
last-modified: Mon, 21 Nov 2022 16:32:44 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 23.60.69.4
accept-ranges: bytes
date: Fri, 25 Nov 2022 11:18:04 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2
tracker.affiliate.iqbroker.com/hit?aff_id=1055&aff_model=&aff_track=whfdrg18gs6gijnki92es22u__clickid-whfdrg18gs6gijnki92es22u&brand_id=1&rand=0.2793726139925652&u=37eee2119333ce650184d6b02b409ec7
200 OK 15 B URL HTTP/2 tracker.affiliate.iqbroker.com/hit?aff_id=1055&aff_model=&aff_track=whfdrg18gs6gijnki92es22u__clickid-whfdrg18gs6gijnki92es22u&brand_id=1&rand=0.2793726139925652&u=37eee2119333ce650184d6b02b409ec7
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
GET /hit?aff_id=1055&aff_model=&aff_track=whfdrg18gs6gijnki92es22u__clickid-whfdrg18gs6gijnki92es22u&brand_id=1&rand=0.2793726139925652&u=37eee2119333ce650184d6b02b409ec7 HTTP/1.1
Host: tracker.affiliate.iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Cookie: visid_incap_2683110=kSh2DLzrRpmAzKsTClyce2ykgGMAAAAAQUIPAAAAAADlq8HlHCzcahKAL0shVpEU; incap_ses_7235_2683110=NjnFV/jXiywtJwmRr+JnZGykgGMAAAAAOcXpWpzMwbKq7MBSI0xuMQ==; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; landing=/lp/forex-trading/; aff=1055; retrack=; affextra=; afftrack=whfdrg18gs6gijnki92es22u__clickid-whfdrg18gs6gijnki92es22u; aff_model=; aff_ts=2022-11-25T11:18:04Z; Serv=NL; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true; RedirectDomain=iqoption.com; linkPolicy=/en/terms-and-conditions/privacy-policy-new; linkTerms=/en/terms-and-conditions/terms-conditions; RedirectDomains=iqoption.com,iqtrading.asia; aff_params={"landing_url":"https://iqbroker.com/lp/forex-trading/"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: application/json
content-length: 15
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-origin: https://iqbroker.com
set-cookie: tsd=6031ce1c-f128-456b-bf9e-3d846729254c; Expires=Sat, 26 Nov 2022 11:18:05 GMT; HttpOnly; Secure; SameSite=None
country_code=NO
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
iqoptions.co/lp/api/cookies
200 OK 108 B URL HTTP/2 iqoptions.co/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iqoptions.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
iqoption.com/lp/api/cookies
200 OK 108 B URL HTTP/2 iqoption.com/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iqoption.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=937fc8246cef4977d5b9578a86b32f2f
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f01a10658aba0038dacd31cc89bd9f58
e891ded7abe355fe51cb97b210a342fdc2e0084b
7b0baf0ce713ce62d4d695a4d1089d04cc8bdce63ee0ff496cd4f97ab5153b19
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3999
Cache-Control: max-age=124991
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:05 GMT
Etag: "637fda0d-117"
Expires: Sat, 26 Nov 2022 22:01:16 GMT
Last-Modified: Thu, 24 Nov 2022 20:54:37 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
iqoption.com/lp/api/cookies
200 OK 108 B URL HTTP/2 iqoption.com/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: iqoption.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=990b4800c466e9b427394332b50edb07
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f01a10658aba0038dacd31cc89bd9f58
e891ded7abe355fe51cb97b210a342fdc2e0084b
7b0baf0ce713ce62d4d695a4d1089d04cc8bdce63ee0ff496cd4f97ab5153b19
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3999
Cache-Control: max-age=124991
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:05 GMT
Etag: "637fda0d-117"
Expires: Sat, 26 Nov 2022 22:01:16 GMT
Last-Modified: Thu, 24 Nov 2022 20:54:37 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CCVAQM3C77U2G17VLMO0&lib=ttq
200 OK 43 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CCVAQM3C77U2G17VLMO0&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65464)
Hash 4780a2303d2f74581120e3edb26541e7
05c3f1e80d29a292898f436495376557a6f3e266
95b4fc256687f9957390e60ba342863d40c703ee3a07a6e622a207cb70180577
GET /i18n/pixel/events.js?sdkid=CCVAQM3C77U2G17VLMO0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202211251118057AC1A6324E8E4E9A0151
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465b845ac3ac4213815465c704c31ba33b407501e18933705b3a70e677fa7df335e9b8e8365860f6950aa288c57fb0f7c2b9
content-encoding: gzip
expires: Fri, 25 Nov 2022 11:18:05 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 11:18:05 GMT
content-length: 42662
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=1, origin; dur=120
x-origin-response-time: 120,23.36.79.28
x-akamai-request-id: 55cc0a14
X-Firefox-Spdy: h2
banking.trading/lp/api/cookies
200 OK 108 B URL HTTP/2 banking.trading/lp/api/cookies
IP
ASN #204006 Iqoption Europe Ltd
File type JSON data\012- , ASCII text, with no line terminators
Hash b82324f523a57740738b801d7803a5c4
27ac403588140544b12e630a7f264eaa5058fc82
216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
GET /lp/api/cookies HTTP/1.1
Host: banking.trading
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:06 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 813
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Cookie: _ttp=2I2MBDUVp83wuA77uc1CYOJvbbo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202211251118066CDF20C3557073796B9D
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60e3edb515e5d35f97492fe5bedc44bf1dcba3e115d10f26ccc5ffc4a3978d56182106b080087fd981613f24fc6ef8a393539549f5731d1ea94e6c6b25d5a99bedd8ebb0306640f1bdd6af50d96a0cf0e1
x-origin-response-time: 51,72.247.190.68
x-akamai-request-id: 394a4c1d.55cc0cd9
expires: Fri, 25 Nov 2022 11:18:06 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 11:18:06 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a72-247-190-68.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=105, origin; dur=51, inner; dur=49
x-parent-response-time: 151,23.36.79.28
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5e4dfd5546aff2974d3f50f30c571c3b
a55c0269c7a9e42452712437e7cc0408e746469c
622a03aa1eac303f345efb65060766bdaec3d525ccea90b2dc0b3bf69adc8a0e
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221125111806432072437FF6987B1797
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60f6b2f058d826275ff656380c5100023a20911edfc061887dd2c3282b04f33b58eae98953d07bb7612407445d1c3f41e734c78a2cb7c16d2bb576f58286683fc9a3fd045bb4f95ea00cab0e2045b0d8d5
content-encoding: gzip
x-origin-response-time: 7,184.25.157.162
x-akamai-request-id: 3a98b6c6.55cc0bc0
expires: Fri, 25 Nov 2022 11:18:06 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 11:18:06 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a184-25-157-162.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=100, origin; dur=7, inner; dur=3
x-parent-response-time: 107,23.36.79.28
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-BH1SENMS6L&cid=1524809651.1669375085>m=2oeb90&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-BH1SENMS6L&cid=1524809651.1669375085>m=2oeb90&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BH1SENMS6L&cid=1524809651.1669375085>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://iqbroker.com
date: Fri, 25 Nov 2022 11:18:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
websdk.appsflyer.com/?st=pba&
200 OK 9.6 kB URL HTTP/1.1 websdk.appsflyer.com/?st=pba&
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21856)
Hash 2902a2c87591f52fe75ec67763d36598
f95fdcd612b076f2deccc29c4674a80f1db9cad6
3f9873dc0fcde232799bfaea802351433c9934862bb296e993c442cf0fbfcd6f
GET /?st=pba& HTTP/1.1
Host: websdk.appsflyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 4haMOXDItrc8YAsvjP5Y/gbfdGolA2yEsUPI+FqwDDhYzG2L2zfJACl/etuphYJSQMXfI7TXm8g=
x-amz-request-id: MKFRWNGA75DSVKN5
Last-Modified: Wed, 27 Apr 2022 08:41:43 GMT
ETag: "cc82ca2a69eac2386ea395ea1e0ad0f6"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2337
Expires: Fri, 25 Nov 2022 11:57:03 GMT
Date: Fri, 25 Nov 2022 11:18:06 GMT
Content-Length: 9575
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 10:41:08 GMT
expires: Fri, 25 Nov 2022 12:41:08 GMT
cache-control: public, max-age=7200
age: 2218
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=177142C908CD63FD188250AE093862C7; domain=.bing.com; expires=Wed, 20-Dec-2023 11:18:06 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E3EF52E4FC2648F6B9A0E992B3E3D45B Ref B: OSL30EDGE0510 Ref C: 2022-11-25T11:18:06Z
date: Fri, 25 Nov 2022 11:18:06 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BH1SENMS6L&cid=1524809651.1669375085>m=2oeb90&aip=1&z=1628993998
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BH1SENMS6L&cid=1524809651.1669375085>m=2oeb90&aip=1&z=1628993998
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BH1SENMS6L&cid=1524809651.1669375085>m=2oeb90&aip=1&z=1628993998 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 11:18:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2238
Cache-Control: max-age=152744
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:06 GMT
Etag: "63804d58-1d7"
Expires: Sun, 27 Nov 2022 05:43:50 GMT
Last-Modified: Fri, 25 Nov 2022 05:06:32 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 55e1c02d3afe074cf79d018f0e1377bb
4642101ceef6d7f5145474b0b46640afd8ae7235
c82fab451bff85c1d79bef818aaa0086b29595805719853abfaab42467dc4383
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 11:18:06 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Tue, 29 Nov 2022 07:53:24 GMT
ETag: "4642101ceef6d7f5145474b0b46640afd8ae7235"
Last-Modified: Fri, 25 Nov 2022 07:53:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1352
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f9fb533c00b511-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/config.js?sdkid=CCVAQM3C77U2G17VLMO0&hostname=iqbroker.com
200 OK 20 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=CCVAQM3C77U2G17VLMO0&hostname=iqbroker.com
IP
ASN #20940 Akamai International B.V.
Hash 0d037e5a97947e0fe585e78f9d750407
e52de37b20bc047e4446334e56dc9e706c5aa1e3
1a7254187de71a82d155db9a03a19c03b45b8d9793f18f3fbf72e1761c136127
GET /i18n/pixel/config.js?sdkid=CCVAQM3C77U2G17VLMO0&hostname=iqbroker.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202211251118061E3EA996AE98F28DE08A
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60f6b2f058d826275ff656380c5100023a09a1d557b3b368834fe0918e9a88f9c2f721411909bc87f5278ae8cdbdca4268df8a9dcd21be49999389853ce18ea753360ab0abaf56e837089f8bde34afad62
content-encoding: gzip
x-origin-response-time: 6,184.25.157.177
x-akamai-request-id: 1c59150e.55cc0be8
expires: Fri, 25 Nov 2022 11:18:06 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 25 Nov 2022 11:18:06 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
set-cookie: _ttp=2I2MBDUVp83wuA77uc1CYOJvbbo; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a184-25-157-177.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=100, origin; dur=6, inner; dur=3
x-parent-response-time: 105,23.36.79.28
X-Firefox-Spdy: h2
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JWxG9X7jDqS4zJouqTw9ICvfCzCOS1rEj7rYzWRWUqUhD6mNLz79zw==
age: 166080
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 670dda5fda45a89db08867e9109f65b7
2a64bc381f8e795fe7a46a98c3e8add2f1ade404
7c2085a52a32eab3f4ab73c4ab3718cf1e7d67502e83001ce45d2857b37a0755
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2238
Cache-Control: max-age=152744
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 11:18:06 GMT
Etag: "63804d58-1d7"
Expires: Sun, 27 Nov 2022 05:43:50 GMT
Last-Modified: Fri, 25 Nov 2022 05:06:32 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
a.mgid.com/mgsensor.js?d=1669375084888
200 OK 32 kB URL HTTP/2 a.mgid.com/mgsensor.js?d=1669375084888
IP
File type ASCII text, with very long lines (15105), with no line terminators
Hash e13161c5b21236eec88b3d168d5729e3
b0515de0c179a6eb4a585df0508e12592b35615a
2163c7170c424fb959515fa313136467350999dbc98ff851d9fcd300733b3ce4
GET /mgsensor.js?d=1669375084888 HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 11:18:05 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: cdd77bc4-225b-4b94-82d2-b28a053accc2
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=NE9xYj0C9XZXyXkJ1.tUJpqC_kI1uMY6PV.gZ3xQgis-1669375085-0-AWqlO9xtGu/6UuKsJ4qHYRFFqOh+n6a5cL/OBMc4bN1mzf56D3Wa4qGwQG6VAJKRIVbJDjgLzdZokTHKQsShOk0=; path=/; expires=Fri, 25-Nov-22 11:48:05 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 76f9fb4ce9730b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 1d79426653c3b55939eaec59a2ce8ef5
c6db0314df7a4e5c08047f6306e0b79a1ad3bab2
2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73267
date: Fri, 25 Nov 2022 11:18:06 GMT
access-control-allow-origin: *
etag: "637f41b2-11e33"
expires: Fri, 25 Nov 2022 12:18:06 GMT
last-modified: Thu, 24 Nov 2022 13:04:34 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
api.popin.cc/ads/SG_iqoption_@S.js
200 OK 602 B URL HTTP/1.1 api.popin.cc/ads/SG_iqoption_@S.js
IP
File type ASCII text, with very long lines (964)
Hash f0f2d7ae86eb34ff1c009e24a7d5c0c0
513c07402321ed14267010584a46904e8b57ad98
a7248391a34b0adf1405d10c07a499a357c1506f544b992b17c3326c276d2fe3
GET /ads/SG_iqoption_@S.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 11:18:06 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 14 Sep 2020 08:33:58 GMT
ETag: W/"4511453817dd21621eb260e855ead80c"
Cache-Control: max-age=3600
x-amz-version-id: null
Expires: Fri, 25 Nov 2022 12:18:06 GMT
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 49325c8d488e579adab1cdc0ca7971d3
16cdffecb1487bf7dc0bec6ffac9c22df24f354d
91b36900eba5ab72ef352ac82800ec20a90512670a27662f677bcb217da87111
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 25 Nov 2022 11:18:07 GMT
Last-Modified: Thu, 24 Nov 2022 23:36:58 GMT
ETag: "6380001a-1d7"
Expires: Sat, 26 Nov 2022 23:36:58 GMT
Cache-Control: max-age=130731
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1669375087
Via: cache16.l2de2[529,529,200-0,M], cache16.l2de2[531,0], cache4.se1[553,553,200-0,M], cache4.se1[554,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 25 Nov 2022 11:18:07 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816693750866065325e
script.hotjar.com/modules.e1bdbadbcc63daea6270.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.e1bdbadbcc63daea6270.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 53db6c810ee48127f87a9c79e206fc67
aa53e521ba10b23524afc519c6e6ba8d1eb5147c
f89c4d3c17828a5c54ecc60f5107e2bfe92cb8b4622fb766fda6d1fca1c95fdd
GET /modules.e1bdbadbcc63daea6270.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68720
date: Thu, 24 Nov 2022 08:09:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "53db6c810ee48127f87a9c79e206fc67"
last-modified: Thu, 24 Nov 2022 08:08:08 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TqOZTqUjZDgycDX4b6vd7Gc3BxnCd5Qk_EdY3HzT87M9gj4fLwUwCw==
age: 97741
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 25 Nov 2022 11:18:07 GMT
access-control-allow-origin: *
etag: "637f41b2-2b"
expires: Fri, 25 Nov 2022 12:18:07 GMT
accept-ranges: bytes
last-modified: Thu, 24 Nov 2022 13:04:34 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
bat.bing.com/p/action/5089525.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5089525.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5089525.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=384DFC90FD0E6C1217B7EEF7FCFB6D21; domain=.bing.com; expires=Wed, 20-Dec-2023 11:18:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C6748E65F4294DB1BC59C5915BFE4249 Ref B: OSL30EDGE0510 Ref C: 2022-11-25T11:18:07Z
date: Fri, 25 Nov 2022 11:18:06 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5089525&tm=gtm002&Ver=2&mid=cba30423-70e0-40f8-a91f-58b751a38519&sid=d588b6b06cb211ed86967d9092a56278&vid=d588d8f06cb211ed883a797477e09474&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=A%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&p=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&r=<=389&evt=pageLoad&sv=1&rn=126470
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5089525&tm=gtm002&Ver=2&mid=cba30423-70e0-40f8-a91f-58b751a38519&sid=d588b6b06cb211ed86967d9092a56278&vid=d588d8f06cb211ed883a797477e09474&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=A%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&p=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&r=<=389&evt=pageLoad&sv=1&rn=126470
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5089525&tm=gtm002&Ver=2&mid=cba30423-70e0-40f8-a91f-58b751a38519&sid=d588b6b06cb211ed86967d9092a56278&vid=d588d8f06cb211ed883a797477e09474&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=A%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&p=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&r=<=389&evt=pageLoad&sv=1&rn=126470 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=09221EC9B1746F592DFA0CAEB0816E32; domain=.bing.com; expires=Wed, 20-Dec-2023 11:18:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6C818F3C3E2B4DABBCD32656C800EA00 Ref B: OSL30EDGE0510 Ref C: 2022-11-25T11:18:07Z
date: Fri, 25 Nov 2022 11:18:06 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eef67ccee20dbd70ef0f00ab2e8b4da9
baf76cae79cb839b8cc700908871367f281840b6
3d70042d4890a29339d653752d8a0d3a2621949cba3657bcb317c4c681df2fab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164173
Date: Fri, 25 Nov 2022 11:18:07 GMT
Etag: "63806dd0-1d7"
Expires: Sun, 27 Nov 2022 08:54:20 GMT
Last-Modified: Fri, 25 Nov 2022 07:25:04 GMT
Server: ECS (dcb/7F37)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mq-Ki_tJ2aUAfO1DwUjMJa5qomFG8CI5K74JtIgBiIhJgcIuu0akUQ==
Age: 5356
wa.onelink.me/v1/onelink
200 OK 13 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 593e8538d63f30de24fbb439dd424870
f838a78077c6d023e0d0bca95f0f335df4b8b468
38bc0f256821a9c0a02a1c0cedf8ff70c211e637ef77ac199de2fe0cf36ba9ec
GET /v1/onelink HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://iqbroker.com
Content-Type: application/json
Date: Fri, 25 Nov 2022 11:18:07 GMT
Content-Length: 13
Connection: keep-alive
vc.hotjar.io/sessions/3225453?s=0.25&r=0.22851430639391002
204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/3225453?s=0.25&r=0.22851430639391002
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/3225453?s=0.25&r=0.22851430639391002 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Fri, 25 Nov 2022 11:18:07 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w-Z8zsNe6O_roGxAs4QS3-EAsMqB7m8IVkjdMzwM7zwb9OSh9nowMg==
X-Firefox-Spdy: h2
mc.yandex.ru/watch/22669009/1?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 1.1 kB URL HTTP/2 mc.yandex.ru/watch/22669009/1?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (1115), with no line terminators
Hash 92dfe350100e1b340d5b1e0273677244
65a9ba3dc9dafe87f60c5bd6c95098c6bcb35388
e0b744055cb7f9ca225a4cac5d6324bb648398ccb73d169440c404f147633145
GET /watch/22669009/1?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Referer: https://iqbroker.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 1115
date: Fri, 25 Nov 2022 11:18:07 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://iqbroker.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 25-Nov-2022 11:18:07 GMT
last-modified: Fri, 25-Nov-2022 11:18:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=268776370499332&ev=PageView&dl=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&rl=&if=false&ts=1669375086725&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1669375086723.1865198213&it=1669375086186&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=268776370499332&ev=PageView&dl=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&rl=&if=false&ts=1669375086725&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1669375086723.1865198213&it=1669375086186&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=268776370499332&ev=PageView&dl=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&rl=&if=false&ts=1669375086725&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1669375086723.1865198213&it=1669375086186&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 11:18:07 GMT
X-Firefox-Spdy: h2
api.popin.cc/popin_discovery5-min.js
200 OK 43 kB URL HTTP/1.1 api.popin.cc/popin_discovery5-min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65212), with no line terminators
Hash 406fcd1fef98a20924ec24ea94ee1d0a
b68e351a238a85f1f788963e7a3b4970be68659d
1312ca4a2652d4cb7b5c72571566aa6596a01b1e684870c0bf2f71d7f6d7b3fd
GET /popin_discovery5-min.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 11:18:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 15 Nov 2022 11:05:50 GMT
ETag: W/"66fc13530273f2130968bd58b34b1ea6"
x-amz-version-id: ZSHgav7oxHWIG.1hJRy7dZhzYvDPn4Zl
Expires: Fri, 25 Nov 2022 12:18:07 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
api.popin.cc/td_js_sdk_171.js
200 OK 13 kB URL HTTP/1.1 api.popin.cc/td_js_sdk_171.js
IP
File type ASCII text, with very long lines (15820)
Hash f8c04fbcd2a9a8decb5575efb7579613
25b9b4daa00ce4f2393123574211b07dfdf666d2
ca3918c559732ff63c526b8a42b4033c38a6001894d315775fe70db6d0851038
GET /td_js_sdk_171.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 11:18:08 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 11 Jan 2018 09:42:51 GMT
ETag: W/"17b2e8b253e693d224f7d8407e28e1ea"
Cache-Control: max-age=3600
x-amz-version-id: null
Expires: Fri, 25 Nov 2022 12:18:08 GMT
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
api.popin.cc/iframe/piuid.html?ac=piuid&t=15009898
200 OK 1.9 kB URL HTTP/1.1 api.popin.cc/iframe/piuid.html?ac=piuid&t=15009898
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1601)
Hash 40a32cdbd8f4d6fdcacd1d1743a847bc
4372622b955d04d0c50b836f73f0fc08e80b1323
30481476bbe8627eb7363609e58b15caaf88ef4d416b1df485dec44c55bb6f9c
GET /iframe/piuid.html?ac=piuid&t=15009898 HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 11:18:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 21 Nov 2019 09:08:45 GMT
ETag: W/"43676b9118e1fa3ce36d31e318eb36e9"
x-amz-version-id: null
Expires: Fri, 25 Nov 2022 12:18:08 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
api.popin.cc/test/popin_send_cookie_set_fail.js?20201223
200 OK 4.1 kB URL HTTP/1.1 api.popin.cc/test/popin_send_cookie_set_fail.js?20201223
IP
File type Unicode text, UTF-8 text, with very long lines (1877)
Hash fc15eab2a6dfd4958c93a6ab0d7f06ed
e098ee5395424b62ca0200de08594cb1da222ff1
8efeb44ee0ab4ced4f4926a7e388d1ccf0b641d9bdeb251dc21cb51286a953e6
GET /test/popin_send_cookie_set_fail.js?20201223 HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 11:18:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 11 Oct 2021 03:29:29 GMT
ETag: W/"27aab2e5fb58e044704790074416e410"
x-amz-version-id: NVPBtcLlaQ0R5YVGUD48RBS0d2V00MrK
Expires: Fri, 25 Nov 2022 12:18:08 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
static.hotjar.com/c/hotjar-3225453.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-3225453.js?sv=7
IP
GET /c/hotjar-3225453.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 11:18:06 GMT
cache-control: max-age=60
etag: W/a449ad9f5eb8001ec23b4585401bab92
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dxQd7x2x_9Kibs_67LrRnKhi1cwM5Kg7W5EtuTN5WOnJkOurL0-Nzg==
age: 30
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WN69JL
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WN69JL
IP
GET /gtm.js?id=GTM-WN69JL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 11:18:04 GMT
expires: Fri, 25 Nov 2022 11:18:04 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/22669009?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/22669009?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/22669009?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/22669009/1?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u%26aff_model%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A385%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1581610386214%3Ahid%3A267420920%3Az%3A0%3Ai%3A20221125111806%3Aet%3A1669375086%3Ac%3A1%3Arn%3A963332588%3Arqn%3A1%3Au%3A1669375086766110554%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C55%2C34%2C0%2C187%2C0%2C%2C105%2C0%2C%2C%2C%2C390%3Ans%3A1669375083853%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669375086%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Fri, 25 Nov 2022 11:18:07 GMT
access-control-allow-origin: https://iqbroker.com
set-cookie: yandexuid=4163889611669375087; Expires=Sat, 25-Nov-2023 11:18:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4163889611669375087; Expires=Sat, 25-Nov-2023 11:18:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=670407481669375087; Path=/; SameSite=None; Secure
i=Xpz/rR6Q7xsl0IW5hMAeuFJz7/5jbzxyiGsLTOvHK+h+hioSA9oPic8tYGSV/0rs2Vaqm4g9zFxlfKfHDLygeJ2T938=; Expires=Mon, 22-Nov-2032 11:18:04 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700911087.yc.1669375087#1700911087.yrts.1669375087#1700911087.yrtsi.1669375087; Expires=Sat, 25-Nov-2023 11:18:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 25-Nov-2022 11:18:07 GMT
last-modified: Fri, 25-Nov-2022 11:18:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
1yyhe.trackvoluum.com/zp-redirect?target=https%3A%2F%2Faffiliate.iqbroker.com%2Fredir%2F%3Faff%3D1055%26instrument%3Dforex%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u&caid=2d5ae96c-10d1-4bbe-9cb4-11c1a54aa87c&zpid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&cid=whfdrg18gs6gijnki92es22u&rt=DJ
200 OK 0 B URL HTTP/2 1yyhe.trackvoluum.com/zp-redirect?target=https%3A%2F%2Faffiliate.iqbroker.com%2Fredir%2F%3Faff%3D1055%26instrument%3Dforex%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u&caid=2d5ae96c-10d1-4bbe-9cb4-11c1a54aa87c&zpid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&cid=whfdrg18gs6gijnki92es22u&rt=DJ
IP
GET /zp-redirect?target=https%3A%2F%2Faffiliate.iqbroker.com%2Fredir%2F%3Faff%3D1055%26instrument%3Dforex%26afftrack%3Dwhfdrg18gs6gijnki92es22u%26clickid%3Dwhfdrg18gs6gijnki92es22u&caid=2d5ae96c-10d1-4bbe-9cb4-11c1a54aa87c&zpid=d316f8f1-6cb2-11ed-8d67-0a00850e23e5&cid=whfdrg18gs6gijnki92es22u&rt=DJ HTTP/1.1
Host: 1yyhe.trackvoluum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dipaka-ead.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 11:18:04 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: voluum-cid-v4=%7B%22cid%22%3A%22whfdrg18gs6gijnki92es22u%22%2C%22caid%22%3A%222d5ae96c-10d1-4bbe-9cb4-11c1a54aa87c%22%7D; Max-Age=31536000; Expires=Sat, 25-Nov-2023 11:18:04 GMT; Domain=1yyhe.trackvoluum.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
X-Firefox-Spdy: h2
deffield-funuals.com/redirect?target=BASE64aHR0cHM6Ly9hZmZpbGlhdGUuaXFicm9rZXIuY29tL3JlZGlyLz9hZmY9MTA1NSZpbnN0cnVtZW50PWZvcmV4JmFmZnRyYWNrPXdoZmRyZzE4Z3M2Z2lqbmtpOTJlczIydSZjbGlja2lkPXdoZmRyZzE4Z3M2Z2lqbmtpOTJlczIydQ&ts=1669375084107&hash=pTxtPjhO0CM62wkFGqpIcdJn3oWh33Umpl7EaEGa5K4&rm=DJ
200 OK 0 B URL HTTP/2 deffield-funuals.com/redirect?target=BASE64aHR0cHM6Ly9hZmZpbGlhdGUuaXFicm9rZXIuY29tL3JlZGlyLz9hZmY9MTA1NSZpbnN0cnVtZW50PWZvcmV4JmFmZnRyYWNrPXdoZmRyZzE4Z3M2Z2lqbmtpOTJlczIydSZjbGlja2lkPXdoZmRyZzE4Z3M2Z2lqbmtpOTJlczIydQ&ts=1669375084107&hash=pTxtPjhO0CM62wkFGqpIcdJn3oWh33Umpl7EaEGa5K4&rm=DJ
IP
GET /redirect?target=BASE64aHR0cHM6Ly9hZmZpbGlhdGUuaXFicm9rZXIuY29tL3JlZGlyLz9hZmY9MTA1NSZpbnN0cnVtZW50PWZvcmV4JmFmZnRyYWNrPXdoZmRyZzE4Z3M2Z2lqbmtpOTJlczIydSZjbGlja2lkPXdoZmRyZzE4Z3M2Z2lqbmtpOTJlczIydQ&ts=1669375084107&hash=pTxtPjhO0CM62wkFGqpIcdJn3oWh33Umpl7EaEGa5K4&rm=DJ HTTP/1.1
Host: deffield-funuals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:04 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
iqbroker.com/lp/forex-trading/?aff=1055&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u&aff_model=
200 OK 0 B URL HTTP/2 iqbroker.com/lp/forex-trading/?aff=1055&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u&aff_model=
IP
ASN #204006 Iqoption Europe Ltd
GET /lp/forex-trading/?aff=1055&afftrack=whfdrg18gs6gijnki92es22u&clickid=whfdrg18gs6gijnki92es22u&aff_model= HTTP/1.1
Host: iqbroker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: visid_incap_2683110=kSh2DLzrRpmAzKsTClyce2ykgGMAAAAAQUIPAAAAAADlq8HlHCzcahKAL0shVpEU; incap_ses_7235_2683110=NjnFV/jXiywtJwmRr+JnZGykgGMAAAAAOcXpWpzMwbKq7MBSI0xuMQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 11:18:04 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 21 Nov 2022 16:32:45 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
set-cookie: IsRestrictedCountry=false; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsRegulatedCountry=true; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Country=no; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
CountryID=149; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
landing=/lp/forex-trading/; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff=1055; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
retrack=; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
affextra=; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
afftrack=whfdrg18gs6gijnki92es22u__clickid-whfdrg18gs6gijnki92es22u; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff_model=; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
aff_ts=2022-11-25T11:18:04Z; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
Serv=NL; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
AppID=id871125783; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
brand_id=1; expires=Fri, 02 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
platform=9; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
client_platform_id=9; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
support_email=support@eu.iqoption.com; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
company_id=1; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
IsAppStoreCountry=true; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
RedirectDomain=iqoption.com; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
linkPolicy=/en/terms-and-conditions/privacy-policy-new; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
linkTerms=/en/terms-and-conditions/terms-conditions; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
RedirectDomains=iqoption.com,iqtrading.asia; expires=Sun, 25 Dec 2022 11:18:04 GMT; domain=.iqbroker.com; path=/; secure; SameSite=None
link: <https://iqbroker.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
remote-addr: 91.90.42.154
content-encoding: gzip
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-3225446.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-3225446.js?sv=7
IP
GET /c/hotjar-3225446.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 11:18:06 GMT
cache-control: max-age=60
etag: W/c0ccec086d3d5b2112e7307975506eee
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WQqzuvIqtyQhWQ-en724t4YAld8_74cZK5a9r_lzqnpj_Q1NlGEN5A==
age: 1
X-Firefox-Spdy: h2
208.117.2.100
185.117.134.138
87.250.250.119
119.63.193.220
35.156.91.109
23.36.77.32
47.246.44.205
52.48.118.139
104.18.20.226
93.184.220.29
157.240.200.35