solutton-kornally.xyz/67d2cd40-cb98-4952-ad96-aa97ab6f0fd0
18.196.84.70302 0 B URL HTTP/1.1 solutton-kornally.xyz/67d2cd40-cb98-4952-ad96-aa97ab6f0fd0
IP 18.196.84.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /67d2cd40-cb98-4952-ad96-aa97ab6f0fd0 HTTP/1.1
Host: solutton-kornally.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Wed, 08 Feb 2023 20:59:09 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Pragma: no-cache
Set-Cookie: 67d2cd40-cb98-4952-ad96-aa97ab6f0fd0-v4=NM0-oGKzF4lYxcSBjk3QDw4rlxyBWwtiyeTv7CQ-y1g; Max-Age=86400; Expires=Thu, 09-Feb-2023 20:59:09 GMT; Domain=solutton-kornally.xyz; Path=/; HttpOnly
cc-v4=3J0p2yjnwYGSpHLOyiK7C3kJbBj%2B8Qo0ICdBXDnpLJ5bvYGHt1NCf9E%2BLX3nZhkY90RPfQWPkRKIQ1Iq8an3snHHdeJ1dS4VDgY3P%2BJMiKIWZ7pYcNpxwQ7wosIRL5Mvu%2FUqCXGZj1N19IlViqw9ig%3D%3D; Max-Age=31536000; Expires=Thu, 08-Feb-2024 20:59:09 GMT; Domain=solutton-kornally.xyz; Path=/; HttpOnly
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4521
Expires: Wed, 08 Feb 2023 22:14:30 GMT
Date: Wed, 08 Feb 2023 20:59:09 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2648
Expires: Wed, 08 Feb 2023 21:43:17 GMT
Date: Wed, 08 Feb 2023 20:59:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 20:36:43 GMT
content-type: application/json
age: 1346
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17761
Expires: Thu, 09 Feb 2023 01:55:10 GMT
Date: Wed, 08 Feb 2023 20:59:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: F4HR18WHqwAwvBoCBF1IjBfS6jFIMXt0VwQRImAowIr5VqLjNUGD7hUL/GTCB8LeGaoKR09zc+8=
x-amz-request-id: 5WRYAPPM7NWFQHWH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 20:46:06 GMT
age: 783
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:09 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash daf5b3732aa53d73f5e17e79d4bc0caf
9db50924c5dd535a7bca282285eb75b8867702e8
dc5107f16cd26fe2eee264e078e5ccdb86db61fb8387d5ac177457765cd8896a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Etag: "63e18f39-2d7"
Server: ECS (amb/6B91)
Content-Length: 727
static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
8.254.252.244200 OK 105 kB URL HTTP/1.1 static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
IP 8.254.252.244:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12498)
Size 105 kB (104994 bytes)
Hash 33dfed2ae671ac10e9d3ce27c3b9938a
8bc609e23421ed6099d18e353f9f5a0553ba0dd5
6f8d89568e5e3ebd9616a5e46171a4072319bed8f8d3db8868071db73b995c63
GET /lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12 HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:49 GMT
Content-Type: text/html
Content-Length: 104994
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 16:30:44 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33204/mtime:1675784970/atime:1675787232/md5:f8fac5a3b39bde9c80cdc92eeba9b5d6/ctime:1675787232
x-amz-request-id: f8f89fa7-0aa6-42b4-a5f3-55989a10a7c8
X-Clv-Request-Id: f8f89fa7-0aa6-42b4-a5f3-55989a10a7c8
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"f8fac5a3b39bde9c80cdc92eeba9b5d6"
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
8.254.252.244304 Not Modified 0 B URL HTTP/1.1 static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
IP 8.254.252.244:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12 HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
If-Modified-Since: Tue, 07 Feb 2023 16:30:44 GMT
If-None-Match: W/"f8fac5a3b39bde9c80cdc92eeba9b5d6"
HTTP/1.1 304 Not Modified
Date: Tue, 07 Feb 2023 16:36:49 GMT
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 16:30:44 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33204/mtime:1675784970/atime:1675787232/md5:f8fac5a3b39bde9c80cdc92eeba9b5d6/ctime:1675787232
x-amz-request-id: f8f89fa7-0aa6-42b4-a5f3-55989a10a7c8
X-Clv-Request-Id: f8f89fa7-0aa6-42b4-a5f3-55989a10a7c8
X-Clv-S3-Version: 2.5
ETag: W/"f8fac5a3b39bde9c80cdc92eeba9b5d6"
Access-Control-Allow-Origin: *
Age: 102140
static.olymptrade.com/lands/common/scripts/gtm-scripts.min.js
8.254.252.244200 OK 4.0 kB URL HTTP/1.1 static.olymptrade.com/lands/common/scripts/gtm-scripts.min.js
IP 8.254.252.244:0
File type C source, ASCII text, with very long lines (12756), with no line terminators
Hash 2747f20bbbf2b04992b5b66102cc6e2f
949365b7b4f1aee8806c86165fd2015526cd7d82
771a5e42487b70b813a2dfc8689e54d04748afc51c8ab97f7c75c3e63db5f313
GET /lands/common/scripts/gtm-scripts.min.js HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:43 GMT
Content-Type: application/javascript
Content-Length: 3970
Connection: keep-alive
Last-Modified: Fri, 23 Dec 2022 10:08:03 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1671786329/atime:1671790046/md5:c8d726929119a01be9128ceab2ac52a1/ctime:1671790046
x-amz-request-id: 661f8162-9a6a-4921-b20b-20c37a75702b
X-Clv-Request-Id: 661f8162-9a6a-4921-b20b-20c37a75702b
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"c8d726929119a01be9128ceab2ac52a1"
Access-Control-Allow-Origin: *
Age: 102146
Accept-Ranges: bytes
static.olymptrade.com/lands/common/scripts/detect.min.js
8.254.252.244200 OK 21 kB URL HTTP/1.1 static.olymptrade.com/lands/common/scripts/detect.min.js
IP 8.254.252.244:0
File type ASCII text, with very long lines (45502), with no line terminators
Hash 6151e4ab3cb3475e9272beca9422dff4
db3c88bdbef7f7ef2a89d8d0b9938fd895a94e95
7b6301e5bbb68c119206c7ab2235e3b85700e5484661eefc73597ff6db4cc2df
GET /lands/common/scripts/detect.min.js HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:43 GMT
Content-Type: application/javascript
Content-Length: 21012
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 11:55:48 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1671446813/atime:1671450631/md5:45e08c23af443372225939b745daa777/ctime:1671450631
x-amz-request-id: 30c71fed-ded9-4738-b87c-79cbb2570999
X-Clv-Request-Id: 30c71fed-ded9-4738-b87c-79cbb2570999
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"45e08c23af443372225939b745daa777"
Access-Control-Allow-Origin: *
Age: 102146
Accept-Ranges: bytes
static.olymptrade.com/lands/common/scripts/header-scripts.min.js
8.254.252.244200 OK 1.8 kB URL HTTP/1.1 static.olymptrade.com/lands/common/scripts/header-scripts.min.js
IP 8.254.252.244:0
File type C source, ASCII text, with very long lines (4754), with no line terminators
Hash 6d7c07d24d39d2198936cc4184aad2ea
2aa9bf0ffbb677ff45c5314c64299f5cbe1eca24
d4ef8395e34471d4db6850c8184550c28d3641b1796f9c8d513d85b614e1b15b
GET /lands/common/scripts/header-scripts.min.js HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:39 GMT
Content-Type: application/javascript
Content-Length: 1833
Connection: keep-alive
Last-Modified: Fri, 23 Dec 2022 10:08:03 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1671786329/atime:1671790046/md5:2af78dafbf12634173b36af7b130befc/ctime:1671790046
x-amz-request-id: 83276069-38df-4981-b750-d6706ebb908f
X-Clv-Request-Id: 83276069-38df-4981-b750-d6706ebb908f
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"2af78dafbf12634173b36af7b130befc"
Access-Control-Allow-Origin: *
Age: 102150
Accept-Ranges: bytes
static.olymptrade.com/lands/common/plugins/perfectScroll/perfect-scrollbar.css
8.254.252.244200 OK 715 B URL HTTP/1.1 static.olymptrade.com/lands/common/plugins/perfectScroll/perfect-scrollbar.css
IP 8.254.252.244:0
File type troff or preprocessor input, ASCII text
Hash 9e6a7ddff6259c8c796092b581f76401
81dafee2903ffe55bb0165429b0850096c1f930e
5ca956b1a7e8a9a992c0c05f1499155b3ddab108506902ccc375cc01f48cd00b
GET /lands/common/plugins/perfectScroll/perfect-scrollbar.css HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:31 GMT
Content-Type: text/css
Content-Length: 715
Connection: keep-alive
Last-Modified: Thu, 11 Nov 2021 15:51:11 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: atime:1636645136/ctime:1636645136/gid:1006/gname:jenkins/md5:8e416ec45a2091b901ea76bbd596eb96/mode:33188/mtime:1636645039/uid:1006/uname:jenkins
x-amz-request-id: 5cab9878-8b14-4afa-9584-5bb096f3523b
X-Clv-Request-Id: 5cab9878-8b14-4afa-9584-5bb096f3523b
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"8e416ec45a2091b901ea76bbd596eb96"
Access-Control-Allow-Origin: *
Age: 102158
Accept-Ranges: bytes
static.olymptrade.com/lands/common/plugins/perfectScroll/perfect-scrollbar.min.js
8.254.252.244200 OK 6.2 kB URL HTTP/1.1 static.olymptrade.com/lands/common/plugins/perfectScroll/perfect-scrollbar.min.js
IP 8.254.252.244:0
File type ASCII text, with very long lines (18216)
Hash 89fbc872b5e2c4b35cb4de5debb4043a
53817b773dd4eec7c0c22dbfc6787b978ac08e5e
dd113db64de014e5f12a649f1cf464439b0b4338e1cafb879ea203e606c07d3e
GET /lands/common/plugins/perfectScroll/perfect-scrollbar.min.js HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:31 GMT
Content-Type: application/javascript
Content-Length: 6240
Connection: keep-alive
Last-Modified: Thu, 11 Nov 2021 15:51:11 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: atime:1636645136/ctime:1636645136/gid:1006/gname:jenkins/md5:4a10bcfa0a9c9fa9d503b5a498cac31e/mode:33188/mtime:1636645039/uid:1006/uname:jenkins
x-amz-request-id: fbc8f215-9745-4326-b678-6835471edaf2
X-Clv-Request-Id: fbc8f215-9745-4326-b678-6835471edaf2
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"4a10bcfa0a9c9fa9d503b5a498cac31e"
Access-Control-Allow-Origin: *
Age: 102158
Accept-Ranges: bytes
static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
8.254.252.244200 OK 10 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
IP 8.254.252.244:0
File type ASCII text, with very long lines (52656), with no line terminators
Hash 98364b9459abb74c4b4880e91f8275df
cbc3be251b9294272f47a41293069f7ae2186cef
1bbf4804fc66f78848f9395f5ba464d8a2477d94c69d262b9a9b9e0d07d0732a
GET /lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:51 GMT
Content-Type: text/css
Content-Length: 10477
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 16:31:08 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1675785315/atime:1675787240/md5:510c7dcb6c921ae934c54a3dd80d1783/ctime:1675787240
x-amz-request-id: fdef7cd6-f187-45cc-9490-c5cf16515e24
X-Clv-Request-Id: fdef7cd6-f187-45cc-9490-c5cf16515e24
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"510c7dcb6c921ae934c54a3dd80d1783"
Access-Control-Allow-Origin: *
Age: 102138
Accept-Ranges: bytes
static.olymptrade.com/lands/LPL45-04/build/js/app.bundle.min.js
8.254.252.244200 OK 38 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/js/app.bundle.min.js
IP 8.254.252.244:0
File type ASCII text, with very long lines (65447)
Hash 861b61d86a730ae2b2c9eca837640b7c
a5450415ed7a90999e341f219f7c391096c66b13
c216d92b5199a5d109aa26d704f7325b984156557658cf113802d9ce830dc47e
GET /lands/LPL45-04/build/js/app.bundle.min.js HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:51 GMT
Content-Type: application/javascript
Content-Length: 37848
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 16:31:08 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1675785280/atime:1675787242/md5:a58e98c79e0cfd927850915ef69d18d5/ctime:1675787242
x-amz-request-id: bbb5000a-8491-4ece-84e0-d97bffdb0e37
X-Clv-Request-Id: bbb5000a-8491-4ece-84e0-d97bffdb0e37
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"a58e98c79e0cfd927850915ef69d18d5"
Access-Control-Allow-Origin: *
Age: 102138
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=GTM-TXMCPRB
142.250.74.78200 OK 44 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=GTM-TXMCPRB
IP 142.250.74.78:0
File type ASCII text, with very long lines (1759)
Hash 30310a925b39331edc374c85ef4e27db
7fdb351abc873eaccbbea86b6105bff0f0b44a11
6a89f43f417851ce8c4ba822741172e7ab610b61c582d30d91b2131678337242
GET /optimize.js?id=GTM-TXMCPRB HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 Feb 2023 20:59:09 GMT
expires: Wed, 08 Feb 2023 20:59:09 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 Feb 2023 18:39:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44375
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a9a48be33360fff54d78a3cedcf3986f
4a92cfc1a38849cb430179d170b66860b975544c
b52fa3a96e1c64f860f7a4c074b4ac07755d045d380aa51ec67efc8c789a5436
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2430
Cache-Control: max-age=132128
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Etag: "63e364bf-1d7"
Expires: Fri, 10 Feb 2023 09:41:17 GMT
Last-Modified: Wed, 08 Feb 2023 09:00:47 GMT
Server: ECS (amb/6B91)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-M98VLD
142.250.74.40200 OK 100 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-M98VLD
IP 142.250.74.40:0
File type Unicode text, UTF-8 text, with very long lines (42873)
Size 100 kB (100280 bytes)
Hash 3782d6c911eba1d4f04e6769275937b5
7b7eb8bfc310f870fe92f3b0151091280e1a26c6
a96cb05e9e67c6c71b60ef765e8007e7986308cd8672ddad3851de9b22adaef5
GET /gtm.js?id=GTM-M98VLD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 Feb 2023 20:59:09 GMT
expires: Wed, 08 Feb 2023 20:59:09 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 Feb 2023 18:39:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100280
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.olymptrade.com/lands/common/components/footer-default/build/img/logo/olymp-logo-mono-grey.svg
8.254.252.244200 OK 980 B URL HTTP/1.1 static.olymptrade.com/lands/common/components/footer-default/build/img/logo/olymp-logo-mono-grey.svg
IP 8.254.252.244:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Hash d1d9726a8d3809a78ea1b865f1e6bcb4
d772d47360a27d0a4ab6d7fb8ff3bd155eb1e6d5
8abb01b8a547630db054f57f42c0b111dbf12f4e35e705170aa95bcd27450027
GET /lands/common/components/footer-default/build/img/logo/olymp-logo-mono-grey.svg HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:39 GMT
Content-Type: image/svg+xml
Content-Length: 980
Connection: keep-alive
Last-Modified: Fri, 18 Mar 2022 13:07:46 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1647606318/atime:1647608489/md5:74a9e57a593080f66cbc9aa85eaed11e/ctime:1647608489
x-amz-request-id: 6b63ca35-9ab0-4dad-a5cd-b85d0d9a0398
X-Clv-Request-Id: 6b63ca35-9ab0-4dad-a5cd-b85d0d9a0398
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"74a9e57a593080f66cbc9aa85eaed11e"
Access-Control-Allow-Origin: *
Age: 102151
Accept-Ranges: bytes
static.olymptrade.com/lands/common/img/certificate-2.webp
8.254.252.244200 OK 43 kB URL HTTP/1.1 static.olymptrade.com/lands/common/img/certificate-2.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6dbbeb317ab6ca0192e626dcf72595cb
0371497d87b709cb7383c417f1b4cfaa952fc7e1
907011703fc92f52f22dee0fe1e1d4c58eb12016419c91779ca3a097e8c8959f
GET /lands/common/img/certificate-2.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: binary/octet-stream
Content-Length: 43338
Connection: keep-alive
ETag: "6dbbeb317ab6ca0192e626dcf72595cb"
Last-Modified: Mon, 14 Nov 2022 16:18:15 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1668438598/atime:1668442424/md5:6dbbeb317ab6ca0192e626dcf72595cb/ctime:1668442424
x-amz-request-id: 43e2d48a-9272-4489-bd3f-00861c829441
X-Clv-Request-Id: 43e2d48a-9272-4489-bd3f-00861c829441
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.olymptrade.com/v6/platform/values
185.104.210.32200 OK 20 B URL HTTP/1.1 api.olymptrade.com/v6/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
OPTIONS /v6/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-request-project,x-request-type,x-requested-with
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:10 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-Request-Type, X-Request-Project, X-App-Name, X-App-Version, X-Signature, X-CID-Ver, X-CID-App, X-CID-OS, X-CID-Device
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.olymptrade.com/lands/common/components/platform-screen/build/img/screen/ar/ftt_p/platform_2.webp
8.254.252.244200 OK 60 kB URL HTTP/1.1 static.olymptrade.com/lands/common/components/platform-screen/build/img/screen/ar/ftt_p/platform_2.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3e79d198257632d8950e168040f53355
62c4f05636b94cc7d6f83011f9f4674c054d9ca3
633dfbb1bd4c96321111b5185235de3fdad63a5ceabc6d6bb360db90ccef4745
GET /lands/common/components/platform-screen/build/img/screen/ar/ftt_p/platform_2.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:51 GMT
Content-Type: binary/octet-stream
Content-Length: 60246
Connection: keep-alive
ETag: "3e79d198257632d8950e168040f53355"
Last-Modified: Mon, 05 Sep 2022 14:53:28 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662387183/atime:1662389050/md5:3e79d198257632d8950e168040f53355/ctime:1662389050
x-amz-request-id: 16b8459f-91b0-4cf1-9668-b9f95d2f067e
X-Clv-Request-Id: 16b8459f-91b0-4cf1-9668-b9f95d2f067e
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102139
Accept-Ranges: bytes
fonts.googleapis.com/css2?family=Open+Sans:wght@300%3b400%3b500%3b600%3b700&display=swap
142.250.74.74200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:wght@300%3b400%3b500%3b600%3b700&display=swap
IP 142.250.74.74:0
Hash ef07ebcd22de8a72df55d6583ac3efc6
ef447d548aeb859574a3165693b0d76116b1f17c
307c7303f73be0741f9613ed395541ec11744247aee06d9e62884fa2f1506bec
GET /css2?family=Open+Sans:wght@300%3b400%3b500%3b600%3b700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 Feb 2023 20:59:10 GMT
date: Wed, 08 Feb 2023 20:59:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.olymptrade.com/lands/common/components/header-default/build/img/logo/olymp-logo_white.svg
8.254.252.244200 OK 1.3 kB URL HTTP/1.1 static.olymptrade.com/lands/common/components/header-default/build/img/logo/olymp-logo_white.svg
IP 8.254.252.244:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 08c92e1f01ca8867950c5be98130f902
e5ab729515e6459993373213d71c70a824447c22
342c071ac7281fc3b96f6659567f59fdfd5bbd3fe420e5ad3d697ce62caa7240
GET /lands/common/components/header-default/build/img/logo/olymp-logo_white.svg HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:35 GMT
Content-Type: image/svg+xml
Content-Length: 1294
Connection: keep-alive
Last-Modified: Tue, 31 May 2022 14:58:06 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1654006972/atime:1654008980/md5:621fedb89116deed1a7a08f1852aa468/ctime:1654008980
x-amz-request-id: bdcbe3b9-1aac-4d8b-9dc4-ea15f7756f26
X-Clv-Request-Id: bdcbe3b9-1aac-4d8b-9dc4-ea15f7756f26
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"621fedb89116deed1a7a08f1852aa468"
Access-Control-Allow-Origin: *
Age: 102155
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 20:14:52 GMT
age: 2658
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:ital,wght@1,300&display=swap
142.250.74.74200 OK 690 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:ital,wght@1,300&display=swap
IP 142.250.74.74:0
Hash 84e0aa221f0239e29e9b62633413f7d7
e0366b4b95ffca95a26d8ec9daf308a0cccbfe31
1bf2e3f59979a5740d5023342a26dc01b6be23eef87988cb615da76096481121
GET /css2?family=Roboto:ital,wght@1,300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 Feb 2023 20:59:09 GMT
date: Wed, 08 Feb 2023 20:59:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.olymptrade.com/v6/platform/values
185.104.210.32200 OK 258 B URL HTTP/1.1 api.olymptrade.com/v6/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
File type JSON data\012- , ASCII text, with very long lines (491), with no line terminators
Hash 629142302cb60ad5a10c218d3f40a69d
7512a776902b88e080aa121991f73b27b3464cdd
23790d5ae357636e0bb86c1529ca9900fdfad19bc927d5a93d2b8592a760e1ae
POST /v6/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
X-Request-Project: otp
X-Request-Type: Api-Request
X-Requested-With: XMLHttpRequest
Content-Type: text/plain;charset=UTF-8
Origin: https://static.olymptrade.com
Content-Length: 25
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
content-type: application/json
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
cache-control: no-cache
x-app-trace-id: b22d5ac4-dc7a-ddeb-36f2-65f139fbd94d
set-cookie: guest_id=1000082107503741950347115326358021675889950084520988168117302649; expires=Sat, 05-Feb-2033 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
date: Wed, 08 Feb 2023 20:59:10 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
static.olymptrade.com/lands/common/components/pwa/build/img/app.webp
8.254.252.244200 OK 61 kB URL HTTP/1.1 static.olymptrade.com/lands/common/components/pwa/build/img/app.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 87ce55f2d2510fe3c0352cecfa697aa1
b94e9367ad69c66496890d558216980d8e560bd8
a48667a209073fe16eaaf05568e6dfe38baa54992fd6af4e5a822896ddb71144
GET /lands/common/components/pwa/build/img/app.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: binary/octet-stream
Content-Length: 60920
Connection: keep-alive
ETag: "87ce55f2d2510fe3c0352cecfa697aa1"
Last-Modified: Mon, 05 Sep 2022 14:54:09 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662387185/atime:1662389062/md5:87ce55f2d2510fe3c0352cecfa697aa1/ctime:1662389062
x-amz-request-id: 0d0be4f6-ce3a-4ea3-a8b7-1157664bdc3f
X-Clv-Request-Id: 0d0be4f6-ce3a-4ea3-a8b7-1157664bdc3f
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 22:02:00 GMT
expires: Mon, 05 Feb 2024 22:02:00 GMT
cache-control: public, max-age=31536000
age: 255430
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.olymptrade.com/v1/cabinet/payment-systems
185.104.210.32200 OK 20 B URL HTTP/1.1 api.olymptrade.com/v1/cabinet/payment-systems
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
OPTIONS /v1/cabinet/payment-systems HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-request-project,x-request-type
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:10 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-Request-Type, X-Request-Project, X-App-Name, X-App-Version, X-Signature, X-CID-Ver, X-CID-App, X-CID-OS, X-CID-Device
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6850
Expires: Wed, 08 Feb 2023 22:53:20 GMT
Date: Wed, 08 Feb 2023 20:59:10 GMT
Connection: keep-alive
api.olymptrade.com/v7/platform/values
185.104.210.32200 OK 20 B URL HTTP/1.1 api.olymptrade.com/v7/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
OPTIONS /v7/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-request-project,x-request-type,x-requested-with
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:10 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-Request-Type, X-Request-Project, X-App-Name, X-App-Version, X-Signature, X-CID-Ver, X-CID-App, X-CID-OS, X-CID-Device
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 13:09:06 GMT
expires: Wed, 07 Feb 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 114604
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 Feb 2023 10:26:49 GMT
expires: Sun, 04 Feb 2024 10:26:49 GMT
cache-control: public, max-age=31536000
age: 383541
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.olymptrade.com/lands/LPL45-04/build/img/backgrounds/header/ga-header-ar.webp
8.254.252.244200 OK 71 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/backgrounds/header/ga-header-ar.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2140x680, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3dc4ee781c65b5603ac49f1ec1aae016
735fba7e77eed49c99ce3fd1cfd94ef78c292312
ef793f3a8517552ee1e033e414ca09104d965b59299c16df6fedc591c1cf327d
GET /lands/LPL45-04/build/img/backgrounds/header/ga-header-ar.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: binary/octet-stream
Content-Length: 71292
Connection: keep-alive
ETag: "3dc4ee781c65b5603ac49f1ec1aae016"
Last-Modified: Mon, 05 Sep 2022 14:48:45 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662387150/atime:1662388990/md5:3dc4ee781c65b5603ac49f1ec1aae016/ctime:1662388990
x-amz-request-id: e98adcef-6012-44ea-88d9-534923e39722
X-Clv-Request-Id: e98adcef-6012-44ea-88d9-534923e39722
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.olymptrade.com/lands/LPL45-04/build/img/difficulty/bg.webp
8.254.252.244200 OK 75 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/difficulty/bg.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 835x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 761a61adb0289b19c91c345f15e5b4ef
247ab9e2aa75276ecca8e6ce8d19da90b3e56027
683bc02c98f37d898bc36e5f6f6a89c0be48db2edab309aad07cc1849f5b5648
GET /lands/LPL45-04/build/img/difficulty/bg.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: binary/octet-stream
Content-Length: 75392
Connection: keep-alive
ETag: "761a61adb0289b19c91c345f15e5b4ef"
Last-Modified: Mon, 05 Sep 2022 14:48:49 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662387150/atime:1662388991/md5:761a61adb0289b19c91c345f15e5b4ef/ctime:1662388991
x-amz-request-id: ab503d07-6878-4ec4-b98f-9740bd05e2d2
X-Clv-Request-Id: ab503d07-6878-4ec4-b98f-9740bd05e2d2
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
static.olymptrade.com/lands/LPL45-04/build/img/backgrounds/registration/form-bg.webp
8.254.252.244200 OK 47 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/backgrounds/registration/form-bg.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x2184, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cebbf8cab9c7bcdbc96d000c8961c166
e7163b7e81df9c897c7b362f5d317e3bca9c30d0
4dff6ff9f5c8c043948d7bfa1f3ffb138baa67f87a571792c9441f7f11498bb4
GET /lands/LPL45-04/build/img/backgrounds/registration/form-bg.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:37:10 GMT
Content-Type: binary/octet-stream
Content-Length: 47390
Connection: keep-alive
ETag: "cebbf8cab9c7bcdbc96d000c8961c166"
Last-Modified: Mon, 05 Sep 2022 14:48:49 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662387150/atime:1662388991/md5:cebbf8cab9c7bcdbc96d000c8961c166/ctime:1662388991
x-amz-request-id: 79a504ac-ddce-4865-9d8f-0bf4132c875c
X-Clv-Request-Id: 79a504ac-ddce-4865-9d8f-0bf4132c875c
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102120
Accept-Ranges: bytes
static.olymptrade.com/lands/LPL45-04/build/img/svg/safety/deposit-alternative.svg
8.254.252.244200 OK 1.2 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/svg/safety/deposit-alternative.svg
IP 8.254.252.244:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2125)
Hash 17847a2f4ba4998d3966b647890a611c
7c27ee49902b83451f1014ba86b055391f55a776
2ec1da2a151a172d5b299b24bc4696a2cacb901f83265da045019c5334c9ec58
GET /lands/LPL45-04/build/img/svg/safety/deposit-alternative.svg HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: image/svg+xml
Content-Length: 1189
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 16:14:33 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662479548/atime:1662480662/md5:e69b3a27d42df8511074604a21a4cc35/ctime:1662480662
x-amz-request-id: eb537559-86e0-46ad-b371-7c19a089a974
X-Clv-Request-Id: eb537559-86e0-46ad-b371-7c19a089a974
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"e69b3a27d42df8511074604a21a4cc35"
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
api.olymptrade.com/v7/platform/values
185.104.210.32200 OK 20 B URL HTTP/1.1 api.olymptrade.com/v7/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
OPTIONS /v7/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-request-project,x-request-type,x-requested-with
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:10 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-Request-Type, X-Request-Project, X-App-Name, X-App-Version, X-Signature, X-CID-Ver, X-CID-App, X-CID-OS, X-CID-Device
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
static.olymptrade.com/lands/LPL45-04/build/img/backgrounds/rounding.webp
8.254.252.244200 OK 20 kB URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/backgrounds/rounding.webp
IP 8.254.252.244:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 810d005223f4394eb58249d0c7603575
e38043be8e62dea452f03ad66f4023fc07f49ceb
9dad3f2442db6ae39629edb4c93f7dbef3b294d97fa142aa6a3d9949aa77f257
GET /lands/LPL45-04/build/img/backgrounds/rounding.webp HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: binary/octet-stream
Content-Length: 19564
Connection: keep-alive
ETag: "810d005223f4394eb58249d0c7603575"
Last-Modified: Mon, 05 Sep 2022 14:48:49 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662387150/atime:1662388990/md5:810d005223f4394eb58249d0c7603575/ctime:1662388990
x-amz-request-id: 3a4c83ff-a735-4f2c-82de-5149ba3a13aa
X-Clv-Request-Id: 3a4c83ff-a735-4f2c-82de-5149ba3a13aa
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
static.olymptrade.com/lands/LPL45-04/build/img/svg/arrow.svg
8.254.252.244200 OK 369 B URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/svg/arrow.svg
IP 8.254.252.244:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Hash 1a955885280ee5369d95a29d612539ec
f4e557751515ef723840a14864bb18f4915adad8
bc5ab5c930abe916cde85386e1f58a360ac5f6fdc24e577d7f52ee3c1b78cd57
GET /lands/LPL45-04/build/img/svg/arrow.svg HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: image/svg+xml
Content-Length: 369
Connection: keep-alive
Last-Modified: Wed, 12 Oct 2022 15:42:09 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1665585834/atime:1665589149/md5:9f6ef7ba564a60bcbe66c565d999b090/ctime:1665589149
x-amz-request-id: d96666dd-0aa7-4638-ac5a-0fa084c4f353
X-Clv-Request-Id: d96666dd-0aa7-4638-ac5a-0fa084c4f353
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"9f6ef7ba564a60bcbe66c565d999b090"
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 07:51:59 GMT
expires: Thu, 08 Feb 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 47231
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 18:52:41 GMT
expires: Tue, 06 Feb 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 180389
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.olymptrade.com/lands/LPL45-04/build/img/svg/safety/history-alternative.svg
8.254.252.244200 OK 325 B URL HTTP/1.1 static.olymptrade.com/lands/LPL45-04/build/img/svg/safety/history-alternative.svg
IP 8.254.252.244:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6f60aa15fcbd7b5ed199d99790b88bbe
76fdf8d37fed71bcc4bc2e97561d6a6c2bf257d4
a5f2a9be5669d665b19c436e131651416d289bc6f7c2837f3810e18eeb59f247
GET /lands/LPL45-04/build/img/svg/safety/history-alternative.svg HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/LPL45-04/build/css/geo_bundle/all_app.bundle.min.css
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:50 GMT
Content-Type: image/svg+xml
Content-Length: 325
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 16:14:33 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1662479548/atime:1662480662/md5:ec764004e7db30e07be063b3e9aef576/ctime:1662480662
x-amz-request-id: 006a877a-d490-450e-9e86-19f10590adaf
X-Clv-Request-Id: 006a877a-d490-450e-9e86-19f10590adaf
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"ec764004e7db30e07be063b3e9aef576"
Access-Control-Allow-Origin: *
Age: 102140
Accept-Ranges: bytes
olymptrade.com/p/auth/probe/v1
185.104.210.32200 OK 14 B URL HTTP/1.1 olymptrade.com/p/auth/probe/v1
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
File type JSON data\012- , ASCII text, with no line terminators
Hash dfe977a5d016d556e5ac0b813eac66b1
31bc4efc9f4d8c4e86eedf83444ac935546d3c90
7088814156cba446418171c2b509340685dfe0f89c2a7cb366faec0696e3c306
GET /p/auth/probe/v1 HTTP/1.1
Host: olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://static.olymptrade.com
content-type: application/json; charset=utf-8
vary: Origin
date: Wed, 08 Feb 2023 20:59:10 GMT
content-length: 14
strict-transport-security: max-age=63072000; includeSubdomains; preload
api.olymptrade.com/v7/platform/values
185.104.210.32200 OK 359 B URL HTTP/1.1 api.olymptrade.com/v7/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
File type JSON data\012- , ASCII text, with very long lines (723), with no line terminators
Hash e638c3a97434704a78ca141dfbcb16e3
d98b96c4458a8e5ba6f5f75c901a51ec50a340a4
9eb84e04f3db59de53ebb991981f2ef5d7e00b65ab371ed336b5cafdd9bbc32f
POST /v7/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
X-Request-Project: otp
X-Request-Type: Api-Request
X-Requested-With: XMLHttpRequest
Content-Type: text/plain;charset=UTF-8
Origin: https://static.olymptrade.com
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
content-type: application/json
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
cache-control: no-cache
x-app-trace-id: 77067a57-f273-93d3-83fa-fae4ac2d2a65
set-cookie: guest_id=1000563319076933072628415326358021675889950254174854817869442086; expires=Sat, 05-Feb-2033 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
date: Wed, 08 Feb 2023 20:59:10 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
api.olymptrade.com/v7/platform/values
185.104.210.32200 OK 359 B URL HTTP/1.1 api.olymptrade.com/v7/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
File type JSON data\012- , ASCII text, with very long lines (723), with no line terminators
Hash e638c3a97434704a78ca141dfbcb16e3
d98b96c4458a8e5ba6f5f75c901a51ec50a340a4
9eb84e04f3db59de53ebb991981f2ef5d7e00b65ab371ed336b5cafdd9bbc32f
POST /v7/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
X-Request-Project: otp
X-Request-Type: Api-Request
X-Requested-With: XMLHttpRequest
Content-Type: text/plain;charset=UTF-8
Origin: https://static.olymptrade.com
Content-Length: 44
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
content-type: application/json
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
cache-control: no-cache
x-app-trace-id: 7f3128b8-f553-9d8b-b4f0-9c8a0962ad26
set-cookie: guest_id=1000276604924620441170315326358021675889950252168365520913539017; expires=Sat, 05-Feb-2033 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
date: Wed, 08 Feb 2023 20:59:10 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
static.olymptrade.com/video/pwa-section/ar/adr.mp4
8.254.252.244206 Partial Content 447 kB URL HTTP/1.1 static.olymptrade.com/video/pwa-section/ar/adr.mp4
IP 8.254.252.244:0
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 447 kB (447356 bytes)
Hash 7d1f29c2f9733706cc4a72051905e4a2
e0be101a2df12f331950074a0aaa6c2781c506c5
6e5b9a1943256dc0864f1ed783fd56b5dfb1bc685e272ad59552654a83e52a11
GET /video/pwa-section/ar/adr.mp4 HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 206 Partial Content
Date: Tue, 07 Feb 2023 16:41:51 GMT
Content-Type: video/mp4
Content-Length: 447356
Connection: keep-alive
ETag: "7d1f29c2f9733706cc4a72051905e4a2"
Last-Modified: Thu, 02 Feb 2023 14:42:24 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1675162206/atime:1675344896/md5:7d1f29c2f9733706cc4a72051905e4a2/ctime:1675344578
x-amz-request-id: 8a61847d-d2b0-4394-b306-66a6c531d627
X-Clv-Request-Id: 8a61847d-d2b0-4394-b306-66a6c531d627
X-Clv-S3-Version: 2.5
Access-Control-Allow-Origin: *
Age: 101839
Content-Range: bytes 0-447355/447356
olymptrade.com/l/GA-OTPO-LPL45-07-01ar/olymp?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12&pixel=1
185.104.210.32200 OK 0 B URL HTTP/1.1 olymptrade.com/l/GA-OTPO-LPL45-07-01ar/olymp?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12&pixel=1
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /l/GA-OTPO-LPL45-07-01ar/olymp?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12&pixel=1 HTTP/1.1
Host: olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
cache-control: must-revalidate, post-check=0, pre-check=0, private
content-type: text/html; charset=utf-8
expires: 0
pragma: no-cache
set-cookie: checked=1; Path=/; Domain=olymptrade.com; Expires=Thu, 09 Feb 2023 20:59:10 GMT; HttpOnly; Secure; SameSite=None
enterdate=2023-02-08+23%3A59%3A10; Path=/; Domain=olymptrade.com; Expires=Wed, 08 Mar 2023 20:59:10 GMT; HttpOnly; Secure; SameSite=None
guest_id=1711982478634835301778428147221430167588995031369135241115454135; Path=/; Domain=olymptrade.com; Expires=Sat, 05 Feb 2033 20:59:10 GMT; HttpOnly; Secure; SameSite=None
tr_http_referer=https%3A%2F%2Fstatic.olymptrade.com%2F; Path=/; Domain=olymptrade.com; Expires=Wed, 08 Mar 2023 20:59:10 GMT; HttpOnly; Secure; SameSite=None
tr_request_uri=%2Fl%2FGA-OTPO-LPL45-07-01ar%2Folymp%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12%26pixel%3D1; Path=/; Domain=olymptrade.com; Expires=Wed, 08 Mar 2023 20:59:10 GMT; HttpOnly; Secure; SameSite=None
tr_traffic=%7B%22created_at%22%3A%222023-02-08+23%3A59%3A10%22%2C%22ref_channel%22%3A%22affiliate%22%2C%22land%22%3A%22GA-OTPO-LPL45-07-01ar%22%2C%22affiliate_id%22%3A1503224%2C%22affiliate_channel%22%3A%22Egypt24-12%22%2C%22affiliate_channel2%22%3A%22Egypt24-12%22%2C%22guest_id%22%3A%221711982478634835301778428147221430167588995031369135241115454135%22%7D; Path=/; Domain=olymptrade.com; Expires=Wed, 08 Mar 2023 20:59:10 GMT; HttpOnly; Secure; SameSite=None
x-status-code: 200
date: Wed, 08 Feb 2023 20:59:10 GMT
content-length: 0
strict-transport-security: max-age=63072000; includeSubdomains; preload
api.olymptrade.com/v6/platform/values
185.104.210.32200 OK 258 B URL HTTP/1.1 api.olymptrade.com/v6/platform/values
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
File type JSON data\012- , ASCII text, with very long lines (491), with no line terminators
Hash 629142302cb60ad5a10c218d3f40a69d
7512a776902b88e080aa121991f73b27b3464cdd
23790d5ae357636e0bb86c1529ca9900fdfad19bc927d5a93d2b8592a760e1ae
POST /v6/platform/values HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
X-Request-Project: otp
X-Request-Type: Api-Request
X-Requested-With: XMLHttpRequest
Content-Type: text/plain;charset=UTF-8
Origin: https://static.olymptrade.com
Content-Length: 25
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
server: nginx
content-type: application/json
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
cache-control: no-cache
x-app-trace-id: cae9f882-ebc3-c7b8-678c-3073b6c8d363
set-cookie: guest_id=1000002276521184276816115326358021675889950311900391468725341819; expires=Sat, 05-Feb-2033 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
date: Wed, 08 Feb 2023 20:59:10 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
api.olymptrade.com/v3/user/set-session
185.104.210.32200 OK 20 B URL HTTP/1.1 api.olymptrade.com/v3/user/set-session
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
OPTIONS /v3/user/set-session HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-request-project,x-request-type
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Cache-Control: max-age=0
HTTP/1.1 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:10 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-Request-Type, X-Request-Project, X-App-Name, X-App-Version, X-Signature, X-CID-Ver, X-CID-App, X-CID-OS, X-CID-Device
access-control-max-age: 1728000
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
api.olymptrade.com/v1/cabinet/payment-systems
185.104.210.32200 OK 1.1 kB URL HTTP/1.1 api.olymptrade.com/v1/cabinet/payment-systems
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
File type JSON data\012- , ASCII text, with very long lines (3863), with no line terminators
Hash 7e7c8415d809d5a085c640fcfb95e44e
f1081f3ea4745388cadfd7b2ed1de1d195d12965
41edd98688433463f38e00e40a23670f80b9b7a64323243b7bb8c06d1596211c
POST /v1/cabinet/payment-systems HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Content-Type: application/json; charset=utf-8
X-Request-Type: Api-Request
X-Request-Project: bo
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/1.1 200 OK
server: nginx
content-type: application/json
transfer-encoding: chunked
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
cache-control: no-cache
x-app-trace-id: 3bdcf01e-e9fe-d4a8-ebbf-94fd570345d0
set-cookie: guest_id=1000426193130620681848815326358021675889950222282374113226923519; expires=Sat, 05-Feb-2033 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
date: Wed, 08 Feb 2023 20:59:10 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubdomains; preload
api.olymptrade.com/v3/user/set-session
185.104.210.32204 No Content 0 B URL HTTP/1.1 api.olymptrade.com/v3/user/set-session
IP 185.104.210.32:0
ASN #200449 Qrator Labs CZ s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v3/user/set-session HTTP/1.1
Host: api.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Content-Type: application/json; charset=UTF-8
X-Request-Type: Api-Request
X-Request-Project: bo
Origin: https://static.olymptrade.com
Content-Length: 18
Connection: keep-alive
Cookie: _ga=GA1.2.b665166931335.1675890005860
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Content
server: nginx
content-type: text/html; charset=UTF-8
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
cache-control: no-cache
set-cookie: lang=ar_AE; expires=Sat, 18-Feb-2023 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
guest_id=1000608752791432966259915326358020167588995039234004009176208452; expires=Sat, 05-Feb-2033 20:59:10 GMT; path=/; domain=.olymptrade.com; secure; httponly; samesite=none
x-app-trace-id: c165335b-7c4b-9b82-3de2-0d80c4b06c0c
date: Wed, 08 Feb 2023 20:59:10 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubdomains; preload
static.olymptrade.com/lands/common/favicons/android-chrome-192x192.png
8.254.252.244200 OK 4.5 kB URL HTTP/1.1 static.olymptrade.com/lands/common/favicons/android-chrome-192x192.png
IP 8.254.252.244:0
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 7dffb60985bcdfa937a1b02928b099c6
eda467cd1f19e90e63d103ff88e077d5f17081eb
fc91f2095894423faa63fb59b3889dd5c26106b07bc8702ce6d81656806b24f2
GET /lands/common/favicons/android-chrome-192x192.png HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Cookie: _ga=GA1.2.b665166931335.1675890005860; checked=1; enterdate=2023-02-08+23%3A59%3A10; guest_id=1000608752791432966259915326358020167588995039234004009176208452; tr_http_referer=https%3A%2F%2Fstatic.olymptrade.com%2F; tr_request_uri=%2Fl%2FGA-OTPO-LPL45-07-01ar%2Folymp%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12%26pixel%3D1; tr_traffic=%7B%22created_at%22%3A%222023-02-08+23%3A59%3A10%22%2C%22ref_channel%22%3A%22affiliate%22%2C%22land%22%3A%22GA-OTPO-LPL45-07-01ar%22%2C%22affiliate_id%22%3A1503224%2C%22affiliate_channel%22%3A%22Egypt24-12%22%2C%22affiliate_channel2%22%3A%22Egypt24-12%22%2C%22guest_id%22%3A%221711982478634835301778428147221430167588995031369135241115454135%22%7D; lang=ar_AE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:30 GMT
Content-Type: image/png
Content-Length: 4471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 09:31:48 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1663057348/atime:1663060993/md5:4c86e22922942a5e43120bae7eaa20a3/ctime:1663060993
x-amz-request-id: d1f0bb40-5792-452d-b79a-7403fb702b78
X-Clv-Request-Id: d1f0bb40-5792-452d-b79a-7403fb702b78
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"4c86e22922942a5e43120bae7eaa20a3"
Access-Control-Allow-Origin: *
Age: 102160
Accept-Ranges: bytes
static.olymptrade.com/lands/common/favicons/favicon-16x16.png
8.254.252.244200 OK 595 B URL HTTP/1.1 static.olymptrade.com/lands/common/favicons/favicon-16x16.png
IP 8.254.252.244:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash ae728cf81e82cf17cffa0c992b628370
a8c26715f8b213cbd1425c4a7b4388b04d28bdc0
37974ef7896b449b23ee8a90119437b442efc406bc73846ee01f1c4b8fa091c6
GET /lands/common/favicons/favicon-16x16.png HTTP/1.1
Host: static.olymptrade.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/lands/GA-OTPO-LPL45-07-01ar/index.html?af_siteid=GA-OTPO-LPL45-07-01ar&affiliate_id=1503224&lref=&lrefch=affiliate&pixel=1&subid1=Egypt24-12&subid2=Egypt24-12
Cookie: _ga=GA1.2.b665166931335.1675890005860; checked=1; enterdate=2023-02-08+23%3A59%3A10; guest_id=1000608752791432966259915326358020167588995039234004009176208452; tr_http_referer=https%3A%2F%2Fstatic.olymptrade.com%2F; tr_request_uri=%2Fl%2FGA-OTPO-LPL45-07-01ar%2Folymp%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12%26pixel%3D1; tr_traffic=%7B%22created_at%22%3A%222023-02-08+23%3A59%3A10%22%2C%22ref_channel%22%3A%22affiliate%22%2C%22land%22%3A%22GA-OTPO-LPL45-07-01ar%22%2C%22affiliate_id%22%3A1503224%2C%22affiliate_channel%22%3A%22Egypt24-12%22%2C%22affiliate_channel2%22%3A%22Egypt24-12%22%2C%22guest_id%22%3A%221711982478634835301778428147221430167588995031369135241115454135%22%7D; lang=ar_AE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 16:36:30 GMT
Content-Type: image/png
Content-Length: 595
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 09:31:53 GMT
Server: Cleversafe
Vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/uname:jenkins/gid:1006/mode:33188/mtime:1663057348/atime:1663060993/md5:5e2b8e2aa33b9f775d3d8a0a776eb184/ctime:1663060993
x-amz-request-id: 6462688f-2d76-4911-842f-0e481546d21e
X-Clv-Request-Id: 6462688f-2d76-4911-842f-0e481546d21e
X-Clv-S3-Version: 2.5
Content-Encoding: gzip
ETag: W/"5e2b8e2aa33b9f775d3d8a0a776eb184"
Access-Control-Allow-Origin: *
Age: 102160
Accept-Ranges: bytes
push.services.mozilla.com/
35.155.255.170101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.155.255.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yOkSIUoMYygpFYOkToV6CQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Geubk+4pX7HNP81L0x0TPGPmKWI=
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
216.58.207.228302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP 216.58.207.228:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&fmt=3&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&ct_cookie_present=1
172.217.21.162200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&fmt=3&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&ct_cookie_present=1
IP 172.217.21.162:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&fmt=3&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 21:14:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/852038782/?random=1675890006458&cv=11&fst=1675890006458&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&auid=2127114290.1675890006&rfmt=3&fmt=4
172.217.21.162200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/852038782/?random=1675890006458&cv=11&fst=1675890006458&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&auid=2127114290.1675890006&rfmt=3&fmt=4
IP 172.217.21.162:0
File type ASCII text, with very long lines (2471), with no line terminators
Hash fa446c294702a680df7e1a8bb447f126
3eb67395c968086612898b4f503a36246a58c91d
a347c23868ac5df83244149ccdbd2976fd2729e832a2003b81817568d297008a
GET /pagead/viewthroughconversion/852038782/?random=1675890006458&cv=11&fst=1675890006458&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&auid=2127114290.1675890006&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1020
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 21:14:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
10411795.fls.doubleclick.net/activityi;src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12?
142.250.74.70200 OK 358 B URL HTTP/2 10411795.fls.doubleclick.net/activityi;src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (684), with no line terminators
Hash d1928499d6fde8bfb1c73e361fd79235
1e6dd2137093ae2ac2391abc307d22f912d1d072
e258ef1f47165ca4b80db619ac65678e860e9bdb4e6c0bed9a1333effcfd397b
GET /activityi;src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12? HTTP/1.1
Host: 10411795.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 358
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 21:14:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/852038782/?random=1675890006458&cv=11&fst=1675890000000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&fmt=3&is_vtc=1&random=1592536700&rmt_tld=0&ipr=y
216.58.207.228200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/852038782/?random=1675890006458&cv=11&fst=1675890000000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&fmt=3&is_vtc=1&random=1592536700&rmt_tld=0&ipr=y
IP 216.58.207.228:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/852038782/?random=1675890006458&cv=11&fst=1675890000000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&fmt=3&is_vtc=1&random=1592536700&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5948
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Last-Modified: Wed, 08 Feb 2023 19:20:02 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
10411795.fls.doubleclick.net/activityi;src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12?
142.250.74.70200 OK 357 B URL HTTP/2 10411795.fls.doubleclick.net/activityi;src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (684), with no line terminators
Hash b247e26fbf0f5ebfa6993da8330e3474
40d6b4a494d705e01be3fbf99eaa389b32839d42
89cf8fa2506d57f09d55b7e5886ccf5f9568d859a44ea460ac6df8db5424edd3
GET /activityi;src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12? HTTP/1.1
Host: 10411795.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 357
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 21:14:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
157.240.205.11200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.205.11:0
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: L2+wrMiRFFW+tByx8no1gRKTONT2EoLyNIeplh6cMwO5LQ95rletDdpCIs0MDX3xbc0T6tawDNykSq5qjNSM6Q==
content-length: 27843
x-fb-trip-id: 1679558926
date: Wed, 08 Feb 2023 20:59:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5948
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Last-Modified: Wed, 08 Feb 2023 19:20:02 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SN8XZNJ2M7&cid=b665166931335.1675890005860>m=45je3260&aip=1&z=399892012
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SN8XZNJ2M7&cid=b665166931335.1675890005860>m=45je3260&aip=1&z=399892012
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-SN8XZNJ2M7&cid=b665166931335.1675890005860>m=45je3260&aip=1&z=399892012 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
142.250.74.163200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP 142.250.74.163:0
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/852038782/?random=1675890006460&cv=11&fst=1675890006460&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&label=vkCWCKbV5dMBEP6opJYD&hn=www.google.com&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&value=0&bttype=purchase&auid=2127114290.1675890006&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/852038782/?random=1675890006458&cv=11&fst=1675890000000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&fmt=3&is_vtc=1&random=1592536700&rmt_tld=1&ipr=y
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/852038782/?random=1675890006458&cv=11&fst=1675890000000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&fmt=3&is_vtc=1&random=1592536700&rmt_tld=1&ipr=y
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/852038782/?random=1675890006458&cv=11&fst=1675890000000&bg=ffffff&guid=ON&async=1>m=45He3260&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tiba=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&fmt=3&is_vtc=1&random=1592536700&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-54693962-1&cid=b665166931335.1675890005860&jid=2147296210&gjid=923576885&_gid=86522461.1675890007&_u=YCDAgEABAAAAAEAEK~&z=1561338595
64.233.162.154200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-54693962-1&cid=b665166931335.1675890005860&jid=2147296210&gjid=923576885&_gid=86522461.1675890007&_u=YCDAgEABAAAAAEAEK~&z=1561338595
IP 64.233.162.154:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-54693962-1&cid=b665166931335.1675890005860&jid=2147296210&gjid=923576885&_gid=86522461.1675890007&_u=YCDAgEABAAAAAEAEK~&z=1561338595 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://static.olymptrade.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
142.250.74.66200 OK 370 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
IP 142.250.74.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (683), with no line terminators
Hash 84165408f564fe6d70d15c3a273198d9
8f601e61d01a5ad2d264aa89082009d7bde21591
9b23c1c82b5a7c084c356d1dd6b69d8fdc705b538b61e74c868307d0d4b48b73
GET /ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10411795.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 370
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
142.250.74.66200 OK 362 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
IP 142.250.74.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (683), with no line terminators
Hash d973346ebd8e6c5cd396a7feb3e14132
4f917a8a56e8e296ccce22d5c18d23784a42d0c5
ea3b87a4d0cac53862ff528ed3b0c85a372e77e45648ad1facbdee25e1928465
GET /ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10411795.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 362
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
142.250.74.98302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
IP 142.250.74.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://10411795.fls.doubleclick.net/ddm/fls/r/src=10411795;type=gtmwg0;cat=gtm_w007;ord=7578965188142;gtm=45He3260;auiddc=2127114290.1675890006;u26=;u27=b665166931335.1675890005860;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
142.250.74.98302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
IP 142.250.74.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://10411795.fls.doubleclick.net/ddm/fls/r/src=10411795;type=gtmwg0;cat=gtm_w001;ord=7491797227738;gtm=45He3260;auiddc=2127114290.1675890006;u27=b665166931335.1675890005860;u26=;~oref=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash cf49eabf6c39227090fe9c84259813a3
af588e3b99547bf1b73111ad7021194470040614
5fbee01dfdae355f394e11104227264533acc86778df34f37715d37c601a9721
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion.js
216.58.207.194200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP 216.58.207.194:0
File type ASCII text, with very long lines (2772)
Hash 671f762c05b34ce8c33acb0f5cc14533
c3ddbfedc40bfb4b1cb4957aee8c287b4f8a2ccb
b21debe44bbe7a05d91851626ce5db58232d817aa2974f826d387da6e4b75618
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10411795.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 08 Feb 2023 20:59:10 GMT
expires: Wed, 08 Feb 2023 20:59:10 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6388606791587927312
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16813
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 7980999daf055fc9e21ce2d8663483ab
3e584c1676ed7789a50dc5c9391653a0b96a9bab
44143d9428bae54918244e95d8f31dfea0865929c0a0805c0f328a2a7eb78fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion/527240054/?random=1675890007026&cv=9&fst=1675890007026&num=1&npa=1&label=_jnUCP3_9uoCEPaWtPsB&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F10411795.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D10411795%3Btype%3Dgtmwg0%3Bcat%3Dgtm_w007%3Bord%3D7578965188142%3Bgtm%3D45He3260%3Bauiddc%3D2127114290.1675890006%3Bu26%3D%3Bu27%3Db665166931335.1675890005860%3B~oref%3Dhttps%253A%252F%252Fstatic.olymptrade.com%252Flands%252FGA-OTPO-LPL45-07-01ar%252Findex.html%253Faf_siteid%253DGA-OTPO-LPL45-07-01ar%2526affiliate_id%253D1503224%2526lref%253D%2526lrefch%253Daffiliate%2526pixel%253D1%2526subid1%253DEgypt24-12%2526subid2%253DEgypt24-12&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
216.58.207.194200 OK 1.3 kB URL HTTP/2 www.googleadservices.com/pagead/conversion/527240054/?random=1675890007026&cv=9&fst=1675890007026&num=1&npa=1&label=_jnUCP3_9uoCEPaWtPsB&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F10411795.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D10411795%3Btype%3Dgtmwg0%3Bcat%3Dgtm_w007%3Bord%3D7578965188142%3Bgtm%3D45He3260%3Bauiddc%3D2127114290.1675890006%3Bu26%3D%3Bu27%3Db665166931335.1675890005860%3B~oref%3Dhttps%253A%252F%252Fstatic.olymptrade.com%252Flands%252FGA-OTPO-LPL45-07-01ar%252Findex.html%253Faf_siteid%253DGA-OTPO-LPL45-07-01ar%2526affiliate_id%253D1503224%2526lref%253D%2526lrefch%253Daffiliate%2526pixel%253D1%2526subid1%253DEgypt24-12%2526subid2%253DEgypt24-12&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2246), with no line terminators
Hash f603025b570170a4d91298ab99561d2f
e9772082af591b35a51e5116b435ab9b1df07dfe
fb9188c06bf9276fc44c040a5c336c8e3c96bdcf2d995eccdbeabae94bf25481
GET /pagead/conversion/527240054/?random=1675890007026&cv=9&fst=1675890007026&num=1&npa=1&label=_jnUCP3_9uoCEPaWtPsB&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F10411795.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D10411795%3Btype%3Dgtmwg0%3Bcat%3Dgtm_w007%3Bord%3D7578965188142%3Bgtm%3D45He3260%3Bauiddc%3D2127114290.1675890006%3Bu26%3D%3Bu27%3Db665166931335.1675890005860%3B~oref%3Dhttps%253A%252F%252Fstatic.olymptrade.com%252Flands%252FGA-OTPO-LPL45-07-01ar%252Findex.html%253Faf_siteid%253DGA-OTPO-LPL45-07-01ar%2526affiliate_id%253D1503224%2526lref%253D%2526lrefch%253Daffiliate%2526pixel%253D1%2526subid1%253DEgypt24-12%2526subid2%253DEgypt24-12&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10411795.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1273
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion/527240054/?random=1675890007032&cv=9&fst=1675890007032&num=1&npa=1&label=fTN9CIa6oeoBEPaWtPsB&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F10411795.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D10411795%3Btype%3Dgtmwg0%3Bcat%3Dgtm_w001%3Bord%3D7491797227738%3Bgtm%3D45He3260%3Bauiddc%3D2127114290.1675890006%3Bu27%3Db665166931335.1675890005860%3Bu26%3D%3B~oref%3Dhttps%253A%252F%252Fstatic.olymptrade.com%252Flands%252FGA-OTPO-LPL45-07-01ar%252Findex.html%253Faf_siteid%253DGA-OTPO-LPL45-07-01ar%2526affiliate_id%253D1503224%2526lref%253D%2526lrefch%253Daffiliate%2526pixel%253D1%2526subid1%253DEgypt24-12%2526subid2%253DEgypt24-12&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
216.58.207.194200 OK 1.3 kB URL HTTP/2 www.googleadservices.com/pagead/conversion/527240054/?random=1675890007032&cv=9&fst=1675890007032&num=1&npa=1&label=fTN9CIa6oeoBEPaWtPsB&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F10411795.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D10411795%3Btype%3Dgtmwg0%3Bcat%3Dgtm_w001%3Bord%3D7491797227738%3Bgtm%3D45He3260%3Bauiddc%3D2127114290.1675890006%3Bu27%3Db665166931335.1675890005860%3Bu26%3D%3B~oref%3Dhttps%253A%252F%252Fstatic.olymptrade.com%252Flands%252FGA-OTPO-LPL45-07-01ar%252Findex.html%253Faf_siteid%253DGA-OTPO-LPL45-07-01ar%2526affiliate_id%253D1503224%2526lref%253D%2526lrefch%253Daffiliate%2526pixel%253D1%2526subid1%253DEgypt24-12%2526subid2%253DEgypt24-12&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2246), with no line terminators
Hash 9a8bfa29d729c016ebc75134db29efda
dd18e2ba003db0fc0cdc3ca608af3dc8739b77bb
5315ca843c66fd5dea788cffced60b6150c5a39c2ab750260a4446e31eaec2d6
GET /pagead/conversion/527240054/?random=1675890007032&cv=9&fst=1675890007032&num=1&npa=1&label=fTN9CIa6oeoBEPaWtPsB&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F10411795.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D10411795%3Btype%3Dgtmwg0%3Bcat%3Dgtm_w001%3Bord%3D7491797227738%3Bgtm%3D45He3260%3Bauiddc%3D2127114290.1675890006%3Bu27%3Db665166931335.1675890005860%3Bu26%3D%3B~oref%3Dhttps%253A%252F%252Fstatic.olymptrade.com%252Flands%252FGA-OTPO-LPL45-07-01ar%252Findex.html%253Faf_siteid%253DGA-OTPO-LPL45-07-01ar%2526affiliate_id%253D1503224%2526lref%253D%2526lrefch%253Daffiliate%2526pixel%253D1%2526subid1%253DEgypt24-12%2526subid2%253DEgypt24-12&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10411795.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 20:59:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1279
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 237e9a39e1bd7a25956bdb715510817d
1fc3abecce964a80b357dd0122975e80aeb03b69
6c187d53f7862bfb50c3a53ff08f2f8824c2545cf60a7051525e61887c06d2fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2083
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Last-Modified: Wed, 08 Feb 2023 20:24:28 GMT
Server: ECS (amb/6B91)
X-Cache: HIT
Content-Length: 471
on.the-cdn.com/payment-methods/icons/v1/neteller.57a2e7f72a0953ecc11a7f8526c3ce55.svg
8.254.252.213200 OK 523 B URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/neteller.57a2e7f72a0953ecc11a7f8526c3ce55.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (906), with no line terminators
Hash 51ce3d0aca1fb1cde20cbfbb6fb77e6c
c881dc8ada306a89e0bcbeb187c8408361049206
bf6a480d9711cf87e06a15da1f561922ebb1d7df6a87f712a74246d6c1129223
GET /payment-methods/icons/v1/neteller.57a2e7f72a0953ecc11a7f8526c3ce55.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 523
last-modified: Tue, 30 Nov 2021 16:48:26 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-mtime: 1631878266.856758
x-amz-request-id: 6aba9e94-64a8-4eb7-af8a-96b1f285cb7d
x-clv-request-id: 6aba9e94-64a8-4eb7-af8a-96b1f285cb7d
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"57a2e7f72a0953ecc11a7f8526c3ce55"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 12980494
accept-ranges: bytes
X-Firefox-Spdy: h2
on.the-cdn.com/payment-methods/icons/v1/advcash.2a0426d1d1327abc01236710a36d7468.svg
8.254.252.213200 OK 652 B URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/advcash.2a0426d1d1327abc01236710a36d7468.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1242), with no line terminators
Hash 8d328c62f5f77b1caf72010077f23bf8
a9e0bab009a6e69a2a097c1d172444919f411e71
b096e5e4f3d81a81ce8f6dadea0facbfa3e157b9a2c0bf3ef65ccb060da91cea
GET /payment-methods/icons/v1/advcash.2a0426d1d1327abc01236710a36d7468.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 652
last-modified: Tue, 30 Nov 2021 16:48:20 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-mtime: 1631878265.719644
x-amz-request-id: 57e82c21-678e-4ddd-9b56-baccccd268bf
x-clv-request-id: 57e82c21-678e-4ddd-9b56-baccccd268bf
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"2a0426d1d1327abc01236710a36d7468"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 12307102
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 207e0c7ace365f3b1f8418e588a24ee4
9301024b4b23719e95694e95de19bdbbce069f28
a42dbb63feaa91611d1d4982b65d0c4e5a6b2b5e26e3124c8d105b5386bcb706
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4257
Cache-Control: max-age=85736
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Etag: "63e2a866-1d7"
Expires: Thu, 09 Feb 2023 20:48:07 GMT
Last-Modified: Tue, 07 Feb 2023 19:37:10 GMT
Server: ECS (amb/6B9D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 237e9a39e1bd7a25956bdb715510817d
1fc3abecce964a80b357dd0122975e80aeb03b69
6c187d53f7862bfb50c3a53ff08f2f8824c2545cf60a7051525e61887c06d2fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4112
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Etag: "63e2a866-1d7"
Last-Modified: Wed, 08 Feb 2023 19:50:39 GMT
Server: ECS (amb/6B8E)
X-Cache: HIT
Content-Length: 471
on.the-cdn.com/payment-methods/icons/v1/perfect_money.d654c40097bc61744e709ff6a93680f4.svg
8.254.252.213200 OK 6.5 kB URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/perfect_money.d654c40097bc61744e709ff6a93680f4.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (14229), with no line terminators
Hash ce8d59f3647b13123ccff46f4abaf2a3
d7a8c4c1c8e02186b236c234507f646368e8967b
8daa2fe7a8104aec96596b24a387112f79bf62ce62d84e5a374a601823552106
GET /payment-methods/icons/v1/perfect_money.d654c40097bc61744e709ff6a93680f4.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 6456
last-modified: Tue, 30 Nov 2021 16:48:28 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-mtime: 1631878267.207694482
x-amz-request-id: b8408ace-bfd5-4747-9000-e29dfa0b0ad6
x-clv-request-id: b8408ace-bfd5-4747-9000-e29dfa0b0ad6
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"d654c40097bc61744e709ff6a93680f4"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 12303160
accept-ranges: bytes
X-Firefox-Spdy: h2
on.the-cdn.com/payment-methods/icons/v1/cup.856932e0ab6a0bee0557a6d2b70b388c.svg
8.254.252.213200 OK 1.4 kB URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/cup.856932e0ab6a0bee0557a6d2b70b388c.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3128), with no line terminators
Hash ac70517f85e2682d35642762385638c3
a983296d753f080e3aa4dd113e4c0f8e48c1fb5b
80eaf4cef63b5700d3203a79a7cff7c816e2c1686e125d816002222702935eb8
GET /payment-methods/icons/v1/cup.856932e0ab6a0bee0557a6d2b70b388c.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 1384
last-modified: Tue, 30 Nov 2021 16:48:23 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-mtime: 1631878266.236533013
x-amz-request-id: 1a8a18a3-8580-4b1c-a494-05f1c5fd58de
x-clv-request-id: 1a8a18a3-8580-4b1c-a494-05f1c5fd58de
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"856932e0ab6a0bee0557a6d2b70b388c"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 5328296
accept-ranges: bytes
X-Firefox-Spdy: h2
on.the-cdn.com/payment-methods/icons/v1/card.f5612a452b06ed4b0dba5006246de83b.svg
8.254.252.213200 OK 1.8 kB URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/card.f5612a452b06ed4b0dba5006246de83b.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3429), with no line terminators
Hash 9fe8f61ef497a5bcaa5f0d27ce142e48
43ab257ed64e277169b056b74d2bc04d675e54ce
fcef83982c1e0254ba3f80423e1f7c2284267c0c10cd21a3b45aeaa1d7b1038d
GET /payment-methods/icons/v1/card.f5612a452b06ed4b0dba5006246de83b.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 1790
last-modified: Tue, 22 Feb 2022 15:39:04 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/gid:1006/mode:33188/mtime:1645544324/atime:1645544326/md5:f5612a452b06ed4b0dba5006246de83b/ctime:1645544326
x-amz-request-id: 9aabe0c7-77ee-4c7a-ae38-96029dbfc862
x-amz-storage-class: vault
x-clv-request-id: 9aabe0c7-77ee-4c7a-ae38-96029dbfc862
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"f5612a452b06ed4b0dba5006246de83b"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 7526604
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 237e9a39e1bd7a25956bdb715510817d
1fc3abecce964a80b357dd0122975e80aeb03b69
6c187d53f7862bfb50c3a53ff08f2f8824c2545cf60a7051525e61887c06d2fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Etag: "63e2a866-1d7"
Server: ECS (amb/6B73)
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 237e9a39e1bd7a25956bdb715510817d
1fc3abecce964a80b357dd0122975e80aeb03b69
6c187d53f7862bfb50c3a53ff08f2f8824c2545cf60a7051525e61887c06d2fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=167876
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Etag: "63e3f9e3-1d7"
Expires: Fri, 10 Feb 2023 19:37:07 GMT
Last-Modified: Wed, 08 Feb 2023 19:37:07 GMT
Server: nginx
Content-Length: 471
on.the-cdn.com/payment-methods/icons/v1/binance_pay.c28fb072a7b2d32cfedd2afb201ae6e8.svg
8.254.252.213200 OK 1.3 kB URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/binance_pay.c28fb072a7b2d32cfedd2afb201ae6e8.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2847), with no line terminators
Hash 070dd7d016424192176e02d759ed9abb
871287496ac32059eee9a27f86a4b175026ec807
adbd05abe96f7ec7776d283144f1c4529cc51af6f195d2130f4a65ce6fd8b9fd
GET /payment-methods/icons/v1/binance_pay.c28fb072a7b2d32cfedd2afb201ae6e8.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 1305
last-modified: Fri, 27 May 2022 09:17:09 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-s3cmd-attrs: uid:1006/gid:1006/mode:33188/mtime:1653643017/atime:1653643018/md5:c28fb072a7b2d32cfedd2afb201ae6e8/ctime:1653643018
x-amz-request-id: 70cd925d-3d1b-42bd-839f-411915d39ec4
x-clv-request-id: 70cd925d-3d1b-42bd-839f-411915d39ec4
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"c28fb072a7b2d32cfedd2afb201ae6e8"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 5897440
accept-ranges: bytes
X-Firefox-Spdy: h2
on.the-cdn.com/payment-methods/icons/v1/skrill.8198e4faf631a46cf5afce9fd46049f8.svg
8.254.252.213200 OK 623 B URL HTTP/2 on.the-cdn.com/payment-methods/icons/v1/skrill.8198e4faf631a46cf5afce9fd46049f8.svg
IP 8.254.252.213:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1116), with no line terminators
Hash 394992664c42a87b93d5b5af37a48088
d2cd72d9bcc4ec2b948fb0f30a29cf572af0dc7d
c94fa75b7073669573a72379b99d3663f1aec191d4f1e10df8587909ad066d4d
GET /payment-methods/icons/v1/skrill.8198e4faf631a46cf5afce9fd46049f8.svg HTTP/1.1
Host: on.the-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: image/svg+xml
content-length: 623
last-modified: Tue, 30 Nov 2021 16:48:29 GMT
server: Cleversafe
vary: Accept-Encoding
x-amz-meta-mtime: 1631878267.617561
x-amz-request-id: 95b8d6a2-4301-4195-a8e9-60caf971740b
x-clv-request-id: 95b8d6a2-4301-4195-a8e9-60caf971740b
x-clv-s3-version: 2.5
content-encoding: gzip
etag: W/"8198e4faf631a46cf5afce9fd46049f8"
access-control-allow-origin: *
access-control-allow-headers: content-type
cache-control: max-age=5256000
access-control-allow-methods: GET,HEAD,OPTIONS,TRACE
age: 5748689
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-SN8XZNJ2M7>m=45je3260&_p=1188782085&_gaz=1&cid=b665166931335.1675890005860&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675890006&sct=1&seg=0&dl=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&dt=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&en=page_view&_fv=1&_ss=2
216.239.32.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-SN8XZNJ2M7>m=45je3260&_p=1188782085&_gaz=1&cid=b665166931335.1675890005860&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675890006&sct=1&seg=0&dl=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&dt=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&en=page_view&_fv=1&_ss=2
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-SN8XZNJ2M7>m=45je3260&_p=1188782085&_gaz=1&cid=b665166931335.1675890005860&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675890006&sct=1&seg=0&dl=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&dt=Olymp%20Trade%20%E2%80%94%20%D9%85%D9%86%D8%B5%D8%A9%20%D8%A7%D9%84%D8%AA%D8%AF%D8%A7%D9%88%D9%84%20%D8%B9%D8%A8%D8%B1%20%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA&en=page_view&_fv=1&_ss=2 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://static.olymptrade.com
date: Wed, 08 Feb 2023 20:59:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1030052410533603&ev=PageView&dl=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&rl=&if=false&ts=1675890007281&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675890007279.475357638&it=1675890006723&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1030052410533603&ev=PageView&dl=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&rl=&if=false&ts=1675890007281&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675890007279.475357638&it=1675890006723&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1030052410533603&ev=PageView&dl=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&rl=&if=false&ts=1675890007281&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675890007279.475357638&it=1675890006723&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 08 Feb 2023 20:59:11 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/xbW2In3LuUA
216.58.211.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/xbW2In3LuUA
IP 216.58.211.3:0
Hash 2683bb34e4286698560c111d4fad96e4
bb5421a47f684e5004abc5a6c49426f525d178ae
c14d59b78951b02dea2f81504143d5966afce640226ff62118411011f0af7737
POST /s/gts1d4/xbW2In3LuUA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sc-static.net/scevent.min.js
54.230.82.240200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP 54.230.82.240:0
File type ASCII text, with very long lines (31034), with no line terminators
Hash aebfe79a43ab3b40d473082cb240bfe7
e176237cc68803a9dfc6ac7f5db919a6c8f4c5c3
a562e759047435340c5e9816df15a44f08f49c04482365e139a1591f1d1507ac
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13295
server: CloudFront
date: Wed, 08 Feb 2023 20:59:11 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 09 Feb 2023 20:26:17 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: GeneratedResponse from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P71UfCHyxP1vMx4zrqsHmvFZdT68IOp444dndxRmVTz30fKgPphYvg==
X-Firefox-Spdy: h2
api.eu1.exponea.com/js/exponea.min.js
35.241.13.32200 OK 96 kB URL HTTP/2 api.eu1.exponea.com/js/exponea.min.js
IP 35.241.13.32:0
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 6d5833bbc19ee268783da4e451284aa8
537227239631f77dc07483c67a786f14d93971ae
26e91b3f8af9d04cf168f6611224c60596714d78d19d540f82a8ee2724332ac7
GET /js/exponea.min.js HTTP/1.1
Host: api.eu1.exponea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: application/javascript
content-length: 95588
last-modified: Thu, 12 Jan 2023 11:53:40 GMT
etag: "63bff4c4-17564"
content-encoding: gzip
expires: Wed, 08 Feb 2023 21:59:11 GMT
cache-control: max-age=3600
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/xbW2In3LuUA
216.58.211.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/xbW2In3LuUA
IP 216.58.211.3:0
Hash 2683bb34e4286698560c111d4fad96e4
bb5421a47f684e5004abc5a6c49426f525d178ae
c14d59b78951b02dea2f81504143d5966afce640226ff62118411011f0af7737
POST /s/gts1d4/xbW2In3LuUA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2719
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Last-Modified: Wed, 08 Feb 2023 20:13:52 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4729
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Last-Modified: Wed, 08 Feb 2023 19:40:22 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4120
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Last-Modified: Wed, 08 Feb 2023 19:50:31 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=6f652967-68c0-4b51-856e-73764e7ec56a&u_scsid=65eb4660-81fa-4190-8210-7ddbb73f9bf0&u_sclid=2931e3b3-8915-4811-9983-7bfb1f3f0a42
35.190.43.134200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=6f652967-68c0-4b51-856e-73764e7ec56a&u_scsid=65eb4660-81fa-4190-8210-7ddbb73f9bf0&u_sclid=2931e3b3-8915-4811-9983-7bfb1f3f0a42
IP 35.190.43.134:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=6f652967-68c0-4b51-856e-73764e7ec56a&u_scsid=65eb4660-81fa-4190-8210-7ddbb73f9bf0&u_sclid=2931e3b3-8915-4811-9983-7bfb1f3f0a42 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
35.190.43.134200 OK 68 B IP 35.190.43.134:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 580
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
access-control-allow-origin: https://static.olymptrade.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBiQ0AIAgEsIlIJAcnjoMPUzC8LSot7VAuHWJAyE4t4YwsEK/UupXTI9Zy7fEB9AQhczIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 10
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2719
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:11 GMT
Last-Modified: Wed, 08 Feb 2023 20:13:52 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CAAANOBC77U1BL87MPLG&lib=ttq
23.36.79.32200 OK 1.1 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CAAANOBC77U1BL87MPLG&lib=ttq
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2295)
Hash a33e96ec7a4f1982039e217d1e76e594
62dcbb38d723eedbc565af56e6c9a28f4ec42320
fe3ec8a14c7faf4e78ca19e3ce4c2c43f0d1c89586c7a15e261ac96a71cc6acc
GET /i18n/pixel/events.js?sdkid=CAAANOBC77U1BL87MPLG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230208205911973F29ED3C8803AD9F2D
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1bebd8b3f0fccf145bbb0d905d2f37963d11f70a5b4318f55fb64a2bd53145729c51d635d1dd8578be60f1c7525a459fc1f431d0584027ce979c98f0399600845eefed5f8d295f80149ff68d70a614642267
content-encoding: gzip
content-length: 1129
x-origin-response-time: 34,23.218.223.22
x-akamai-request-id: 97f4374.133c7a88
expires: Wed, 08 Feb 2023 20:59:11 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 20:59:11 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LTL6dlpkSNSShUadKF84WN5NK3; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-218-223-22.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=202, origin; dur=34, inner; dur=3
x-parent-response-time: 236,23.36.79.28
X-Firefox-Spdy: h2
api.eu1.exponea.com/webxp/projects/33ace430-64f8-11ed-be68-265fb44bab64/bundle
35.241.13.32200 OK 62 B URL HTTP/2 api.eu1.exponea.com/webxp/projects/33ace430-64f8-11ed-be68-265fb44bab64/bundle
IP 35.241.13.32:0
File type JSON data\012- , ASCII text, with no line terminators
Hash e44da972f6c9b5c44070cc1ddb3fb8a5
965a3ce9be4fbc3e37077a281250feb7775ee551
aa33051ba2a3301323982e62c219abf232290c5d100f5c9333aa78f4d47a06a3
GET /webxp/projects/33ace430-64f8-11ed-be68-265fb44bab64/bundle HTTP/1.1
Host: api.eu1.exponea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.olymptrade.com/
Origin: https://static.olymptrade.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: no-cache, max-age=0
content-encoding: br
content-type: application/json
etag: "ab30f84e46a8b11bb67a479056a7475f947e501894b8c8528e308f262acabc4d"
vary: Accept-Encoding
date: Wed, 08 Feb 2023 20:59:11 GMT
content-length: 62
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWNiNWY1N2YyMA.js
23.36.79.32200 OK 66 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWNiNWY1N2YyMA.js
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 2f7f8f3de4f656207b1bb5213b99a66d
b343bbee34df8e1dc54f54a1db764871aa9c7f66
a72933f6888f7fadba1bccc2fe4c61d8bc14449f9d1b90a25c37f4da994ecbc5
GET /i18n/pixel/static/main.MWNiNWY1N2YyMA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Cookie: _ttp=2LTL6dlpkSNSShUadKF84WN5NK3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 202302072108362D6BF22F360C4EC81120
x-tt-trace-host: 0149ac210ef9156de5d0158c58c245ffa55bb2e8ba1356745a09f7bc6b8966f5e06f89c329caee7d4e9fe96ecf3737ecfceb49e6e347b2712d51e070233335e49d13f993967b18f98fcc221253404f6149360f17d79399b99d17fc68a0026e1e1e
content-encoding: gzip
content-length: 66064
date: Wed, 08 Feb 2023 20:59:11 GMT
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 133c7ed7
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6435
Expires: Wed, 08 Feb 2023 22:46:26 GMT
Date: Wed, 08 Feb 2023 20:59:11 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6435
Expires: Wed, 08 Feb 2023 22:46:26 GMT
Date: Wed, 08 Feb 2023 20:59:11 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6435
Expires: Wed, 08 Feb 2023 22:46:26 GMT
Date: Wed, 08 Feb 2023 20:59:11 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6435
Expires: Wed, 08 Feb 2023 22:46:26 GMT
Date: Wed, 08 Feb 2023 20:59:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308abacb-8d5b-49bf-9e2b-59b6b40157cb.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308abacb-8d5b-49bf-9e2b-59b6b40157cb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2bf626b824fefec1ecaceb9243f2e5ec
f222976d76d889a0cd767bfd73075ee114c531ce
3f981850c6e6628245be7f7e26418d8b945dbeaf45e06492d8e2ee9409245195
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308abacb-8d5b-49bf-9e2b-59b6b40157cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12772
x-amzn-requestid: a4603c5c-c842-4a1d-bf09-550f160e1082
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7OEz8oAMFbOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c514-763b7ecf50411a4d13dd8a25;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ECAdRS7as57pL15HxK4Ep0YOho8Kba8RFhMVnXGdJuKYItQHNf2yHA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:53:57 GMT
age: 83114
etag: "f222976d76d889a0cd767bfd73075ee114c531ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8532aa1-7280-445c-9c4c-b562d09929d0.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8532aa1-7280-445c-9c4c-b562d09929d0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1d2eccb9280b851aa1725df5681f6bbd
b4e2b14ee5bc9ee6c9c05666c34b2d1b6ec425b5
c64ece16f4c550feb05db1bccbf74b49d839e77fea31893d48a3f0c267939c92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8532aa1-7280-445c-9c4c-b562d09929d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10328
x-amzn-requestid: 0b0b3fcd-416c-47ac-afa0-51be0ab85665
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PPlGGqoAMFxYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c596-219ee5023d71e4ce17d49233;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1uPNh-FvA8oI5ZuruNle0ATMPSsyl-_ZjLrUnPQJrogPVREc8wrHMQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:12:09 GMT
etag: "b4e2b14ee5bc9ee6c9c05666c34b2d1b6ec425b5"
content-type: image/jpeg
age: 82022
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7e586b8-49f5-40c3-b0d4-f6cdfc375a2b.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7e586b8-49f5-40c3-b0d4-f6cdfc375a2b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 18a84ae645223aba0709b5e16c0207f7
0b865e797846520ccc6fff6fb2ee38d8836bd2c0
b1e4868045f074a84e3de1d82ec3ae22f6d2a1a4131b2a40bcce7f3f5375aff7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7e586b8-49f5-40c3-b0d4-f6cdfc375a2b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9760
x-amzn-requestid: d5d8fdde-048f-4705-9fa4-99fd7d29d804
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f582DETSIAMFmEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a826-52a3b175584df1914260c8ae;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:11:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wUaruDuqNDIlR6CWz9G7DAofcvS7UNmtPM7C2ve-RRbp57J43rWPxQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:09:02 GMT
age: 60609
etag: "0b865e797846520ccc6fff6fb2ee38d8836bd2c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99e021e8-f66e-44fd-94ca-b30d25a8f5b4.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99e021e8-f66e-44fd-94ca-b30d25a8f5b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 544181f4aba24fc687a14522dd20f720
2b117270563b8c466ec774acce55271c38f6135b
607c45cc5b4726b92c8507988bbb90ac6a44a3cf22b290030d440266350099a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99e021e8-f66e-44fd-94ca-b30d25a8f5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4961
x-amzn-requestid: c3b9db99-726f-4473-a6b6-9cff0dceb949
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fswe1GeRoAMFiAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db612b-17b52fcd74e374f1104af709;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 07:07:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dSxTM3mmYK8cLOy5_x4o-lew1goEgwT4fBHi0pM-HSK_qBC6rDAlzg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 15:13:11 GMT
age: 20760
etag: "2b117270563b8c466ec774acce55271c38f6135b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db6e81972b8835dc48a0dae751ffde5f
826e2195cc52905cfed0bc4f01646290261113b6
720e6105b2ccc9cbc8fd005d53873ced5467a852c7a5041ce2ef96785c0d92f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbee0b552-d236-4fa2-b702-1571b09d3fd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6060
x-amzn-requestid: 80cbc454-e1b4-4e53-a3b6-3a5ac11920c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PPQEPNIAMFkqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c594-4539ebb17f27d88a47100a82;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 50lUvmFMZ01J2FrO3AId_U87zBmCWLFQSDsly_Cd9xF_hVIOWbf3JA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:14:43 GMT
age: 81868
etag: "826e2195cc52905cfed0bc4f01646290261113b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a39697d-4bed-4ebe-970d-d9950958f814.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a39697d-4bed-4ebe-970d-d9950958f814.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5de2fe3c9a2b091689a7213c4f781446
385fa88a857ba301f37ab56d72d11fb49abd8c6b
b64b11a68493fa304aa6102bf9b9ff11fab5e1536ecf768e4b0fa51470ae2293
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a39697d-4bed-4ebe-970d-d9950958f814.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13714
x-amzn-requestid: 8f776dba-4e5d-46e5-a3ac-459d86852375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PFjGNHIAMFrMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c556-74429dc755cc37672c68b58b;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Cf-MbK2WIFs3foM-_Ou5OUg7IS8ovfw-dHJnIpVUvpeAbMi-TeC5SA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:54:34 GMT
etag: "385fa88a857ba301f37ab56d72d11fb49abd8c6b"
content-type: image/jpeg
age: 83077
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_5f1fb.js
23.36.79.32200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_5f1fb.js
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 591b95fff14a7f5e64f9536c5c595274
e02712023e2c51a67054a78696ea2203ff6fc85e
7b19272e8214a2ee99bba815ca143cf20e761055d526fa500d82b81f1753c634
GET /i18n/pixel/static/identify_5f1fb.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Cookie: _ttp=2LTL6dlpkSNSShUadKF84WN5NK3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 202302072108362D6BF22F360C4EC8114B
x-tt-trace-host: 0149ac210ef9156de5d0158c58c245ffa55bb2e8ba1356745a09f7bc6b8966f5e06f89c329caee7d4e9fe96ecf3737ecfccf99cf284406cdeb69bc36a3048781d6910af8592b11c62fae4a30bea833e584e4d134275604f50d063fb2b5ac1f59e9
content-encoding: gzip
content-length: 30679
date: Wed, 08 Feb 2023 20:59:11 GMT
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 133c80cf
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
23.36.79.32200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 927
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Cookie: _ttp=2LTL6dlpkSNSShUadKF84WN5NK3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230208205912E469C19BE8C35734A143
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca17be2bc00999470dc1fdd781e7e4f202129399483ad95a3e589dea81458847a497132860cdab0d578324a055381572b2cb8ccaf499a50bcffa0be1e56bef46c00
expires: Wed, 08 Feb 2023 20:59:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 20:59:12 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=14, cdn-cache; desc=MISS, edge; dur=4, origin; dur=120
x-origin-response-time: 120,23.36.79.28
x-akamai-request-id: 133c816b
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
23.36.79.32200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 23.36.79.32:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 929
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Cookie: _ttp=2LTL6dlpkSNSShUadKF84WN5NK3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230208205911751E589E1B86F7DF92A0
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1bebd8b3f0fccf145bbb0d905d2f37963d114dacfa612ddf86295d9f91bc972306764c59ef22252dad2a96d7cb0a92fb1651a013902845f1b222261b7a1e3d0ff18fd8aeb7870e6c9f09aec5c2077e66f354
x-origin-response-time: 24,23.218.223.22
x-akamai-request-id: 97f40f8.133c815f
expires: Wed, 08 Feb 2023 20:59:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 20:59:12 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-cache-remote: TCP_MISS from a23-218-223-22.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=105, origin; dur=23, inner; dur=21
x-parent-response-time: 124,23.36.79.28
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
151.101.244.157200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP 151.101.244.157:0
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 08 Feb 2023 20:59:12 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash b12b1d05813a0ca7964c2f8f52d295f2
bb482e4e14e936fe7200e8208eccb2175be7330c
f81a9d9a37cbb2692ea757c962953f8d18ef2f11bf0625c79c5dea7b40643dec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1165
Cache-Control: max-age=141292
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:12 GMT
Etag: "63e38d7f-13a"
Expires: Fri, 10 Feb 2023 12:14:04 GMT
Last-Modified: Wed, 08 Feb 2023 11:54:39 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash b12b1d05813a0ca7964c2f8f52d295f2
bb482e4e14e936fe7200e8208eccb2175be7330c
f81a9d9a37cbb2692ea757c962953f8d18ef2f11bf0625c79c5dea7b40643dec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5193
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:12 GMT
Last-Modified: Wed, 08 Feb 2023 19:32:39 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 314
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 97244725fc76ece78f6028f501ed4564
5280bb4604e80604c5cf18e64383b5a213b0d9e9
2b862f5fcbd3c004826ec2ebd405c2891900bba6f677c018b897497f188acd11
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 20:59:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:02:42 GMT
ETag: "5280bb4604e80604c5cf18e64383b5a213b0d9e9"
Last-Modified: Wed, 08 Feb 2023 19:02:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 95
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796749a9c86e0b69-OSL
s1.kwai.net/kos/s101/nlav11187/pixel/events.js?sdkid=414260076515165032&lib=kwaiq
101.33.29.231200 OK 49 kB URL HTTP/1.1 s1.kwai.net/kos/s101/nlav11187/pixel/events.js?sdkid=414260076515165032&lib=kwaiq
IP 101.33.29.231:0
File type Unicode text, UTF-8 text, with very long lines (64894)
Hash 85f7bfa61174ec17f87d85cdcfd115f2
71a7d3cb966d0800ca5ac0916b90c73a2f06c9ea
78215cc7c06bd1a20cbbe6ada7a279b19ef13ceaf2509f4367e03d3c033edf40
GET /kos/s101/nlav11187/pixel/events.js?sdkid=414260076515165032&lib=kwaiq HTTP/1.1
Host: s1.kwai.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 05 Jan 2023 10:50:28 GMT
Content-Encoding: gzip
Etag: "08a9aa724c73ceffccb45637b9b7b2c2"
Content-Type: application/javascript
Date: Wed, 08 Feb 2023 01:13:48 GMT
Server: tencent-cos
x-cos-hash-crc64ecma: 12670142515171396409
x-cos-request-id: NjNlMmY3NGNfYTNlZjc4MGJfMmE0ODZfZmJhNzA3OA==
Content-Length: 48594
Accept-Ranges: bytes
X-NWS-LOG-UUID: 16706753165576953412
Connection: keep-alive
X-Cache-Lookup: Cache Hit
x-ks-client-ip: 91.90.42.154
X-Ks-Request-ID: 16706753165576953412
X-Ks-Cache: Hit from 101.33.29.231
kwaisign: NULL
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: x-ks-request-id,x-ks-client-ip,Content-Length
Cache-Control: max-age=2592000
t.co/i/adsct?bci=3&eci=2&event_id=cf7a1e16-ab78-4af3-9298-21ba51827b9f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o549a&type=javascript&version=2.3.29
104.244.42.5200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=cf7a1e16-ab78-4af3-9298-21ba51827b9f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o549a&type=javascript&version=2.3.29
IP 104.244.42.5:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=cf7a1e16-ab78-4af3-9298-21ba51827b9f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o549a&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=1c77b71f-ed87-4204-86e1-a408b416fd71; Max-Age=63072000; Expires=Fri, 07 Feb 2025 20:59:12 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: e3dda160c1417124
strict-transport-security: max-age=0
x-response-time: 110
x-connection-hash: 5979a9162b3d8b9d91f045329e2af46e34788f661295444dc46e9352c322c944
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=53f6bf6a-1e69-4bf3-8d01-7a66dcf9a599&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o9ceh&type=javascript&version=2.3.29
104.244.42.5200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=53f6bf6a-1e69-4bf3-8d01-7a66dcf9a599&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o9ceh&type=javascript&version=2.3.29
IP 104.244.42.5:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=53f6bf6a-1e69-4bf3-8d01-7a66dcf9a599&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o9ceh&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:12 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=5a565cc3-2124-4b1b-805d-a68e9e2b1408; Max-Age=63072000; Expires=Fri, 07 Feb 2025 20:59:12 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 0806d85b9c997b64
strict-transport-security: max-age=0
x-response-time: 110
x-connection-hash: 5979a9162b3d8b9d91f045329e2af46e34788f661295444dc46e9352c322c944
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 22a107f9c4d1c04b4c311c891b5ee090
5fd96275cce5ac25c2a6c3c1c2a1fb729caec0c6
d23d92574a8f9494a4b4d223512ebaffaf05c9ddb89003e22913a9c078c667ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 982
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:12 GMT
Last-Modified: Wed, 08 Feb 2023 20:42:50 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 0b05df3338420c89dcc30286296d3a6d
fc0e0c3aaae7f7007975670f49e0c7957401b0d3
ec5896766f6f074ce8a69c942fcac5f989233b8bbd619b7cf50ec9e239efb7fc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6504
Cache-Control: max-age=101266
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 20:59:12 GMT
Etag: "63e2dc4a-139"
Expires: Fri, 10 Feb 2023 01:06:58 GMT
Last-Modified: Tue, 07 Feb 2023 23:18:34 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 313
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.21.226:0
Hash 2d7ff325c4934f20433af0c60bc302a3
c83b1a3acb4c0fc187befd99eed196664a6076e5
c31e4ea8634a0c1aa51eaac71f862ada5f026cdd925f1ba78416bad54f47dc7c
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 20:59:12 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 12 Feb 2023 17:19:11 GMT
ETag: "c83b1a3acb4c0fc187befd99eed196664a6076e5"
Last-Modified: Wed, 08 Feb 2023 17:19:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2757
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796749ac1ae90b69-OSL
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=cf7a1e16-ab78-4af3-9298-21ba51827b9f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o549a&type=javascript&version=2.3.29
104.244.42.195200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=cf7a1e16-ab78-4af3-9298-21ba51827b9f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o549a&type=javascript&version=2.3.29
IP 104.244.42.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=cf7a1e16-ab78-4af3-9298-21ba51827b9f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o549a&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:12 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_+yFNEK82NHaIiUgYWOeHEw=="; Max-Age=63072000; Expires=Fri, 07 Feb 2025 20:59:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 047a2687858eba2e
strict-transport-security: max-age=631138519
x-response-time: 113
x-connection-hash: 20fb44a7c077145af039b0ece1c540318f072770e5c51a3705891eef5b552cc6
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=53f6bf6a-1e69-4bf3-8d01-7a66dcf9a599&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o9ceh&type=javascript&version=2.3.29
104.244.42.195200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=53f6bf6a-1e69-4bf3-8d01-7a66dcf9a599&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o9ceh&type=javascript&version=2.3.29
IP 104.244.42.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=53f6bf6a-1e69-4bf3-8d01-7a66dcf9a599&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b9a1fa0f-94d7-42b3-b7fb-9585e2fc87a2&tw_document_href=https%3A%2F%2Fstatic.olymptrade.com%2Flands%2FGA-OTPO-LPL45-07-01ar%2Findex.html%3Faf_siteid%3DGA-OTPO-LPL45-07-01ar%26affiliate_id%3D1503224%26lref%3D%26lrefch%3Daffiliate%26pixel%3D1%26subid1%3DEgypt24-12%26subid2%3DEgypt24-12&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o9ceh&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_AGbJIpucYRBvHzl98ZtZXw=="; Max-Age=63072000; Expires=Fri, 07 Feb 2025 20:59:12 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 2010050ffa14304a
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: 20fb44a7c077145af039b0ece1c540318f072770e5c51a3705891eef5b552cc6
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.21.226:0
Hash 2d7ff325c4934f20433af0c60bc302a3
c83b1a3acb4c0fc187befd99eed196664a6076e5
c31e4ea8634a0c1aa51eaac71f862ada5f026cdd925f1ba78416bad54f47dc7c
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 20:59:13 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 12 Feb 2023 17:19:11 GMT
ETag: "c83b1a3acb4c0fc187befd99eed196664a6076e5"
Last-Modified: Wed, 08 Feb 2023 17:19:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2758
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796749ae7db80b69-OSL
fonts.googleapis.com/css2?family=Roboto:wght@100%3b300%3b400%3b500%3b700%3b900&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@100%3b300%3b400%3b500%3b700%3b900&display=swap
IP 142.250.74.74:0
GET /css2?family=Roboto:wght@100%3b300%3b400%3b500%3b700%3b900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 Feb 2023 20:59:10 GMT
date: Wed, 08 Feb 2023 20:59:10 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:ital,wght@1,700&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:ital,wght@1,700&display=swap
IP 142.250.74.74:0
GET /css2?family=Roboto:ital,wght@1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 Feb 2023 20:59:09 GMT
date: Wed, 08 Feb 2023 20:59:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/6f652967-68c0-4b51-856e-73764e7ec56a.js
35.190.43.134200 OK 0 B URL HTTP/2 tr.snapchat.com/config/com/6f652967-68c0-4b51-856e-73764e7ec56a.js
IP 35.190.43.134:0
GET /config/com/6f652967-68c0-4b51-856e-73764e7ec56a.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:11 GMT
access-control-allow-origin: https://static.olymptrade.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.mythad.com/rest/n/adintl/ad/getPixelConfig?pixelId=414260076515165032
35.227.215.158200 OK 0 B URL HTTP/2 api.mythad.com/rest/n/adintl/ad/getPixelConfig?pixelId=414260076515165032
IP 35.227.215.158:0
GET /rest/n/adintl/ad/getPixelConfig?pixelId=414260076515165032 HTTP/1.1
Host: api.mythad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://static.olymptrade.com
Connection: keep-alive
Referer: https://static.olymptrade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 20:59:12 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://static.olymptrade.com
access-control-allow-credentials: true
x-kslogid: 675889952832101129
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2