firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 17 Sep 2022 12:11:23 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VUbTGn4sIjOZDVuEQuT6aq7pA7UK8orzrvO8S_RmJtAE8rvFG4FVWQ==
Age: 2657
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96daaf84cd2c07756756caf7a2724a29
d24d47c68eec98d44bf341dab9d893df97103e1a
fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F"
Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6589
Expires: Sat, 17 Sep 2022 14:45:29 GMT
Date: Sat, 17 Sep 2022 12:55:40 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 17 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iyLnkfNdCR5OiXjv9Q-9SGyULMmrcClrmTGvelDtBTgm0R7-HMPfUg==
age: 33898
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Sep 2022 12:55:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 17 Sep 2022 12:03:22 GMT
Cache-Control: max-age=3600
Expires: Sat, 17 Sep 2022 12:16:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5dKFVl_-vFrMQNsmg7STzgkSS_5JeNDKzkigkS38RVyerVvzXgYF2Q==
Age: 3138
liversity.net/v2750?product_name=mario+bros+und+luigi&filesize=58+kb&product_title=descargar+mario+bros+und+luigi&installer_file_name=mario-bros-und-luigi&product_file_name=939mario.zip
302 Found 11 B URL HTTP/1.1 liversity.net/v2750?product_name=mario+bros+und+luigi&filesize=58+kb&product_title=descargar+mario+bros+und+luigi&installer_file_name=mario-bros-und-luigi&product_file_name=939mario.zip
IP
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert quad9 Sinkholed
GET /v2750?product_name=mario+bros+und+luigi&filesize=58+kb&product_title=descargar+mario+bros+und+luigi&installer_file_name=mario-bros-und-luigi&product_file_name=939mario.zip HTTP/1.1
Host: liversity.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 17 Sep 2022 12:55:39 GMT
location: http://btpnav.com/click?data=YnRBVURobjE2Y1daeTBVX0VoUW5UclBNdWlLc0dIRnhmZG1tdmcwMTIzN1dQcHlSWXNnQkNwRmZtWjd1b3E5MFRWX3E4U3ZSRFpQajdpTU1zaWZhTTF4VWhLdE56Y0g0Y0g5ZWh1V1Z3bVZwSXVDQ1VuT0pobnY1akVuWER6RFROUXhYamtfWmVucXpaZ1hvUkJIMkFBMg2&id=c491149a-3adf-4727-8305-ee38b1a91bdf
server: nginx
set-cookie: sid=0847af6c-3688-11ed-b63a-6cb128b1b16f; path=/; domain=.liversity.net; expires=Thu, 05 Oct 2090 16:09:47 GMT; max-age=2147483647; HttpOnly
ocsp.digicert.com/
200 OK 471 B IP
Hash 9bf3402af9fef57aa11ffe2943728de4
a3a443aab8226d212be9698623717dd06e46c720
54987a5417af4a99d78532e502cf4685dd3372c1e9f717a8907f3d2b7c8926eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2887
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:41 GMT
Last-Modified: Sat, 17 Sep 2022 12:07:34 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
btpnav.com/click?data=YnRBVURobjE2Y1daeTBVX0VoUW5UclBNdWlLc0dIRnhmZG1tdmcwMTIzN1dQcHlSWXNnQkNwRmZtWjd1b3E5MFRWX3E4U3ZSRFpQajdpTU1zaWZhTTF4VWhLdE56Y0g0Y0g5ZWh1V1Z3bVZwSXVDQ1VuT0pobnY1akVuWER6RFROUXhYamtfWmVucXpaZ1hvUkJIMkFBMg2&id=c491149a-3adf-4727-8305-ee38b1a91bdf
200 OK 2.2 kB URL HTTP/1.1 btpnav.com/click?data=YnRBVURobjE2Y1daeTBVX0VoUW5UclBNdWlLc0dIRnhmZG1tdmcwMTIzN1dQcHlSWXNnQkNwRmZtWjd1b3E5MFRWX3E4U3ZSRFpQajdpTU1zaWZhTTF4VWhLdE56Y0g0Y0g5ZWh1V1Z3bVZwSXVDQ1VuT0pobnY1akVuWER6RFROUXhYamtfWmVucXpaZ1hvUkJIMkFBMg2&id=c491149a-3adf-4727-8305-ee38b1a91bdf
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash ea6e7d45929f8b73304249bab039af14
59a9664d083d746a7629bf82d96556e3f8cb4ec9
a7bbefd5b0e978ad5f721b0e9002230093ebf04547495da759ab47df793931c5
GET /click?data=YnRBVURobjE2Y1daeTBVX0VoUW5UclBNdWlLc0dIRnhmZG1tdmcwMTIzN1dQcHlSWXNnQkNwRmZtWjd1b3E5MFRWX3E4U3ZSRFpQajdpTU1zaWZhTTF4VWhLdE56Y0g0Y0g5ZWh1V1Z3bVZwSXVDQ1VuT0pobnY1akVuWER6RFROUXhYamtfWmVucXpaZ1hvUkJIMkFBMg2&id=c491149a-3adf-4727-8305-ee38b1a91bdf HTTP/1.1
Host: btpnav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: TjCLqkFbEvNteEe=TjCLqkFbEvNteEe; path=/
X-Server: web01
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 17 Sep 2022 12:55:40 GMT
Content-Length: 2187
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +8jYtk4hqjJn6cqWaFLJ4Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /htb/vqmSuDyYCmZs6yVQJUy+PM=
btpnav.com/Redirect/
302 Found 269 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4796710354a88ebf612b7314cb49da69
3b1cc4d78802df88360dec7ba074c9f0ad36d8bb
9d112c2996de1897fefd20c942c05a453a90548aa63c4cddcda92d1ef39218e9
POST /Redirect/ HTTP/1.1
Host: btpnav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 359
Origin: http://btpnav.com
Connection: keep-alive
Referer: http://btpnav.com/click?data=YnRBVURobjE2Y1daeTBVX0VoUW5UclBNdWlLc0dIRnhmZG1tdmcwMTIzN1dQcHlSWXNnQkNwRmZtWjd1b3E5MFRWX3E4U3ZSRFpQajdpTU1zaWZhTTF4VWhLdE56Y0g0Y0g5ZWh1V1Z3bVZwSXVDQ1VuT0pobnY1akVuWER6RFROUXhYamtfWmVucXpaZ1hvUkJIMkFBMg2&id=c491149a-3adf-4727-8305-ee38b1a91bdf
Cookie: TjCLqkFbEvNteEe=TjCLqkFbEvNteEe
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://balor-ghn.com/zcvisitor/0857b016-3688-11ed-a21b-12bf3e83919f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=617fa1d0-35c4-11ed-b69b-12beee04f19b
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Server: web01
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 17 Sep 2022 12:55:40 GMT
Content-Length: 269
balor-ghn.com/zcvisitor/0857b016-3688-11ed-a21b-12bf3e83919f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=617fa1d0-35c4-11ed-b69b-12beee04f19b
200 996 B URL HTTP/1.1 balor-ghn.com/zcvisitor/0857b016-3688-11ed-a21b-12bf3e83919f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=617fa1d0-35c4-11ed-b69b-12beee04f19b
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9f56072c5c5323bfd2cffd993dd3d048
5a99fbee6b4e4bb62c60d51aef7477e91bb76402
3f46b3cecd69ee39d499f2887e6bb5e304b81215cbe96c9b9877dd21619ce462
GET /zcvisitor/0857b016-3688-11ed-a21b-12bf3e83919f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=617fa1d0-35c4-11ed-b69b-12beee04f19b HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://btpnav.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 17 Sep 2022 12:55:41 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: qDGYkCPe
balor-ghn.com/zcredirect?visitid=0857b016-3688-11ed-a21b-12bf3e83919f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 692 B URL HTTP/1.1 balor-ghn.com/zcredirect?visitid=0857b016-3688-11ed-a21b-12bf3e83919f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 1ae8ea8e71821dc444bb06262f582f4e
00b8f1908d74676dce6912bd4ac37a8aeb2f49cb
8ce6a79cc1c2738907edc4108fe4cc1e0d2f6693e7bcafa462c2b1a8ec414d30
GET /zcredirect?visitid=0857b016-3688-11ed-a21b-12bf3e83919f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcvisitor/0857b016-3688-11ed-a21b-12bf3e83919f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=617fa1d0-35c4-11ed-b69b-12beee04f19b
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 17 Sep 2022 12:55:41 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: YWstmNFC
selymer-sperts.com/zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB19861_A72681_TClick.aspx_click_id%3Dwoihttetujo7vs3ji1ha1f80&caid=3988f3ac-795a-49cb-a476-2d8740511fc3&zpid=0857b016-3688-11ed-a21b-12bf3e83919f&cid=woihttetujo7vs3ji1ha1f80&rt=R
302 Found 0 B URL HTTP/2 selymer-sperts.com/zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB19861_A72681_TClick.aspx_click_id%3Dwoihttetujo7vs3ji1ha1f80&caid=3988f3ac-795a-49cb-a476-2d8740511fc3&zpid=0857b016-3688-11ed-a21b-12bf3e83919f&cid=woihttetujo7vs3ji1ha1f80&rt=R
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB19861_A72681_TClick.aspx_click_id%3Dwoihttetujo7vs3ji1ha1f80&caid=3988f3ac-795a-49cb-a476-2d8740511fc3&zpid=0857b016-3688-11ed-a21b-12bf3e83919f&cid=woihttetujo7vs3ji1ha1f80&rt=R HTTP/1.1
Host: selymer-sperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balor-ghn.com/
Cookie: cc-v4=e3AUUL4%2FMCyAekBR78dKsBE54ZQDsFIhzm2fNQG9L8yTyLYALiJn5nODX5OZQnfAKoFzZjiHCqeJSqf1q7NLRSXxhtnzlFS6pwZtH0S12mtNdX1TFty3500jJ%2F8Cr7u0b8iVBD%2FHvVHF6MEd3NX30Q%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 17 Sep 2022 12:55:41 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://med.etoro.com/B19861_A72681_TClick.aspx_click_id=woihttetujo7vs3ji1ha1f80
pragma: no-cache
set-cookie: cc-v4=t7OkIwMzX9mEmCRl%2BzMHDUGEz4OAji7RIsW%2FwpiDR9J0xlhslZP1lII8Upn5YJvqGpncezCSYmp5cEmDhtburnyAc6JQNDXVbbKREBALI0WOLZhk1A71cDlClecTMeekADXBGZxssMeSwKar9ZWdOw%3D%3D; Max-Age=31536000; Expires=Sun, 17-Sep-2023 12:55:41 GMT; Domain=selymer-sperts.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
med.etoro.com/B19861_A72681_TClick.aspx_click_id=woihttetujo7vs3ji1ha1f80
301 Moved Permanently 186 B URL HTTP/1.1 med.etoro.com/B19861_A72681_TClick.aspx_click_id=woihttetujo7vs3ji1ha1f80
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a8eaa011dfa979895c36f222947c3ffa
3877bc515251a752941a9ed6be3a8460359ec781
b15c8296acd9ad62e70d89474b618eb1d16d0a2dcc9a4ec5471b4b77fd30a06e
GET /B19861_A72681_TClick.aspx_click_id=woihttetujo7vs3ji1ha1f80 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T11:56:15.9629570Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; _gcl_au=1.1.24671558.1663363182; _cq_duid=1.1663363182.1ugK9sLQAyPCTXDp; _ga_B0NS054E7V=GS1.1.1663415759.6.0.1663415764.55.0.0; _ga=GA1.2.942408735.1663363182; _scid=5a85a0d9-03c5-4598-8aad-0b1c55925665; __adal_id=f437e020-cbc4-4b4d-85f7-cecdba4a9769.1663363182.7.1663415760.1663401530.ccd1210c-88d9-4e34-b50b-cedc7f85f619; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D19861%26ke%3D%28not%2520set%29; __adal_cw=1663363182442; _gid=GA1.2.1138289269.1663363183; _fbp=fb.1.1663363182798.6001455; _uetsid=47f76380360511ed834e3bdf111f6f6e; _uetvid=47f76c40360511eda44e1345a5d6d1f7; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22%24device_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2219861%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22balor-ghn.com%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 186
Location: http://med.etoro.com/aw.aspx?B=19861&A=72681&Task=Click
X-Robots-Tag: noindex
Expires: Sat, 17 Sep 2022 12:55:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 17 Sep 2022 12:55:41 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=19861&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=19861&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=19861&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://balor-ghn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=19861&A=72681&Task=Click
Expires: Sat, 17 Sep 2022 12:55:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 17 Sep 2022 12:55:41 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=19861&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=19861&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=19861&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T11:56:15.9629570Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; _gcl_au=1.1.24671558.1663363182; _cq_duid=1.1663363182.1ugK9sLQAyPCTXDp; _ga_B0NS054E7V=GS1.1.1663415759.6.0.1663415764.55.0.0; _ga=GA1.2.942408735.1663363182; _scid=5a85a0d9-03c5-4598-8aad-0b1c55925665; __adal_id=f437e020-cbc4-4b4d-85f7-cecdba4a9769.1663363182.7.1663415760.1663401530.ccd1210c-88d9-4e34-b50b-cedc7f85f619; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D19861%26ke%3D%28not%2520set%29; __adal_cw=1663363182442; _gid=GA1.2.1138289269.1663363183; _fbp=fb.1.1663363182798.6001455; _uetsid=47f76380360511ed834e3bdf111f6f6e; _uetvid=47f76c40360511eda44e1345a5d6d1f7; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22%24device_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2219861%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22balor-ghn.com%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term=
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Sat, 17 Sep 2022 12:55:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 17 Sep 2022 12:55:42 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=y4b43ancqfteu0eva1f2ys3i; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoro.com; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoro.com.cn; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etorocn.com.cn; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoroasia-securities.com; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoroasia.cn; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoroasia.com; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoroasia.com.cn; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; domain=.etoroasia-Investing.com; expires=Wed, 16-Nov-2022 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; domain=.etoro.com; expires=Mon, 17-Oct-2022 00:00:00 GMT; path=/
go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term=
200 OK 3.6 kB URL HTTP/2 go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (18095)
Hash f8192383376c9ef349d494b8caaee844
602b178ffd74d3c10a0b712e68a1fb864ee5dbde
095cac5a397869f75c2ee65c1338422ff7deae87ac1cad188b5711717df32aeb
GET /en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term= HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; ai_user=Jx2MfhCh/I2MiznhMRrwyf|2022-09-16T21:19:41.786Z; _gcl_au=1.1.24671558.1663363182; _cq_duid=1.1663363182.1ugK9sLQAyPCTXDp; _ga_B0NS054E7V=GS1.1.1663415759.6.0.1663415764.55.0.0; _ga=GA1.2.942408735.1663363182; _scid=5a85a0d9-03c5-4598-8aad-0b1c55925665; __adal_id=f437e020-cbc4-4b4d-85f7-cecdba4a9769.1663363182.7.1663415760.1663401530.ccd1210c-88d9-4e34-b50b-cedc7f85f619; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D19861%26ke%3D%28not%2520set%29; __adal_cw=1663363182442; _gid=GA1.2.1138289269.1663363183; _fbp=fb.1.1663363182798.6001455; _uetsid=47f76380360511ed834e3bdf111f6f6e; _uetvid=47f76c40360511eda44e1345a5d6d1f7; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22%24device_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2219861%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22balor-ghn.com%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
etag: W/"5398-878DiQPsIKyFtzpdwzC4r081Bto"
content-encoding: gzip
content-length: 3615
expires: Sat, 17 Sep 2022 12:55:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Sep 2022 12:55:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/runtime-es2015.e91f1448aa498fd48783.js
200 OK 2.8 kB URL HTTP/2 marketing.etorostatic.com/landingpages/runtime-es2015.e91f1448aa498fd48783.js
IP
File type ASCII text, with very long lines (4884), with no line terminators
Hash 6f4a445f8038456385cf7893ac5634af
031760dec4bc748459b41f2bf3abfda06b9ab32d
46c7916d0557c325200443a54177036ae4d5ab4308de38cad99d48f18beb267b
GET /landingpages/runtime-es2015.e91f1448aa498fd48783.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RLYpCXoVVKMafYaeETqV6Wh09HViOdE95ABRL6jetwJmFlPeg64yV9VqNuKzV0AX0yWxllYU6gY=
x-amz-request-id: KMKJVVG56TVB9XGN
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 12:14:54 GMT
etag: "0957d7cbbced5bfc5f0f38e8e4cac755"
x-amz-version-id: LxMZVzSU4EVuXquPMW0ci8S8Ztzzh8RA
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 2808
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/styles.2aac5caa0a8ef2398c0c.css
200 OK 14 kB URL HTTP/2 marketing.etorostatic.com/landingpages/styles.2aac5caa0a8ef2398c0c.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0d6bcb6f5632092c907c2652552eb813
92781b13149564fa0f1f772723107bda627a1069
b84b9451fb0a9ecc1c7634c473ca8b616bd88329c9f40ed42e3e30d87dfc3981
GET /landingpages/styles.2aac5caa0a8ef2398c0c.css HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QMuDcMpwWWr3wq4/BmaFkKt8Uxm3hjCjNcYhJL/UaMAjSaMHIJVnrYyxaDNI+BKKOGzHEPr+eKY=
x-amz-request-id: GN3H6CHQBVB6AX5A
x-amz-replication-status: COMPLETED
last-modified: Wed, 31 Aug 2022 11:41:07 GMT
etag: "51cc4bb35d7b71648d309b483577a45c"
x-amz-version-id: 3SivAvJidJzFKUhFwaxm7CW1UrisT.lE
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 14397
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/polyfills-es2015.47aba3707b207fbc83bd.js
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/landingpages/polyfills-es2015.47aba3707b207fbc83bd.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 024c72ecc84d31d5408541d7fe3b70eb
ac9e7a7053966f512207f1db88c1ea61d2c1da53
d9a81b339bdca692fcaabab75b769058a147072955bcb9393506d228adaaefa3
GET /landingpages/polyfills-es2015.47aba3707b207fbc83bd.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LdgtMenD+9GiSD3xLm3OiPtVF5i4dFyM0Hob8KOjbGDz7mgz27FrQmCv0OjPuhggV9zDWUwlTzA=
x-amz-request-id: W3FESZH27C2K1406
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 24 Jul 2022 19:16:09 GMT
etag: "991fedbb17e033347f541621a41c9358"
x-amz-version-id: OONrL6_CkQL4KtulVG5Y5lzfkIU2bKu9
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 32283
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8fb510c0e0fbff6302a68eb385520e3f
cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00
2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketing.etorostatic.com/landingpages/0-es2015.b4028b0b8d197354194e.js
200 OK 10 kB URL HTTP/2 marketing.etorostatic.com/landingpages/0-es2015.b4028b0b8d197354194e.js
IP
File type HTML document, ASCII text, with very long lines (39164), with no line terminators
Hash 09331951c7f19878834aa2ac55c6b681
fef2cb4eefa3b9dbae49995f161281b9970ef7e2
31c5dfac30bd22f778846e1724027e2a36ca4dc43b658889cc36dc9d330962a8
GET /landingpages/0-es2015.b4028b0b8d197354194e.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: /9rCweWNuV6Em1n4vfyLJNsr4BVHiZD9c2pO70qtCa8aqJ7sz0ltwTZF++qV5wb2wUUFCE28sImxPLFEIHk8lQ==
x-amz-request-id: 1ZVJDEMQTS8302NP
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 12:14:52 GMT
etag: "5a2dbabcfa601c7b3e3811cee9d4c2e5"
x-amz-version-id: BcDE.3NyRsiCGINQ8NfnN54MOZh.B1Nh
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 10468
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/1-es2015.42bb491a1fb29763db90.js
200 OK 3.2 kB URL HTTP/2 marketing.etorostatic.com/landingpages/1-es2015.42bb491a1fb29763db90.js
IP
File type ASCII text, with very long lines (9402), with no line terminators
Hash 096b85daf24610a2d87e696ca6523e77
809d6a51fffcb5418cc648c3440c64998d80a080
74122803c4b01501c031032821f07b2e3c47b96e2f9a4e0fdab56796e120fef8
GET /landingpages/1-es2015.42bb491a1fb29763db90.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Lcv75lJlQ5gb8K6NW/TF4t4VhhxNf8/vKidWje3adeVb8wzANSvLLj3iWWFTuiVpnn+bZgb0f54=
x-amz-request-id: G9T36TF7XCMHAA2P
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Apr 2022 13:15:47 GMT
etag: "6a3aab6fc18dcccf333d21422adcb4fd"
x-amz-version-id: jZ2FD6xKBuzO98ifc7RfAZFH0Nbw9y6Y
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 3234
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/3-es2015.f049c087aa6adeb6db19.js
200 OK 4.6 kB URL HTTP/2 marketing.etorostatic.com/landingpages/3-es2015.f049c087aa6adeb6db19.js
IP
File type ASCII text, with very long lines (22124), with no line terminators
Hash ed16c095de325d6d888f9c60c5725da2
05323cfb7c9b2a860715028f03c34f01b7ffceee
4652647c06ddfbb59b2c7fab7ead098aa379e4c3795a1ff1238312b91304419c
GET /landingpages/3-es2015.f049c087aa6adeb6db19.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Gg8UE59Lyw/iD0jSl47nM/DKZ/gT53+Mg1ki5g6E8QhHVRinAi0WkVc/nK4CnkcxS/VKNhFsIe0=
x-amz-request-id: F36TXW5CNQ6SNVRM
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Aug 2022 10:16:33 GMT
etag: "7d332e3df86727b41175fdaa0c4f42d8"
x-amz-version-id: 1M8_zcRV1Yme1KLCuSfACEiwzcyejIRI
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 4621
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/100-es2015.2389e8a30b719b670121.js
200 OK 7.7 kB URL HTTP/2 marketing.etorostatic.com/landingpages/100-es2015.2389e8a30b719b670121.js
IP
File type ASCII text, with very long lines (31418), with no line terminators
Hash c32048431bcdbe8cdb941a14b9069435
11f574cd90a978df09a2d63048c46ac095a34205
3294d919383d3d7614ae234e39b2b2db88a25e1fb7c667c74e2afde4624188cd
GET /landingpages/100-es2015.2389e8a30b719b670121.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: vp98TPajyxwDdR9H6gfz7F9HeTxfbRhh4F43QcagZIcj3hBPqr8VpeTYsJdXZ9VFAjeD1G3y+/E=
x-amz-request-id: PCRH739WH2EBXCJ5
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 12:14:52 GMT
etag: "8baae8e6f9a797dcd3583e53ca5dfd71"
x-amz-version-id: wj6J6TYw8Lj4JDeG7yosCA2vZBKbwJqS
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 7650
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/2-es2015.42e71d50a7f98ff34a38.js
200 OK 22 kB URL HTTP/2 marketing.etorostatic.com/landingpages/2-es2015.42e71d50a7f98ff34a38.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d5358435d19723d857c831c5d936398a
ca40fa03c21bd6771277130bd6ddf6fd6597bb4a
71f1f8d15db2915f6d7f6760f496878dead1e67ec7d6e903101ee5e1af4d1264
GET /landingpages/2-es2015.42e71d50a7f98ff34a38.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: fT02y2OpzJehxvZK2wmwD4jSr8PYK59VOClBWRVsC6xHMrTA6BqmS8qlnzjd11FYeNuiQzF4gw0=
x-amz-request-id: 803WQRANBV6GKTS5
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Apr 2022 06:15:35 GMT
etag: "25bf5f007190df82e87c0ed3907c59c6"
x-amz-version-id: NuktlzdnIzJ.kWjS9Yp3uVkUtwevNqjI
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 21521
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16212, version 1.6554\012- data
Hash aa21f9964cd88c7d6a03b32c11e6bf3e
14a380d9ddfdee7aecf38c241c450bfe813d94e5
30427ab021a9d28d0f9724a8565c2463ee5a3938417dd0750d58ab79ac07cf12
GET /web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: tk21VJGuue4wpX19OmEddxD0J//URAQorcuQUEX2bNHwngx5HA/1uNEq9FrO9Oy8U0fn+lMqTXI=
x-amz-request-id: GX1E2T5Q1DKXJ7M4
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 13:10:06 GMT
etag: "aa21f9964cd88c7d6a03b32c11e6bf3e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 13:09:02 GMT
x-amz-version-id: MkWGLAQn6l9OArJd9xvShnWsj3x_Qdqn
accept-ranges: bytes
content-type: application/octet-stream
server: AmazonS3
content-length: 16212
cache-control: max-age=2592000
expires: Mon, 17 Oct 2022 12:55:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/slider/etoro_loader_cyc.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/slider/etoro_loader_cyc.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash dfe88860b37800e402465e2ba8fcda23
267e494006dcd2f90cde9b773c2edd73bd230f98
222a7f68e4b9ac4a8b7db1596bcc4c4ae259f7b5b35ed398acd2c3af8064de90
GET /studio/content/lp/cache_1/etoro-lps/slider/etoro_loader_cyc.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: XztXF6j4BO9k/Dguby0SDZF1KGVhbc7s/sO8DgZypG035OXggqUJ2IWsok7bTIxZ3hKJcdq0M7g=
x-amz-request-id: SJ5X9YQT4YEN8WF9
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Jun 2018 04:50:25 GMT
etag: "dfe88860b37800e402465e2ba8fcda23"
x-amz-meta-s3b-last-modified: 20180411T105754Z
x-amz-version-id: QRygE2XwGUU0V_sJeR79ocSaxLTx2E9F
accept-ranges: bytes
content-type: image/png
content-length: 1243
server: AmazonS3
cache-control: max-age=604800
expires: Sat, 24 Sep 2022 12:55:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/main-es2015.aa0d4bd073c6a7339a36.js
200 OK 151 kB URL HTTP/2 marketing.etorostatic.com/landingpages/main-es2015.aa0d4bd073c6a7339a36.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 151 kB (151208 bytes)
Hash 556a502f47d8a5f96ab5e3260dc1dd97
8b499d3818e97b9beec4a791da6c1e0405d1f594
27e4588f011323cffe39c9bf2599d2417c0a0889f578804c766b4cefb27755c2
GET /landingpages/main-es2015.aa0d4bd073c6a7339a36.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nZD0ZFzqJURilWhukTuo5HyKUnihVGWu2Eg+4HlO7F4GIKybgu4mPSTv4sqSyZOSMrGG0dJOE1M=
x-amz-request-id: KMKXTNXXACXJVCT2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Sep 2022 12:14:54 GMT
etag: "81d123a54e111d096716feab00504cc6"
x-amz-version-id: ii.gqIM1AtVp7rMU7Ka8YtiIcnkbp8EQ
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg
200 OK 379 kB URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1912x975, components 3\012- data
Size 379 kB (379017 bytes)
Hash 444db7330e5f6c6174dd99517d426901
caa3955e521aeea7c64d4047aa79dc4e655f3612
6634917012d16e2ea2c3ef7377aea5d218ba44aec83ba0234190721867e788bd
GET /studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: zEIWYTEmf1PF+1dj/lU871tVPWmtVZRmjgXZDx+AYV3CIzWY2TsEVVl1GN4e+BZzJjVibHR8AYA=
x-amz-request-id: G36VTHATEVRBMG8H
x-amz-replication-status: COMPLETED
last-modified: Sun, 21 Apr 2019 08:43:33 GMT
etag: "444db7330e5f6c6174dd99517d426901"
x-amz-meta-s3b-last-modified: 20190417T112337Z
x-amz-version-id: wSGGDjjTkxo89gmM615DGwzx7J9Na0NG
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 379017
cache-control: max-age=604800
expires: Sat, 24 Sep 2022 12:55:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16080, version 1.6554\012- data
Hash f3515b8fcce21d4bbb0da28b297495ed
808769b38614943b5116b559ac7528386b7cb020
efdf47ca1d1eee9ad503d589c6931daf40228fcac1817eb13e6559750ef830b8
GET /web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IyNgB46QF9lTndlq0U0nC+00SDIae1eyKMIbe5YFHksRDdpZsnBbft0xZK48a3FZitXfSnm7sL8=
x-amz-request-id: MW48XEZXQ2AR34H5
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 13:10:06 GMT
etag: "f3515b8fcce21d4bbb0da28b297495ed"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 13:09:21 GMT
x-amz-version-id: otYh1Ncyl7G3ih0ct3Y9fsdhm4R1ysiw
accept-ranges: bytes
content-type: application/octet-stream
content-length: 16080
server: AmazonS3
cache-control: max-age=2592000
expires: Mon, 17 Oct 2022 12:55:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
go.etoro.com//assets/i18n/general/en-gb.json?disableClientId=true
200 OK 24 kB URL HTTP/2 go.etoro.com//assets/i18n/general/en-gb.json?disableClientId=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65282), with no line terminators
Hash 6c71b8f2581cd43c6f847697217f7c82
a5eaf5d077bcae13ce1d9641a04067757a133ba1
917aa4c448047dcfdcdbb1f3a534a3f0adc149f887271a314a592535366222c9
GET //assets/i18n/general/en-gb.json?disableClientId=true HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |44b447ee8c364bf197d83c48e81d55df.c73f793545544328
traceparent: 00-44b447ee8c364bf197d83c48e81d55df-c73f793545544328-01
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; ai_user=Jx2MfhCh/I2MiznhMRrwyf|2022-09-16T21:19:41.786Z; _gcl_au=1.1.24671558.1663363182; _cq_duid=1.1663363182.1ugK9sLQAyPCTXDp; _ga_B0NS054E7V=GS1.1.1663415759.6.0.1663415764.55.0.0; _ga=GA1.2.942408735.1663363182; _scid=5a85a0d9-03c5-4598-8aad-0b1c55925665; __adal_id=f437e020-cbc4-4b4d-85f7-cecdba4a9769.1663363182.7.1663415760.1663401530.ccd1210c-88d9-4e34-b50b-cedc7f85f619; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D19861%26ke%3D%28not%2520set%29; __adal_cw=1663363182442; _gid=GA1.2.1138289269.1663363183; _fbp=fb.1.1663363182798.6001455; _uetsid=47f76380360511ed834e3bdf111f6f6e; _uetvid=47f76c40360511eda44e1345a5d6d1f7; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22%24device_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2219861%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22balor-ghn.com%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Thu, 15 Sep 2022 12:11:08 GMT
etag: W/"17cd9-183410f5760"
content-encoding: gzip
content-length: 24094
expires: Sat, 17 Sep 2022 12:55:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Sep 2022 12:55:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
go.etoro.com//assets/i18n/practiceAccount/en-gb.json?disableClientId=true
200 OK 161 B URL HTTP/2 go.etoro.com//assets/i18n/practiceAccount/en-gb.json?disableClientId=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4d7b5343b18b66af32ad04df3af0f141
e48d9cf3fe26179965bb67651ce10681cbc5e4f0
a226c2d50f701f61dc7e94c18696e5b61ee5e54e4e6e45cf636676b143a46086
GET //assets/i18n/practiceAccount/en-gb.json?disableClientId=true HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |44b447ee8c364bf197d83c48e81d55df.65b432f1cf394704
traceparent: 00-44b447ee8c364bf197d83c48e81d55df-65b432f1cf394704-01
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; ai_user=Jx2MfhCh/I2MiznhMRrwyf|2022-09-16T21:19:41.786Z; _gcl_au=1.1.24671558.1663363182; _cq_duid=1.1663363182.1ugK9sLQAyPCTXDp; _ga_B0NS054E7V=GS1.1.1663415759.6.0.1663415764.55.0.0; _ga=GA1.2.942408735.1663363182; _scid=5a85a0d9-03c5-4598-8aad-0b1c55925665; __adal_id=f437e020-cbc4-4b4d-85f7-cecdba4a9769.1663363182.7.1663415760.1663401530.ccd1210c-88d9-4e34-b50b-cedc7f85f619; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D19861%26ke%3D%28not%2520set%29; __adal_cw=1663363182442; _gid=GA1.2.1138289269.1663363183; _fbp=fb.1.1663363182798.6001455; _uetsid=47f76380360511ed834e3bdf111f6f6e; _uetvid=47f76c40360511eda44e1345a5d6d1f7; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22%24device_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2219861%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22balor-ghn.com%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 161
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Thu, 15 Sep 2022 12:11:08 GMT
etag: W/"a1-183410f5760"
expires: Sat, 17 Sep 2022 12:55:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Sep 2022 12:55:42 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18091
Expires: Sat, 17 Sep 2022 17:57:13 GMT
Date: Sat, 17 Sep 2022 12:55:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18091
Expires: Sat, 17 Sep 2022 17:57:13 GMT
Date: Sat, 17 Sep 2022 12:55:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18091
Expires: Sat, 17 Sep 2022 17:57:13 GMT
Date: Sat, 17 Sep 2022 12:55:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18091
Expires: Sat, 17 Sep 2022 17:57:13 GMT
Date: Sat, 17 Sep 2022 12:55:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18091
Expires: Sat, 17 Sep 2022 17:57:13 GMT
Date: Sat, 17 Sep 2022 12:55:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f1583c126dab43886a89cda3f82d760
5740a5507f21449319597ef49dbb456cbf7372b5
3b8ea2490bd6d777ec64358a84a07bdb1ccd4a6dfa30969feed45cfa7725745f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F269c619b-7793-4ef9-ae9d-9464582f4b56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12221
x-amzn-requestid: ede87d50-8626-40bf-bb1a-d3f95e252f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YknUrGuqIAMF7tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ec1d-2952b2ba7271a5b516295a55;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:35:25 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 39THgu_2WIUs5Hx0CElOMyYu8f9XzzgwzO1naHT1gWJiAyo83lnzuw==
via: 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:50:31 GMT
age: 54311
etag: "5740a5507f21449319597ef49dbb456cbf7372b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc2201eab308312a7429e3f22510fc27
4e4f279e66eac8989833dd5b46706aa50f6e5031
d5b73edbd1ec0eaffacf03ff232924e376d3af7447aeed6e7197177e20e2bc82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca80d3e7-37ec-4908-bc70-808d7f648efe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5323
x-amzn-requestid: debbdcf5-f9b1-4798-9d58-3e23847d22dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIQp3FdgoAMFaMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631994a5-6e0abb211dbd59e85665f1ac;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:07:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MkN8DEUY-0hYIeosGmPOK0iEmw3rBeuF-XKG5S9XM80qB2DRq0GJ-Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:28:41 GMT
age: 52021
etag: "4e4f279e66eac8989833dd5b46706aa50f6e5031"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d46a910081eb782408f1a2fa3c6aabba
28ac45ef155c66dd79a306f14d3b38f597b6a32e
d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: e1ca6cef-c033-4887-80cf-2014ab8e620c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ykn5cEnLIAMFrzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6324ed09-3afc16cf66fef0e62dd6f3cc;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 21:39:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pPCI5VDX3PIldEnkLv-VNCFWuykiarYQdLYguNTfmbwxYCDVaS2EcA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:01:45 GMT
age: 53637
etag: "28ac45ef155c66dd79a306f14d3b38f597b6a32e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a22ab7dcdf50f4a297b8e117d336eae
e139a0974317212f094fdbe59e26ca5cf6b9e56d
9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7788
x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIP2-HFHoAMFssA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4-H_LbXRjS1PJkVz9OIhwsaPfu8ZlL98zTZG--hdmij9Tc6KtmNSFQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 21:51:13 GMT
age: 54269
etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c35b7f5f8e1b0b24570a41b7d18533a
c5b82c9d77851820b8d206573d5c03cd36d27a20
bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6109
x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2AhHZgIAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: clBnXbh8x6GItJ6ObFVEM4Es3jAKlfMS8CMGlU6RBf_eshZ_HfFkOA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 22:31:13 GMT
age: 51869
etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b772c6-a258-481b-9f13-545de0b247e7.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b772c6-a258-481b-9f13-545de0b247e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 571f174a66e87ea77b36542c6c7a29a4
5dc0ef56244f8a5ddbb7823e25c61312860b2d0f
e624e35cc734b8cacc2a8eaa80c81175a879c1195d7a4c65cdcd769836b96a1b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b772c6-a258-481b-9f13-545de0b247e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9280
x-amzn-requestid: 5259d496-f145-492c-8825-579f5b107ee6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeKEwGsaIAMFR5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632256eb-71f620793182ed767adad592;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ILrdhzS2nnvB959D0ZhvdD_jqQKVc-gWgnt8NSzlC0s1Fb8vbHGKQQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Sep 2022 12:55:52 GMT
age: 86390
etag: "5dc0ef56244f8a5ddbb7823e25c61312860b2d0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5d12cc59489773babbc650161772d674
6fa23d626e8a64d98e59984567cd4dc42c648833
f43eae2b85acffc988fbc2c97e18ae1c013217db2cbe24df14dd3b8c35d0ff27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.etoro.com/favicon.ico
200 OK 775 B IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash c51e8432d3ea1b9cfafbc7d535d49d3f
6bfdf34b6df4a8ab0c50e3f27d14f3a4bfaa2e7b
640ffaf99ccae6ec1b549047e5cab7c55b9b3eae0ef1911a9cdfa9582ead4f37
GET /favicon.ico HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=19861&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=19861&SubAffiliateID=&Custom=&ClickDateTime=2022-09-17T12:55:42.0272513Z&UserUniqueIdentifier=80b74c96-504f-4dff-9a50-00b74b5bb23c; RequestURL=URL=http://med.etoro.com/aw.aspx?b=19861&a=72681&task=click; ai_user=Jx2MfhCh/I2MiznhMRrwyf|2022-09-16T21:19:41.786Z; _gcl_au=1.1.24671558.1663363182; _cq_duid=1.1663363182.1ugK9sLQAyPCTXDp; _ga_B0NS054E7V=GS1.1.1663415759.6.0.1663415764.55.0.0; _ga=GA1.2.942408735.1663363182; _scid=5a85a0d9-03c5-4598-8aad-0b1c55925665; __adal_id=f437e020-cbc4-4b4d-85f7-cecdba4a9769.1663363182.7.1663415760.1663401530.ccd1210c-88d9-4e34-b50b-cedc7f85f619; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D19861%26ke%3D%28not%2520set%29; __adal_cw=1663363182442; _gid=GA1.2.1138289269.1663363183; _fbp=fb.1.1663363182798.6001455; _uetsid=47f76380360511ed834e3bdf111f6f6e; _uetvid=47f76c40360511eda44e1345a5d6d1f7; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22%24device_id%22%3A%20%22183482bf9741ec-01d94a3ef71ff98-306d464a-140000-183482bf9755c4%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2219861%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22balor-ghn.com%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Thu, 15 Sep 2022 12:11:07 GMT
etag: W/"47e-183410f5378"
content-encoding: gzip
content-length: 775
expires: Sat, 17 Sep 2022 12:55:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 17 Sep 2022 12:55:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 29 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 9ff95f5238c81576a696a583448c583e
46c640c88c05eff94436e5ec39d6339481623354
30d534c9148cf242f10ad4f5f6cf99fb9555f5b696acbf1970f986d490671f3f
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 29069
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Sat, 17 Sep 2022 12:01:15 GMT
expires: Sun, 18 Sep 2022 00:01:15 GMT
etag: "136c1-cNu5okS1rHZvqcM/9a5nqzsiX18"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fmBtvEsF71IMhY8_Mo9qdd7W-uAjoI7WGyIbx0mMGF91bEQVAwENAg==
age: 3267
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 17 Sep 2022 13:00:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 2209
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 8.0 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (23033), with no line terminators
Hash 0f16280f78683c4dcb392b7df7a5ddc0
379551a0ea6b3b2d1ecbf40be1b15fc575dfc00c
6866325a547f2dbee73e122e987dba0e1a0277769d6e9525a3765a7100d041e7
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: X-AB=0d6e407936704bd380072f5891d28b0e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 7961
server: CloudFront
date: Fri, 16 Sep 2022 19:50:55 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: public, s-maxage=86400, max-age=600
etag: 0d6e407936704bd380072f5891d28b0e
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qqnpb_wh4cVSoTNfVImReAEnBhy3yC8nEyfKgitv6_cYM3XDs81ewQ==
age: 61487
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=18A4DD0CE27162701F1ECF2EE3266368; domain=.bing.com; expires=Thu, 12-Oct-2023 12:55:42 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0BC47DA3DB724992B095DB6F90833B1B Ref B: OSL30EDGE0312 Ref C: 2022-09-17T12:55:42Z
date: Sat, 17 Sep 2022 12:55:42 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 362089b1736455ea45e49a07c8901d6a
43a8bd5413ec595b873f959b69bade5aab25f6d3
b9eeb4bfc11976f62f9d53fd686c3ad4d699fdf7d14fad6d4916febcf60a3bf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57443), with no line terminators
Hash 1e9c4d503a9e162d8b549dc3d9c040e2
1fa99d7d7e878cdd45567af4b0c3c65542036c1d
f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 20:19:10 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "d4de8398858246712016031c834bb061+gzip+gzip"
accept-ranges: bytes
date: Sat, 17 Sep 2022 12:55:42 GMT
x-served-by: cache-iad-kcgs7200138-IAD, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15317
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8014ea74946aee77ef2f3b9a264be553
fda85fc27ac2f811e543c11436cf5623cbd46bb2
271b1db0f8cff912a931b78cedb32fd59adeb60025dbcbd7cc5add7d03c82f7c
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 17 Sep 2022 01:41:05 GMT
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: he0EGA_bCu2XdU3yCLyr0LxusVt3DD_gOKAxUZicsxywDoJ6qm1waA==
Age: 40478
status.thawte.com/
200 OK 471 B IP
Hash 887bf83879ba394e3e64fe8abbf20699
9970e7134f6bc14c83b8fd9ae357d7fdeb2a7e6f
02801303639e3ea487fbb235a2169ba25a8257491385af95471bdb607c152f13
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6384
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:42 GMT
Last-Modified: Sat, 17 Sep 2022 11:09:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:42 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash dc730ac97070a9b27874dc324febf171
6514f2dda4d07286b6f21af9a6db7391565c2b88
f1b9cb7c2d2c88baf81dfe1311ef700dc4dad10560235bcc8e2c6c6dec4b8014
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 371
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:42 GMT
Last-Modified: Sat, 17 Sep 2022 12:49:31 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa86a62c870c1ce23fd85f73e99d7964
81af6fd2507bb58c6b040fd5f494de01d22e7102
76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/tracking/track/v3/p?stm=1663419325801&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fbalor-ghn.com%2F&cid=etoro&p=%7B%22et%22%3A1663419325799%2C%22nr%22%3A%22Returning%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2219861%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A%228%22%2C%22sid%22%3A%2295a3206d-2f3b-4c50-a6c8-186140d35c4d%22%2C%22duid%22%3A%22f437e020-cbc4-4b4d-85f7-cecdba4a9769%22%2C%22cw%22%3A1663363182442%7D&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&domain=go.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1663419325801&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fbalor-ghn.com%2F&cid=etoro&p=%7B%22et%22%3A1663419325799%2C%22nr%22%3A%22Returning%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2219861%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A%228%22%2C%22sid%22%3A%2295a3206d-2f3b-4c50-a6c8-186140d35c4d%22%2C%22duid%22%3A%22f437e020-cbc4-4b4d-85f7-cecdba4a9769%22%2C%22cw%22%3A1663363182442%7D&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&domain=go.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1663419325801&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fbalor-ghn.com%2F&cid=etoro&p=%7B%22et%22%3A1663419325799%2C%22nr%22%3A%22Returning%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2219861%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A%228%22%2C%22sid%22%3A%2295a3206d-2f3b-4c50-a6c8-186140d35c4d%22%2C%22duid%22%3A%22f437e020-cbc4-4b4d-85f7-cecdba4a9769%22%2C%22cw%22%3A1663363182442%7D&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&domain=go.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:43 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 0a5dfee4843dc2535441aea247c3b9ea
c1769ea86ce4b98611bae1c5be7e4ec4c49af8a8
82fe89883901b59746f2dcf82f983f5022ce9dcaaf89174aefce3026cc9b0495
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5706
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Last-Modified: Sat, 17 Sep 2022 11:20:37 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 0a5dfee4843dc2535441aea247c3b9ea
c1769ea86ce4b98611bae1c5be7e4ec4c49af8a8
82fe89883901b59746f2dcf82f983f5022ce9dcaaf89174aefce3026cc9b0495
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5706
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Last-Modified: Sat, 17 Sep 2022 11:20:37 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9730b7d7d5f0481f65712991a899f4b8
facb4df5e4a4ac98b9bdd126c7dbb531cf0fe1e7
15d7d8acbcd94d9ca8579cc31a9ec621e76408663bc4b047e5e127acb14334a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 572 B IP
File type gzip compressed data, from Unix\012- data
Hash aa02833e49ee94dac4af1188d799a1ee
82c4f73aa868962586146df50cb25e8761ff22e1
3c228226509c0f3cf612d23baa268254e672104019a797de69dac54682cb3c31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/i/adsct?bci=3&eci=2&event_id=18efb4a8-7df5-4ac6-9782-3a435f5317ef&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=18efb4a8-7df5-4ac6-9782-3a435f5317ef&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=18efb4a8-7df5-4ac6-9782-3a435f5317ef&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: muc_ads=211ee6fa-5d16-45cb-8500-b94dbace426e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:42 GMT
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=0
x-response-time: 104
x-connection-hash: 840fb37a62731ed9f2623c3265379732ef50fe58605fdea9aea407656aa0d186
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=4dddd3b1-419e-45b9-b900-5ca001639f80&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=4dddd3b1-419e-45b9-b900-5ca001639f80&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=4dddd3b1-419e-45b9-b900-5ca001639f80&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: muc_ads=211ee6fa-5d16-45cb-8500-b94dbace426e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:42 GMT
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=0
x-response-time: 113
x-connection-hash: 840fb37a62731ed9f2623c3265379732ef50fe58605fdea9aea407656aa0d186
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 0 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,sdk-context
Referer: https://go.etoro.com/
Origin: https://go.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: POST
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 0
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 96 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 04433ec1ff671159abfc4515498ce810
912c15f4f6359fcc1a830cea7feecb50b0096695
90d4582122c25303fff98bc5bb393a6545d9c4a872225587978be8e0c234bcef
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Sdk-Context: appId
Content-Length: 3578
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: AE1E167A-A8B8-4980-8E4D-1CC7C66CA9BF
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sat, 17 Sep 2022 12:55:42 GMT
content-length: 96
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1663419325684&hl=3&op=0&ag=718972423&rand=94767152966121981221188009165105769111096180920669888201891701665750181212&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fbalor-ghn.com%2F&ss=1280x1024&nc=0&at=&di=W1siZWYiLDk0OTVdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDIsMCwwLDAsMSwyLDIsMSwyLDAsMCwxLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDQsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMiwiLSJdLFstMywiW10iXSxbLTQsIi0iXSxbLTUsIi0iXSxbLTYsIntcIndcIjpbXCIwXCIsXCJ3ZWJwYWNrSnNvbnBcIixcIl9fY29yZS1qc19zaGFyZWRfX1wiLFwiY29yZVwiLFwiWm9uZVwiLFwiX196b25lX3N5bWJvbF9fUHJvbWlzZVwiLFwiX196b25lX3N5bWJvbF9fWm9uZUF3YXJlUHJvbWlzZVwiLFwiX196b25lX3N5bWJvbF9fZmV0Y2hcIixcIl9fem9uZV9zeW1ib2xfX3NldFRpbWVvdXRcIixcIl9fem9uZV9zeW1ib2xfX2NsZWFyVGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fc2V0SW50ZXJ2YWxcIixcIl9fem9uZV9zeW1ib2xfX2NsZWFySW50ZXJ2YWxcIixcIl9fem9uZV9zeW1ib2xfX3JlcXVlc3RBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fY2FuY2VsQW5pbWF0aW9uRnJhbWVcIixcIl9fem9uZV9zeW1ib2xfX2FsZXJ0XCIsXCJfX3pvbmVfc3ltYm9sX19wcm9tcHRcIixcIl9fem9uZV9zeW1ib2xfX2NvbmZpcm1cIixcIl9fem9uZV9zeW1ib2xfX011dGF0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ludGVyc2VjdGlvbk9ic2VydmVyXCIsXCJfX3pvbmVfc3ltYm9sX19GaWxlUmVhZGVyXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYWJvcnRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYW5pbWF0aW9uY2FuY2VscGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFuaW1hdGlvbmVuZHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hbmltYXRpb25pdGVyYXRpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYXV4Y2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYmVmb3JlaW5wdXRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYmx1cnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jYW5wbGF5cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNhbnBsYXl0aHJvdWdocGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jdWVjaGFuZ2VwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2xvc2VwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY29udGV4dG1lbnVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGJsY2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJhZ3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFnZW5kcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRyYWdlbnRlcnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFnbGVhdmVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJhZ292ZXJwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJvcHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kdXJhdGlvbmNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25lbXB0aWVkcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmVuZGVkcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmVycm9ycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmZvY3VzcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmdvdHBvaW50ZXJjYXB0dXJlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmlucHV0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmludmFsaWRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9ua2V5ZG93bnBhdGNoZWRcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy03LCItIl0sWy04LCItIl0sWy05LCIrIl0sWy0xMCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMTIsIlwidW5zcGVjaWZpZWRcIiJdLFstMTMsIi0iXSxbLTE0LCItIl0sWy0xNSwiLSJdLFstMTYsIjAiXSxbLTE3LCIxNiJdLFstMTgsIlsxLDAsMCwwXSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAwMiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsOTM5LDAsMCwwLDAsXCItXCIsXCItXCJdIl0sWy0yMCwiOTQyNDA4NzM1LjE2NjMzNjMxODIiXSxbLTIxLCItIl0sWy0yMiwiW1wiLVwiLFwiblwiXSJdLFstMjMsIisiXSxbLTI0LCJbXSJdLFstMjUsIi0iXSxbLTI2LCItIl0sWy0yNywiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0yOSwiLSJdLFstMzAsIltcInZcIiwwXSJdLFstMzEsImZhbHNlIl0sWy0zMiwiMCJdLFstMzMsIi0iXSxbLTM0LCItIl0sWy0zNSwiWzE2NjM0MTkzMjU2NjMsMF0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstMzcsIi0iXSxbLTM4LCJjLC0xLC0xLDI5MCwwLDEsMCwxMiw4LDcsLTEsMCwsNjc2LDEwOTMsMTA5MiJdLFstMzksIltcIjIwMTAwMTAxXCIsMCxcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCwwXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNDIsIjE3NzAwNTAwODEiXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDExMTEwMDEwMCJdLFstNDQsIjAsNSwwLDUiXSxbLTQ1LCItIl0sWy00NiwiMCJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTQ4LCIwLDAiXSxbLTQ5LCItIl0sWy01MCwiLSJdLFstNTEsIi0iXSxbLTUyLCItIl0sWy01MywiMDEwIl0sWyJkZGIiLCIwLDAsMCwxLDAsMiwwLDEsMCwwLDAsMCwwLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDMsMCwwLDAsMiwwLDAsMCwwLDAsMCwxLDEsMCwxLDEzLDEsMCwwLDAsMCwwIl0sWyJibmNoIiw1MF0sWyJhYm5jaCIsNTBdXQ%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=XFAG4wFbLA&pto=1114&ver=47&gac=942408735.1663363182&mei=&ap=&duid=1.1663363182.1ugK9sLQAyPCTXDp&suid=1.1663419325.HjCgjPxghXb6mqHM&tuid=1.1663419325.lA6jzAkwcVN9qFj2&fbc=1.1663363182798.6001455>m=W10%3D&it=53%2C958%2C27&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=47f76c40360511eda44e1345a5d6d1f7&spa=1&urid=0
200 OK 968 B URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1663419325684&hl=3&op=0&ag=718972423&rand=94767152966121981221188009165105769111096180920669888201891701665750181212&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fbalor-ghn.com%2F&ss=1280x1024&nc=0&at=&di=W1siZWYiLDk0OTVdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDIsMCwwLDAsMSwyLDIsMSwyLDAsMCwxLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDQsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMiwiLSJdLFstMywiW10iXSxbLTQsIi0iXSxbLTUsIi0iXSxbLTYsIntcIndcIjpbXCIwXCIsXCJ3ZWJwYWNrSnNvbnBcIixcIl9fY29yZS1qc19zaGFyZWRfX1wiLFwiY29yZVwiLFwiWm9uZVwiLFwiX196b25lX3N5bWJvbF9fUHJvbWlzZVwiLFwiX196b25lX3N5bWJvbF9fWm9uZUF3YXJlUHJvbWlzZVwiLFwiX196b25lX3N5bWJvbF9fZmV0Y2hcIixcIl9fem9uZV9zeW1ib2xfX3NldFRpbWVvdXRcIixcIl9fem9uZV9zeW1ib2xfX2NsZWFyVGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fc2V0SW50ZXJ2YWxcIixcIl9fem9uZV9zeW1ib2xfX2NsZWFySW50ZXJ2YWxcIixcIl9fem9uZV9zeW1ib2xfX3JlcXVlc3RBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fY2FuY2VsQW5pbWF0aW9uRnJhbWVcIixcIl9fem9uZV9zeW1ib2xfX2FsZXJ0XCIsXCJfX3pvbmVfc3ltYm9sX19wcm9tcHRcIixcIl9fem9uZV9zeW1ib2xfX2NvbmZpcm1cIixcIl9fem9uZV9zeW1ib2xfX011dGF0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ludGVyc2VjdGlvbk9ic2VydmVyXCIsXCJfX3pvbmVfc3ltYm9sX19GaWxlUmVhZGVyXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYWJvcnRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYW5pbWF0aW9uY2FuY2VscGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFuaW1hdGlvbmVuZHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hbmltYXRpb25pdGVyYXRpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYXV4Y2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYmVmb3JlaW5wdXRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYmx1cnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jYW5wbGF5cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNhbnBsYXl0aHJvdWdocGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jdWVjaGFuZ2VwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2xvc2VwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY29udGV4dG1lbnVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGJsY2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJhZ3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFnZW5kcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRyYWdlbnRlcnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFnbGVhdmVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJhZ292ZXJwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJvcHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kdXJhdGlvbmNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25lbXB0aWVkcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmVuZGVkcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmVycm9ycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmZvY3VzcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmdvdHBvaW50ZXJjYXB0dXJlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmlucHV0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmludmFsaWRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9ua2V5ZG93bnBhdGNoZWRcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy03LCItIl0sWy04LCItIl0sWy05LCIrIl0sWy0xMCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMTIsIlwidW5zcGVjaWZpZWRcIiJdLFstMTMsIi0iXSxbLTE0LCItIl0sWy0xNSwiLSJdLFstMTYsIjAiXSxbLTE3LCIxNiJdLFstMTgsIlsxLDAsMCwwXSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAwMiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsOTM5LDAsMCwwLDAsXCItXCIsXCItXCJdIl0sWy0yMCwiOTQyNDA4NzM1LjE2NjMzNjMxODIiXSxbLTIxLCItIl0sWy0yMiwiW1wiLVwiLFwiblwiXSJdLFstMjMsIisiXSxbLTI0LCJbXSJdLFstMjUsIi0iXSxbLTI2LCItIl0sWy0yNywiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0yOSwiLSJdLFstMzAsIltcInZcIiwwXSJdLFstMzEsImZhbHNlIl0sWy0zMiwiMCJdLFstMzMsIi0iXSxbLTM0LCItIl0sWy0zNSwiWzE2NjM0MTkzMjU2NjMsMF0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstMzcsIi0iXSxbLTM4LCJjLC0xLC0xLDI5MCwwLDEsMCwxMiw4LDcsLTEsMCwsNjc2LDEwOTMsMTA5MiJdLFstMzksIltcIjIwMTAwMTAxXCIsMCxcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCwwXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNDIsIjE3NzAwNTAwODEiXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDExMTEwMDEwMCJdLFstNDQsIjAsNSwwLDUiXSxbLTQ1LCItIl0sWy00NiwiMCJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTQ4LCIwLDAiXSxbLTQ5LCItIl0sWy01MCwiLSJdLFstNTEsIi0iXSxbLTUyLCItIl0sWy01MywiMDEwIl0sWyJkZGIiLCIwLDAsMCwxLDAsMiwwLDEsMCwwLDAsMCwwLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDMsMCwwLDAsMiwwLDAsMCwwLDAsMCwxLDEsMCwxLDEzLDEsMCwwLDAsMCwwIl0sWyJibmNoIiw1MF0sWyJhYm5jaCIsNTBdXQ%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=XFAG4wFbLA&pto=1114&ver=47&gac=942408735.1663363182&mei=&ap=&duid=1.1663363182.1ugK9sLQAyPCTXDp&suid=1.1663419325.HjCgjPxghXb6mqHM&tuid=1.1663419325.lA6jzAkwcVN9qFj2&fbc=1.1663363182798.6001455>m=W10%3D&it=53%2C958%2C27&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=47f76c40360511eda44e1345a5d6d1f7&spa=1&urid=0
IP
File type ASCII text, with very long lines (3026), with no line terminators
Hash a4147bb5e0f7e64c85b069bab9f5227d
be2096aec01e7292bbeb9a3b44cafc79f7cc0abd
5f1092464025a4ff56ad196199ebef3886539653ea595c740e995109a36c95a9
GET /ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1663419325684&hl=3&op=0&ag=718972423&rand=94767152966121981221188009165105769111096180920669888201891701665750181212&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fbalor-ghn.com%2F&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=XFAG4wFbLA&pto=1114&ver=47&gac=942408735.1663363182&mei=&ap=&duid=1.1663363182.1ugK9sLQAyPCTXDp&suid=1.1663419325.HjCgjPxghXb6mqHM&tuid=1.1663419325.lA6jzAkwcVN9qFj2&fbc=1.1663363182798.6001455>m=W10%3D&it=53%2C958%2C27&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=47f76c40360511eda44e1345a5d6d1f7&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=53a7608140a3f3c355b3b038cbb9b34e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sat, 17 Sep 2022 12:55:43 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 968
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 924cca70f1f5ba02eb6af21a65e0bdd1
3baa75b1ea32068f96cfd5060e4e1eda71c61da8
e55036d990bb7071b7e51e739b8650538ce67d821cc966b0baa99ff40220973b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3561
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Last-Modified: Sat, 17 Sep 2022 11:56:22 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=35D836F02CFA62E90CC224D22DAD636D; domain=.bing.com; expires=Thu, 12-Oct-2023 12:55:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 49E4581A9B94431F80EEEF4CD4E195A4 Ref B: OSL30EDGE0312 Ref C: 2022-09-17T12:55:43Z
date: Sat, 17 Sep 2022 12:55:43 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=89c7d242-e83a-4040-83a9-b169b15c550f&sid=47f76380360511ed834e3bdf111f6f6e&vid=47f76c40360511eda44e1345a5d6d1f7&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fbalor-ghn.com%2F<=920&evt=pageLoad&sv=1&rn=710718
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=89c7d242-e83a-4040-83a9-b169b15c550f&sid=47f76380360511ed834e3bdf111f6f6e&vid=47f76c40360511eda44e1345a5d6d1f7&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fbalor-ghn.com%2F<=920&evt=pageLoad&sv=1&rn=710718
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=89c7d242-e83a-4040-83a9-b169b15c550f&sid=47f76380360511ed834e3bdf111f6f6e&vid=47f76c40360511eda44e1345a5d6d1f7&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fbalor-ghn.com%2F<=920&evt=pageLoad&sv=1&rn=710718 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1BC0FF3D91DD6544227EED1F908A64F6; domain=.bing.com; expires=Thu, 12-Oct-2023 12:55:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FAC0B521EF2648B493E332437ADC164D Ref B: OSL30EDGE0312 Ref C: 2022-09-17T12:55:43Z
date: Sat, 17 Sep 2022 12:55:43 GMT
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sat, 17 Sep 2022 13:15:43 GMT
Date: Sat, 17 Sep 2022 12:55:43 GMT
Content-Length: 3249
Connection: keep-alive
match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
200 OK 3.1 kB URL HTTP/2 match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:43 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 5.9 kB IP
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dL+wUUebr7aarnPimXuyayWi1fcBSy5xCX0d1r1D1hQRiEVthfiIxQIyO0Hx/pzxmghkhGOMsPw=
x-amz-request-id: 5GRR420RJVGY4XXQ
date: Sat, 17 Sep 2022 12:52:45 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 179
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (58485)
Hash 4f35050aaafdfee1748a6ad7316c117f
93ec96b0396998876e9f9be8a1819a481bc8096a
ee9ba0588eb530b2072cd78ccf7f733dd7443df68d063d5786b663eed18c12e0
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BYUpApup9exoN8fuzorCxQyq6qD0xhfo+7P6Kmvc9Zj6n1lbWJfz6NSrpirb3McPq/Bovs1lnrQ=
x-amz-request-id: P8R0787QBTYQK4X2
x-amz-replication-status: PENDING
last-modified: Wed, 14 Sep 2022 11:44:58 GMT
etag: "49c659bca5a38c6763c6819649a1e6ba"
x-amz-version-id: QIi.7hWTPIiy2HU_s2tFUpEwZCxiyKKS
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 17 Sep 2022 12:55:43 GMT
via: 1.1 varnish
age: 21
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1663419343.414084,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 14
content-length: 17944
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 7ee4ac573d5df6fc37a2a783cd36d939
a27bd4ecb3f903c91512856e6d8afbedac60f546
4717854836ee09986ce6e2cf5815027c1cd727b8e8e1ca8e71e480c08530fbf8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5921
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Last-Modified: Sat, 17 Sep 2022 11:17:02 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash 7ee4ac573d5df6fc37a2a783cd36d939
a27bd4ecb3f903c91512856e6d8afbedac60f546
4717854836ee09986ce6e2cf5815027c1cd727b8e8e1ca8e71e480c08530fbf8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4100
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:43 GMT
Last-Modified: Sat, 17 Sep 2022 11:47:23 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 314
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=XFAG4wFbLA&ts=441&cb=1663419326125
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=XFAG4wFbLA&ts=441&cb=1663419326125
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=XFAG4wFbLA&ts=441&cb=1663419326125 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=53a7608140a3f3c355b3b038cbb9b34e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 17 Sep 2022 12:55:43 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iFtZh4b7cU1bMLCvdYin0sM1BJPK6I4UiU/jYXfwQPj8l3r6pXIb2hvFsHsunnO4/IlXkSMF5TeAmSObparX7Q==
x-amz-request-id: D3MWSDHQFZ254MMH
date: Sat, 17 Sep 2022 12:35:10 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Sun, 05 Sep 2021 23:47:17 GMT
x-amz-expiration: expiry-date="Tue, 11 Oct 2022 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: RcIj4KYxBIEB8OtXKzJB2onK.A1t0mw0
accept-ranges: bytes
content-type: application/octet-stream
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 1234
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=4dddd3b1-419e-45b9-b900-5ca001639f80&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=4dddd3b1-419e-45b9-b900-5ca001639f80&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=4dddd3b1-419e-45b9-b900-5ca001639f80&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.27 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:42 GMT
server: tsa_o
set-cookie: personalization_id="v1_uSFcjw1fhIO+slFRUSNCcw=="; Max-Age=63072000; Expires=Mon, 16 Sep 2024 12:55:43 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=631138519
x-response-time: 103
x-connection-hash: e48a10a3f0818616a19fd6bb173b846577cb7ba73a447b11662a0f0b28b9230a
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=18efb4a8-7df5-4ac6-9782-3a435f5317ef&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=18efb4a8-7df5-4ac6-9782-3a435f5317ef&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=18efb4a8-7df5-4ac6-9782-3a435f5317ef&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c8c96415-27f3-40de-934c-23f6ae40b5a7&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.27 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:43 GMT
server: tsa_o
set-cookie: personalization_id="v1_0vlWBTSucUXoKUdcGXia5A=="; Max-Age=63072000; Expires=Mon, 16 Sep 2024 12:55:43 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: e48a10a3f0818616a19fd6bb173b846577cb7ba73a447b11662a0f0b28b9230a
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1663419326205%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D19861%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQIEusqgZI4ZGQAAAYNLhOLgxM6IBNn2Tr7q-ZizMnOeQdQBcLGuVAXRrc0hjK1opJalJl-4MkH58A; Max-Age=2592000; Expires=Mon, 17 Oct 2022 12:55:43 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQKULIwxJGyyRgAAAYNLhOLgD2iCk9ZM8dDve-aFGjLp5AFWqsOgT4G6Lkd01chnFfT5XNmWPNNwC0dikBhlOg; Max-Age=2592000; Expires=Mon, 17 Oct 2022 12:55:43 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&dc5b228c-320e-421a-8d70-acae31f8ccc4"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 17-Sep-2023 12:55:43 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2387:u=1:x=1:i=1663419343:t=1663505743:v=2:sig=AQEi4ynBNmyqenktM9KkksP1MaZorXG_"; Expires=Sun, 18 Sep 2022 12:55:43 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXo3v8WAQ8C2Y0V8g6KZg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A58839028C824740869F616AFEFB9E7B Ref B: OSL30EDGE0522 Ref C: 2022-09-17T12:55:43Z
date: Sat, 17 Sep 2022 12:55:43 GMT
content-length: 0
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1663419326242&data=%7B%22id%22%3A831%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1663419326233%2C%22cv%22%3A%2220220914-11-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1663419326241%2C%22ref%22%3A%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A10793%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 1.3 kB URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1663419326242&data=%7B%22id%22%3A831%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1663419326233%2C%22cv%22%3A%2220220914-11-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1663419326241%2C%22ref%22%3A%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A10793%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
File type ASCII text, with very long lines (2380), with no line terminators
Hash 52e4dfb9ae83cb9b70864adebfdb90cc
16bc64bf07ce1bc1c92fbae70f257979bd6d477c
afe7bf6469d1e2c8dc20325509c8445c04b5ea3f8c275c2adbb17901ea80c778
GET /1005612/trc/3/json?tim=1663419326242&data=%7B%22id%22%3A831%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1663419326233%2C%22cv%22%3A%2220220914-11-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1663419326241%2C%22ref%22%3A%22http%3A%2F%2Fbalor-ghn.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A10793%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 17 Sep 2022 12:55:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1624-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1663419343.495111,VS0,VE94
vary: Accept-Encoding
x-vcl-time-ms: 94
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Sat%2C%2017%20Sep%202022%2012%3A55%3A26%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fbalor-ghn.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Sat%2C%2017%20Sep%202022%2012%3A55%3A26%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fbalor-ghn.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Sat%2C%2017%20Sep%202022%2012%3A55%3A26%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fbalor-ghn.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:43 GMT
expires: Sat, 17 Sep 2022 12:55:43 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBM_DJWMCEB6Q-2KCfvfl5FbF8fQZTJQFEgEBAQEVJ2MvYwAAAAAA_eMAAA&S=AQAAAsuwVI_TRC3IEyEMlsGCPp8; Expires=Sun, 17 Sep 2023 18:55:43 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1663419326205%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D19861%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1663419326205%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D19861%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1663419326205%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D19861%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&837d2b43-1537-4bd0-8f5e-7647049cb9c5"; Domain=.linkedin.com; Expires=Sun, 17-Sep-2023 12:55:43 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20220917125543e57189f1-50b6-4476-8eb1-c9716c930b82AQFi6HCxdPMQZ0QxKIw_TkFcqsGVLA2U"; Domain=.www.linkedin.com; Expires=Sun, 17-Sep-2023 12:55:43 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjM0MTkzNDM7MjswMjHygJ3SKA9c+RZZ01MiO3rt5+5RJJHI3dN/6kXG73KvhQ==; Domain=.linkedin.com; Expires=Thu, 16 Mar 2023 12:55:43 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2387:u=1:x=1:i=1663419343:t=1663505743:v=2:sig=AQEi4ynBNmyqenktM9KkksP1MaZorXG_"; Expires=Sun, 18 Sep 2022 12:55:43 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXo3v8YCErdRgqCgb+2Rg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 704011A51F2644C7B2155492AA414DD9 Ref B: OSL30EDGE0522 Ref C: 2022-09-17T12:55:43Z
date: Sat, 17 Sep 2022 12:55:43 GMT
content-length: 0
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 17 Sep 2022 12:55:43 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 975a03d7d2b347e3b6e0dffccfbe544b
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=016483294942969284&referrer=http%3A%2F%2Fbalor-ghn.com%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=016483294942969284&referrer=http%3A%2F%2Fbalor-ghn.com%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=016483294942969284&referrer=http%3A%2F%2Fbalor-ghn.com%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 17 Sep 2022 12:55:43 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: bda0be8e6ec957027ef84a7943703f04
content-encoding: gzip
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1663419326205&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&6a5f5bbc-7e20-48d6-8fa3-22b24386451f"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 17-Sep-2023 12:55:43 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2387:u=1:x=1:i=1663419343:t=1663505743:v=2:sig=AQEi4ynBNmyqenktM9KkksP1MaZorXG_"; Expires=Sun, 18 Sep 2022 12:55:43 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXo3v8aNPeFS7eNTyGeaQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 03ECA066C6AC4F4EAECD4DBC2C4D7CDC Ref B: OSL30EDGE0522 Ref C: 2022-09-17T12:55:43Z
date: Sat, 17 Sep 2022 12:55:43 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 480d5e80004a6638258838573f807bf8
10b8dc327f31bfd94c81f2ac231dae6a99508b42
9c4b8e5a57f5197c226a58bdccf50bbee1a7e5852022240489f671b2d5ded9ae
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 17 Sep 2022 12:55:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 16 Sep 2022 20:43:54 GMT
Expires: Sat, 17 Sep 2022 20:43:54 GMT
ETag: "10b8dc327f31bfd94c81f2ac231dae6a99508b42"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1602
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=53a7608140a3f3c355b3b038cbb9b34e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sat, 17 Sep 2022 12:55:44 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1666
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=53a7608140a3f3c355b3b038cbb9b34e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sat, 17 Sep 2022 12:55:44 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash aed5c13969bdc90b872910ea2c9015a3
61bbc261df357a0674f185f9fe3a1f816d362ae5
53a682f7d9cb0bf643ef90a5efad99d02e63ce96d6fea34aeaacb392b118d7c2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Sep 2022 12:55:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 02:54:23 GMT
Expires: Wed, 21 Sep 2022 02:54:22 GMT
Etag: "61bbc261df357a0674f185f9fe3a1f816d362ae5"
Cache-Control: max-age=308917,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74c1ff775dc6b51d-OSL
ocsp.digicert.com/
200 OK 727 B IP
Hash da7c6efa393ac4e075359488f9b12e40
dd71bdf916cb93556783cd980421ddd67e54ee00
442bd332a7718c3da3939f927886ada4760a65a7ba1cf31961297b4c8f86a31a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5064
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Sep 2022 12:55:45 GMT
Last-Modified: Sat, 17 Sep 2022 11:31:21 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 727
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=942408735.1663363182&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22942408735.1663363182%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%22%22%2C%22dcm_gid%22%3A%221138289269.1663363183%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=&dcm_gid=1138289269.1663363183&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=96382207060804060term%3Dvalue
200 OK 19 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=942408735.1663363182&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22942408735.1663363182%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%22%22%2C%22dcm_gid%22%3A%221138289269.1663363183%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=&dcm_gid=1138289269.1663363183&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=96382207060804060term%3Dvalue
IP
File type ASCII text, with very long lines (2300)
Hash 88d79049e3433c7ee7d40a13cc58df52
7164c0c72e3caf0b713109367987ec1121c83047
5cce2f1d23f2f77cb09536d7e000f09ccbde77a8c49ee2b2a67cac8dc9275006
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=942408735.1663363182&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22942408735.1663363182%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%22%22%2C%22dcm_gid%22%3A%221138289269.1663363183%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=&dcm_gid=1138289269.1663363183&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=96382207060804060term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 17 Sep 2022 12:55:45 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=0b653ecd-3688-11ed-9e6a-6b8445e77880;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash 74ba1f3d78827ed552130df6bfb708f3
a9534b9148e8663f53f358bdb09ecb32622bf5b4
dca1c0ef9cc5a1769cc2a7827817933e3c5504b7b0de9f2056c470c0701b7308
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 17 Sep 2022 12:55:45 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1666
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=53a7608140a3f3c355b3b038cbb9b34e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sat, 17 Sep 2022 12:55:46 GMT
content-length: 0
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
204 No Content 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/monitoring?applicationIdentifier=etoro-landing-pages HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://go.etoro.com/
Origin: https://go.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
date: Sat, 17 Sep 2022 12:55:47 GMT
server: Kestrel
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://go.etoro.com
access-control-max-age: 3600
request-context: appId=cid-v1:9ca8c352-5fcb-4c17-b640-90373f23089b
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=etoro-landing-pages HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1085
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:47 GMT
content-length: 0
server: Kestrel
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin
access-control-allow-origin: https://go.etoro.com
request-context: appId=cid-v1:9ca8c352-5fcb-4c17-b640-90373f23089b
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1666
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=53a7608140a3f3c355b3b038cbb9b34e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sat, 17 Sep 2022 12:55:48 GMT
content-length: 0
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 49 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash fdcfaa151ed9fabe4aec3e51e7f03676
071f28cd6cccfb00201273fb8e63836e138c0015
e60a1bb1e0e9f39d31e1a723d53840e58f1ef33ac06a36f6604223083e07eeb5
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=utf-8
Content-Length: 9082
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: CD86E110-6B41-45F3-98DE-474BC7208A2F
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sat, 17 Sep 2022 12:55:48 GMT
content-length: 49
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 17 Sep 2022 12:55:43 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=4d7ec162-82a4-425b-85f4-7a3e3cb38668; domain=.adsrvr.org; expires=Sun, 17-Sep-2023 12:55:43 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=96382207060804060term=value
200 0 B URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=96382207060804060term=value
IP
GET /spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=96382207060804060term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: accept-encoding,origin,access-control-request-headers,access-control-request-method,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sat, 17 Sep 2022 12:55:43 GMT
connection: close
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=942408735.1663363182&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22942408735.1663363182%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%22%22%2C%22dcm_gid%22%3A%221138289269.1663363183%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=&dcm_gid=1138289269.1663363183&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1663419345299409&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1663419345994
200 OK 0 B URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=942408735.1663363182&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22942408735.1663363182%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%22%22%2C%22dcm_gid%22%3A%221138289269.1663363183%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=&dcm_gid=1138289269.1663363183&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1663419345299409&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1663419345994
IP
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=942408735.1663363182&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%22942408735.1663363182%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%22%22%2C%22dcm_gid%22%3A%221138289269.1663363183%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=&dcm_gid=1138289269.1663363183&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fbalor-ghn.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D19861%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1663419345299409&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1663419345994 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sat, 17 Sep 2022 12:55:46 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt="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";Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
IP
GET /track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 17 Sep 2022 12:55:46 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf
200 OK 0 B URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf
IP
GET /studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: nblT89t0u5uwevTGLaU+eog/wH9xflAljrdcDrqCcjA1Zvspu4vaMAZfVa9+65eN/1JBbSNznbs=
x-amz-request-id: MN2THFD78W4RQFT5
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 16 Jan 2022 07:07:48 GMT
etag: "d5888614c5b3d758ef59fa6600e7425e"
x-amz-meta-sha256: d144af5ebf9f2ce2c4e6eca89b38e8fc5961014e66d4d76ea46e832be3d6f959
x-amz-meta-s3b-last-modified: 20220116T070301Z
x-amz-version-id: YMg5tZdevSXydv6Mb5hXds7Amba8krCd
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sat, 24 Sep 2022 12:55:42 GMT
date: Sat, 17 Sep 2022 12:55:42 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
78.41.204.28
34.117.237.239
151.101.84.157
23.38.201.81
93.184.220.29
20.54.24.199
209.15.13.136
18.193.146.82
0.0.0.0