asoss.us/voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php
200 OK 543 B URL HTTP/1.1 asoss.us/voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (543), with no line terminators
Hash 1484d9d181c2d073c6dbaf6ba484ea26
b3f7584cc732b996959bf5025b8f0a60e2e84dd0
6c805ddcc243c867204d76e08c4927e268592ab2b028c117af68fbc6b2401861
Analyzer Verdict Alert fortinet Phishing
GET /voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php HTTP/1.1
Host: asoss.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 543
content-type: text/html; charset=utf-8
date: Sun, 25 Dec 2022 01:37:58 GMT
server: nginx
set-cookie: sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9; path=/; domain=.asoss.us; expires=Fri, 12 Jan 2091 04:52:05 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad598540c6639aaaa344fb3ce4f3162f
b0b9f86d50de7dc23bdc7aee2f45d79a06165afc
4e9aaff330ce0c9c11f6bb8502fe21296b1845151bace75f73908a3194d5d0a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16550
Expires: Sun, 25 Dec 2022 06:13:48 GMT
Date: Sun, 25 Dec 2022 01:37:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19202
Expires: Sun, 25 Dec 2022 06:58:00 GMT
Date: Sun, 25 Dec 2022 01:37:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 25 Dec 2022 01:34:54 GMT
content-type: application/json
age: 184
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b1d63d9d906daa309dc263b4991bbe9
04680ddd86781d46dfe6a9671571b3ad1f3758f3
46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8536
Expires: Sun, 25 Dec 2022 04:00:14 GMT
Date: Sun, 25 Dec 2022 01:37:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ow8IA/lTbswWzHvlWu5TTF2Rcr5R5RO917tSqkCeUZI1dW68Pbi6aOELeq7x3+dCRvY+yRD8PdM=
x-amz-request-id: 4MAZJ2XVDZHC4NYJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 25 Dec 2022 00:54:41 GMT
age: 2597
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Dec 2022 01:37:58 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
asoss.us/favicon.ico
404 Not Found 9 B IP
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: asoss.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://asoss.us/voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php
Cookie: sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 25 Dec 2022 01:37:58 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 25 Dec 2022 01:08:04 GMT
age: 1794
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d7938ab2263405a708c44813f3e16cb8
3ba9f4363ecc2834ea1211f761ce2d04e0077ab3
8a8ef4218bcd8ecb1f12ecdb74f3f453a7093be8dd3c233615577dcc9b40fa92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5087
Cache-Control: max-age=118417
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:37:59 GMT
Etag: "63a6c129-1d7"
Expires: Mon, 26 Dec 2022 10:31:36 GMT
Last-Modified: Sat, 24 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
asoss.us/voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MTkzOTQ3OCwiaWF0IjoxNjcxOTMyMjc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3B1YjMzb2RxdDY2dWRlc2MxOWp1dTYiLCJuYmYiOjE2NzE5MzIyNzgsInRzIjoxNjcxOTMyMjc4MTYzMjIzfQ.MaTOVmD4cej8wCH8rQKMcQm6cryzwG0GSfHeT9xZsX4&sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9
302 Found 11 B URL HTTP/1.1 asoss.us/voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MTkzOTQ3OCwiaWF0IjoxNjcxOTMyMjc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3B1YjMzb2RxdDY2dWRlc2MxOWp1dTYiLCJuYmYiOjE2NzE5MzIyNzgsInRzIjoxNjcxOTMyMjc4MTYzMjIzfQ.MaTOVmD4cej8wCH8rQKMcQm6cryzwG0GSfHeT9xZsX4&sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9
IP
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MTkzOTQ3OCwiaWF0IjoxNjcxOTMyMjc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc3B1YjMzb2RxdDY2dWRlc2MxOWp1dTYiLCJuYmYiOjE2NzE5MzIyNzgsInRzIjoxNjcxOTMyMjc4MTYzMjIzfQ.MaTOVmD4cej8wCH8rQKMcQm6cryzwG0GSfHeT9xZsX4&sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9 HTTP/1.1
Host: asoss.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://asoss.us/voice/shared/09acb222c4fb7d8da28237f3efd42036/buukjfsy4flikv7ibldwk1xk.php
Cookie: sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 25 Dec 2022 01:37:59 GMT
location: http://ciar-kep.com/zcvisitor/c2fea2c2-83f4-11ed-91b3-1204539e144d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
server: nginx
set-cookie: sid=c2c8f9b8-83f4-11ed-8fd7-037de4bf9ac9; path=/; domain=.asoss.us; expires=Fri, 12 Jan 2091 04:52:06 GMT; max-age=2147483647; HttpOnly
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SizcwngvT2S+dV/1UJPkLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ndUc/G31o7ljLH4kDPDvjjAWIoQ=
ciar-kep.com/zcvisitor/c2fea2c2-83f4-11ed-91b3-1204539e144d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
200 1.1 kB URL HTTP/1.1 ciar-kep.com/zcvisitor/c2fea2c2-83f4-11ed-91b3-1204539e144d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2b9b9489a92303f0d214d0523c17b961
7eac6ee49d7eccc34f304b0bd3b40afcc0cd2935
5871fc80a0a9fffce16c7309c19376646e7c494a1a4d2a20ef943042d56fd0a0
Analyzer Verdict Alert quad9 Sinkholed
GET /zcvisitor/c2fea2c2-83f4-11ed-91b3-1204539e144d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51 HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://asoss.us/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 25 Dec 2022 01:37:59 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: pBJAbPUk
ciar-kep.com/zcredirect?visitid=c2fea2c2-83f4-11ed-91b3-1204539e144d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 692 B URL HTTP/1.1 ciar-kep.com/zcredirect?visitid=c2fea2c2-83f4-11ed-91b3-1204539e144d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 22e7f1c46fbde9518145c1e9511f530c
7cba13722c566e5667f21f027485f5796551d46e
485977f2fb030707bd8700447d8edc9a44e3f595ba30c26e8dad3e1ad3ef5a3b
Analyzer Verdict Alert quad9 Sinkholed
GET /zcredirect?visitid=c2fea2c2-83f4-11ed-91b3-1204539e144d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ciar-kep.com/zcvisitor/c2fea2c2-83f4-11ed-91b3-1204539e144d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=d6d59750-40af-11ed-993f-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 25 Dec 2022 01:37:59 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: sAAFautZ
selymer-sperts.com/zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB12300_A72681_TClick.aspx_click_id%3Dwavjuejjgr8u0pdl2supb57g&caid=2caa955f-111f-45db-8afd-edee2c3b3e29&zpid=c2fea2c2-83f4-11ed-91b3-1204539e144d&cid=wavjuejjgr8u0pdl2supb57g&rt=R
302 Found 0 B URL HTTP/2 selymer-sperts.com/zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB12300_A72681_TClick.aspx_click_id%3Dwavjuejjgr8u0pdl2supb57g&caid=2caa955f-111f-45db-8afd-edee2c3b3e29&zpid=c2fea2c2-83f4-11ed-91b3-1204539e144d&cid=wavjuejjgr8u0pdl2supb57g&rt=R
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zp-redirect?target=https%3A%2F%2Fmed.etoro.com%2FB12300_A72681_TClick.aspx_click_id%3Dwavjuejjgr8u0pdl2supb57g&caid=2caa955f-111f-45db-8afd-edee2c3b3e29&zpid=c2fea2c2-83f4-11ed-91b3-1204539e144d&cid=wavjuejjgr8u0pdl2supb57g&rt=R HTTP/1.1
Host: selymer-sperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ciar-kep.com/
Cookie: cc-v4=d3FFrRgWrY0IUbo3fuiPXqDwaVdShnEyzoHRb28BJIrJVdpfzxFf9QEvqQVEA15aBI8hEgtE0NPXRPoTKKgCiQ8bKk%2BJFoXsyOCQu2fGuuAdBjIhd9mWGYY4cYoRE8CStJ22L9cHr65FKxzbML4pcQ%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 25 Dec 2022 01:37:59 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://med.etoro.com/B12300_A72681_TClick.aspx_click_id=wavjuejjgr8u0pdl2supb57g
pragma: no-cache
set-cookie: cc-v4=6McCFcvMAICc%2FkFxpKnfDqVv9cV695VZofe9HIzvGLBW1V8W8oYqEWZG%2B11nN8CA3Ke1hiDr0oWK30gGMQpbp68Q4OX7DIcnDhGi%2F%2BzArJo2kaN11mvUiuGt94zTm7k7F6hAvB7t%2Fn4Wwz%2FNjTFjiQ%3D%3D; Max-Age=31536000; Expires=Mon, 25-Dec-2023 01:37:59 GMT; Domain=selymer-sperts.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ciar-kep.com/favicon.ico
404 653 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: ciar-kep.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ciar-kep.com/zcredirect?visitid=c2fea2c2-83f4-11ed-91b3-1204539e144d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Sun, 25 Dec 2022 01:37:59 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: YuLBCVii
med.etoro.com/B12300_A72681_TClick.aspx_click_id=wavjuejjgr8u0pdl2supb57g
301 Moved Permanently 186 B URL HTTP/1.1 med.etoro.com/B12300_A72681_TClick.aspx_click_id=wavjuejjgr8u0pdl2supb57g
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a43b4a8045545920027d08e5eda05ab6
7ba6e0c67a22962d64ff3f6cd8793b659c2fa429
9ff0aeb9b236853cc20cd47f808df4747fa1614f3d549500b31beae25560325c
GET /B12300_A72681_TClick.aspx_click_id=wavjuejjgr8u0pdl2supb57g HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T00:24:10.6326622Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 186
Location: http://med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
X-Robots-Tag: noindex
Expires: Sun, 25 Dec 2022 01:38:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Dec 2022 01:38:00 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=12300&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ciar-kep.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
Expires: Sun, 25 Dec 2022 01:38:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Dec 2022 01:38:00 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=12300&A=72681&Task=Click
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=12300&A=72681&Task=Click HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T00:24:10.6326622Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://content.etoro.com/lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Sun, 25 Dec 2022 01:38:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Dec 2022 01:38:00 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=szbdqqjpgl3ay5xmasyuurmw; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoro.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoro.com.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etorocn.com.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoroasia-securities.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoroasia.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoroasia.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoroasia.com.cn; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; domain=.etoroasia-Investing.com; expires=Thu, 23-Feb-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; domain=.etoro.com; expires=Tue, 24-Jan-2023 00:00:00 GMT; path=/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4567
Expires: Sun, 25 Dec 2022 02:54:07 GMT
Date: Sun, 25 Dec 2022 01:38:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4567
Expires: Sun, 25 Dec 2022 02:54:07 GMT
Date: Sun, 25 Dec 2022 01:38:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc91439-b5c5-4e34-9a35-d0d01e44e767.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc91439-b5c5-4e34-9a35-d0d01e44e767.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 869162c237be7787a0ce7f77d8138fab
de8d05483030d643e52384855ec71aa86c7ae679
1ddafd96f4d2d9343a0ab5d1b07adfe5917cfe2b8e0e99e95ffe2d9cf05cf78d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc91439-b5c5-4e34-9a35-d0d01e44e767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10261
x-amzn-requestid: 26599021-2d46-4d78-bdcb-6e17f6d421a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEeFedIAMFYEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12882-124ee28534a6572d49c89379;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NrhzGArxeQj614rMsXQvfEm33kb0PI80GPwR6lSHmSbNyUPSFukkIA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 07:25:05 GMT
age: 65575
etag: "de8d05483030d643e52384855ec71aa86c7ae679"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa97f58bb-2d67-4ddc-978e-1bf0230a9e6f.jpeg
200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa97f58bb-2d67-4ddc-978e-1bf0230a9e6f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b9d7f2c9f926dd26c3a7046454c9cfb1
0906cee4a98ea4bd2ec1ded9ef9d782871f34f84
fbdd3fc928d8d0d0258d1c1fe018f79c856c9ee3ac2623f5d55f5b0e93db4d97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa97f58bb-2d67-4ddc-978e-1bf0230a9e6f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4148
x-amzn-requestid: 68370910-934b-46b9-9d6f-e5b8c5003c1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq7HNEUrIAMFkHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7722d-3b68668640ef15eb015a4230;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:42:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4ErH3KTtbCJH4K8hZ53-pKvoMCKEoxpYooUlds4SJIKodzuKGmouQg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:47:19 GMT
etag: "0906cee4a98ea4bd2ec1ded9ef9d782871f34f84"
content-type: image/jpeg
age: 13841
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6699a9ae-bfe2-45e8-b58c-7be35c06940a.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6699a9ae-bfe2-45e8-b58c-7be35c06940a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c768f906c5cc15efe7830420b6be847e
020fbadae57763c372e11d26749a3dead4906e81
005592c3e24a348573036bfe78af7ab949d66bcd98c249e3b0a52852ce2de6b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6699a9ae-bfe2-45e8-b58c-7be35c06940a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9615
x-amzn-requestid: 39099e11-1866-4bcb-8b7c-54ca82dc339c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dpBhCHegIAMFnQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a6afa0-37a4dfb15bc9cb350016574c;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 07:52:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: N5hi8zMfgNXnb-oKMTPPKlm8nmFKjghjG7e3HST9Jd1ZfgkRJFuQhQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:47:19 GMT
age: 13841
etag: "020fbadae57763c372e11d26749a3dead4906e81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8403a671b2c4b3b2ce2f8a9eba9de2c0
5437391241a500b6b0d2118120e835d2673e7d39
1e52a144b08ff6efe2da52dfdfeccbc4cea9270536cf5e7a2a769bbff9cd7d2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 85384b79-8a0c-48b0-aea4-c2a9229e33f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dlFHYGDfoAMFXWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a51bc8-06b5d9773c472db9263f8af4;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 03:08:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5anTM5iHpGcpvwo4KtPX6uo16USSdAlclaYgGJAxNItde4E2a12R5g==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 03:46:10 GMT
age: 78710
etag: "5437391241a500b6b0d2118120e835d2673e7d39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2a1f057-d23b-436a-bff6-82977d1d5527.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2a1f057-d23b-436a-bff6-82977d1d5527.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8dee6282a859a55ad30148c8e36e3cc8
c55bdd00c0d39f468908bd22a62a6e9b3182e4b8
4d951f758f425e3a8f127d2bc6e43558ee9ad775f147e8aae6f016007fbf4160
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2a1f057-d23b-436a-bff6-82977d1d5527.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11084
x-amzn-requestid: ee635254-6e82-4c96-b4b3-590fabf5b188
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEXGT9IAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12882-248a27d00736e6c643109714;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G1M5t4EvERnCaL7wcyu0_8-3jqhBZ2AS5571X_K6omN_EH4l-NjmBQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 14:42:40 GMT
age: 39320
etag: "c55bdd00c0d39f468908bd22a62a6e9b3182e4b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52c03f0a-a30c-400b-be52-c45ddd21f3f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52c03f0a-a30c-400b-be52-c45ddd21f3f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e89b02f98520ca6888ef5be50bc38880
94446097c59ae77bc9e417928d54aaa38a13c337
2f2f303eae60e4ea8ee889424431125fa32728726b70e27536cf903a99af1c6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52c03f0a-a30c-400b-be52-c45ddd21f3f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10398
x-amzn-requestid: a6543702-6966-4b61-9f6b-c7f6fd2e498a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dobFjGwOoAMFR3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a67223-751bae6516ad4a6d0164b505;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 03:29:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dCvz-xI53uQCPt1LUwMuTUUlgbbl4xqV-bhW9HO0F-EHU_3Vqw7XYw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 08:58:14 GMT
age: 59986
etag: "94446097c59ae77bc9e417928d54aaa38a13c337"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 9f495bd2be9aac581bfdd682d1284e44
94bb81010c4a6fa2065de18cdc898b30dc55c0f5
acef96ef5608db47a7aba6b9533b571f74cc81b5f494526ad425ce7af77e8e1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1532
Cache-Control: max-age=149412
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:00 GMT
Etag: "63a74820-2d7"
Expires: Mon, 26 Dec 2022 19:08:12 GMT
Last-Modified: Sat, 24 Dec 2022 18:42:40 GMT
Server: ECS (amb/6BA2)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash 9f495bd2be9aac581bfdd682d1284e44
94bb81010c4a6fa2065de18cdc898b30dc55c0f5
acef96ef5608db47a7aba6b9533b571f74cc81b5f494526ad425ce7af77e8e1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1532
Cache-Control: max-age=149412
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:00 GMT
Etag: "63a74820-2d7"
Expires: Mon, 26 Dec 2022 19:08:12 GMT
Last-Modified: Sat, 24 Dec 2022 18:42:40 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 727
go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
200 OK 3.7 kB URL HTTP/2 go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (19313)
Hash 3864b4f74e7b228fc2ed670553a48ed5
79a6eb7ed9da95750dc2a47081d2e718f15a3943
170952423aed4b7c3c7bc614c4dba57ca7cdea408c8ebac00bcbfb7076940cc4
GET /en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term= HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; ai_user=wjAowuEmF9wdZIhoXGApkL|2022-12-25T00:24:09.068Z; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; ln_or=eyIyOTI5Njg0IjoiZCJ9; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D; __cf_bm=gHgbMAzLOjGypnbuiFLxml8lI.mUk.w6ZqXCGfmlioo-1671932280-0-AdrkS0c3+N0G5TcY1q4FunlmN9UlRHZO/JtZ5eia2MCGBdxstpr1g2GehQ4JOUHxtr1x84jyXQZ7wd4hI9PPxAggQFSA8WDOnL62dMLrFs0b; __cfruid=c667f3889f61db758d075f0e70fdb8e419c0ff32-1671932280
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
etag: W/"585a-WPuzSGj+3BvWjTlMYwNEyjSdjGs"
content-encoding: gzip
content-length: 3712
expires: Sun, 25 Dec 2022 01:38:00 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 01:38:00 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/runtime-es2015.162f77144e4e42fba0c7.js
200 OK 2.9 kB URL HTTP/2 marketing.etorostatic.com/landingpages/runtime-es2015.162f77144e4e42fba0c7.js
IP
File type ASCII text, with very long lines (5046), with no line terminators
Hash accd8e65ad554cb358718c45a980fa3b
20f8ec400475be3d7be23713b80db607ddd0e147
1f4292a87ba0ffe1f7388cb0a5cd736f6dde9e83e1bd820547a31f871dd8be52
GET /landingpages/runtime-es2015.162f77144e4e42fba0c7.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lKnpZ6c0x9qdqvlmFRoHd/Yu7G4i/139fHow0xAanoc96ul2YjrUErJzjR0fcpSgEgm0X+zao44=
x-amz-request-id: ZYF9DVHSE2N5008K
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Dec 2022 11:33:04 GMT
etag: "45d4a0c7debd531f6a610bd4a9c74a9f"
x-amz-version-id: B0rrZjlYWpsMGxIZixyAwajD6DIMo_tG
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 2895
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/styles.4159b2ff516aba5c48ab.css
200 OK 15 kB URL HTTP/2 marketing.etorostatic.com/landingpages/styles.4159b2ff516aba5c48ab.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 32e55da414604a1ed757a63b9776ff26
518f36ca5aa46261e153818ecc3c3f5308fd0b86
a5fe579cd6285a3a62e55e77c634cb93d5f92e17421bdcc82602ba836e2989a9
GET /landingpages/styles.4159b2ff516aba5c48ab.css HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4WHSzd08A74omWAJY+zyTJwvl/YV1JGMqXyr2ZxNmFUIJFCKLFk4F3t77S+jxQtxVSrQQM4vwwg=
x-amz-request-id: 79VJP0FFYW1T069J
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 13:44:33 GMT
etag: "eaefbf053d2af2c6e1fc8e711162bce1"
x-amz-version-id: NPgBWsHnMabFC.TpEgGlMCbtZXQ5vyEN
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 14764
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/polyfills-es2015.3e1ba76a6f03ff4d1cc5.js
200 OK 32 kB URL HTTP/2 marketing.etorostatic.com/landingpages/polyfills-es2015.3e1ba76a6f03ff4d1cc5.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 75d4096bbaf2d984273cf74343819180
e787227d20001b8aeaab2efc8f81121a094ada11
1b0efaa03cbcb407f83f3fad1cdd5a90074d63dba0b8878301ae9fa1545ffa87
GET /landingpages/polyfills-es2015.3e1ba76a6f03ff4d1cc5.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IHhFmdjjspMNCpQbhx4F/U88AlMBI62CmyPKHc3XjSGpb0EaCfhWZDeTIsDXoJJmk2HLpCs3PEQ=
x-amz-request-id: JKYBYEGM3A05F24T
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Dec 2022 11:33:04 GMT
etag: "c7c8e74d09161deae349aefcd33fe1b7"
x-amz-version-id: 3Bf1BkL5lMbPYbKnxeuSx7VEPwf2dFZY
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 32283
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9527d889a5b94c28b4dcd8809ffba513
b2ee81348df6ebc3f72fcd64b7767df0a1903fb5
9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9527d889a5b94c28b4dcd8809ffba513
b2ee81348df6ebc3f72fcd64b7767df0a1903fb5
9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15572, version 1.6554\012- data
Hash e64cab167bbdc04807429d10873901a0
afc44700053c9a28f9ab26f6aec4862ac1d0795d
60f9b5203842a4fe2d52f7c96f3c57b755bbf8f347535469739bcc6f95a9c4b5
GET /s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:20 GMT
expires: Sat, 23 Dec 2023 13:33:20 GMT
cache-control: public, max-age=31536000
age: 129881
last-modified: Mon, 27 Apr 2015 23:46:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16276, version 1.6554\012- data
Hash 73437ad44345f889f45e27c428d618d8
578d7b5ff3816f7f666984e303364c81be0771d0
f164941997fbc7f7ed7d2a7c3e86b997d647f1910d93fdc2462dd86fd5affa48
GET /s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 09:39:02 GMT
expires: Sat, 23 Dec 2023 09:39:02 GMT
cache-control: public, max-age=31536000
age: 143939
last-modified: Mon, 27 Apr 2015 23:45:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9527d889a5b94c28b4dcd8809ffba513
b2ee81348df6ebc3f72fcd64b7767df0a1903fb5
9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketing.etorostatic.com/landingpages/1-es2015.42bb491a1fb29763db90.js
200 OK 3.2 kB URL HTTP/2 marketing.etorostatic.com/landingpages/1-es2015.42bb491a1fb29763db90.js
IP
File type ASCII text, with very long lines (9402), with no line terminators
Hash 096b85daf24610a2d87e696ca6523e77
809d6a51fffcb5418cc648c3440c64998d80a080
74122803c4b01501c031032821f07b2e3c47b96e2f9a4e0fdab56796e120fef8
GET /landingpages/1-es2015.42bb491a1fb29763db90.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1yIJgWtSWn22ioIdq6m5cHG9zBOZAQqa0PDnOPd3Cs0MVRd2ZCkeuXyIKpr/0zRU4LRL0Kk5+IU=
x-amz-request-id: 470BCVCHFXC3G2JD
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2022 12:47:46 GMT
etag: "6a3aab6fc18dcccf333d21422adcb4fd"
x-amz-version-id: K5eWNNzhJYbh4RZmWt6F32mNL.gz7vOi
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 3234
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/0-es2015.1637544fc36ab1554aa7.js
200 OK 11 kB URL HTTP/2 marketing.etorostatic.com/landingpages/0-es2015.1637544fc36ab1554aa7.js
IP
File type HTML document, ASCII text, with very long lines (40370), with no line terminators
Hash 51b29c69a7edcf9b242e770e2ab2284c
516f26a47b9d1dd1f43e45da115d72fdfad379c6
7e8a1f780131c29a4387001c0f9aaf7c4f8b302c4cd02605c1a6cfc268815a8c
GET /landingpages/0-es2015.1637544fc36ab1554aa7.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QGEy9zNxpenSb0DmO9xsLPEEcZ5TgcGueUdeuo1fy8yljek9uuQZqw8eBaZDumY7UY0ffq3nOog=
x-amz-request-id: FFM5P3AB3B1V23W7
x-amz-replication-status: COMPLETED
last-modified: Sun, 18 Dec 2022 11:33:02 GMT
etag: "04ef60e08a6fbb9c20fb683d7e21a58c"
x-amz-version-id: orjZZW6DBziApCc0ps4m1h8Ac.vWJlQP
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 10839
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/60-es2015.a2b2af1d949410711a3d.js
200 OK 10 kB URL HTTP/2 marketing.etorostatic.com/landingpages/60-es2015.a2b2af1d949410711a3d.js
IP
File type ASCII text, with very long lines (48140), with no line terminators
Hash 878b4ef825f1eb325498328cdfa234f0
6f8f1e77772df66791f5dafba240c5cadba4cf48
bf583691c06214eae3727a5aaecea43e534d5d4da6b08c555ac6501082482e1e
GET /landingpages/60-es2015.a2b2af1d949410711a3d.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: AXPfSrpAEA+htSA2v1SOvemXkBjl+1TrzefEZfLKucFhThy56tCICQ7NpFKXfsjRu+5WNqJv0d4=
x-amz-request-id: TSTADZ10DA2YF5KF
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Dec 2022 10:55:51 GMT
etag: "46b916abec33da0e1b5bb633f6eb2af9"
x-amz-version-id: _Tsomay34gu8cm.Uey1sEClpk9wtMM0Y
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 10076
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/2-es2015.8b467e0cdf0be9e73e47.js
200 OK 23 kB URL HTTP/2 marketing.etorostatic.com/landingpages/2-es2015.8b467e0cdf0be9e73e47.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4be7f33891c0eb5c888ba1f294db51ac
77fce23fd2bd4ebe7f9f6202d0187d392310c0bc
842c5468e24c8fbb65ea5af7d386b2ae5be60dd76e8dd5036ffe728fd1e26c10
GET /landingpages/2-es2015.8b467e0cdf0be9e73e47.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: dP2ZDSZCHaovAHbRsDtsyYYOpYwpLf0qOKRJUMk9bJNqA4HBWTYnCA87z40foX8svMiA7r5RGzs=
x-amz-request-id: RMX7AG624MS9NCAX
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 13:44:31 GMT
etag: "ac01d078998af9d17378a3ac299169da"
x-amz-version-id: vFu8CzoVsaA59Hcl7NUR6qdmYD8k.ZYZ
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 23438
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
go.etoro.com//assets/i18n/general/en-gb.json?disableClientId=true
200 OK 25 kB URL HTTP/2 go.etoro.com//assets/i18n/general/en-gb.json?disableClientId=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65282), with no line terminators
Hash f667084f0c29fc27b97e5d41cbca4de6
519e8c0b9733e6c5c2cf3cd5630667cae4ed1070
397e9208bba7676bfbb997ef78668ab49ce2efc1672444d49d888401623afc63
GET //assets/i18n/general/en-gb.json?disableClientId=true HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |611da397806c48458dfe74ca099a7a1e.3516a470379b4cdd
traceparent: 00-611da397806c48458dfe74ca099a7a1e-3516a470379b4cdd-01
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; ai_user=wjAowuEmF9wdZIhoXGApkL|2022-12-25T00:24:09.068Z; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; ln_or=eyIyOTI5Njg0IjoiZCJ9; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D; __cf_bm=gHgbMAzLOjGypnbuiFLxml8lI.mUk.w6ZqXCGfmlioo-1671932280-0-AdrkS0c3+N0G5TcY1q4FunlmN9UlRHZO/JtZ5eia2MCGBdxstpr1g2GehQ4JOUHxtr1x84jyXQZ7wd4hI9PPxAggQFSA8WDOnL62dMLrFs0b; __cfruid=c667f3889f61db758d075f0e70fdb8e419c0ff32-1671932280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Sun, 18 Dec 2022 11:29:38 GMT
etag: W/"1a58f-18524ff20d0"
content-encoding: gzip
content-length: 25297
expires: Sun, 25 Dec 2022 01:38:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 01:38:01 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
go.etoro.com//assets/i18n/practiceAccount/en-gb.json?disableClientId=true
200 OK 161 B URL HTTP/2 go.etoro.com//assets/i18n/practiceAccount/en-gb.json?disableClientId=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4d7b5343b18b66af32ad04df3af0f141
e48d9cf3fe26179965bb67651ce10681cbc5e4f0
a226c2d50f701f61dc7e94c18696e5b61ee5e54e4e6e45cf636676b143a46086
GET //assets/i18n/practiceAccount/en-gb.json?disableClientId=true HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Request-Id: |611da397806c48458dfe74ca099a7a1e.2a7a7f8ac5bb40c2
traceparent: 00-611da397806c48458dfe74ca099a7a1e-2a7a7f8ac5bb40c2-01
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; ai_user=wjAowuEmF9wdZIhoXGApkL|2022-12-25T00:24:09.068Z; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; ln_or=eyIyOTI5Njg0IjoiZCJ9; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D; __cf_bm=gHgbMAzLOjGypnbuiFLxml8lI.mUk.w6ZqXCGfmlioo-1671932280-0-AdrkS0c3+N0G5TcY1q4FunlmN9UlRHZO/JtZ5eia2MCGBdxstpr1g2GehQ4JOUHxtr1x84jyXQZ7wd4hI9PPxAggQFSA8WDOnL62dMLrFs0b; __cfruid=c667f3889f61db758d075f0e70fdb8e419c0ff32-1671932280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 161
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Sun, 18 Dec 2022 11:29:38 GMT
etag: W/"a1-18524ff20d0"
expires: Sun, 25 Dec 2022 01:38:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 01:38:01 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3fe4743f9a53cff9cc725d5da6fef2f
21f8c945671d492d20d3ae73535b44b80393bab4
27baee9b01e7877fd04130c0485cac8e3b14c17f8bfb5882d51cb470ea007db8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 104 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35498)
Size 104 kB (104259 bytes)
Hash 70f0439dce04a533168fd3c1f7b9949c
25496204948bd1c632c148dbb0c6ca48b58fab86
fc9832ed503b2fd46425a295e3f2cfed9187347b9b40f1a84363fa32b927045c
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Dec 2022 01:38:01 GMT
expires: Sun, 25 Dec 2022 01:38:01 GMT
cache-control: private, max-age=900
last-modified: Sun, 25 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104259
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16080, version 1.6554\012- data
Hash f3515b8fcce21d4bbb0da28b297495ed
808769b38614943b5116b559ac7528386b7cb020
efdf47ca1d1eee9ad503d589c6931daf40228fcac1817eb13e6559750ef830b8
GET /web-client/fonts/opensans/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Z9JeQCuGyOkwxRBpodu/5MlPHdc2/IAjWb7KGZuG6ZvKfGfTHIKGwIYOKovax505G3C9y+35Qg8=
x-amz-request-id: FWKCBFE1RNWYB1ND
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 13:10:06 GMT
etag: "f3515b8fcce21d4bbb0da28b297495ed"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 13:09:21 GMT
x-amz-version-id: otYh1Ncyl7G3ih0ct3Y9fsdhm4R1ysiw
accept-ranges: bytes
content-type: application/octet-stream
content-length: 16080
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Tue, 24 Jan 2023 01:38:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/slider/etoro_loader_cyc.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/slider/etoro_loader_cyc.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash dfe88860b37800e402465e2ba8fcda23
267e494006dcd2f90cde9b773c2edd73bd230f98
222a7f68e4b9ac4a8b7db1596bcc4c4ae259f7b5b35ed398acd2c3af8064de90
GET /studio/content/lp/cache_1/etoro-lps/slider/etoro_loader_cyc.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GPCmlvzk9rPljoMmR3aQ3hpWq9SZTopM01dX7M06y1UjsKVD3ZAQCdNyFBHqFFdgYv/9sI8I6Qg=
x-amz-request-id: 8688S015PP6J8Q2Y
x-amz-replication-status: COMPLETED
last-modified: Mon, 04 Jun 2018 04:50:25 GMT
etag: "dfe88860b37800e402465e2ba8fcda23"
x-amz-meta-s3b-last-modified: 20180411T105754Z
x-amz-version-id: QRygE2XwGUU0V_sJeR79ocSaxLTx2E9F
accept-ranges: bytes
content-type: image/png
content-length: 1243
server: AmazonS3
unused62: 8096267
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 01:38:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3fe4743f9a53cff9cc725d5da6fef2f
21f8c945671d492d20d3ae73535b44b80393bab4
27baee9b01e7877fd04130c0485cac8e3b14c17f8bfb5882d51cb470ea007db8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
etoro-cdn.etorostatic.com/web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
200 OK 16 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16212, version 1.6554\012- data
Hash aa21f9964cd88c7d6a03b32c11e6bf3e
14a380d9ddfdee7aecf38c241c450bfe813d94e5
30427ab021a9d28d0f9724a8565c2463ee5a3938417dd0750d58ab79ac07cf12
GET /web-client/fonts/opensans/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 6C1t8GvSv81cZptUhytVMMe2X5ewzahFZx9UnyBmh1pWY2jNhsWbbrjyu1gwl1491G3b8Q+H8a8=
x-amz-request-id: 8687NPXTHAMGJYTJ
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 13:10:06 GMT
etag: "aa21f9964cd88c7d6a03b32c11e6bf3e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 13:09:02 GMT
x-amz-version-id: MkWGLAQn6l9OArJd9xvShnWsj3x_Qdqn
accept-ranges: bytes
content-type: application/octet-stream
content-length: 16212
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Tue, 24 Jan 2023 01:38:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/general_images/logos/etoro-logo-new-green.svg
200 OK 985 B URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/general_images/logos/etoro-logo-new-green.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2351), with no line terminators
Hash 9ea843b771a1377348645dddb7bdf7e3
e8a461139873746992776a63f4eb6c7116d9fb71
716be7311d45bac625c5a8fd43008f7730eacfba8eff3caf7c0182f10959b91d
GET /studio/content/lp/cache_1/etoro-lps/general_images/logos/etoro-logo-new-green.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 6s5xNU7R5oqLX4J//V86M17qq1RdMCO3/nt5RXVvS2gr+4nFog4nkxkLpB8GfIUFqHg3jm1gc51qsRbg9tVvZw==
x-amz-request-id: V0TZCM5E3DGHNGNR
x-amz-replication-status: COMPLETED
last-modified: Wed, 23 Feb 2022 08:30:20 GMT
etag: "2f81173921eb7c27be1f465a830404f0"
x-amz-meta-sha256: d326e618548d8ac6892a1e8c5ce11d39016d58264d4bae8a252730a0d130e5e8
x-amz-meta-s3b-last-modified: 20220223T082909Z
x-amz-version-id: OwOa4OVeQCkctL2IgpC4LODkH.61JBgU
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 01:38:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 985
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg
200 OK 379 kB URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1912x975, components 3\012- data
Size 379 kB (379017 bytes)
Hash 444db7330e5f6c6174dd99517d426901
caa3955e521aeea7c64d4047aa79dc4e655f3612
6634917012d16e2ea2c3ef7377aea5d218ba44aec83ba0234190721867e788bd
GET /studio/content/lp/cache_1/etoro-lps/practice-account/images/background/tiles-virtual-watchlist.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: AgSIajSMZyq3XT5bz9fCAV/AvIuKIrum6raJ0smpe+Ps6LCBH+818DUkj/fUlRDKkfNMN4eAzLk=
x-amz-request-id: KJQ7GVKFB1RQ0714
x-amz-replication-status: COMPLETED
last-modified: Sun, 21 Apr 2019 08:43:33 GMT
etag: "444db7330e5f6c6174dd99517d426901"
x-amz-meta-s3b-last-modified: 20190417T112337Z
x-amz-version-id: wSGGDjjTkxo89gmM615DGwzx7J9Na0NG
accept-ranges: bytes
content-type: image/jpeg
content-length: 379017
server: AmazonS3
unused62: 8096267
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 01:38:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
go.etoro.com/favicon.ico
200 OK 775 B IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash c51e8432d3ea1b9cfafbc7d535d49d3f
6bfdf34b6df4a8ab0c50e3f27d14f3a4bfaa2e7b
640ffaf99ccae6ec1b549047e5cab7c55b9b3eae0ef1911a9cdfa9582ead4f37
GET /favicon.ico HTTP/1.1
Host: go.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; ai_user=wjAowuEmF9wdZIhoXGApkL|2022-12-25T00:24:09.068Z; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; ln_or=eyIyOTI5Njg0IjoiZCJ9; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D; __cf_bm=gHgbMAzLOjGypnbuiFLxml8lI.mUk.w6ZqXCGfmlioo-1671932280-0-AdrkS0c3+N0G5TcY1q4FunlmN9UlRHZO/JtZ5eia2MCGBdxstpr1g2GehQ4JOUHxtr1x84jyXQZ7wd4hI9PPxAggQFSA8WDOnL62dMLrFs0b; __cfruid=c667f3889f61db758d075f0e70fdb8e419c0ff32-1671932280; ai_session=Kd+UbdlYPMtAV2+KrQnfKe|1671932279046|1671932279046
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
request-context: appId=cid-v1:35936646-66d4-4f8d-a033-e97456c4c9a7
x-powered-by: Express
accept-ranges: bytes
last-modified: Sun, 18 Dec 2022 11:29:38 GMT
etag: W/"47e-18524ff20d0"
content-encoding: gzip
content-length: 775
expires: Sun, 25 Dec 2022 01:38:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Dec 2022 01:38:01 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 30 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash bbf12f5d9b89f3c0c8b3d7bd445cfcbb
c3979a6e1c61a65f017279d12fa1926bd1eca260
2aa420f8725b71fcf2877ba23310d35279fc81bff5be050edc49fdeecbcf3411
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 30231
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Sat, 24 Dec 2022 20:41:16 GMT
expires: Sun, 25 Dec 2022 08:41:16 GMT
etag: "14351-RIWjsv313PWYI4RyEPNyETuIUAc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9UGWVlwAnW38tl7UiMNxnxYHOn3g-_P-ZfA1H2tutizY8zEz6Z4wlA==
age: 17805
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IRCfMyEJ6XLVHS/waVgNagZe5cBkkf5SsjeMeX2BsaGV0iLq5UuJYwCvgNj2V5su0u0580EuP1A=
x-amz-request-id: X57JYQH54681RNKS
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
content-length: 2209
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (30920), with no line terminators
Hash 5c1e6ef321052f9ef17baa3b17775b15
dc24d4674334a60c2b9d1cd9aae0b6ed1bbb09ea
12a2c25fdde940fdbf0dcf5f2743c615bf8acac3ce6d19bf8b55102526bf763f
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: X-AB=0d6e407936704bd380072f5891d28b0e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13268
server: CloudFront
date: Sat, 24 Dec 2022 23:50:57 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: public, s-maxage=86400, max-age=600
etag: 0d6e407936704bd380072f5891d28b0e
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F1WWr-YPn8zxOR17kKIolwTS_9leGdx-iA2HwX9vfmC7eVONqovWow==
age: 6424
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 24 Dec 2022 15:54:34 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r6lHDaNQgciyzi1mFc7fS4oTwNIZKvfUziMPEJKrVxcvDlUyLRPcUg==
Age: 35008
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 915903fa6db6c0224648e3273daf13c8
98bad0e53f8f362341207cf5b1c37ab6c0dbb7d7
cc46e6cbdc91bba473f6337162f3e1d0231e556ca42fdd2fe44947aa1eeac413
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined
200 OK 297 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (597), with no line terminators
Hash a12a5a2936cafe94e1ecbb0f0136da04
b5bf88b8355c29dfbb5907602c3c1cfe4abddd6a
0670b16719313654596fd5d95bd24c494ccdea42f0fdf9bce052361bb7edcb0b
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:01 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 297
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Dec-2022 01:53:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash fcb6bd64a3e472d4bf715de1930fe6da
c78aa445918ae6ae41547886957eab72dca66b43
afcc28b69a5aa505efe07882335867ae5d6e0f69f82e0f0fb8c76498058d0055
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4774
Cache-Control: max-age=133921
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Etag: "63a6fef4-1d7"
Expires: Mon, 26 Dec 2022 14:50:02 GMT
Last-Modified: Sat, 24 Dec 2022 13:30:28 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 915903fa6db6c0224648e3273daf13c8
98bad0e53f8f362341207cf5b1c37ab6c0dbb7d7
cc46e6cbdc91bba473f6337162f3e1d0231e556ca42fdd2fe44947aa1eeac413
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:01 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5934
Cache-Control: max-age=110997
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 08:27:58 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5934
Cache-Control: max-age=110997
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 08:27:58 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5427
Cache-Control: max-age=110490
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 08:19:31 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 622
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ3AMAgDsIuQChskOQemfsHxswVSzbZWur3IMM53rWZarLgHz64XXAFm7PkB/p+1rzIAAAA=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-origin: https://go.etoro.com
cache-control: no-cache, no-transform
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 0
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ec1233b7456781e4e2fb3e8dfea4860
bf61533c9ec2a6310d80457b1231400cf8631868
820ff717f6d3609bf61e238fda2ecfd8fd9aaf77e85760c0154f72461b33de6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=f76428f3-c479-40a8-ba17-586c460f96be&u_sclid=f20ec03f-4441-4a72-ab1b-24a212c753b6
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=f76428f3-c479-40a8-ba17-586c460f96be&u_sclid=f20ec03f-4441-4a72-ab1b-24a212c753b6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=f76428f3-c479-40a8-ba17-586c460f96be&u_sclid=f20ec03f-4441-4a72-ab1b-24a212c753b6 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ3AMAgDsIuQChskOQemfsHxswVSzbZWur3IMM53rWZarLgHz64XXAFm7PkB/p+1rzIAAAA=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:01 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.adalyser.com/tracking/track/v3/p?stm=1671932279498&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fciar-kep.com%2F&cid=etoro&p=%7B%22et%22%3A1671932279496%2C%22nr%22%3A%22Returning%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212300%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A%223%22%2C%22sid%22%3A%224e0890f5-561a-4ebf-9eb0-acad330c682e%22%2C%22duid%22%3A%22dfaf03ac-0725-4cfc-9ab5-4050c1d70303%22%2C%22cw%22%3A1671927849752%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=go.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1671932279498&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fciar-kep.com%2F&cid=etoro&p=%7B%22et%22%3A1671932279496%2C%22nr%22%3A%22Returning%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212300%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A%223%22%2C%22sid%22%3A%224e0890f5-561a-4ebf-9eb0-acad330c682e%22%2C%22duid%22%3A%22dfaf03ac-0725-4cfc-9ab5-4050c1d70303%22%2C%22cw%22%3A1671927849752%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=go.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1671932279498&e=lce1&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&refr=http%3A%2F%2Fciar-kep.com%2F&cid=etoro&p=%7B%22et%22%3A1671932279496%2C%22nr%22%3A%22Returning%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2272681%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22(not%20set)%22%2C%22co%22%3A%2212300%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A%223%22%2C%22sid%22%3A%224e0890f5-561a-4ebf-9eb0-acad330c682e%22%2C%22duid%22%3A%22dfaf03ac-0725-4cfc-9ab5-4050c1d70303%22%2C%22cw%22%3A1671927849752%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=go.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:01 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined;~oref=https://go.etoro.com/
200 OK 298 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined;~oref=https://go.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (596), with no line terminators
Hash 3319dfecf99a3a7795cd90457a4d6649
3ec3cb79c893548af72f303aafde9078879be1bf
132ef4f49b8cef5557aae6ed085e4ff95d1c3fe0b8c2ba3db066fd6a6e8dd550
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined;~oref=https://go.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:01 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 298
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5934
Cache-Control: max-age=110997
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 08:27:58 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ec1233b7456781e4e2fb3e8dfea4860
bf61533c9ec2a6310d80457b1231400cf8631868
820ff717f6d3609bf61e238fda2ecfd8fd9aaf77e85760c0154f72461b33de6e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcf8604a2e2524ce2ec88b3069229507
74921ac0ddce6f7e98f5a5b5994130ef9817226d
2d79eec59ae587d9986860b35bff8b1bbbc11bf1a642b9cb82d9d574316dbd14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined;~oref=https://go.etoro.com/
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined;~oref=https://go.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.1919458127.1671927850;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.1919458127.1671927850undefined;~oref=https://go.etoro.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:01 GMT
expires: Sun, 25 Dec 2022 01:38:01 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcf8604a2e2524ce2ec88b3069229507
74921ac0ddce6f7e98f5a5b5994130ef9817226d
2d79eec59ae587d9986860b35bff8b1bbbc11bf1a642b9cb82d9d574316dbd14
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671932279385&hl=2&op=0&ag=1317291471&rand=641091802602522922012069157526006601792188172298226277698621120711022529816&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fciar-kep.com%2F&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=2iaRRXBzDt&pto=1870&ver=48&gac=1919458127.1671927850&mei=&ap=&duid=1.1671927849.fFkQejhcuskSeFm0&suid=1.1671932279.YwdmqGV7zwVrj3a2&tuid=1.1671932279.Wbmou57GY1b4q8vR&fbc=1.1671927850416.1229952849>m=W10%3D&it=50%2C1722%2C37&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=7373779083ea11edbebffdf9bc146990&spa=1&urid=0
200 OK 1.1 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671932279385&hl=2&op=0&ag=1317291471&rand=641091802602522922012069157526006601792188172298226277698621120711022529816&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fciar-kep.com%2F&ss=1280x1024&nc=0&at=&di=W1siZWYiLDM1NTZdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIxLDAsMCwwLDIsMCwwLDAsMCwyLDEsMCwyLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDQsMCwwLDAsMSwwLDAsMCw0LDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsNCJdLFstMSwiTGludXggeDg2XzY0Il0sWy0yLCItIl0sWy0zLCJbXSJdLFstNCwiLSJdLFstNSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcIndlYnBhY2tKc29ucFwiLFwiX19jb3JlLWpzX3NoYXJlZF9fXCIsXCJjb3JlXCIsXCJab25lXCIsXCJfX3pvbmVfc3ltYm9sX19Qcm9taXNlXCIsXCJfX3pvbmVfc3ltYm9sX19ab25lQXdhcmVQcm9taXNlXCIsXCJfX3pvbmVfc3ltYm9sX19mZXRjaFwiLFwiX196b25lX3N5bWJvbF9fc2V0VGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJUaW1lb3V0XCIsXCJfX3pvbmVfc3ltYm9sX19zZXRJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fcmVxdWVzdEFuaW1hdGlvbkZyYW1lXCIsXCJfX3pvbmVfc3ltYm9sX19jYW5jZWxBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fYWxlcnRcIixcIl9fem9uZV9zeW1ib2xfX3Byb21wdFwiLFwiX196b25lX3N5bWJvbF9fY29uZmlybVwiLFwiX196b25lX3N5bWJvbF9fTXV0YXRpb25PYnNlcnZlclwiLFwiX196b25lX3N5bWJvbF9fSW50ZXJzZWN0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ZpbGVSZWFkZXJcIixcIl9fem9uZV9zeW1ib2xfX29ub25hYm9ydHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hbmltYXRpb25jYW5jZWxwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYW5pbWF0aW9uZW5kcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFuaW1hdGlvbml0ZXJhdGlvbnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hdXhjbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25iZWZvcmVpbnB1dHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25ibHVycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNhbnBsYXlwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2FucGxheXRocm91Z2hwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmN1ZWNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jbG9zZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jb250ZXh0bWVudXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kYmxjbGlja3BhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFncGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRyYWdlbmRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZHJhZ2VudGVycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRyYWdsZWF2ZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcmFnb3ZlcnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25kcm9wcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmR1cmF0aW9uY2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmVtcHRpZWRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZW5kZWRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZXJyb3JwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZm9jdXNwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZ290cG9pbnRlcmNhcHR1cmVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uaW5wdXRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uaW52YWxpZHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25rZXlkb3ducGF0Y2hlZFwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTcsIi0iXSxbLTgsIi0iXSxbLTksIisiXSxbLTEwLCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W119Il0sWy0xMiwiXCJ1bnNwZWNpZmllZFwiIl0sWy0xMywiLSJdLFstMTQsIi0iXSxbLTE1LCItIl0sWy0xNiwiMCJdLFstMTcsIjE2Il0sWy0xOCwiWzEsMCwwLDBdIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDAyLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCw5MzksMCwwLDAsMCxcIi1cIixcIi1cIl0iXSxbLTIwLCIxOTE5NDU4MTI3LjE2NzE5Mjc4NTAiXSxbLTIxLCItIl0sWy0yMiwiW1wiLVwiLFwiblwiXSJdLFstMjMsIisiXSxbLTI0LCJbXSJdLFstMjUsIi0iXSxbLTI2LCItIl0sWy0yNywiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0yOSwiLSJdLFstMzAsIltcInZcIiwwXSJdLFstMzEsImZhbHNlIl0sWy0zMiwiMCJdLFstMzMsIi0iXSxbLTM0LCItIl0sWy0zNSwiWzE2NzE5MzIyNzkzNTksMF0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstMzcsIi0iXSxbLTM4LCJjLC0xLC0xLDk1NCwwLDQsMCw2NSwyMiw5LC0xLDAsLDE1NzUsMTg0MywxODQyIl0sWy0zOSwiW1wiMjAxMDAxMDFcIiwwLFwiR2Vja29cIixcIk5ldHNjYXBlXCIsXCJNb3ppbGxhXCIsXCIyMDE4MTAwMTAwMDAwMFwiLG51bGwsZmFsc2UsbnVsbCxmYWxzZSxudWxsLDBdIl0sWy00MCwiMzciXSxbLTQxLCItIl0sWy00MiwiMTc3MDA1MDA4MSJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMTExMTAwMTAwIl0sWy00NCwiMCw1LDAsNSJdLFstNDUsIi0iXSxbLTQ2LCIwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNDgsIjAsMCJdLFstNDksIi0iXSxbLTUwLCItIl0sWy01MSwiLSJdLFstNTIsIi0iXSxbLTUzLCIwMTAiXSxbLTU0LCJ7XCJoXCI6W1wiXzNcIixcIjI4NzI4OTkzMjBcIl0sXCJkXCI6W10sXCJiXCI6W1wiXzFcIixcIjU4NjY5MjY5M1wiXSxcInNcIjoxfSJdLFsiZGRiIiwiMCwwLDAsMCwxLDIsMCwwLDAsMSwxLDAsMCwwLDAsMCw1LDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwyLDAsMCwwLDEsMCwwLDAsMCwwLDEsMCwyLDAsMCwyMCwwLDEsMCwwLDAsMCwwIl0sWyJibmNoIiw2NF0sWyJhYm5jaCIsNjVdXQ%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=2iaRRXBzDt&pto=1870&ver=48&gac=1919458127.1671927850&mei=&ap=&duid=1.1671927849.fFkQejhcuskSeFm0&suid=1.1671932279.YwdmqGV7zwVrj3a2&tuid=1.1671932279.Wbmou57GY1b4q8vR&fbc=1.1671927850416.1229952849>m=W10%3D&it=50%2C1722%2C37&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=7373779083ea11edbebffdf9bc146990&spa=1&urid=0
IP
File type ASCII text, with very long lines (3182), with no line terminators
Hash 6f344a062aa848d3f5337c23441339c4
d4aa13298502a86f0766136f59845c4f329ef091
1ddc78b0c0432ebfcd0dcf02d7eda31fb705c8afcd0d03f0e7df74f98df53756
GET /ct?id=10929&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671932279385&hl=2&op=0&ag=1317291471&rand=641091802602522922012069157526006601792188172298226277698621120711022529816&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fciar-kep.com%2F&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=2iaRRXBzDt&pto=1870&ver=48&gac=1919458127.1671927850&mei=&ap=&duid=1.1671927849.fFkQejhcuskSeFm0&suid=1.1671932279.YwdmqGV7zwVrj3a2&tuid=1.1671932279.Wbmou57GY1b4q8vR&fbc=1.1671927850416.1229952849>m=W10%3D&it=50%2C1722%2C37&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=7373779083ea11edbebffdf9bc146990&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=319ab3b0b729e6be00b66b8df6d70f1f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sun, 25 Dec 2022 01:38:02 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 1075
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 25 Dec 2022 01:58:02 GMT
Date: Sun, 25 Dec 2022 01:38:02 GMT
Content-Length: 5269
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 25 Dec 2022 00:41:11 GMT
expires: Sun, 25 Dec 2022 02:41:11 GMT
cache-control: public, max-age=7200
age: 3411
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ff571c77e9fbd063e9602e6634d1e87e
b2c9a22cfee280893f58609a831e01a917677df7
716047d46377cc3673d79312a4e80ec96ee2870cd32b03b43afe4108fa83c130
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1704
Cache-Control: max-age=128368
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a6f542-1d7"
Expires: Mon, 26 Dec 2022 13:17:30 GMT
Last-Modified: Sat, 24 Dec 2022 12:49:06 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.7 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash bf269a225d9de1d11c6e2747d12ffbfb
f3edd2899cced3e0ae6107c6837e954d8b4f1d86
38bcbdd59ce5cac7da632ad8788f5c520aa88d30a53af4cedeb9a989af4d0986
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 18:31:06 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=61325
date: Sun, 25 Dec 2022 01:38:02 GMT
content-length: 4654
x-cdn: AKAM
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=GTM-55ZB4XN
200 OK 46 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-55ZB4XN
IP
File type ASCII text, with very long lines (1921)
Hash d9a08077bbb5beb959761eddeb3f2bb3
41e2aacc42f3f1ed1da07a4e87facdf865f86546
d65a7d874f0d1bca52a9fa4eeafa2aaa96a43d8371c39dba449c0f4cda96c85f
GET /gtm/optimize.js?id=GTM-55ZB4XN HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Dec 2022 01:38:02 GMT
expires: Sun, 25 Dec 2022 01:38:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45790
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: cyBU3HDh6UpheT7nP+hYdWXMLTdv8LNvOEH7a3CtEMlBDAwv8VFehYq6C+wJoarHkvZCQQRDhiCqOVGlR3dxqw==
content-length: 27298
x-fb-trip-id: 1904183273
date: Sun, 25 Dec 2022 01:38:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1919458127.1671927850>m=2oebu0&aip=1&z=1241623058
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1919458127.1671927850>m=2oebu0&aip=1&z=1241623058
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1919458127.1671927850>m=2oebu0&aip=1&z=1241623058 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (58959)
Hash 9d4ad21a2a9768492730b386329f567b
76102d04f28182faa8c60db24bb24c34d81efa27
7f54f5bbfd3a07c318fdab6f2741fbb3dfdc4d996a4a35035c8c0598b43ab749
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SbG4/JzEdVoUCOHPmIJGL7ZBO4onlEBKwx9tmTTx+oRf6Kn2tguVVkvjbYiDqXJSGvnCpyYmP1M=
x-amz-request-id: R2HZJV4QH13P6ZZD
x-amz-replication-status: PENDING
last-modified: Sun, 18 Dec 2022 11:07:33 GMT
etag: "21530c31dddfceede2fb3bc7abf20d99"
x-amz-version-id: QXqn33YIuF6VCLrvOPAfnJ5OAt7Gsy3v
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 01:38:02 GMT
via: 1.1 varnish
age: 119
x-served-by: cache-bma1660-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1671932282.152364,VS0,VE0
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 17
content-length: 18111
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Sun, 25 Dec 2022 01:38:02 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ff571c77e9fbd063e9602e6634d1e87e
b2c9a22cfee280893f58609a831e01a917677df7
716047d46377cc3673d79312a4e80ec96ee2870cd32b03b43afe4108fa83c130
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1704
Cache-Control: max-age=128368
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a6f542-1d7"
Expires: Mon, 26 Dec 2022 13:17:30 GMT
Last-Modified: Sat, 24 Dec 2022 12:49:06 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
one.pointlessplay.com/tracker/tc_imp.gif?e=37dfbd8ee84e00136defce36e845829f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f674a838ad8552f6d1bac7f750dd23d8d37c704620325c15a5409335058c6e86a1977be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c2b45780658a58f28677504a3fe1f788ff8a12b99e30a244825aaf2a6c0cc24bccfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6334f49e9342bf7d24b7abd87a66bda58e006f0d54b8616989a62956b66c9dc799c6ad596b59cd2bab7406fab22c8eebe6e0e76e79075d5f01fdc061944950e0f88d7d39c9bafc127de25ed9fb8846ee9706d6bd7287ac6c6d55931dfd562ac11ec9043c933b86b4d7655cf39ad0ed7c2a220fc902ec821f188ccd438ce17046bfa1e4c0030096ec0af72b9499494d677f4d025fcd0749aaec4be33cfb0a7073630c8fe5d0483e1471a12f3e8e524e66fd8f856fdb86af63caa2e8a008d4595b567925a39b7f1cf792d23725072195605b8fd9e328344ee121f0770a7ea5dd58a461ee2aa88ebcf309bb8bab8ffacbdfb594e35fa4e82b3516f81447b1ad1645c786ef173aa760bdef99731f93c8e70d5ef5599aa078b7a112026057d1a9ec7ecde3c7f549c064497d1d0b2b5c85b0197a2a16fd4936171b3d1133f75e497d9563daa24835bf206f16bde4b8fda19eabb2ce39d8fd3914565e7e4327dd400fdece5f14ecf29774d66c11e1e50a3bf4dcca94d9e8b91da55d38681340f3e44bc3fac0cb43cf5d534d74525260b7d1b3dbb59df832149ab2b85fea127d3dd4c927575a810752f9dead603448923a8d155df0046694bee3f6d8ae9b57ad7457cdad301abb4b0e392009e04472815ee657c11e5d07e00e56fbca79f7a9dd9ba5f013ff727&cri=2iaRRXBzDt&ts=482&cb=1671932279867
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=2iaRRXBzDt&ts=482&cb=1671932279867
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=2iaRRXBzDt&ts=482&cb=1671932279867 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=319ab3b0b729e6be00b66b8df6d70f1f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sun, 25 Dec 2022 01:38:02 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4if14gOZB1BNSU329Zb1KmtCqfYppZPH8OInSBfFP8qh17WIyI9LSiutZBz4FMUR7FnvW2R/eDk=
x-amz-request-id: RNF0K4XQYBD5XYD4
date: Sat, 24 Dec 2022 23:24:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 7999
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1814379200&_gaz=1&ul=NA&cid=1919458127.1671927850&sr=1280x1024&_s=1&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1671932279&sct=2&seg=0&dr=http%3A%2F%2Fciar-kep.com%2F&dt=eToro%20practice%20account&en=page_view&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fciar-kep.com%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.ga_client_ID=GA1.2.1919458127.1671927850&up.session_referer=http%3A%2F%2Fciar-kep.com%2F
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1814379200&_gaz=1&ul=NA&cid=1919458127.1671927850&sr=1280x1024&_s=1&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1671932279&sct=2&seg=0&dr=http%3A%2F%2Fciar-kep.com%2F&dt=eToro%20practice%20account&en=page_view&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fciar-kep.com%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.ga_client_ID=GA1.2.1919458127.1671927850&up.session_referer=http%3A%2F%2Fciar-kep.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1814379200&_gaz=1&ul=NA&cid=1919458127.1671927850&sr=1280x1024&_s=1&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&sid=1671932279&sct=2&seg=0&dr=http%3A%2F%2Fciar-kep.com%2F&dt=eToro%20practice%20account&en=page_view&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=http%3A%2F%2Fciar-kep.com%2F&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=72681&up.ga_client_ID=GA1.2.1919458127.1671927850&up.session_referer=http%3A%2F%2Fciar-kep.com%2F HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://go.etoro.com
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be8f0ec43455138c0c17a20e9d90b541
21fa5f5df0b8cbf7cd77b1932bf82fb2913a19f4
0bb8177c477a31188f16732747ef20758863be5d7fe657624f8b50c5499706e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash c38db2e821b5d5b8fd7f6816c973da91
8918e4f752abfb249b3bc95aa0303e666703e44a
15d869d9c2697a34fb9431b7505d388987b94636cffbd13d919acf762742011d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6535
Cache-Control: max-age=129932
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a6e87f-138"
Expires: Mon, 26 Dec 2022 13:43:34 GMT
Last-Modified: Sat, 24 Dec 2022 11:54:39 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash c38db2e821b5d5b8fd7f6816c973da91
8918e4f752abfb249b3bc95aa0303e666703e44a
15d869d9c2697a34fb9431b7505d388987b94636cffbd13d919acf762742011d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4783
Cache-Control: max-age=128180
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a6e87f-138"
Expires: Mon, 26 Dec 2022 13:14:22 GMT
Last-Modified: Sat, 24 Dec 2022 11:54:39 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 312
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=1919458127.1671927850>m=2oebu0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=1919458127.1671927850>m=2oebu0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=1919458127.1671927850>m=2oebu0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://go.etoro.com
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=1919458127.1671927850&jid=1340839782&gjid=596533565&_gid=638340021.1671927850&_u=SACAAEAAQAAAACAEK~&z=1484858698
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=1919458127.1671927850&jid=1340839782&gjid=596533565&_gid=638340021.1671927850&_u=SACAAEAAQAAAACAEK~&z=1484858698
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=1919458127.1671927850&jid=1340839782&gjid=596533565&_gid=638340021.1671927850&_u=SACAAEAAQAAAACAEK~&z=1484858698 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://go.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 0 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,sdk-context
Referer: https://go.etoro.com/
Origin: https://go.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-methods: POST
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sun, 25 Dec 2022 01:38:02 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be8f0ec43455138c0c17a20e9d90b541
21fa5f5df0b8cbf7cd77b1932bf82fb2913a19f4
0bb8177c477a31188f16732747ef20758863be5d7fe657624f8b50c5499706e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c771fd78a5045f9ca7afd3d43a5bbc7b
4c0ccc281d935145f28ca9200c5bfebfdbcfcbd5
6cd22e7df0e889db7bf5dae52396f3ad6294a9a3e3fc4d17d0af65500f1e6d55
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 25 Dec 2022 01:38:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 24 Dec 2022 20:28:13 GMT
Expires: Sun, 25 Dec 2022 20:28:13 GMT
ETag: "4c0ccc281d935145f28ca9200c5bfebfdbcfcbd5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dc.services.visualstudio.com/v2/track
200 OK 96 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 04433ec1ff671159abfc4515498ce810
912c15f4f6359fcc1a830cea7feecb50b0096695
90d4582122c25303fff98bc5bb393a6545d9c4a872225587978be8e0c234bcef
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Sdk-Context: appId
Content-Length: 3578
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: 5035B81D-C86B-48FF-98F1-ED572A4F1B7B
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sun, 25 Dec 2022 01:38:02 GMT
content-length: 96
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=0bd24b3d-8d13-4861-9200-01ea17b51595&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=0bd24b3d-8d13-4861-9200-01ea17b51595&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=0bd24b3d-8d13-4861-9200-01ea17b51595&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: muc_ads=9719e85e-0194-4c2d-b494-f65c65e9d82f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:02 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 25833f788c89ef96
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: f1d29fe8a66d03ed1072589a4309ed6c4d4091075065ab90620ba7e983623c50
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=116cc08b-a7a2-4a60-8aed-ce9ce70c584a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=116cc08b-a7a2-4a60-8aed-ce9ce70c584a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=116cc08b-a7a2-4a60-8aed-ce9ce70c584a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: muc_ads=9719e85e-0194-4c2d-b494-f65c65e9d82f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:02 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 8e1264f32ff63caa
strict-transport-security: max-age=0
x-response-time: 106
x-connection-hash: f1d29fe8a66d03ed1072589a4309ed6c4d4091075065ab90620ba7e983623c50
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=93d69c72-97bb-4d8f-b16c-b6439d2cb7f2&sid=7373834083ea11edb35f878b6be9dfb0&vid=7373779083ea11edbebffdf9bc146990&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fciar-kep.com%2F<=1666&evt=pageLoad&sv=1&rn=841716
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=93d69c72-97bb-4d8f-b16c-b6439d2cb7f2&sid=7373834083ea11edb35f878b6be9dfb0&vid=7373779083ea11edbebffdf9bc146990&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fciar-kep.com%2F<=1666&evt=pageLoad&sv=1&rn=841716
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=93d69c72-97bb-4d8f-b16c-b6439d2cb7f2&sid=7373834083ea11edb35f878b6be9dfb0&vid=7373779083ea11edbebffdf9bc146990&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20practice%20account&p=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&r=http%3A%2F%2Fciar-kep.com%2F<=1666&evt=pageLoad&sv=1&rn=841716 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2A7F43B6AB986BDC0FAB5133AACF6AC9; domain=.bing.com; expires=Fri, 19-Jan-2024 01:38:02 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C04E3AF3C51D4B14BCAD64C32A00DFE3 Ref B: OSL30EDGE0419 Ref C: 2022-12-25T01:38:02Z
date: Sun, 25 Dec 2022 01:38:01 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7fd6ef320514aba7ae7c9bb625cc68b8
37ce04a6e471dd435ad84e6ad8d2b061cd5fc6e9
39973c7fc556eedf2b081f338342f9476424c9ef4905b7a1985120f15435af19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7fd6ef320514aba7ae7c9bb625cc68b8
37ce04a6e471dd435ad84e6ad8d2b061cd5fc6e9
39973c7fc556eedf2b081f338342f9476424c9ef4905b7a1985120f15435af19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Dec-2022 01:53:02 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 7c27507b6cfe4b4ad32b4ee68dec3600
5bbdea83f640a78e7e6ff1693546c6a47d6c90fd
42da467927f7ef9b03717e63f5eee4a2851e203a7ac491b2977fccd8901b45d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5637
Cache-Control: max-age=170068
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a788c9-139"
Expires: Tue, 27 Dec 2022 00:52:30 GMT
Last-Modified: Sat, 24 Dec 2022 23:18:33 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671932280061&cv=11&fst=1671932280061&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&auid=127791554.1671927849&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 959 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671932280061&cv=11&fst=1671932280061&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&auid=127791554.1671927849&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2195), with no line terminators
Hash d15b2077ab0bf5169bbf19f894d4fded
814830ec910bac8678d66b23df2aefd2ee7278d2
5ac2e127492f735bf62ce437af3c90f3758f1267ad175b29bc693bac5fa26c30
GET /pagead/viewthroughconversion/745546367/?random=1671932280061&cv=11&fst=1671932280061&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&auid=127791554.1671927849&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 959
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Dec-2022 01:53:02 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/745546367/?random=1671932280069&cv=11&fst=1671932280069&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account>m_ee=1&auid=127791554.1671927849&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 7c27507b6cfe4b4ad32b4ee68dec3600
5bbdea83f640a78e7e6ff1693546c6a47d6c90fd
42da467927f7ef9b03717e63f5eee4a2851e203a7ac491b2977fccd8901b45d7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5637
Cache-Control: max-age=170068
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a788c9-139"
Expires: Tue, 27 Dec 2022 00:52:30 GMT
Last-Modified: Sat, 24 Dec 2022 23:18:33 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=1413DE10A5996E99377BCC95A4CE6F4C; domain=.bing.com; expires=Fri, 19-Jan-2024 01:38:02 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3929FC6AD56C4AD1834C3C40621F35F8 Ref B: OSL30EDGE0419 Ref C: 2022-12-25T01:38:02Z
date: Sun, 25 Dec 2022 01:38:02 GMT
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=1919458127.1671927850&jid=1340839782&_u=SACAAEAAQAAAACAEK~&z=1440229752
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=1919458127.1671927850&jid=1340839782&_u=SACAAEAAQAAAACAEK~&z=1440229752
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-2056847-65&cid=1919458127.1671927850&jid=1340839782&_u=SACAAEAAQAAAACAEK~&z=1440229752 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=Scroll50&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671932280335&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=28&fbp=fb.1.1671927850416.1229952849&it=1671932279993&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=Scroll50&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671932280335&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=28&fbp=fb.1.1671927850416.1229952849&it=1671932279993&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=Scroll50&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671932280335&sw=1280&sh=1024&v=2.9.90&r=stable&ec=1&o=28&fbp=fb.1.1671927850416.1229952849&it=1671932279993&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 25 Dec 2022 01:38:02 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671932280332&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671927850416.1229952849&it=1671932279993&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671932280332&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671927850416.1229952849&it=1671932279993&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&rl=http%3A%2F%2Fciar-kep.com%2F&if=false&ts=1671932280332&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671927850416.1229952849&it=1671932279993&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 25 Dec 2022 01:38:02 GMT
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/745546367/?random=1671932280061&cv=11&fst=1671930000000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3693331340&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/745546367/?random=1671932280061&cv=11&fst=1671930000000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3693331340&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/745546367/?random=1671932280061&cv=11&fst=1671930000000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&ref=http%3A%2F%2Fciar-kep.com%2F&tiba=eToro%20practice%20account&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3693331340&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671932279900%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLYiYkfpnj3-wAAAYVG7gcpf5oV4jjW71ASmimubg40HtUGjeZB6vf0cERb-5QxqzSWFa8ccBgGFA; Max-Age=2592000; Expires=Tue, 24 Jan 2023 01:38:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJyGb8Iv91obQAAAYVG7gcqYyVzE8tatJXRfpcr3MgtUKpjYR0tUcNGn7clsekDieh3WuuINPwkblIwGowXmw; Max-Age=2592000; Expires=Tue, 24 Jan 2023 01:38:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&556b0336-05ac-4a68-83de-648a3488927a"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 25-Dec-2023 01:38:02 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2461:u=1:x=1:i=1671932282:t=1672018682:v=2:sig=AQEvCnvALNynqu6QJ02Pry3Dmuk52WZP"; Expires=Mon, 26 Dec 2022 01:38:02 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXwnRHL3R1AjjzVCMBM/w==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E313EEED02C1481296A85598E6D87C15 Ref B: OSL30EDGE0413 Ref C: 2022-12-25T01:38:02Z
date: Sun, 25 Dec 2022 01:38:02 GMT
content-length: 0
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=81790596326470020term=value
200 OK 4.5 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=81790596326470020term=value
IP
File type ASCII text, with very long lines (1873)
Hash caf84ef9bddf7ab020ca4a3bbdc3d151
e1d3c865d14c58e01b703cefb929ca5d5b3b68a0
69e89666c0edf9ea33d5cd457cc5a3c766852b8e11a734a7671e9386fc766cd3
GET /spx?dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=81790596326470020term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sun, 25 Dec 2022 01:38:02 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2025%20Dec%202022%2001%3A38%3A00%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fciar-kep.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Sun%2C%2025%20Dec%202022%2001%3A38%3A00%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fciar-kep.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Sun%2C%2025%20Dec%202022%2001%3A38%3A00%20GMT&n=0&b=eToro%20practice%20account&.yp=10118123&f=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&e=http%3A%2F%2Fciar-kep.com%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:02 GMT
expires: Sun, 25 Dec 2022 01:38:02 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBHqpp2MCEPgp6oSOvluVIDDEu2y9ItwFEgEBAQH6qGOxYwAAAAAA_eMAAA&S=AQAAAuYk6sRkTDA3l7XOtpkzP-A; Expires=Mon, 25 Dec 2023 07:38:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=116cc08b-a7a2-4a60-8aed-ce9ce70c584a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=116cc08b-a7a2-4a60-8aed-ce9ce70c584a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=116cc08b-a7a2-4a60-8aed-ce9ce70c584a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:02 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_Y2gvH1JmHelfmVwLO/fYhQ=="; Max-Age=63072000; Expires=Tue, 24 Dec 2024 01:38:02 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: db800c2938ae319e
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: b34d0522162fbd2166d03b487598584fd797b12f7cf4bd9eeb94f889aac4bcee
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 9f2afbc2bce621012d6b32b1ea207f58
b44ca2b95aa8f3d0266663d9a4d008641f85224c
cebf1bfe97b84811efa1a145f3ac404a30c43861135461cfd901d3aa2828df4c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5054
Cache-Control: max-age=161966
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a76b6a-1d7"
Expires: Mon, 26 Dec 2022 22:37:28 GMT
Last-Modified: Sat, 24 Dec 2022 21:13:14 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 9f2afbc2bce621012d6b32b1ea207f58
b44ca2b95aa8f3d0266663d9a4d008641f85224c
cebf1bfe97b84811efa1a145f3ac404a30c43861135461cfd901d3aa2828df4c
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5054
Cache-Control: max-age=161966
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:02 GMT
Etag: "63a76b6a-1d7"
Expires: Mon, 26 Dec 2022 22:37:28 GMT
Last-Modified: Sat, 24 Dec 2022 21:13:14 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=0bd24b3d-8d13-4861-9200-01ea17b51595&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=0bd24b3d-8d13-4861-9200-01ea17b51595&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=0bd24b3d-8d13-4861-9200-01ea17b51595&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=4119fa3c-1011-420c-b01d-db72770cbfba&tw_document_href=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:02 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_eB8gUnIbB5l4OkjnpLw4jA=="; Max-Age=63072000; Expires=Tue, 24 Dec 2024 01:38:02 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 6b7dce0e1f5ff1e0
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: b34d0522162fbd2166d03b487598584fd797b12f7cf4bd9eeb94f889aac4bcee
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671932279900%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671932279900%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671932279900%26url%3Dhttps%253A%252F%252Fgo.etoro.com%252Fen%252Fpractice-account%253Futm_medium%253DNetworks%2526utm_source%253D72681%2526utm_content%253D12300%2526utm_serial%253D%2526utm_campaign%253D%2526utm_term%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&74fa2c42-bcf5-4a2f-89ca-0931b5a80270"; Domain=.linkedin.com; Expires=Mon, 25-Dec-2023 01:38:02 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202212250138029fbca6a9-9b73-456f-88e9-f47ffa03e78fAQEXQxfwnIkx6qvpsL1-sYRU8vLQ6vvM"; Domain=.www.linkedin.com; Expires=Mon, 25-Dec-2023 01:38:02 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzE5MzIyODI7MjswMjGalix883iDO9CYQbx27/LdmuSidh6+OS3+WT2KIp2M5g==; Domain=.linkedin.com; Expires=Fri, 23 Jun 2023 01:38:02 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1671932282:t=1672018682:v=2:sig=AQEelxb6I3JjUAvLF1S7FreNyVH5lctf"; Expires=Mon, 26 Dec 2022 01:38:02 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXwnRHOX4M3LHGgqhUoXQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 99628BFB9A444F579EF8B3D2B77F3D4C Ref B: OSL30EDGE0413 Ref C: 2022-12-25T01:38:02Z
date: Sun, 25 Dec 2022 01:38:02 GMT
content-length: 0
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=03050789648184712&referrer=http%3A%2F%2Fciar-kep.com%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=03050789648184712&referrer=http%3A%2F%2Fciar-kep.com%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&optOut=false&bust=03050789648184712&referrer=http%3A%2F%2Fciar-kep.com%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 01:38:02 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: ca13b5a9f934232693d0e477e8d66ed1
content-encoding: gzip
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 01:38:02 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 00974495632aec03f7cf74a571c64978
content-encoding: gzip
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1671932279900&url=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&b10a26ee-e56f-4469-8a31-878c4a8ba030"; domain=.linkedin.com; Path=/; Secure; Expires=Mon, 25-Dec-2023 01:38:03 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2438:u=1:x=1:i=1671932283:t=1672018683:v=2:sig=AQGe3q110kjGUdPZI5JbBGXmVoXRnwxx"; Expires=Mon, 26 Dec 2022 01:38:03 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXwnRHSycAE+WZTnTASKQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A64D92017C9446169D08E6380876325E Ref B: OSL30EDGE0413 Ref C: 2022-12-25T01:38:03Z
date: Sun, 25 Dec 2022 01:38:02 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1630
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=319ab3b0b729e6be00b66b8df6d70f1f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 01:38:03 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1625
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=319ab3b0b729e6be00b66b8df6d70f1f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 01:38:03 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 462b26e7b1f99c738f6ad07e7d60ff0a
1b64c7e1a751cbcfd3a7c7bbefcbac70985e38bc
346f81091684995bc1b91cff9aff845c090ae1630fc47766e08a110b275e0d4c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 01:38:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 24 Dec 2022 14:54:26 GMT
Expires: Sat, 31 Dec 2022 14:54:25 GMT
Etag: "1b64c7e1a751cbcfd3a7c7bbefcbac70985e38bc"
Cache-Control: max-age=565581,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77eddae14b5f1c0a-OSL
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=1919458127.1671927850&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%221919458127.1671927850%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671932279.2%22%2C%22dcm_gid%22%3A%22638340021.1671927850%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671932279.2&dcm_gid=638340021.1671927850&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=81790596326470020term%3Dvalue
200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=1919458127.1671927850&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%221919458127.1671927850%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671932279.2%22%2C%22dcm_gid%22%3A%22638340021.1671927850%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671932279.2&dcm_gid=638340021.1671927850&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=81790596326470020term%3Dvalue
IP
File type ASCII text, with very long lines (2323)
Hash 25ab8ed3615569f61e96f0357e355aa9
80b3415e1d09090290e2dccae19fcaea87e22945
151658e038e26e6336420fb5d22590c20164c80e006772daac4a96f86bb32e0e
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=1919458127.1671927850&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%221919458127.1671927850%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671932279.2%22%2C%22dcm_gid%22%3A%22638340021.1671927850%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671932279.2&dcm_gid=638340021.1671927850&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=81790596326470020term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 25 Dec 2022 01:38:03 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=c634a091-83f4-11ed-b2f1-dfe7d0201244;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
transfer-encoding: chunked
ocsp.digicert.com/
200 OK 727 B IP
Hash 937a8d0d1ee282e8ed2c0c3f48774fa0
a248447047fa2b08619eac818a8670a431d9371f
22634c0777079d15146f8b28a63e63a09e4b2f25e75e4eb81ecb54823096dee7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2631
Cache-Control: max-age=164920
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:04 GMT
Etag: "63a7806d-2d7"
Expires: Mon, 26 Dec 2022 23:26:44 GMT
Last-Modified: Sat, 24 Dec 2022 22:42:53 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 727
cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
IP
File type ASCII text, with very long lines (755)
Hash caa762087e9d75cecc34b5d6626cb7b9
fcc68d485c2f42e0f880260c3e104cedf50d0d11
dc0ec55efae4c1f0ff095cf05133cc835e1cc4ff7906d3b7a2d0d86789bfe145
GET /libs/mixpanel-2-latest.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtk-H7_Lz95VWGrPB3QdzdRwdyjZSRzHX7LaOpIuUp9TbvPkG8NB2cB1ehehC36QX_cWhtibOnPw5GfS3Ud9mchQsdN-IiX
x-goog-generation: 1645129310876382
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=PPVzJA==, md5=yqdiCH6ddc7MNLXWYmy3uQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Sun, 25 Dec 2022 01:31:50 GMT
expires: Sun, 25 Dec 2022 01:41:50 GMT
cache-control: public,max-age=600
age: 374
last-modified: Thu, 17 Feb 2022 20:21:50 GMT
etag: "caa762087e9d75cecc34b5d6626cb7b9"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 937a8d0d1ee282e8ed2c0c3f48774fa0
a248447047fa2b08619eac818a8670a431d9371f
22634c0777079d15146f8b28a63e63a09e4b2f25e75e4eb81ecb54823096dee7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2631
Cache-Control: max-age=164920
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:04 GMT
Etag: "63a7806d-2d7"
Expires: Mon, 26 Dec 2022 23:26:44 GMT
Last-Modified: Sat, 24 Dec 2022 22:42:53 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 471 B IP
Hash b3251767d018859e0436fc4ccb339b76
65c1762d7c382f06cbbd27c67869ac38dc5c8870
b86c00a901d2157bcd5e6d5df0d6f9799da01966fd1c9aaeea9b93af298038c7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3087
Cache-Control: max-age=118203
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 01:38:04 GMT
Etag: "63a6c828-1d7"
Expires: Mon, 26 Dec 2022 10:28:07 GMT
Last-Modified: Sat, 24 Dec 2022 09:36:40 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
api-js.mixpanel.com/track/?verbose=1&ip=1&_=1671932282080
200 OK 25 B URL HTTP/2 api-js.mixpanel.com/track/?verbose=1&ip=1&_=1671932282080
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fa4859df2aaba80141861afa205fe74e
d486b5a249527d022cc009bdc9c197efb66f23a2
e39a8118ec6cdf6ac33e6961518e9fe6ba3f6caf099aeeaec1389c2108ba90ba
POST /track/?verbose=1&ip=1&_=1671932282080 HTTP/1.1
Host: api-js.mixpanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1607
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://go.etoro.com
access-control-expose-headers: X-MP-CE-Backoff
access-control-max-age: 1728000
cache-control: no-cache, no-store
content-type: application/json
strict-transport-security: max-age=604800; includeSubDomains
date: Sun, 25 Dec 2022 01:38:04 GMT
content-length: 25
x-envoy-upstream-service-time: 13
server: envoy
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
api-js.mixpanel.com/track/?verbose=1&ip=1&_=1671932282200
200 OK 25 B URL HTTP/2 api-js.mixpanel.com/track/?verbose=1&ip=1&_=1671932282200
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fa4859df2aaba80141861afa205fe74e
d486b5a249527d022cc009bdc9c197efb66f23a2
e39a8118ec6cdf6ac33e6961518e9fe6ba3f6caf099aeeaec1389c2108ba90ba
POST /track/?verbose=1&ip=1&_=1671932282200 HTTP/1.1
Host: api-js.mixpanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1607
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://go.etoro.com
access-control-expose-headers: X-MP-CE-Backoff
access-control-max-age: 1728000
cache-control: no-cache, no-store
content-type: application/json
strict-transport-security: max-age=604800; includeSubDomains
date: Sun, 25 Dec 2022 01:38:04 GMT
content-length: 25
x-envoy-upstream-service-time: 8
server: envoy
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash 24b42cac5651781321b07f1665abb29b
9d131a51ccb8e4ad1ab0fb7aaee900b13f6831f7
6eb057478648603c70f932913227fcc19a6f5d92601b5c793b5a1302ccd58d01
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 25 Dec 2022 01:38:04 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1625
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=319ab3b0b729e6be00b66b8df6d70f1f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 01:38:05 GMT
content-length: 0
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=1919458127.1671927850&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%221919458127.1671927850%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671932279.2%22%2C%22dcm_gid%22%3A%22638340021.1671927850%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671932279.2&dcm_gid=638340021.1671927850&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1671932283895920&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1671932284642
200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-65&ga_client_id=1919458127.1671927850&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%221919458127.1671927850%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671932279.2%22%2C%22dcm_gid%22%3A%22638340021.1671927850%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671932279.2&dcm_gid=638340021.1671927850&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1671932283895920&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1671932284642
IP
File type ASCII text, with very long lines (3403), with no line terminators
Hash 3757646403012a211a95038991cee3d1
96d0479b65e71202c695b06b9af20be83e8b4851
af7bb11284d0ddeed1a6e76c65836f30d4241a25da91837974a1ab1c9d4c3035
GET /st?ga_tracking_id=UA-2056847-65&ga_client_id=1919458127.1671927850&shpt=eToro%20practice%20account&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-65%22%2C%22ga_client_id%22%3A%221919458127.1671927850%22%2C%22shpt%22%3A%22eToro%20practice%20account%22%2C%22dcm_cid%22%3A%221671932279.2%22%2C%22dcm_gid%22%3A%22638340021.1671927850%22%2C%22ga_utm_campaign%22%3A%22%22%2C%22ga_utm_source%22%3A%2272681%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1671932279.2&dcm_gid=638340021.1671927850&dxver=4.0.0&shaid=31950&tdr=http%3A%2F%2Fciar-kep.com%2F&plh=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&cb=1671932283895920&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1671932284642 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Sun, 25 Dec 2022 01:38:05 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt=MzE0OTA6MTY3MTc4Mzc1NSwzMjEzMToxNjcxNzUyNTM1LDMzODc2OjE2NzE3NDI3OTUsMzE1NDI6MTY3MTc4ODYxMiwzMDgwNzoxNjcxODExMTQzLDIyNzc4OjE2NzE4NDA5NTYsMzA1ODk6MTY3MTc4MzU2NSwzMTM3MzoxNjcxNzg3MzI2LDMwNzUwOjE2NzE3NDU0NDksMzE5NTA6MTY3MTgwNTE3MSwzMjAxNDoxNjcxODg5NDg3;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 18
server: istio-envoy
connection: close
transfer-encoding: chunked
insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
200 OK 70 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/evnt/?adv=bm058hk&ct=0:mu6d391&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:05 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=etoro-landing-pages
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=etoro-landing-pages HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1081
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:06 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://go.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1625
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Cookie: cg_uuid=319ab3b0b729e6be00b66b8df6d70f1f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://go.etoro.com
content-type: application/json
date: Sun, 25 Dec 2022 01:38:07 GMT
content-length: 0
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 51 B URL HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e20721e47af697cf2efdc1b7abc72dc
ce59c5911396ca178f5d10768914ec1a10fdaa20
a4e2dd95d0548168577efb2431f913e7a42e310d919c18571906f9a8e5351e52
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=utf-8
Content-Length: 10877
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: 3F277F97-1BE3-4B64-A8FC-08B04022710A
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Sun, 25 Dec 2022 01:38:07 GMT
content-length: 51
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf
200 OK 0 B URL HTTP/2 etoro-cdn.etorostatic.com/studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf
IP
GET /studio/content/lp/cache_1/etoro-lps/fonts/madera/Madera-Medium.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://marketing.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: l+M7YTwPKI9K+l/JVKPvKjTffVqA/z8UFlTyaj/C3Ld9mhhpdD6MX0OlSEudP+cilmtqdutoafE=
x-amz-request-id: WPZT0DJB5XERNSS4
x-amz-replication-status: COMPLETED
last-modified: Sun, 16 Jan 2022 07:07:48 GMT
etag: "d5888614c5b3d758ef59fa6600e7425e"
x-amz-meta-sha256: d144af5ebf9f2ce2c4e6eca89b38e8fc5961014e66d4d76ea46e832be3d6f959
x-amz-meta-s3b-last-modified: 20220116T070301Z
x-amz-version-id: YMg5tZdevSXydv6Mb5hXds7Amba8krCd
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Sun, 01 Jan 2023 01:38:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 25 Dec 2022 01:38:01 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=0a2a0f22-a2ef-44b3-8df7-dabeaa56595a; domain=.adsrvr.org; expires=Mon, 25-Dec-2023 01:38:01 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: x9o3eO7W8uWAWlCwBB6UR/LBqTYJ/JQrqvcbTSU3x0N+2kU8sGEnbFQu2sy2p+3VaHb7nCREqtQ=
x-amz-request-id: GNRAHM96RS3QMB1B
date: Sun, 25 Dec 2022 01:01:26 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
etag: "6a624022b5d271dcefb070b0b6670abc-df"
age: 2197
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
200 OK 0 B URL HTTP/2 match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
GET /track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.etoro.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:01 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1671932279963&data=%7B%22id%22%3A195%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671932279956%2C%22cv%22%3A%2220221215-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671932279962%2C%22ref%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A5970%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1671932279963&data=%7B%22id%22%3A195%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671932279956%2C%22cv%22%3A%2220221215-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671932279962%2C%22ref%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A5970%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1671932279963&data=%7B%22id%22%3A195%2C%22ii%22%3A%22%2Fen%2Fpractice-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671932279956%2C%22cv%22%3A%2220221215-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22e%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671932279962%2C%22ref%22%3A%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fgo.etoro.com%2Fen%2Fpractice-account%3Futm_medium%3DNetworks%26utm_source%3D72681%26utm_content%3D12300%26utm_serial%3D%26utm_campaign%3D%26utm_term%3D%22%2C%22tos%22%3A5970%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 01:38:02 GMT
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671932283.580556,VS0,VE91
vary: Accept-Encoding
x-vcl-time-ms: 91
X-Firefox-Spdy: h2
content.etoro.com/lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
301 Moved Permanently 0 B URL HTTP/2 content.etoro.com/lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
IP
GET /lp/practice_account/?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term= HTTP/1.1
Host: content.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ciar-kep.com/
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=72681&ClickBannerID=12300&SubAffiliateID=&Custom=&ClickDateTime=2022-12-25T01:38:00.3096386Z&UserUniqueIdentifier=3a56f7b1-5f4f-4691-b801-11791d160de5; RequestURL=URL=http://med.etoro.com/aw.aspx?b=12300&a=72681&task=click; _gcl_au=1.1.127791554.1671927849; _cq_duid=1.1671927849.fFkQejhcuskSeFm0; _scid=8807736f-0505-44dd-b6fe-8d12f9dc88d9; _ga_B0NS054E7V=GS1.1.1671927849.1.0.1671927856.53.0.0; _ga=GA1.2.1919458127.1671927850; __adal_id=dfaf03ac-0725-4cfc-9ab5-4050c1d70303.1671927850.2.1671927850.1671927850.0b2dc587-3d7f-4199-b800-d0c1cd0468b7; __adal_ca=so%3D72681%26me%3DNetworks%26ca%3D%28not%2520set%29%26co%3D12300%26ke%3D%28not%2520set%29; __adal_cw=1671927849752; _uetsid=7373834083ea11edb35f878b6be9dfb0; _uetvid=7373779083ea11edbebffdf9bc146990; _gid=GA1.2.638340021.1671927850; _fbp=fb.1.1671927850416.1229952849; mp_dbbd7bd9566da85f012f7ca5d8c6c944_mixpanel=%7B%22distinct_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22%24device_id%22%3A%20%2218546aa6d2cf1-0f1c20996534c4-c505425-140000-18546aa6d2d26c%22%2C%22utm_source%22%3A%20%2272681%22%2C%22utm_medium%22%3A%20%22Networks%22%2C%22utm_content%22%3A%20%2212300%22%2C%22%24initial_referrer%22%3A%20%22http%3A%2F%2Fciar-kep.com%2F%22%2C%22%24initial_referring_domain%22%3A%20%22ciar-kep.com%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 25 Dec 2022 01:38:00 GMT
content-type: text/html; charset=UTF-8
location: https://go.etoro.com/en/practice-account?utm_medium=Networks&utm_source=72681&utm_content=12300&utm_serial=&utm_campaign=&utm_term=
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
set-cookie: __cf_bm=gHgbMAzLOjGypnbuiFLxml8lI.mUk.w6ZqXCGfmlioo-1671932280-0-AdrkS0c3+N0G5TcY1q4FunlmN9UlRHZO/JtZ5eia2MCGBdxstpr1g2GehQ4JOUHxtr1x84jyXQZ7wd4hI9PPxAggQFSA8WDOnL62dMLrFs0b; path=/; expires=Sun, 25-Dec-22 02:08:00 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cfruid=c667f3889f61db758d075f0e70fdb8e419c0ff32-1671932280; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 77eddad17d86b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
marketing.etorostatic.com/landingpages/main-es2015.63b8f5733107d55974c1.js
200 OK 0 B URL HTTP/2 marketing.etorostatic.com/landingpages/main-es2015.63b8f5733107d55974c1.js
IP
GET /landingpages/main-es2015.63b8f5733107d55974c1.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Piy8hw3Lx/LICSlt3rk6M1EKgP77mS2HVRcXSUtvCNgX26qy8PDZ38scMm40ooxgkuYt1RD5wZY=
x-amz-request-id: 2JF36EVRFAYNZ7V6
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 15 Dec 2022 10:55:52 GMT
etag: "30bbdb2fb14e80f4a13d3864bdc4c313"
x-amz-version-id: sQHklhqn8e75Jfy5LdOx7QCLslyX16iZ
accept-ranges: bytes
content-type: application/x-javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sun, 25 Dec 2022 01:43:01 GMT
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
200 OK 0 B URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.etoro.com
Connection: keep-alive
Referer: https://go.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 01:38:01 GMT
access-control-allow-origin: https://go.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
172.98.192.37
18.193.146.82
2.18.173.108
34.243.216.162
23.32.86.79
13.69.106.215
93.184.220.29
151.101.244.157
104.18.32.68