inoradde.com/4/4292618/
200 OK 608 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 91f43646cc8aa03c2f48ae5217454c34
bbbd5293cb34f383f3dc2946ed31afb83d59abe4
cb6252b8334d7f0ad3c7bc69c698a4a98fc1c369c9420eeb707a85852e9dcede
Analyzer Verdict Alert quad9 Sinkholed
GET /4/4292618/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Dec 2022 02:57:29 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 48089b3aafe389f7037063e18058f507
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://med.etoro.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=a0fba9ff400541dcb3385cdc25ff08a4; expires=Thu, 07 Dec 2023 02:57:29 GMT; path=/
oaidts=1670381849; expires=Thu, 07 Dec 2023 02:57:29 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4411
Expires: Wed, 07 Dec 2022 04:11:01 GMT
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5728
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:30 GMT
Last-Modified: Wed, 07 Dec 2022 01:22:02 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11101
Expires: Wed, 07 Dec 2022 06:02:31 GMT
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 02:20:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2224
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DTWdaVzqc+usAqwn86RrqXgNlG5laYqj7YWOYp6VDOce5qWIZV/QSSV7ViLPaf+vBe/09DDOrC0=
x-amz-request-id: X282669VG6FQ24RT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 02:49:12 GMT
age: 498
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 02:57:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b22490b02628e79842aa551994331a2e
238870b8a3e6ef3b6a761154e3abee386643597c
ef2e0268a5ed0ca7d64dfc1baa3d56d55f4062e4d84972bc9423fe56df585673
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF2E0268A5ED0CA7D64DFC1BAA3D56D55F4062E4D84972BC9423FE56DF585673"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16517
Expires: Wed, 07 Dec 2022 07:32:47 GMT
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
inoradde.com/favicon.ico
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=a0fba9ff400541dcb3385cdc25ff08a4; oaidts=1670381849
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
my.rtmark.net/img.gif?f=merge&userId=a0fba9ff400541dcb3385cdc25ff08a4
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=a0fba9ff400541dcb3385cdc25ff08a4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=a0fba9ff400541dcb3385cdc25ff08a4 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 02:57:30 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a0fba9ff400541dcb3385cdc25ff08a4; expires=Thu, 07 Dec 2023 02:57:30 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_4292618.aspx?rdk=rk1
301 Moved Permanently 239 B URL HTTP/1.1 med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_4292618.aspx?rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 13b923cef07c5e4b54bdf29fda0fb389
acd727ea4c7d41f12b8db470560658e9e9c2deb5
60e659c9d345efe46e29f0ac165b8b2ed3daf3de8f364da89912ac281ae35d3c
GET /B15349_A115832_TClick_SPRP_DJULBREG_4292618.aspx?rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 239
Location: http://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
X-Robots-Tag: noindex
Expires: Wed, 07 Dec 2022 02:57:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
Expires: Wed, 07 Dec 2022 02:57:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292618&utm_campaign=PRP_DJULBREG_4292618&utm_term=&rdk=rk1
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Wed, 07 Dec 2022 02:57:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=m1z30yasucinkri251ctcvfo; path=/; HttpOnly
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4292618&rdk=rk1; domain=.etoro.com; expires=Fri, 06-Jan-2023 00:00:00 GMT; path=/
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 02:11:20 GMT
cache-control: public,max-age=3600
age: 2770
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash c8a3f362d8546d0b8c55da509a57c267
a8c769824c8275b1a03e3481377b119a4f2a12e4
e4a64e067cff81e5c9b2fa15f241946fcf3f362257eede1424a1b9c888b788a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2056
Cache-Control: max-age=145156
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:30 GMT
Etag: "638f8d16-2d7"
Expires: Thu, 08 Dec 2022 19:16:46 GMT
Last-Modified: Tue, 06 Dec 2022 18:42:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5716
Cache-Control: max-age=114276
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:30 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:42:06 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 727 B IP
Hash c8a3f362d8546d0b8c55da509a57c267
a8c769824c8275b1a03e3481377b119a4f2a12e4
e4a64e067cff81e5c9b2fa15f241946fcf3f362257eede1424a1b9c888b788a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2057
Cache-Control: max-age=145156
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:31 GMT
Etag: "638f8d16-2d7"
Expires: Thu, 08 Dec 2022 19:16:47 GMT
Last-Modified: Tue, 06 Dec 2022 18:42:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727
maintenance.etoro.com/maintenance.json
200 OK 309 B URL HTTP/1.1 maintenance.etoro.com/maintenance.json
IP
File type JSON data\012- , ASCII text, with very long lines (308)
Hash c47549fa5fc30f994fcac453124a8e7b
0f412a6d214bb46455c050727fea088988675055
0c24a034718dc60de1753b99f17a8446ca525807a6a35899a3dcb9fd4f68eb6b
GET /maintenance.json HTTP/1.1
Host: maintenance.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
x-amz-id-2: gNu0WSmUfT2FLlh8vPBJeVDx6BvYbT5/KnaOuNRSsgoLkACOzaFWMyPWfEd/brTgh2neShPvu6Y=
x-amz-request-id: 5NB3CPPGA9XQDW40
Last-Modified: Sun, 23 Oct 2022 04:14:24 GMT
ETag: "c47549fa5fc30f994fcac453124a8e7b"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 309
Cache-Control: max-age=300
Expires: Wed, 07 Dec 2022 03:02:31 GMT
Date: Wed, 07 Dec 2022 02:57:31 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Type: application/json
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8Pi5Z1PZhB4QpfQhruTCzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lll7mEexOcgCongucQwm03bQjew=
cdn.etorostatic.com/496.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
200 OK 989 B URL HTTP/2 cdn.etorostatic.com/496.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
IP
File type ASCII text, with very long lines (1834), with no line terminators
Hash b812ce2c9a9459dbacd0b93a3b2cff54
0be647987d5befbcf2e4412e6a7edc0a70f7952e
2a0cb36357059f192cd794e4dfb1d2ef5e41dd6df5754c37896d644b619bb529
GET /496.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:28 GMT
etag: W/"eM1zeYFj+/5L5O/LLsC2NQ=="
content-encoding: gzip
content-length: 989
cache-control: public, max-age=31377383
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/js_files/?m[]=tools/browser-support
200 OK 5.7 kB URL HTTP/2 cdn.etorostatic.com/496.0.1/js_files/?m[]=tools/browser-support
IP
File type ASCII text, with very long lines (13040), with no line terminators
Hash cedba04530d809fe2960afa8fd581927
4cfade97fc9315cdca0d58ee07be305a12a5da8d
c0c0fcbf59f4c6590897014b35bbd4f7b52ad7c4c9bf9fabeb98d1aae394ed47
GET /496.0.1/js_files/?m[]=tools/browser-support HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "3ces8aXjHU4XoLCEomamyg=="
content-encoding: gzip
content-length: 5720
cache-control: public, max-age=31377299
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
200 OK 27 kB URL HTTP/2 cdn.etorostatic.com/496.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cff377b0f027f4cf2efba0f1827a6ac1
0f86e6e39b9d7c0d4aa84caac0aad079ba5ccae3
75baeb162272bc3a969e44d930ee73803411ad3b9299cc27dade9ba3bf38934d
GET /496.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:28 GMT
etag: W/"WlBOGAWSwPiCRSnvG+RRYg=="
content-encoding: gzip
content-length: 27123
cache-control: public, max-age=31377297
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/sem-etoro-ng/styles.0b04516674787ac6.css
200 OK 22 kB URL HTTP/2 cdn.etorostatic.com/496.0.1/sem-etoro-ng/styles.0b04516674787ac6.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 97752c8c682c2474f4194a078e231ea8
57b1f1da0eee8e6d926f54b1d54f84383db82bd4
446e9df6cb1bac975e8339f845b83119b3703e8fba37674c8eb9408cec878f7b
GET /496.0.1/sem-etoro-ng/styles.0b04516674787ac6.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:16 GMT
etag: W/"Mt9GofK2CZ8vrbHojER95w=="
content-encoding: gzip
content-length: 22255
cache-control: public, max-age=31377355
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
200 OK 404 kB URL HTTP/2 cdn.etorostatic.com/496.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
IP
File type ASCII text, with very long lines (33321)
Size 404 kB (404329 bytes)
Hash 0298a217ec806a1744f54a49d08ba95e
64832668ba2cf3a69bfd61f21dd419aa41d24fd4
43c74227fce511fc535ec28e346be24e857ec3da0ca2887a9dbb9f65c0eca140
GET /496.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "O1S4QFJxtfDCUb7g7e8jUA=="
content-encoding: gzip
content-length: 404329
cache-control: public, max-age=31377399
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_95b1e4b508ae2a8f8c6c78f588b3aea6
200 OK 6.8 kB URL HTTP/2 api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_95b1e4b508ae2a8f8c6c78f588b3aea6
IP
File type JSON data\012- , ASCII text, with very long lines (33443), with no line terminators
Hash 1bc394be86b65f84a3f7821e717397d4
e872f5f9d730a6368c84ad84c2045bb9d1ab59a8
842781ebb3032627b0b27505b3405ebb2adf34524c09a7d0e7ad26b420fc53e1
GET /api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_95b1e4b508ae2a8f8c6c78f588b3aea6 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:8632999c-01c3-415f-8d41-4dca9d4a345a
content-encoding: gzip
x-robots-tag: noindex
content-length: 6834
cache-control: max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/css_files/?p[]=styles/style.css
200 OK 298 kB URL HTTP/2 cdn.etorostatic.com/496.0.1/css_files/?p[]=styles/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 298 kB (297553 bytes)
Hash 4fa273499fa302cc77d85cb13694be0a
194c0b4c1e620f2ad9e58debd6f02a8823e3ea9a
b29c3edf450aa61f084b86d9ddf7d5c18c881b2aa56cca460ebbcccc686be5db
GET /496.0.1/css_files/?p[]=styles/style.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "3ZJXXIEj+bKGn8ebuBrKzA=="
content-encoding: gzip
content-length: 297553
cache-control: public, max-age=31377322
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=e986b4ae96f28a56149003fff2c071d5_8ebc433af3ac79a87a8f478c665bf558&totalBulks=1
200 OK 312 kB URL HTTP/2 api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=e986b4ae96f28a56149003fff2c071d5_8ebc433af3ac79a87a8f478c665bf558&totalBulks=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 312 kB (312539 bytes)
Hash 3248d11c9bebd29ae78e3566eefff8a2
275e1559213b66fbff179511f1dd03363db4998b
e3c6ba07787c1296369cc4fa6474f64d76912fc4d62dae24b0fe77cc6d0fb30f
GET /sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=e986b4ae96f28a56149003fff2c071d5_8ebc433af3ac79a87a8f478c665bf558&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:486a9dd7-b5cc-49fa-ae5e-a2ea9ee3e36e
content-encoding: gzip
x-robots-tag: noindex
content-length: 312539
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/candles/closingprices.json?cv=baed4b1c59ffa664154a8a934987dfa3_df99c0f883565ed76e1ecee6ba247f3c
200 OK 148 kB URL HTTP/2 api.etorostatic.com/sapi/candles/closingprices.json?cv=baed4b1c59ffa664154a8a934987dfa3_df99c0f883565ed76e1ecee6ba247f3c
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (148178 bytes)
Hash a8950fcea12e3069f4b1000753974d43
f9eab36628ab802697221ccf85d8423930d6886a
cfd3e7eecb5945dae3a6ba43bc81ab15b021f42cb494875ae95d1ab7ccdd1a69
GET /sapi/candles/closingprices.json?cv=baed4b1c59ffa664154a8a934987dfa3_df99c0f883565ed76e1ecee6ba247f3c HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
x-robots-tag: noindex
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
content-length: 148178
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_d17aed7ede20d5e14230786861f56ab8
200 OK 788 B URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_d17aed7ede20d5e14230786861f56ab8
IP
File type JSON data\012- , ASCII text, with very long lines (3081), with no line terminators
Hash 18afcb9729a9802cc68f6ffd543d1784
4569392aa9271a43a2780790d20124c53d073940
3f3373c5f225713cb5262813c0966d4e7f38ca0806b4e54f12ea166b2e54e77b
GET /sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_d17aed7ede20d5e14230786861f56ab8 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-max-age: 3000
content-type: application/octet-stream
etag: W/"16c81beb818ecd15f024ae9606a53f74"
last-modified: Sun, 01 Dec 2019 10:07:21 GMT
x-amz-id-2: bIkebaYRUe3jEWFZABYUYjruc2Ea2jLxVLYa0DREpYzxlqVc4O/VO2fvkqK/LAth4KjZw9Hlom0=
x-amz-meta-s3b-last-modified: 20191201T100206Z
x-amz-replication-status: COMPLETED
x-amz-request-id: AE655MC1PBMZM4J0
x-amz-version-id: YJZIwhKbLzAkKfpv9wKr1PH76VdQu2_5
content-encoding: gzip
x-robots-tag: noindex
content-length: 788
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=d201ab3ca3cb4eb2b57342d8ce80438e_5e56737f908a913a2a0384b5f25d63a2&totalBulks=1
200 OK 348 kB URL HTTP/2 api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=d201ab3ca3cb4eb2b57342d8ce80438e_5e56737f908a913a2a0384b5f25d63a2&totalBulks=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 348 kB (347765 bytes)
Hash fdacebf126e1ef1bf257b115821f9755
79d192eb261135f04f5aec52db0518be65feb99d
bd7db157714c9f41afe747e0b9fe10b67f87a7b053c98dd1ede78abafafe3a3b
GET /sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=d201ab3ca3cb4eb2b57342d8ce80438e_5e56737f908a913a2a0384b5f25d63a2&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
request-context: appId=cid-v1:da6cfa5a-5dde-4d38-9665-5bd2b94cd342
accept: application/json
content-encoding: gzip
x-robots-tag: noindex
content-length: 347765
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/preloader.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/preloader.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash b0f268da8d890fc3afc15e32480e866e
1465c0de6f4871bbe22dc940cf2530a7a516568f
90c5b9934bc4952a0bec1284d8e63468b0cf8eb1af23cdfd56b735e83691b79f
GET /web-client/img/preloader.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: HqWlyvFWJDbYXvn+iBzeJlpU+EHNusBpfkYEgJ4CyOuyJqvbxfWRXsYgERY8SXO2Uty8vXGjtBs=
x-amz-request-id: 0ESYPX93H97JNZG6
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 07:40:21 GMT
etag: "b0f268da8d890fc3afc15e32480e866e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 07:39:12 GMT
x-amz-version-id: ypOW0sjHuKqXDROJg6L6MTOp1Z0lHcDD
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1206
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/avatar.png
200 OK 4.1 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/avatar.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 299143d79774a5a4581a0e3a7f0a0038
971f38ccaf41dab068a4f9eb5c4d6d7a25bb67bb
94e3a489999508f5d2367de8ef15434d1f41afc24b2c94b08976d96438ec5530
GET /web-client/img/avatar.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 0/y9bE197UJxPRTVFYy7P/+nKzeb0xicMs8KtbmCgF1c1RUFjmN2l2WF7hMib6OXE24ToEt5OX4=
x-amz-request-id: PGNT0B3TBRSVZ60B
x-amz-replication-status: COMPLETED
last-modified: Tue, 08 Sep 2015 10:58:53 GMT
etag: "299143d79774a5a4581a0e3a7f0a0038"
x-amz-version-id: TJHv2UgTAtmK_z5ntjVcX71guH3fsI7I
accept-ranges: bytes
content-type: image/png
content-length: 4095
server: AmazonS3
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/sem-etoro-ng/main.415815588583d307.js
200 OK 2.7 MB URL HTTP/2 cdn.etorostatic.com/496.0.1/sem-etoro-ng/main.415815588583d307.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 2.7 MB (2736202 bytes)
Hash 4de5a5031302f7995465a822c20f2c78
a6974898e9c5936b5a4f676fb6d455f444166bc4
ad1b32520a0ff2999fadb9abc4bea4180228af778670a569e26a9338e42933b3
GET /496.0.1/sem-etoro-ng/main.415815588583d307.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:28 GMT
etag: W/"IfSQZ/Lgno4RKgYDKGesEg=="
content-encoding: gzip
content-length: 2736202
cache-control: public, max-age=31377318
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sprite.png
200 OK 71 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sprite.png
IP
File type PNG image data, 170 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Hash e1e136d8c9c87238c1faecbe30de864a
4dd3ff46c7a92fb59e0b4e86f0ad408c67867f66
1f97ddc0a725e59b6f4f9e1cd03eeff0399145b5f9074e9dde10f04856541c9f
GET /web-client/img/sprite.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: iJWzXYFdvEsHbEaNHHt7HyUvdx4wEIrq7y/s8sADj0jPVLPimD+kxmxwzrBJ2Y0eY+jtrrKWVtQ=
x-amz-request-id: XNEMD1WGBMP43YZ2
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Jan 2019 08:39:49 GMT
etag: "e1e136d8c9c87238c1faecbe30de864a"
x-amz-version-id: c7040_.mWfwV0MHOIOsnAOoCalddmt_9
accept-ranges: bytes
content-type: image/png
content-length: 71400
server: AmazonS3
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/Splash/touch-icon-ipad-144.png
200 OK 5.7 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/Splash/touch-icon-ipad-144.png
IP
File type PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Hash f092565f3aad3709b6078be9d3d7c6de
84b518cacb1f0c6ebaa58a7a81c3d5e376405d43
ffae9c7e791049222450c9ca98e57830313b8e918a8e825944a1b6376f5397ac
GET /web-client/img/Splash/touch-icon-ipad-144.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: WmexICEBtjnn/vjtNmdvVtYbdZBQ7M12KuffRhP4+16/KkWF4A2AuppSBdWnZrXGpjBDqBIhS4I=
x-amz-request-id: QDN89A8E97GC0VGY
x-amz-replication-status: COMPLETED
last-modified: Sun, 27 Dec 2015 14:45:23 GMT
etag: "f092565f3aad3709b6078be9d3d7c6de"
x-amz-version-id: rmovFrrcZBM1dXrI_13uWeeISqQczKQq
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 5740
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:32 GMT
date: Wed, 07 Dec 2022 02:57:32 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 3.2 kB IP
ASN #20940 Akamai International B.V.
Hash 67c1f8bb1f1436902249ca6efbf74c69
cdbfd5731a6387dc4f379f1a58ff2192d741685d
f42a5f321fa82d5dd656a3c1a6b282e7f356804386f67b2ef32343996300508c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c2ae931d0f14a81013f782d43b8c7b85
9ec84996b63362ad370ff67b0fd8136a343c1bbf
9b4a2b3e5e2d2b4fac094135fed10a3040598f1208f6b2ec52d95d10aca66ed5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9891
x-amzn-requestid: f15dc6ba-901b-4ef6-8589-d8918fe84173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csU8lF3MoAMF47g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6850-496d269b228065a365a67eea;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:53:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3SFFPJye5LvexbHVfPukXIdJ-BSkP5MCpesIJhqxtSNKamcRNr1lFA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 18:21:44 GMT
age: 30948
etag: "9ec84996b63362ad370ff67b0fd8136a343c1bbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b89a7fe1080499e4f7171f962b57fec4
62ef59be034071e667e3476ea0740077c86778c1
e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:06 GMT
age: 18146
etag: "62ef59be034071e667e3476ea0740077c86778c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b92721cbe24623f1713a5248d6a7c1b2
3628390c62642dcc375b28f58c9b48180c4abd73
37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9613
x-amzn-requestid: 3542fd4f-74e3-450b-b7fc-04034d680bf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cslIEEDtIAMFfuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e8233-40eaebed627d374d0910e456;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 23:43:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2aI7z8gOkQiNDlj2tbsoWibfupjl25ZjoO_QRbfmXQKwO-yF455yXg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:18:37 GMT
age: 70735
etag: "3628390c62642dcc375b28f58c9b48180c4abd73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d0219e6bee2a28f003f396f872eecf0
b3d22d146c6094cb539de40a72b9c5a140802ee5
41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7609
x-amzn-requestid: 02299a39-6804-49ae-b415-313b6e06b2ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfj24G39oAMF25Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63894cf8-5f578e3f211063bd125b645a;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 00:55:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uMTaiFjrcbJxWm4M7BuSHPu0BFUMp9UIpMvnvlLs_dajlM0_iObY2A==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:52 GMT
age: 17980
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a317faf49d8e057d1da40f9441b6c30
f01497a3eef693b70b18885156f63c9c7305ed7e
5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1go6MAGUUThlH59lQ8FRciYwPrzYJbcTKlNPmzqxNWynDV7SHrwmTw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:47:40 GMT
age: 76192
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bdf4703f3372054a7aadce1cb0e11bd0
84d060f66accd412503d52c385ee47cb35795c07
c5853b653ee328e567e2456be12450e04c1704ed64fb6234f008532e4b6c8363
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3744
x-amzn-requestid: 73eab74b-e50c-46d1-adde-3ef85fb772f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlj7FDiIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb618-70ffb1925e3a9ef6081d1cd1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: F-LcglSz1NX1Q2t84r1dv0vQzONyYMhlGB6TdS6CeKf9I8Krk1mDUg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:41 GMT
etag: "84d060f66accd412503d52c385ee47cb35795c07"
content-type: image/jpeg
age: 18111
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 104 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35498)
Size 104 kB (103786 bytes)
Hash e7aa7a004bffb87402b0adb0a3951904
7c9fecd2a19e2426a7a4528c32a5ac72d3016df6
edb146e8c42c96371c21abec04563a39f044aae7b64b1180517ae938341b9731
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 02:57:34 GMT
expires: Wed, 07 Dec 2022 02:57:34 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103786
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash f6f80ea329a29d68710fa1b3756a9da6
98133ee017294c770fbb8730f86aba960cfd9908
1871e1ff71531db14cb402a70a070916a0fb530afb687316870cc44c242880c7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4458
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:43:16 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP
File type ASCII text, with very long lines (755)
Hash bea784dce86d30e1f2e59387f85cccb6
90665d4cc2e3f1e8c6da1247096c0af28b70ae04
b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsp4arcwAxC-K0mSzZWezXVXJv7AscRdZZlLEB2Nevk_D4WbvgOIyHi41VyGaH4IZy43RmyiJpXa-4w2GMGCssyhA
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Wed, 07 Dec 2022 02:50:02 GMT
expires: Wed, 07 Dec 2022 03:00:02 GMT
cache-control: public,max-age=600
age: 452
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash f6f80ea329a29d68710fa1b3756a9da6
98133ee017294c770fbb8730f86aba960cfd9908
1871e1ff71531db14cb402a70a070916a0fb530afb687316870cc44c242880c7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4458
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:43:16 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727
etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
IP
File type PNG image data, 198 x 64, 8-bit colormap, non-interlaced\012- data
Hash b41babf405ad72c9fa6455dccd372380
83841f3d6f390fddbf774b397daf051c890a8c32
ac2ec5d1e65ba32849742fe3ed0899214ba9e063ebf31b7549175f2b66394b08
GET /web-client/img/login-logo-hd.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: nCcBu0v76yZROM0UVGS1psQM+n6uBqlFKHJzRUWzZDMK7MJL4ybJmRA+6EElyvapUivLLJlrUyo=
x-amz-request-id: VS0NZZ2EWE45GE1C
x-amz-replication-status: COMPLETED
last-modified: Thu, 29 Sep 2022 12:49:46 GMT
etag: "b41babf405ad72c9fa6455dccd372380"
x-amz-meta-s3b-last-modified: 20220929T094658Z
x-amz-version-id: 078Rkok.ZhnHyEE5EUR82hq7nZDNmuJ3
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1171
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
200 OK 909 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6d8d67e95d438776e32632b4f8e8c4e2
6b5eac8fc9722e1d12f05e6e3dae6748215e0238
2bf43a304aa34d530722842db131841969dffb18d2625b58851926d5fc011e26
GET /web-client/et/img/settings/general/flags/norway-flag.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 9kK/qpr6Ta8fMIkv0nUChxWg7wslUbk4ijFiq9X5LU3+rqPr5pGUhJr+EATBeD8/etJ63uLoymI=
x-amz-request-id: FP59KRJFWP3V99B4
x-amz-replication-status: COMPLETED
last-modified: Wed, 19 Feb 2020 12:32:58 GMT
etag: "7ee02734ec1f49f74d970aea31b057e0"
x-amz-meta-sha256: e143bb1d025c5ab640ec3df3c8b80829a62eff2d46e654618f865479aa3d7374
x-amz-meta-s3b-last-modified: 20200219T114039Z
x-amz-version-id: d0T8a9zUHLaL3Zp1SI66mmUeybQ6zeZH
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
content-length: 909
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Hash e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: jhOnM69WpoiV8oSTTNXetipBb7pUc9tS6FuF/XnPxNUwhBi6Q+ANBt25PNF2dXvmEtDCkoFPZ5g=
x-amz-request-id: F37B07A5E1D6416F
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-type: application/octet-stream
content-length: 59600
server: AmazonS3
cache-control: max-age=2592000
expires: Fri, 06 Jan 2023 02:57:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 193d8810870a774252164a702c672a1e
a905bb3d9b73e2773875a2899de31bd0936b4aa7
f1837511a3b3df8bd537ad69635a48e0a10499e32524f55b955fe3030db125fd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=113538
Date: Wed, 07 Dec 2022 02:57:34 GMT
Etag: "638f035b-1d7"
Expires: Thu, 08 Dec 2022 10:29:52 GMT
Last-Modified: Tue, 06 Dec 2022 08:54:51 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2kZh2Stov3mCmm0wWmlDHIvXepZWZ6iaqsE8ir5L3tB-I1FCS_Lwrg==
Age: 5701
etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=ec8bac60-a43b-4c7b-a884-d2fa6aad8f83&referrer=
200 OK 5.7 kB URL HTTP/1.1 etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=ec8bac60-a43b-4c7b-a884-d2fa6aad8f83&referrer=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6dfc495da4241bd88a002aa677dd2778
8e6bb2aa50cc0bfea4942b1e3c9945d920894080
0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
GET /loaders/history-changes-r.html?target=historyChange&guid=ec8bac60-a43b-4c7b-a884-d2fa6aad8f83&referrer= HTTP/1.1
Host: etoro-px.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: b1vdPQtfLE27/ETJ+BltyWIVDzG0pn4uiVmtMQd9uHVlC5HEswSzbfrsUFXYYrx5xP/s8nsGzP0=
x-amz-request-id: 09M841QDD6MV0GG5
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Tue, 07 Jul 2020 12:01:19 GMT
ETag: "6dfc495da4241bd88a002aa677dd2778"
x-amz-meta-sha256: 0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
x-amz-meta-s3b-last-modified: 20200707T114930Z
x-amz-version-id: 2.0Pc3hXrEIlcYYVezOUu66Og0lWOrsY
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 5667
etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=62454e1b-ec83-45d7-8566-895ddd40770f
200 OK 1.5 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=62454e1b-ec83-45d7-8566-895ddd40770f
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 63cef4e6cfa61992fc2ef740353a6215
62181e33a58d5d220a1346974145dcce39b423ea
0d00919723aa25df1d7ef980698c420e706488ceb8f8098033e2b2d268da35b4
GET /web-client/recaptcha/index.html?guid=62454e1b-ec83-45d7-8566-895ddd40770f HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: FxBWOR/fjuKc+liaCjNbANgnRvdCXzJ4TggjaK9J8Iolg23MIdp7PKnUBUaOEnWwsj2KPVMXluU=
x-amz-request-id: 2SPZ1CQKHNKS1JZN
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Oct 2020 10:42:40 GMT
etag: "ef2039619799b54abf85f25976ff7199"
x-amz-meta-sha256: 349fb58237f7f8abb11e68632be1859f31c19fa4fa6a64d143ec18f7f6d59cf3
x-amz-meta-s3b-last-modified: 20201004T104155Z
x-amz-version-id: 9jyXMd7S_i_.xXnWVDXRZHjUkqd_s38N
accept-ranges: bytes
content-type: text/html
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
content-length: 1547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
200 OK 15 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
IP
Hash d2356f8e41a0763130d9732981a775ff
a0ceca62fd3e426aa85e02954854d28ca1f52440
7689fd52c94995522939e087bb99c4f42466b38de57ee84892c55bdbab81d622
GET /web-client/et/img/registration/i_fb.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Q8CEaY6a3UJ8HgVnKvuo+Cq1jtPaLboCQgJPgg/5Oqztjxd7Doc2/AnaD4IYgi+cGt2LYXKJRVY=
x-amz-request-id: T4H199ND35XVJCF2
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
200 OK 645 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b8f3342ef1ebe6f5c64bafff3131548
99b5ac271a65175ff24696d9a24c9ebda02b71fc
fc1f1deaf7d4759c0a6e573a65f7961733cbf05f66f93c44511881dd0b471596
GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rpPTwOu0pDtkTZdoPd7yU4ncwWLLg0TCgE5/bjZsIn5WGw732imkFJu+NhymSUY9gZyKA7zbcys=
x-amz-request-id: 8VEADDHMEWHAZMD5
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
200 OK 37 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1079, components 3\012- data
Hash 2f6d6f1e997f3a2a15888feb99459bb0
ce895db684c81debb871f8d59c45e8451a53809f
8a697f855d5b794eb68aa944977572f87334126a4b717952f61d6e48acc7edc1
GET /web-client/et/img/registration/discover_01.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: xBzX74AN6Sn6JtVvT1qUv8FKtzPvjrgBjO9bshrZQeHvsGCcyFbLIZ54Tau9Esrpr++6dgq/95B18OEcw1psjQ==
x-amz-request-id: 9BFAETD9J78TH30Z
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Jul 2022 14:52:13 GMT
etag: "2f6d6f1e997f3a2a15888feb99459bb0"
x-amz-meta-origin-date-iso8601: 2022-07-07T14:50:14.504Z
x-amz-version-id: QF_QgkRGCy62K6vDY_bK8WU3cAQLR7db
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 36791
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
200 OK 61 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Hash 96f3835aa784a280a0e1e7fa64b97b60
1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: MiVZL/kbY13iBYmpteEVq6ia/0McBnVUjv9Gv+aG6n8LoAYr3bu/dyvs1kxqWcreHhbAxj7nY7w=
x-amz-request-id: P84TFZ8HCEYTJMA2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61036
server: AmazonS3
cache-control: max-age=2592000
expires: Fri, 06 Jan 2023 02:57:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
200 OK 62 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Hash e9681ca3d29d814a5621d4764dd1a11e
bbda68459fc0531b915bdf9e524ecc8f782db0aa
51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: X1QIfIKr9mBBwVT8s2yKOj0YVt7edPyypgNUpe2lA082Np/m8G5zgD443xVHa4cb8Ba2zhuP4eg=
x-amz-request-id: PN7QTASNM9B7CB7N
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "e9681ca3d29d814a5621d4764dd1a11e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: HgUsNFmOXgC1eDiETddzJSTtCGDefKwY
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61548
server: AmazonS3
cache-control: max-age=2592000
expires: Fri, 06 Jan 2023 02:57:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=ff2185725390c1e9ae9745cd71c893c8_103fa1b3af30b4c3904cef7772e32a14
200 OK 28 kB URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=ff2185725390c1e9ae9745cd71c893c8_103fa1b3af30b4c3904cef7772e32a14
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, general \012- data
Hash 6302252a22f24df6b9f82359bdbf95b8
d994191775cd0d394744c43f42450d06d1001ac9
ce6a86e972f103d7af7372a0369449425b06e2ad502235c45b467711ea0448ac
GET /sapi/app-data/web-client-locales/nb-no.js?cv=ff2185725390c1e9ae9745cd71c893c8_103fa1b3af30b4c3904cef7772e32a14 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/octet-stream
etag: W/"d34480c53d752c03fabaf696f9961c73"
last-modified: Mon, 05 Dec 2022 18:02:27 GMT
x-amz-id-2: IJpgC9A8Qa1vsdR4vKKZlAXB6StaAfgKPwF+RqNwJeUs0ZM1XJzwuF8WadV93jbZceu1LzY5nwg=
x-amz-replication-status: COMPLETED
x-amz-request-id: WSMCENVF1E8D2YPS
x-amz-version-id: z28kE2_DG7e7.c5FBHebb20X7aIlGHuC
content-encoding: gzip
x-robots-tag: noindex
content-length: 401776
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4759d6ca26cf8a070066d71b02fac91d
85695e27b097c8d40ea86439854084fc0b3967d3
d20b9793d654c41c562be52e3d5f3840f7bec0db031bda79a42c93959ff88a63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5377
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:27:57 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Wed, 07 Dec 2022 02:57:34 GMT
expires: Wed, 07 Dec 2022 02:57:34 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 03ef0c8b33c240572fa071da8cc01d5c
1b35b947979c6dc6dc8a8b11b4ee3e6e9a7b5981
c939e5ad4ba78f1ed5ace489d52e59418349633f3b1f3dfd576290deb4f878e8
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: bbbde21d45e74dd18c9d5d176999294a
etag: "a68a42ffd3754a77bb473f85fcbc45a5"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 07 Dec 2022 03:14:33 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: A+8MizPCQFcvoHHajMAdXA==
x-fb-debug: wb1z6ZXgvo/W304Y3viAJpjzccjoSZCxk4DieT2R52gnwI8OKUzqbwzrHUrhUdylLIdPkINS4/D05hTfORrg0w==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Wed, 07 Dec 2022 02:57:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5377
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:27:57 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
etoro-cdn.etorostatic.com/web-client/et/img/registration/ab-light.svg
200 OK 25 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/ab-light.svg
IP
Hash ca2b33325cb115edca9573356346e099
5bd216740cb7d7899e55df4b597cf8b53b16f413
4d21750918af1aef20d2d0a9c7152f2918c46a3713bf8866ab9aca99853c74aa
GET /web-client/et/img/registration/ab-light.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: fQUh5Q7eEFJR/+onQY9Welsu14MA7ys0hh+4JHENtY6t3DlaBimGssHQeAPYdBGUPXXlGffkEz8=
x-amz-request-id: 8B763ECC8KT5XAZB
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 09:31:03 GMT
etag: "c197f3c533b1fd3cf5924eb2f30239c9"
x-amz-meta-origin-date-iso8601: 2022-06-16T08:36:18.000Z
x-amz-version-id: nooP56Rwm1oOt60h99pUHxP6xvOxopAy
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:35 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 24989
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292618&utm_campaign=PRP_DJULBREG_4292618&utm_term=&rdk=rk1
200 OK 73 kB URL HTTP/2 www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292618&utm_campaign=PRP_DJULBREG_4292618&utm_term=&rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58147)
Hash 9614ad887bab999b791bba35d41ae767
deaa1172cf67842ec375016817db468a3b8fa249
1f372a7e185138a537b93a99a8f06504039df044193f0f41ce25e1aa3d891165
GET /nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292618&utm_campaign=PRP_DJULBREG_4292618&utm_term=&rdk=rk1 HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4292618&rdk=rk1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:31 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
expires: Tue, 31 Mar 1981 05:00:00 GMT
content-security-policy: frame-ancestors 'self' file://*
x-frame-options: allow-fromfile://*
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: eToroLocale=nb-no; Path=/
TS01047baf=01d53e58182267886504bb38fb0b7bd06f8e8714eab1702efa59cf0c5d92e52aa3158b2c58825d4abb5a8788d7b1d7f6a886f3b617; Path=/
__cf_bm=.jGbQXeeqd3o3YRipk5z9AToXmeEva3nOugtDL8BsXI-1670381851-0-AbU1WwG8KPINITMjlZRTFm+9KON9wleCL47759S69/ZNl0akRPHQAz1sElgZ0E0vE7ZhrE5nGwYcJ3NBSycKpCLbXCKgVFCaYC6KJzrz97Sf; path=/; expires=Wed, 07-Dec-22 03:27:31 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgw9zuvAyM7pE5D16; SameSite=None; Secure; path=/; expires=Thu, 08-Dec-22 01:57:31 GMT; HttpOnly
__cfruid=869991cd0883684250b088f984f452f7e7d3e224-1670381851; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7759fe888c70fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.etorostatic.com/496.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
200 OK 814 B URL HTTP/2 cdn.etorostatic.com/496.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
IP
File type HTML document, ASCII text, with very long lines (2600), with no line terminators
Hash 9fb4e76e84c051366edefd126d73358d
b5258607a0001e51df1dd8a72e51b0061cf3a00c
df95ea3e29ac53a69ec60818d29e6d8406f0d82c02839d1e14c5222f7709e1f3
GET /496.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "WM91upZzxqcGhUsvXTONjw=="
content-encoding: gzip
content-length: 814
cache-control: public, max-age=31377409
date: Wed, 07 Dec 2022 02:57:35 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9084a518c70ad57bb3226fb519b648fd
79348ebe6f5900a035d4d65e08a7409fd9708f15
f0c6b0f66c31aa7cb2d2808eb4c04c3681d48e731efc8cbba0f3fef1d218ce7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cd4f7adad3fe34548fa20fc8bcd9dfb8
89d9e0523fd6141bb3599dfe631af767a48ce10a
988b706c3c6accc138214ba147bfb17b01ae8ae34c98e3d6ded4e5340b63fa27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?onload=onload
200 OK 565 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onload
IP
File type ASCII text, with very long lines (899), with no line terminators
Hash 20b487acdbb6fccd68a96c18b6f90db0
01e57fe16b0cb7f12578bc08281db1ed442b8387
504f955db77b3802e747a66a4762a2f5697631befb1d1ad4491308f83f75771a
GET /recaptcha/api.js?onload=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 07 Dec 2022 02:57:35 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 565
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 30 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash bbf12f5d9b89f3c0c8b3d7bd445cfcbb
c3979a6e1c61a65f017279d12fa1926bd1eca260
2aa420f8725b71fcf2877ba23310d35279fc81bff5be050edc49fdeecbcf3411
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 30231
content-encoding: gzip
server: Caddy
date: Tue, 06 Dec 2022 20:41:01 GMT
cache-control: max-age=43200
expires: Wed, 07 Dec 2022 08:41:01 GMT
etag: "14351-RIWjsv313PWYI4RyEPNyETuIUAc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lphICjIPpqCG_y3QiSR4dJ7c3ZyKqvw1yhjvNV4Ovcmau7ttxkCOKQ==
age: 22594
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 12 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (27646), with no line terminators
Hash 62585b7e4a4eab6ba3984a2cd4de5365
14e3b07044b095c9b8fd7b84bf00adb32233edb0
8e0a43da6d5b986bdf45ccdc4bfc11742086d59e2dbf2ae3a04701602c6b8bb7
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 11972
server: CloudFront
date: Wed, 07 Dec 2022 02:57:35 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 08 Dec 2022 01:47:44 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JIM1qHCD92ecxNRum_sttIQYYAoO2NIKBK66bY6TR8da3piCEKD1xw==
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 16:19:20 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nf8HoPBr9LghTKFei5k-37pPT7EeMJwaEXcR5OHCuqZOrLNmIWdRHg==
Age: 38296
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 82dc811a8b106183fe1a3c92caca7a67
6f91d328a356a18d85a192a057f8bb0f12bd310d
618addad95581f04d48245ca12062d5b959e236b7fbf12d4966471abb4b1e834
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 11:03:19 GMT
expires: Wed, 06 Dec 2023 11:03:19 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 57256
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
200 OK 275 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (562), with no line terminators
Hash 1ab2a97338ed3a74084554ba95e3c920
9607de2f32b9ca12b92257f1469eaf7e688b6f80
1f91225ca593af121d56d4553e90970bb0eb6b267a9de6ed812906ed9c7efe0d
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 03:12:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 38d1c089860ce360f5266ae101ab05ca
31705702b50e1c818c052b6d2a23f22583aa07d1
097ac1bb8edd3ef2e02fa551d824a0104c6995e130f9cdc4bcfa65583a9785d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash 14800f246c902b3ef7331a241b87504f
d61159b08f3860ab933f95fe748cc7f0490af875
69d18134c341266892edb221a7431bcd74765a819b5e0cb47b394b72a8c274a2
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5182
Cache-Control: max-age=129559
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Etag: "638f43f8-1d7"
Expires: Thu, 08 Dec 2022 14:56:54 GMT
Last-Modified: Tue, 06 Dec 2022 13:30:32 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e3a84ff69d450f8dbbb876b09c91e3fa
f0f8be05011a384bc38970a5cd162c9007ab3e2e
e8312d694cf22c6c03b5d6c2e1e1e9bf5bf15ae72dd4c561cf5b2cc08690cc97
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5840
Cache-Control: max-age=141788
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Etag: "638f712c-1d7"
Expires: Thu, 08 Dec 2022 18:20:43 GMT
Last-Modified: Tue, 06 Dec 2022 16:43:24 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:35 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
200 OK 17 kB URL HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
File type Unicode text, UTF-8 text, with very long lines (39267)
Hash 12a5f480c5a23efc80304d3bbc35d746
4043357825f2e91df5c4f339a9bc95f8e5b48fa1
b7be9b25bef3ce5c830263ba56bc3235a6683a9950115e4d4368144de3bbd2ec
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1668786461811"
Last-Modified: Fri, 18 Nov 2022 15:47:41 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Wed, 07 Dec 2022 02:57:35 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:35 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 2209
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 566c9d37739634118939a7a769e47c3b
d532ef1dc707738bcad35b7049c3948cf46180a0
bb1e62d825c59ec45e4d8774f2f6b8e0b04db329dfcb3b5babf80c35a4588c03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Wed, 07 Dec 2022 01:47:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 566c9d37739634118939a7a769e47c3b
d532ef1dc707738bcad35b7049c3948cf46180a0
bb1e62d825c59ec45e4d8774f2f6b8e0b04db329dfcb3b5babf80c35a4588c03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Wed, 07 Dec 2022 01:47:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=7e988ae4-83c5-4257-9c15-02d0a69590d8&u_sclid=1ec0bd52-0255-4048-9c28-a1e7d0d46971
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=7e988ae4-83c5-4257-9c15-02d0a69590d8&u_sclid=1ec0bd52-0255-4048-9c28-a1e7d0d46971
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=7e988ae4-83c5-4257-9c15-02d0a69590d8&u_sclid=1ec0bd52-0255-4048-9c28-a1e7d0d46971 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:35 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 652
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:35 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAA3GwQ0AIAgEsIlIQEDOcVR0CobXvsoIzWlKw2FkHn+CoHZw1+zZbGeV9GCFwL34AVI9GkIyAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 4
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 566c9d37739634118939a7a769e47c3b
d532ef1dc707738bcad35b7049c3948cf46180a0
bb1e62d825c59ec45e4d8774f2f6b8e0b04db329dfcb3b5babf80c35a4588c03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Wed, 07 Dec 2022 01:47:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com
200 OK 23 kB URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com
IP
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (36216)
Hash 134c24444271b9f7e67842c825303a87
da1e852ca333d3e9e07a8c4271fde7fded299d9f
9a75570032dbf230c7cd755ed9b51a3948e4524eb80074ff04e51ebdf5152807
GET /collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:35 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.adalyser.com/tracking/track/v3/p?stm=1670381855578&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1670381855577%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292618%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22d323d418-27d6-4c8f-b95e-cf43415fb817%22%2C%22duid%22%3A%22df539ddd-a50e-4295-93d6-743e1c57f914%22%2C%22cw%22%3A1670381855577%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1670381855578&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1670381855577%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292618%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22d323d418-27d6-4c8f-b95e-cf43415fb817%22%2C%22duid%22%3A%22df539ddd-a50e-4295-93d6-743e1c57f914%22%2C%22cw%22%3A1670381855577%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1670381855578&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1670381855577%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292618%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22d323d418-27d6-4c8f-b95e-cf43415fb817%22%2C%22duid%22%3A%22df539ddd-a50e-4295-93d6-743e1c57f914%22%2C%22cw%22%3A1670381855577%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:35 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/
200 OK 298 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (595), with no line terminators
Hash 525907b0684ec7519d08f2e76501ab1e
26e15a273d581389cf3630e497a4ba5f871b5532
e10d3482a569832cc2d23db7f1bcad3eee1aefe8be303cd56f12e50be47953cf
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 298
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 275 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (561), with no line terminators
Hash 2888301990c4b794774d7d3454f5ef45
9a0cf2d83268e6dc1097bcbf7607a2728e8ef514
3be969207e485fb819f87c8bf994dcfafac7d29c32750eeac9d8454ac8d25c18
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1
200 OK 356 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (666), with no line terminators
Hash 4360bfe8c85d218bc3981d18f9b8c5e1
36ccb009fc602999804433dd7a95e9a808b13129
1f13f82ba963d1fe3607bd997c9a8acd4ad781e13785812b1c8d2dd849dd7823
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 356
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Wed, 07 Dec 2022 03:17:36 GMT
Date: Wed, 07 Dec 2022 02:57:36 GMT
Content-Length: 5269
Connection: keep-alive
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.6 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12961)
Hash c1a25b303b61b25e995516f5559bcdea
3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=49328
date: Wed, 07 Dec 2022 02:57:36 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 07 Dec 2022 02:41:08 GMT
expires: Wed, 07 Dec 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 988
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash d925a898de26295fdebfc90203ef46fa
77dd3f5893b76530e08058d50e8f9aef017e80c7
8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11460
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=3752C5E6FC0065B439D7D795FDF564EC; domain=.bing.com; expires=Mon, 01-Jan-2024 02:57:36 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2715E7745574447D8B43AA8F9BFAC014 Ref B: OSL30EDGE0105 Ref C: 2022-12-07T02:57:36Z
date: Wed, 07 Dec 2022 02:57:35 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/gtm/optimize.js?id=GTM-W2RM4JN
200 OK 44 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-W2RM4JN
IP
File type ASCII text, with very long lines (1921)
Hash 472d7194231fb5d07979e79ff159c0ab
9230177e0e0ed5bfa4a30c6e94c6083bdd066779
6bbbb5993a3cb46d462ec0b243b5eb7a0fe2c00f4a2633e4e05943ac7573bb42
GET /gtm/optimize.js?id=GTM-W2RM4JN HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43922
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (58957)
Hash 5e3a6e6ff2771996b946c623f7ab6a95
66538ef487bf796e6e5b9dae63f42eb00b3c7119
e7d309038650ace6b1d64f03f6198936913d8f36c7a0c540c95f03ce7b0dd3aa
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iCJqqHGroiOX6CSTSJeobEA4PIodWrLYTdIpFb4pdmFUBHHys2aM2LrBcFJ4D2XbbTd9NY50V64=
x-amz-request-id: E1MAS72MCJHJRDTZ
x-amz-replication-status: PENDING
last-modified: Tue, 06 Dec 2022 13:03:15 GMT
etag: "375088fcaa82b4244c6b164a193beaef"
x-amz-version-id: xC2nQ3r_Qk7W2rPoR_MneLPEevr2xf7i
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 02:57:36 GMT
via: 1.1 varnish
age: 26
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670381856.119938,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 80
content-length: 18110
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 07 Dec 2022 02:57:36 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/o/oauth2/iframe
200 OK 275 B URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP
Hash e4646dffd536d8ff6ef6b2a4f25b90cb
f68246375a6e2d095dca4c718bbc6e7d591fb762
b8cb831439c59e5bba6d6da34e561135e2f2c0a00a4c7006fbc885b70aa3f4cf
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport, script-src 'nonce-eSovM2ExUPBH6v18OpEAEw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1670381855324&hl=4&op=0&ag=1317291471&rand=945971669290298119221891765026621261166798780091702278929665715090120751176&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=aPNuw1Kovu&pto=5418&ver=48&gac=-&mei=&ap=&duid=1.1670381855.LiEQzqU7PgvcKpcM&suid=1.1670381855.FFRpJHA9bYBegtCU&tuid=1.1670381855.P6uV3cxbQeD7EuDi&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=99%2C5198%2C55&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.1 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1670381855324&hl=4&op=0&ag=1317291471&rand=945971669290298119221891765026621261166798780091702278929665715090120751176&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=aPNuw1Kovu&pto=5418&ver=48&gac=-&mei=&ap=&duid=1.1670381855.LiEQzqU7PgvcKpcM&suid=1.1670381855.FFRpJHA9bYBegtCU&tuid=1.1670381855.P6uV3cxbQeD7EuDi&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=99%2C5198%2C55&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3134), with no line terminators
Hash 40d94f61684dc0ef8a35ab9f21d9c1ae
5f652c5a91e32d2513297f1979441c0beb939ab5
81d822cfb51cfc5ed75dd8d65613c219f64248fcfe97c1a00e11ff879fa1bfda
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1670381855324&hl=4&op=0&ag=1317291471&rand=945971669290298119221891765026621261166798780091702278929665715090120751176&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=aPNuw1Kovu&pto=5418&ver=48&gac=-&mei=&ap=&duid=1.1670381855.LiEQzqU7PgvcKpcM&suid=1.1670381855.FFRpJHA9bYBegtCU&tuid=1.1670381855.P6uV3cxbQeD7EuDi&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=99%2C5198%2C55&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=3d14512aaf7b1e6f365ad2002e6d533a; Max-Age=29030400; Path=/; Expires=Wed, 08 Nov 2023 02:57:36 GMT; HttpOnly; Secure; SameSite=None
content-length: 1056
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1429353741&_gaz=1&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1429353741&_gaz=1&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1429353741&_gaz=1&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1e181f9ed09fb72bf80535f26ad7b91a
df966a15abb5b870e71527d73592f7d977011eb2
741e73d12b0fa5e76d9b4a78e8e70dbe307e059a0018aca245da0db44c5a5958
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Tue, 06 Dec 2022 08:13:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 9dc04feb591f6b5ae6ea4527a23d28da.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: Sw7H_2p4UgaCoxohJk2QgyNkd-RKyg903FMUH8As_u6wrB3xLwbFKg==
age: 67474
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=743503097.1670381855>m=2oebu0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=743503097.1670381855>m=2oebu0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=743503097.1670381855>m=2oebu0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1429353741&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1429353741&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1429353741&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=743503097.1670381855&jid=1672452391&gjid=1156124644&_gid=386483337.1670381856&_u=IADAAEAAQAAAACAAI~&z=1430880769
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=743503097.1670381855&jid=1672452391&gjid=1156124644&_gid=386483337.1670381856&_u=IADAAEAAQAAAACAAI~&z=1430880769
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=743503097.1670381855&jid=1672452391&gjid=1156124644&_gid=386483337.1670381856&_u=IADAAEAAQAAAACAAI~&z=1430880769 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1e181f9ed09fb72bf80535f26ad7b91a
df966a15abb5b870e71527d73592f7d977011eb2
741e73d12b0fa5e76d9b4a78e8e70dbe307e059a0018aca245da0db44c5a5958
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=743503097.1670381855&jid=724127345&gjid=1045760817&_gid=386483337.1670381856&_u=YADAAEABQAAAACAEK~&z=1534654216
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=743503097.1670381855&jid=724127345&gjid=1045760817&_gid=386483337.1670381856&_u=YADAAEABQAAAACAEK~&z=1534654216
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=743503097.1670381855&jid=724127345&gjid=1045760817&_gid=386483337.1670381856&_u=YADAAEABQAAAACAEK~&z=1534654216 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
200 OK 46 B URL HTTP/2 match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:36 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash b7f6a82ac56fa0154aa8f33645a31baa
2f6cb883c763e0045431642bfb1d7b6c5997fa7e
41e95a1c8af92d089591c20d8c8c206a407f54f33012aaa843bb68322a1b3cff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3078
Cache-Control: max-age=121707
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Etag: "638f2d85-138"
Expires: Thu, 08 Dec 2022 12:46:03 GMT
Last-Modified: Tue, 06 Dec 2022 11:54:45 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash b7f6a82ac56fa0154aa8f33645a31baa
2f6cb883c763e0045431642bfb1d7b6c5997fa7e
41e95a1c8af92d089591c20d8c8c206a407f54f33012aaa843bb68322a1b3cff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2913
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Last-Modified: Wed, 07 Dec 2022 02:09:03 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=aPNuw1Kovu&ts=799&cb=1670381856123
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=aPNuw1Kovu&ts=799&cb=1670381856123
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=37dfbd8ee84e00136deec43deb4f8f9b9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f674ad6828d022d3d4aaf2e7056866ed934c4023554779152005d60020bc3bd681e77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c791527540fa6da78667d01f1f2412b8bfaa478c6e85c724f29f8f7f1c79e7fbccfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6335f51b07f3aeccf563bf08ba4299058ad5becdb07931c98903a9a7c7689da7e8f3b8d97a8fccaabbe7677a37beffea7242f61f8943cd2ef01a500025cb81e05c09282cf9eafd667927b80daa29e77d37d7638927f2782cbc2197686b337bc17e8ae5c9167a47e4c1466fc04822bf4f0805f88a01dfa4ab7d48c8f34d41d537bf2631550715b7dcca96feb77e4feba028da94bdda00bffbfbfae26dfe4b40522699ee66352dca7060546e4eaeb6be6619bf840fdb47ba076a12d8711814594f762d51024e5ad8e746c2d6a1154744e0bb8b39e66d01ea5001f5123fca85d9dcd4e59bcfa8af8ae66d0fff8eed5a0bdfb595d20e919d7f00039d2073c448971576332e467bd2148b1b79836d424ae7199a13ed0aa118b2d5d527c5b294dd8b9b0c9366948880457d78fcbb1dbc9520682adbb7d96d36e78ded67f207badd4800233bd3584419e1ce43f981adac016fda44ebbeee998d922658fb77d30f936f5f0a2b704df296d42179e7a424eb0a5588fef1ccb919ecd4abbf1e573744f36b76fc277ff02f6f20c842e51650463296deb488f9f3253be6fc3aff43ddcca53ec7236c9122f64cd89847e5d9b3481d702c61573401cae3147efb3c52a8f0e2c90850fb3869e86c030860206794cac203758cac1501fef71&cri=aPNuw1Kovu&ts=799&cb=1670381856123 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=3d14512aaf7b1e6f365ad2002e6d533a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 92e078f3076c59137dae77470733c126
43134eef6a45a528530d6710b0618baac8219348
82c36c961246e5642b9bbc34c584cc23eca4466687fa81d57d35d949befb577d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4907
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Last-Modified: Wed, 07 Dec 2022 01:35:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 92e078f3076c59137dae77470733c126
43134eef6a45a528530d6710b0618baac8219348
82c36c961246e5642b9bbc34c584cc23eca4466687fa81d57d35d949befb577d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5750
Cache-Control: max-age=157887
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Etag: "638fb069-1d7"
Expires: Thu, 08 Dec 2022 22:49:03 GMT
Last-Modified: Tue, 06 Dec 2022 21:13:13 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 7060883c19d89e05aa8daa071bae5b7b
391aae451d93d08996c1237c59c993d9e0882f7a
98c8033d6fc10a6ee8d99bff80e580035b1e6cfa3fdbe3091bd627f8c475a077
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 07 Dec 2022 02:57:36 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Dec 2022 20:22:19 GMT
Expires: Wed, 07 Dec 2022 20:22:19 GMT
ETag: "391aae451d93d08996c1237c59c993d9e0882f7a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash 06919c87d5757fdd2cf9c0b763275d8f
16d2e149643b7ba18adece05ba1995689d84248c
2664901b9643b2dd5a1b42a7458ef7a4c491ad17e8e1a873f09f56233764cf81
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 01GXen47cU5T4Wvr0qEa/KVqxjgllnW2UXbCfRv8APz2i2jNKB4M88tB3vOF2VYZwwCMFPB8XP0=
x-amz-request-id: ET3S8M2V4XBWC9E5
date: Wed, 07 Dec 2022 02:57:04 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 33
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:36 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=c7077511-9ff1-447e-916d-dff9e9db62bb; Max-Age=63072000; Expires=Fri, 06 Dec 2024 02:57:36 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 5b022841eb11b7cd
strict-transport-security: max-age=0
x-response-time: 109
x-connection-hash: 713deeb612f907c700eefd2c03bff9c2b6f78c7d164259d575dad079df7b375e
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=2e53f939-946c-4024-a39e-5972cdcbb43f&sid=e755ce5075da11ed9f561994e96a4399&vid=e75607e075da11edac974b1eae5dd90e&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&r=<=2560&evt=pageLoad&sv=1&rn=174736
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=2e53f939-946c-4024-a39e-5972cdcbb43f&sid=e755ce5075da11ed9f561994e96a4399&vid=e75607e075da11edac974b1eae5dd90e&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&r=<=2560&evt=pageLoad&sv=1&rn=174736
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=2e53f939-946c-4024-a39e-5972cdcbb43f&sid=e755ce5075da11ed9f561994e96a4399&vid=e75607e075da11edac974b1eae5dd90e&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&r=<=2560&evt=pageLoad&sv=1&rn=174736 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=255EEC519A7F6C990518FE229B8A6D59; domain=.bing.com; expires=Mon, 01-Jan-2024 02:57:36 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5938EF14CCC94AEDBE98F56B181C6926 Ref B: OSL30EDGE0105 Ref C: 2022-12-07T02:57:36Z
date: Wed, 07 Dec 2022 02:57:36 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=0703C1F7D8B46996343FD384D94168AE; domain=.bing.com; expires=Mon, 01-Jan-2024 02:57:36 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 00DA210260AC42B89148EEE4BCDF6ACF Ref B: OSL30EDGE0105 Ref C: 2022-12-07T02:57:36Z
date: Wed, 07 Dec 2022 02:57:36 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 7b16c23b5e223ecd727e79404b6cda6e
f56ed0667a4188ce4c2775811b2ad8bf70bd1650
5b160c3807dae6c624ae16986c8958ae22c3d7d536330853d6eb0007cfca3cee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3479
Cache-Control: max-age=163137
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Etag: "638fcdca-138"
Expires: Fri, 09 Dec 2022 00:16:33 GMT
Last-Modified: Tue, 06 Dec 2022 23:18:34 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 7b16c23b5e223ecd727e79404b6cda6e
f56ed0667a4188ce4c2775811b2ad8bf70bd1650
5b160c3807dae6c624ae16986c8958ae22c3d7d536330853d6eb0007cfca3cee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3474
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Last-Modified: Wed, 07 Dec 2022 01:59:43 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:57:36 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 3be35ea4e5914ec249e5eac5a5e66214
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&optOut=false&bust=048257332644832385&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&optOut=false&bust=048257332644832385&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&optOut=false&bust=048257332644832385&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:57:36 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 8e25fc1b3bddd3db4687ff154e4fe348
content-encoding: gzip
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1670381856174&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1670381856173.2094285163&it=1670381855959&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1670381856174&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1670381856173.2094285163&it=1670381855959&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1670381856174&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1670381856173.2094285163&it=1670381855959&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 07 Dec 2022 02:57:36 GMT
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2007%20Dec%202022%2002%3A57%3A36%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2007%20Dec%202022%2002%3A57%3A36%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Wed%2C%2007%20Dec%202022%2002%3A57%3A36%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBCABkGMCEFSE5NxBJp5d4o9NIfoRyJQFEgEBAQFSkWOZYwAAAAAA_eMAAA&S=AQAAAvr_JqTUbWg3MTJwl7EQyqg; Expires=Thu, 7 Dec 2023 08:57:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBCABkGMCEMCs2liy69UqKEAin3DrHWsFEgEBAQFSkWOZYwAAAAAA_eMAAA&S=AQAAAo7KBLoIgevImBBB7lz_WE4; Expires=Thu, 7 Dec 2023 08:57:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1670381855999%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292618%2526utm_campaign%253DPRP_DJULBREG_4292618%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLz0S9JRofcBAAAAYTqhGfFjatMIg0dU15D69tejvZnSKyLpdJkqNBKN3E_pcu-abpwMsNnefDZXw; Max-Age=2592000; Expires=Fri, 06 Jan 2023 02:57:36 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJMb11G7887MQAAAYTqhGfFRvEcPdowzNT7s_p3bVxke6ojh6SXc1V3xXvBvM5EdMSLaUJfnvB1n55IpITnQg; Max-Age=2592000; Expires=Fri, 06 Jan 2023 02:57:36 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&78d8d691-b35f-4f5a-83e6-0c4dd4b9c950"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 07-Dec-2023 02:57:36 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2429:u=1:x=1:i=1670381856:t=1670468256:v=2:sig=AQF2N6KKslx7GQzoL3lLaabsmIQZtZsc"; Expires=Thu, 08 Dec 2022 02:57:36 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXvNBU1PXDNtKn6Nu9nXA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 610CD5C2D11542FE9CCF42A93BD00EED Ref B: OSL30EDGE0212 Ref C: 2022-12-07T02:57:36Z
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1670381856443&cv=11&fst=1670381856443&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=561435949.1670381855&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1670381856443&cv=11&fst=1670381856443&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=561435949.1670381855&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2481), with no line terminators
Hash 5f2072829277d081b80b399092292295
f49e1dc163e5110b70e8e82e7c4dabb587c25359
601afb771fb4c5222e3b2a84a49a7610d4b20a94d1d0c5d4dbfabb9175d7322c
GET /pagead/viewthroughconversion/745546367/?random=1670381856443&cv=11&fst=1670381856443&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=561435949.1670381855&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1058
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 03:12:36 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1670381856449&cv=11&fst=1670381856449&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=561435949.1670381855&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1670381856449&cv=11&fst=1670381856449&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=561435949.1670381855&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1670381856449&cv=11&fst=1670381856449&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=561435949.1670381855&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 03:12:36 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=28babe85-0455-4996-9838-58c4c58b1e00&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=28babe85-0455-4996-9838-58c4c58b1e00&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=28babe85-0455-4996-9838-58c4c58b1e00&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:36 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_q4yow4d6MxdANC41+GrIIw=="; Max-Age=63072000; Expires=Fri, 06 Dec 2024 02:57:36 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 4ef1b44dfb649510
strict-transport-security: max-age=631138519
x-response-time: 102
x-connection-hash: 53d460e5406f2cd2d3ee44bbbb4aa972ec337c5dace0caafb2efde34019fec10
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:36 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_Noh54RquvpWW17PEwB4oHQ=="; Max-Age=63072000; Expires=Fri, 06 Dec 2024 02:57:36 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: dbce185b742ca3a4
strict-transport-security: max-age=631138519
x-response-time: 115
x-connection-hash: 53d460e5406f2cd2d3ee44bbbb4aa972ec337c5dace0caafb2efde34019fec10
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1670381855999%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292618%2526utm_campaign%253DPRP_DJULBREG_4292618%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1670381855999%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292618%2526utm_campaign%253DPRP_DJULBREG_4292618%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1670381855999%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292618%2526utm_campaign%253DPRP_DJULBREG_4292618%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&d8e66224-36be-4558-8ce6-d68ef8d35dbe"; Domain=.linkedin.com; Expires=Thu, 07-Dec-2023 02:57:37 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221207025737140cdb5b-f1d2-4803-8a31-baf075a40cb4AQG7nctbkPQIf-hbEIw_O2A3aBKsW1bP"; Domain=.www.linkedin.com; Expires=Thu, 07-Dec-2023 02:57:37 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzAzODE4NTc7MjswMjFtCx4otVN3F7dv4dRe3zNAWkEe+RPEF6KNgLIJ2pc6rg==; Domain=.linkedin.com; Expires=Mon, 05 Jun 2023 02:57:37 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2429:u=1:x=1:i=1670381857:t=1670468257:v=2:sig=AQGAlQwEKlRgZBzgLCVf1BnvFmBwOwMt"; Expires=Thu, 08 Dec 2022 02:57:37 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com onyx.www.linkedin.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXvNBU6H7WWaoSSi19hXQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0FAEA90426D848D39FD6B2AD3C3CBFD7 Ref B: OSL30EDGE0212 Ref C: 2022-12-07T02:57:36Z
date: Wed, 07 Dec 2022 02:57:36 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash b74d07ad3fcab1155cdcb9f4ec1af478
24c6fb84958607684fae990783503f50f140f58c
53b07ce7128dcfab5180c9d26b642312b2ef89004ea31fbbeb063d38284fb88e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:57:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 02:54:25 GMT
Expires: Wed, 14 Dec 2022 02:54:24 GMT
Etag: "24c6fb84958607684fae990783503f50f140f58c"
Cache-Control: max-age=604006,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759feaf0b94b51b-OSL
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1670381855999&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&12b54847-3bb3-492d-8628-c58ca76c9fa7"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 07-Dec-2023 02:57:37 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2429:u=1:x=1:i=1670381857:t=1670468257:v=2:sig=AQGAlQwEKlRgZBzgLCVf1BnvFmBwOwMt"; Expires=Thu, 08 Dec 2022 02:57:37 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXvNBU80C/52YhlxraKVQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 96768BA73BAF49C1BAEBD1195E56E7B8 Ref B: OSL30EDGE0212 Ref C: 2022-12-07T02:57:37Z
date: Wed, 07 Dec 2022 02:57:36 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1702
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=3d14512aaf7b1e6f365ad2002e6d533a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 07 Dec 2022 02:57:37 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1697
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=3d14512aaf7b1e6f365ad2002e6d533a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 07 Dec 2022 02:57:37 GMT
content-length: 0
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=ReToro HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13546
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:57:38 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://www.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1810&scd=100&ssd=1&est=1670381856054&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1670381857867&vi=1670381856052&ri=dc54035b4b88a729598f013944041da8&ref=null&cv=20221206-9-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1810&scd=100&ssd=1&est=1670381856054&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1670381857867&vi=1670381856052&ri=dc54035b4b88a729598f013944041da8&ref=null&cv=20221206-9-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1810&scd=100&ssd=1&est=1670381856054&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1670381857867&vi=1670381856052&ri=dc54035b4b88a729598f013944041da8&ref=null&cv=20221206-9-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 07 Dec 2022 02:57:38 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash ea29b2a7e567699a0ffb82901dc83538
8af4d2b2a5776cb717fe0824ab9d65d7317458c2
b2a5ab50bf53cc3c602f1b5da45f083d7a5a8b38dbc15e50f7afa4a91c3876b4
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Wed, 07 Dec 2022 02:57:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
GET /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 07 Dec 2022 00:07:11 GMT
access-control-allow-origin: *
cache-control: public, max-age=17997
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9dc04feb591f6b5ae6ea4527a23d28da.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: qutRMGwOzploafcvXUmMD4SXBZjXDQh_DwzsZH1Y5eGK76onKrwTfg==
age: 10225
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=743503097.1670381855&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22743503097.1670381855%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221670381855.1%22%2C%22dcm_gid%22%3A%22386483337.1670381856%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292618%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1670381855.1&dcm_gid=386483337.1670381856&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=48368744589662530term%3Dvalue
200 OK 0 B URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=743503097.1670381855&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22743503097.1670381855%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221670381855.1%22%2C%22dcm_gid%22%3A%22386483337.1670381856%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292618%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1670381855.1&dcm_gid=386483337.1670381856&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=48368744589662530term%3Dvalue
IP
GET /st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=743503097.1670381855&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22743503097.1670381855%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221670381855.1%22%2C%22dcm_gid%22%3A%22386483337.1670381856%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292618%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1670381855.1&dcm_gid=386483337.1670381856&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=48368744589662530term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Wed, 07 Dec 2022 02:57:37 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=e84c05a1-75da-11ed-aaf5-336c6da841b0;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
trc.taboola.com/1005612/trc/3/json?tim=1670381856060&data=%7B%22id%22%3A492%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1670381856052%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1670381856059%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1670381856060&data=%7B%22id%22%3A492%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1670381856052%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1670381856059%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1670381856060&data=%7B%22id%22%3A492%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1670381856052%2C%22cv%22%3A%2220221206-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1670381856059%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 02:57:36 GMT
via: 1.1 varnish
x-served-by: cache-bma1675-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670381857.610788,VS0,VE102
vary: Accept-Encoding
x-vcl-time-ms: 102
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
IP
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 07 Dec 2022 02:57:36 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=045db354-38cb-4a74-8a2f-2ae8f67bfc00; domain=.adsrvr.org; expires=Thu, 07-Dec-2023 02:57:35 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=48368744589662530term=value
200 0 B URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=48368744589662530term=value
IP
GET /spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=48368744589662530term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Wed, 07 Dec 2022 02:57:36 GMT
connection: close
139.45.197.238
23.36.76.121
104.244.42.69
212.82.100.181
104.18.35.149
20.54.209.212
23.32.86.79
151.101.244.157
157.240.200.14