Overview

URLinoradde.com/4/4292618/
IP 139.45.197.238 (United Kingdom)
ASN#9002 RETN Limited
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-07 02:57:43 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (65)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
snap.licdn.com (1) 1044 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 379 4887 23.36.76.121
t.co (1) 569 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 900 593 104.244.42.69
inoradde.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 685 2166 139.45.197.238
etoro-cdn.etorostatic.com (14) 49022 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 6604 354962 23.38.201.117
apis.google.com (1) 105 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 363 21958 142.250.74.78
accounts.google.com (1) 81 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 481 1779 142.250.74.109
tr.outbrain.com (2) 2017 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1512 491 64.202.112.95
sp.analytics.yahoo.com (2) 816 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1678 1896 212.82.100.181
analytics.twitter.com (2) 526 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1834 1226 104.244.42.131
ww.steelhousemedia.com (1) 16192 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 358 731 44.238.130.186
my.rtmark.net (1) 9054 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 402 681 139.45.195.8
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 44.228.207.167
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 58372 34.120.237.76
etoro-px.s3-eu-west-1.amazonaws.com (1) 136542 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 585 6207 52.92.32.50
www.etoro.com (1) 18613 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 889 74122 104.18.35.149
cdn.taboola.com (1) 1040 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 375 18820 151.101.193.44
etorologsapi.etoro.com (1) 54636 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 492 335 20.54.209.212
trc-events.taboola.com (1) 1779 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 842 362 141.226.228.48
cdn.etorostatic.com (8) 106524 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3486 3498231 23.38.201.117
ocsp.sca1b.amazontrust.com (1) 1015 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 350 1004 143.204.42.165
googleads.g.doubleclick.net (2) 42 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2029 2858 142.250.74.130
api.etorostatic.com (6) 61703 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3090 847064 23.38.201.117
ocsp.pki.goog (20) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 6860 13994 142.250.74.131
status.thawte.com (3) 5123 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1023 2331 93.184.220.29
region1.analytics.google.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2741 1120 216.239.34.36
cdn.linkedin.oribi.io (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 970 922 65.9.44.86
www.linkedin.com (1) 608 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 795 2754 13.107.42.14
dx.steelhousemedia.com (1) 8530 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 648 278 52.11.37.91
med.etoro.com (3) 45781 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1417 3698 23.32.86.79
c0.adalyser.com (2) 26110 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1597 13089 52.30.85.81
adservice.google.com (3) 76 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2367 2969 142.250.74.34
ocsp.godaddy.com (1) 698 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 340 2285 192.124.249.36
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
cdn.mxpnl.com (1) 2824 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 371 18268 130.211.5.208
static.ads-twitter.com (1) 614 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 362 15906 151.101.244.157
stats.g.doubleclick.net (3) 96 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1707 1976 108.177.14.155
match.adsrvr.org (1) 349 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 761 308 52.223.40.198
px.steelhousemedia.com (1) 7685 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1831 392 44.237.157.168
r3.o.lencr.org (8) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2704 9804 23.36.76.226
ocsp.digicert.com (16) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 5456 12540 93.184.220.29
connect.facebook.net (1) 139 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 366 2677 157.240.200.14
zero.pointlessplay.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 393 30755 54.230.111.27
9944765.fls.doubleclick.net (1) 125024 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 702 1196 142.250.74.38
amplify.outbrain.com (1) 2255 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 364 5679 23.38.201.81
one.pointlessplay.com (4) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 8681 2291 50.16.211.97
www.facebook.com (1) 99 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 776 349 157.240.200.35
maintenance.etoro.com (1) 70679 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 397 794 23.32.86.79
tr.snapchat.com (3) 978 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1521 25079 35.190.43.134
bat.bing.com (3) 387 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1736 13693 204.79.197.200
adservice.google.no (3) 96969 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2329 3192 142.250.74.66
ocsp.sectigo.com (1) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 340 963 172.64.155.188
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5843 34.160.144.191
marketing.etorostatic.com (1) 82505 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 397 2847 23.38.201.117
px.ads.linkedin.com (2) 522 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1330 2482 13.107.42.14
www.google.com (1) 7 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 390 1179 142.250.74.132
sc-static.net (1) 1183 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 361 12651 54.230.82.240
www.google-analytics.com (2) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 758 65369 216.239.34.178
insight.adsrvr.org (1) 631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 747 746 52.223.40.198
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 379 104550 142.250.74.168
www.gstatic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 461 163958 142.250.74.35
s.yimg.com (1) 375 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 353 6888 87.248.119.252
trc.taboola.com (1) 602 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1641 554 151.101.193.44
js.adsrvr.org (1) 1664 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 365 2396 143.204.45.46
appleid.cdn-apple.com (1) 3288 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 409 17733 23.60.29.145

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-07 medium inoradde.com Sinkholed
2022-12-07 medium inoradde.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.238
Date UQ / IDS / BL URL IP
2023-06-01 19:24:06 UTC 0 - 1 - 0 untropiuson.com/4/5345090/ 139.45.197.238
2023-05-31 08:05:12 UTC 0 - 0 - 2 rblgfyvwse.com/ 139.45.197.238
2023-05-30 19:16:48 UTC 0 - 6 - 0 untropiuson.com/4/5278411/ 139.45.197.238
2023-05-30 03:08:05 UTC 0 - 0 - 1 rouonixon.com/4/4601935/ 139.45.197.238
2023-05-30 02:28:23 UTC 0 - 0 - 1 untropiuson.com/4/5278411/ 139.45.197.238


Last 5 reports on ASN: RETN Limited
Date UQ / IDS / BL URL IP
2023-06-01 20:54:19 UTC 0 - 1 - 0 surveygett.com/link?z=5982953&var=474_89a3984 (...) 139.45.196.64
2023-06-01 19:27:22 UTC 0 - 1 - 0 retryngs.com/link?z=5985195&var=a53b4c5d-3b14 (...) 139.45.197.249
2023-06-01 19:24:06 UTC 0 - 1 - 0 untropiuson.com/4/5345090/ 139.45.197.238
2023-06-01 16:59:52 UTC 0 - 1 - 0 surveygett.com/link?z=5918021&var=474_89a3984 (...) 139.45.196.64
2023-06-01 16:21:55 UTC 0 - 7 - 25 gdasaasnt.com/link?var=&vid=efbmLHMbcxyRB1mqL (...) 139.45.197.239


Last 5 reports on domain: inoradde.com
Date UQ / IDS / BL URL IP
2023-03-09 04:40:50 UTC 0 - 1 - 0 inoradde.com/4/4292615/ 139.45.197.238
2023-03-09 03:59:15 UTC 0 - 0 - 1 inoradde.com/4/5473343/ 139.45.197.238
2023-03-08 07:18:08 UTC 0 - 1 - 0 inoradde.com/4/4292618/ 139.45.197.238
2023-03-08 06:26:02 UTC 0 - 0 - 14 inoradde.com/4533056/?var=5038130&request_var (...) 139.45.197.238
2023-03-07 13:22:44 UTC 0 - 0 - 2 inoradde.com/4/4292618/ 139.45.197.238


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-31 18:37:17 UTC 0 - 1 - 0 velocecdn.com/prod/redirect.html?lu=goosebomb (...) 104.17.173.62
2022-12-28 07:45:33 UTC 0 - 1 - 3 k.sulseerg.com/4/4470223/ 139.45.197.151
2022-12-01 23:58:13 UTC 0 - 0 - 2 inoradde.com/4292618/ 139.45.197.238
2022-12-21 13:54:02 UTC 0 - 1 - 0 inoradde.com/4/4292614/ 139.45.197.238
2022-12-18 16:21:21 UTC 0 - 0 - 2 ak.ambuizeler.com/4/4572633&var=199530 95.101.10.9

JavaScript

Executed Scripts (77)

Executed Evals (14)
#1 JavaScript::Eval (size: 25) - SHA256: b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878
(function() {
    return !0
})();
#2 JavaScript::Eval (size: 83) - SHA256: 16546b79ed36a9ca2495b23fbef53975fd6d324b4b03a379a09a22cf788ba32c
(function() {
    var b = 3;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
#3 JavaScript::Eval (size: 2273) - SHA256: 62ab725f2924cea6bb74ac3440700f33754bd722a34d47e60059b9b6e9f45020
�
(function() {�
    var s = '9a74e4a102375b6bab53c9935bd3c2560124a3fb2ff2f27e87e26676563d568c2940998ff9040b6befa1699466f5b7da9ed63f2ba019ad24133a743de3b5919be4b658a054e1d308c66433975e8e93b51c8629298a0c4a6473c664f77c216e7a5770a4d5a86bda8c3a40d6196b9462a3fe986f78aecd0d830d6926725e0b93';�
    function setCookie(cname, cvalue, domain, exdays) {�
        var d = new Date();�
        d.setTime(d.getTime() + (60 * 60 * exdays * 1000 * 24));�
        var expires = "expires=" + d.toUTCString();�
        var cookie = cname + "=" + cvalue;�
        if (domain) {�
            cookie += ";" + "domain=" + domain;�
        }�
        cookie += ";" + expires + ";path=/";�
        document.cookie = cookie;�
    }�
    function deleteCookie(cname, domain) {�
        setCookie(cname, "", domain, 0);�
    }�
    var ta = ["window._phantom", "navigator.webdriver", "window.__webdriver_script_fn", "window.__nightmare", "document.$cdc_asdjflasutopfhvcZLmcfl_", "window.callPhantom"];�
    var re;�
    try {�
        re = [!!window._phantom, !!navigator.webdriver, !!window.__webdriver_script_fn, !!window.__nightmare, !!document.$cdc_asdjflasutopfhvcZLmcfl_, !!window.callPhantom];�
    }�
    catch (err) {��}�
    if (re && re.indexOf(true) == -1) {�
        setCookie("TMIS2", s, ".etoro.com", 14);�
    }�
    else {�
        var resultsObj = {};�
        for (var i = 0; i < ta.length; i++) {�
            resultsObj[ta[i]] = re[i];�
        }�
        var img = new Image();�
        img.src = 'https://etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=JSCClient&LogEvents=' + encodeURIComponent(JSON.stringify([{�
            ApplicationIdentifier: 'JSCClient',
            �ApplicationVersion: '0.0.11',
            �Level: "error",
            �Message: "ClientSel",
            �Results: resultsObj,
            �Type: 'log'�
        }]));�
    }�
})();��
#4 JavaScript::Eval (size: 4) - SHA256: b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
true
#5 JavaScript::Eval (size: 7) - SHA256: 53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148
() => !!1
#6 JavaScript::Eval (size: 15595) - SHA256: a6ea689f7d9dad611f9b9128b7a88274629505eea048bdc0bfcf03552fec5d36
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var J = function(C) {
            return C
        },
        p = this || self,
        l = function(C, O) {
            if (!(C = (O = p.trustedTypes, null), O) || !O.createPolicy) return C;
            try {
                C = O.createPolicy("bg", {
                    createHTML: J,
                    createScript: J,
                    createScriptURL: J
                })
            } catch (v) {
                p.console && p.console.error(v.message)
            }
            return C
        };
    (0, eval)(function(C, O) {
        return (O = l()) && 1 === C.eval(O.createScript("1")) ? function(v) {
            return O.createScript(v)
        } : function(v) {
            return "" + v
        }
    }(p)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var A=function(C,O,J,p,L,v){if(C.C==C)for(L=w(C,J),9==J?(J=function(l,z,I,b){if(I=(b=L.length,(b|0)-4>>3),L.Fl!=I){I=(I<<3)-(z=[0,0,v[1],v[L.Fl=I,2]],4);try{L.G7=C8(z,Oc(I,L),Oc((I|0)+4,L))}catch(t){throw t;}}L.push(L.G7[b&7]^l)},v=w(C,498)):J=function(l){L.push(l)},p&&J(p&255),C=O.length,p=0;p<C;p++)J(O[p])},e=function(C,O){O.K.splice(0,0,C)},v_=function(C,O){return O=O.create().shift(),C.D.create().length||C.U.create().length||(C.D=void 0,C.U=void 0),O},Jx=function(C,O,J,p){for(p=(J=H(O),0);0<C;C--)p=p<<8|K(O);V(J,O,p)},n=function(C,O,J,p){for(p=(J=(O|0)-1,[]);0<=J;J--)p[(O|0)-1-(J|0)]=C>>8*J&255;return p},lo=function(C,O,J,p,L,v){function l(){if(p.C==p){if(p.X){var z=[Y,O,C,void 0,L,v,arguments];if(2==J)var I=W(p,(e(z,p),false),false);else if(1==J){var b=!p.K.length;e(z,p),b&&W(p,false,false)}else I=p8(z,p);return I}L&&v&&L.removeEventListener(v,l,G)}}return l},zN=function(C,O){return T[O](T.prototype,{prototype:C,pop:C,call:C,splice:C,floor:C,replace:C,propertyIsEnumerable:C,parent:C,length:C,stack:C,document:C,console:C})},N=function(C,O){for(O=[];C--;)O.push(255*Math.random()|0);return O},W=function(C,O,J,p,L,v){if(C.K.length){C.O=!(C.K3=(C.O&&0(),O),0);try{p=C.j(),C.o=p,C.R=p,C.u=0,v=$c(C,O),L=C.j()-C.o,C.J+=L,L<(J?0:10)||0>=C.S--||(L=Math.floor(L),C.W.push(254>=L?L:254))}finally{C.O=false}return v}},Ic=function(C,O,J,p,L,v){for(J=(L=((p=(O=C[L8]||{},H(C)),O).Xl=H(C),O.v=[],C).C==C?(K(C)|0)-1:1,H(C)),v=0;v<L;v++)O.v.push(H(C));for((O.i=w(C,p),O).C3=w(C,J);L--;)O.v[L]=w(C,O.v[L]);return O},P=function(C,O,J,p,L,v,l,z,I){if(C.C=(C.H+=((I=(l=(L=(O||C.u++,0<C.l&&C.O&&C.K3&&1>=C.P&&!C.D&&!C.B)&&(!O||1<C.Z-J)&&0==document.hidden,(v=4==C.u)||L?C.j():C.R),l)-C.R,z=I>>14,C).N&&(C.N^=z*(I<<2)),z),z||C.C),v||L)C.R=l,C.u=0;if(!L||l-C.o<C.l-(p?255:O?5:2))return false;return C.B=((V(286,(p=(C.Z=J,w(C,O?215:286)),C),C.F),C).K.push([bo,p,O?J+1:J]),E),true},wV=function(C,O){((O.push(C[0]<<24|C[1]<<16|C[2]<<8|C[3]),O).push(C[4]<<24|C[5]<<16|C[6]<<8|C[7]),O).push(C[8]<<24|C[9]<<16|C[10]<<8|C[11])},x=function(C,O,J,p,L,v){if(!J.I){if(3<(C=((0==(p=w(J,((v=void 0,C)&&C[0]===a&&(v=C[2],O=C[1],C=void 0),358)),p.length)&&(L=w(J,215)>>3,p.push(O,L>>8&255,L&255),void 0!=v&&p.push(v&255)),O="",C)&&(C.message&&(O+=C.message),C.stack&&(O+=":"+C.stack)),w(J,430)),C)){J.C=(v=(O=(C-=(O=O.slice(0,(C|0)-3),O.length|0)+3,Ax(O)),J.C),J);try{A(J,n(O.length,2).concat(O),9,9)}finally{J.C=v}}V(430,J,C)}},tx=function(C,O,J,p,L,v){if(!C.Y){C.P++;try{for(p=(v=0,void 0),J=C.F;--O;)try{if((L=void 0,C).D)p=v_(C,C.D);else{if(v=w(C,286),v>=J)break;p=w(C,(L=(V(215,C,v),H(C)),L))}(p&&p[ew]&2048?p(C,O):x([a,21,L],0,C),P)(C,false,O,false)}catch(l){w(C,391)?x(l,22,C):V(391,C,l)}if(!O){if(C.Da){C.P--,tx(C,261929697120);return}x([a,33],0,C)}}catch(l){try{x(l,22,C)}catch(z){m(z,C)}}C.P--}},$c=function(C,O,J,p){for(;C.K.length;){p=(C.B=null,C.K.pop());try{J=p8(p,C)}catch(L){m(L,C)}if(O&&C.B){(O=C.B,O)(function(){W(C,true,true)});break}}return J},B_=function(C,O,J,p){function L(){}return p=H_(C,function(v){L&&(O&&E(O),J=v,L(),L=void 0)},(J=void 0,!!O))[0],{invoke:function(v,l,z,I){function b(){J(function(t){E(function(){v(t)})},z)}if(!l)return l=p(z),v&&v(l),l;J?b():(I=L,L=function(){E((I(),b))})}}},Qz=function(C,O){if(!(O=(C=null,c.trustedTypes),O)||!O.createPolicy)return C;try{C=O.createPolicy("bg",{createHTML:f8,createScript:f8,createScriptURL:f8})}catch(J){c.console&&c.console.error(J.message)}return C},rV=function(C,O,J){if("object"==(O=typeof C,O))if(C){if(C instanceof Array)return"array";if(C instanceof Object)return O;if("[object Window]"==(J=Object.prototype.toString.call(C),J))return"object";if("[object Array]"==J||"number"==typeof C.length&&"undefined"!=typeof C.splice&&"undefined"!=typeof C.propertyIsEnumerable&&!C.propertyIsEnumerable("splice"))return"array";if("[object Function]"==J||"undefined"!=typeof C.call&&"undefined"!=typeof C.propertyIsEnumerable&&!C.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==O&&"undefined"==typeof C.call)return"object";return O},Oc=function(C,O){return O[C]<<24|O[(C|0)+1]<<16|O[(C|0)+2]<<8|O[(C|0)+3]},K8=function(C,O,J,p){A(O,n((p=H((J=H(O),O)),w(O,J)),C),p)},G={passive:true,capture:true},Ax=function(C,O,J,p,L){for(C=C.replace(/\\r\\n/g,"\\n"),O=[],p=L=0;L<C.length;L++)J=C.charCodeAt(L),128>J?O[p++]=J:(2048>J?O[p++]=J>>6|192:(55296==(J&64512)&&L+1<C.length&&56320==(C.charCodeAt(L+1)&64512)?(J=65536+((J&1023)<<10)+(C.charCodeAt(++L)&1023),O[p++]=J>>18|240,O[p++]=J>>12&63|128):O[p++]=J>>12|224,O[p++]=J>>6&63|128),O[p++]=J&63|128);return O},H=function(C,O){if(C.D)return v_(C,C.U);return(O=D(true,C,8),O)&128&&(O^=128,C=D(true,C,2),O=(O<<2)+(C|0)),O},sc=function(C,O,J){if(3==C.length){for(J=0;3>J;J++)O[J]+=C[J];for(J=(C=0,[13,8,13,12,16,5,3,10,15]);9>C;C++)O[3](O,C%3,J[C])}},Vz=function(C,O,J,p,L){J=w(O,(L=H((J=(C&=(p=C&3,4),H(O)),O)),J)),C&&(J=Ax(""+J)),p&&A(O,n(J.length,2),L),A(O,J,L)},TN=function(C,O,J,p,L){for(L=(p=(O.j8=(O.wZ=zN({get:(O.El=(O.NL=O[R],O.c6=Yc,n8),function(){return this.concat()})},O.G),T[O.G](O.wZ,{value:{value:{}}})),0),[]);128>p;p++)L[p]=String.fromCharCode(p);W(O,true,(e(((e([(F((V((V(107,O,(V(443,O,(F(O,40,(V(430,(F(O,35,(F((F(O,(F(O,(V(9,(F(O,(V(265,O,(V(358,O,(F(O,(V(466,(F((F(O,387,(F(O,(F((F(O,(F(O,489,(F(O,((F(O,(F(O,457,(F(O,64,(F(O,261,(F(((F(O,287,(F(O,485,(V((F(O,477,(V(391,(F((F(O,(V(22,(F(O,496,(F(O,(V(498,O,(V(215,(V(286,((O.f3=function(v){this.C=v},O.H=(O.Y=void 0,O.l=0,p=window.performance||{},O.K=[],1),O).X=(O.W=[],O.L=void 0,O.I=false,(O.h=void 0,O).J=(O.K3=(O.S=25,O.D=void 0,false),O.B=null,O.C=O,O.Yx=(O.O=false,[]),(O.Z=8001,O.o=0,O).A=[],0),O.P=0,(O.F=0,O).g=(O.sl=(O.U=void 0,0),[]),O.R=0,O.u=(O.N=void 0,void 0),[]),O.hU=p.timeOrigin||(p.timing||{}).navigationStart||0,O),0),O),0),[0,0,0])),411),function(v,l,z,I,b,t,B,Q,r,Z,q,f){function k(u,S){for(;Z<u;)f|=K(v)<<Z,Z+=8;return f>>=(Z-=u,S=f&(1<<u)-1,u),S}for(Q=(z=(r=(f=Z=(t=H(v),0),(k(3)|0)+1),l=k(5),0),[]),I=0;z<l;z++)B=k(1),Q.push(B),I+=B?0:1;for(q=(z=((I|0)-1).toString(2).length,[]),I=0;I<l;I++)Q[I]||(q[I]=k(z));for(z=0;z<l;z++)Q[z]&&(q[z]=H(v));for(b=[];r--;)b.push(w(v,H(v)));F(v,t,function(u,S,io,d,y){for(io=(d=(S=0,[]),[]);S<l;S++){if(!(y=q[S],Q)[S]){for(;y>=d.length;)d.push(H(u));y=d[y]}io.push(y)}u.U=(u.D=uo(u,b.slice()),uo(u,io))})}),function(v,l){(v=(l=H(v),w(v.C,l)),v[0]).removeEventListener(v[1],v[2],G)})),O),{}),68),function(v){K8(4,v)}),O),230,function(v,l,z,I,b){0!==(l=w(v,(z=(I=w(v,(b=(l=(I=H((z=(b=H(v),H)(v),v)),H(v)),w(v.C,b)),I)),w(v,z)),l)),b)&&(l=lo(l,I,1,v,b,z),b.addEventListener(z,l,G),V(471,v,[b,z,l]))}),O),677),function(v,l,z,I){(I=(l=(z=H(v),K)(v),H)(v),V)(I,v,w(v,z)>>>l)})),417),O,[]),function(v,l){W_((l=w(v,H(v)),l),v.C)})),function(v,l,z,I){!P(v,true,l,false)&&(l=Ic(v),z=l.i,I=l.C3,v.C==v||z==v.f3&&I==v)&&(V(l.Xl,v,z.apply(I,l.v)),v.R=v.j())})),O).xx=0,O),3,function(v){K8(1,v)}),function(v,l,z,I,b){(l=H((b=(z=H(v),H(v)),v)),v.C==v)&&(I=w(v,z),l=w(v,l),b=w(v,b),I[b]=l,373==z&&(v.h=void 0,2==b&&(v.N=D(false,v,32),v.h=void 0)))})),function(v,l,z){(l=H((z=H(v),v)),V)(l,v,""+w(v,z))})),function(v,l,z,I){V((l=w(v,(I=w(v,(l=H((I=H(v),v)),z=H(v),I)),l)),z),v,+(I==l))})),O.gZ=0,347),function(v,l,z,I){V((l=w(v,(I=w((z=(I=H(v),H(v)),v),I),z)),z),v,l+I)}),O).bm=0,112),function(v){Jx(4,v)}),function(v,l,z,I){if(l=v.Yx.pop()){for(z=K(v);0<z;z--)I=H(v),l[I]=v.X[I];v.X=(l[l[358]=v.X[358],430]=v.X[430],l)}else V(286,v,v.F)})),17),function(v,l,z,I,b){for(l=(I=GN((b=H(v),v)),z=0,[]);z<I;z++)l.push(K(v));V(b,v,l)}),O),181,function(v){Vz(4,v)}),376),function(v,l,z,I,b,t){P(v,true,l,false)||(b=Ic(v.C),l=b.Xl,z=b.i,t=b.C3,b=b.v,I=b.length,z=0==I?new t[z]:1==I?new t[z](b[0]):2==I?new t[z](b[0],b[1]):3==I?new t[z](b[0],b[1],b[2]):4==I?new t[z](b[0],b[1],b[2],b[3]):2(),V(l,v,z))}),function(v,l,z,I){V((l=w((z=(I=(l=(z=H(v),H(v)),H)(v),w(v,z)),v),l),I),v,z in l|0)})),O),351,function(v,l,z){V((l=(l=w(v,(l=H(v),z=H(v),l)),rV(l)),z),v,l)}),O),0),252),function(v,l,z){P(v,true,l,false)||(l=H(v),z=H(v),V(z,v,function(I){return eval(I)}(ZC(w(v.C,l)))))}),[])),F(O,244,function(v,l,z,I,b,t){if(!P(v,true,l,true)){if("object"==(v=w((t=(b=(b=(t=(l=H((z=H(v),v)),H(v)),H(v)),l=w(v,l),w(v,b)),w)(v,t),v),z),rV(v))){for(I in z=[],v)z.push(I);v=z}for(z=(t=0<(I=0,t)?t:1,v.length);I<z;I+=t)l(v.slice(I,(I|0)+(t|0)),b)}}),[160,0,0])),504),function(v,l,z){0!=w((z=w(v,(z=H((l=H(v),v)),z)),v),l)&&V(286,v,z)}),O),N(4)),322),function(v,l,z,I,b,t,B){for(B=(t=(z=w(v,(I=(b=H(v),GN)(v),l="",484)),z).length,0);I--;)B=((B|0)+(GN(v)|0))%t,l+=L[z[B]];V(b,v,l)}),393),function(v,l,z,I){l=w(v,(I=(z=H((I=(l=H(v),H)(v),v)),w(v,I)),l)),V(z,v,l[I])}),O),442,function(v,l,z,I){(l=(z=H((I=H(v),v)),H(v)),V)(l,v,w(v,I)||w(v,z))}),function(){})),O),2048),function(v){Vz(3,v)})),O)),c)),471),O,0),O),486,function(v,l,z,I,b){V((l=w(v,(z=w(v,(b=H((z=(I=H(v),H(v)),l=H(v),v)),z)),b=w(v,b),l)),I),v,lo(l,z,b,v))}),qs)],O),e)([h,J],O),[Sw,C]),O),true))},Ns=function(C,O,J,p){try{p=C[((O|0)+2)%3],C[O]=(C[O]|0)-(C[((O|0)+1)%3]|0)-(p|0)^(1==O?p<<J:p>>>J)}catch(L){throw L;}},GN=function(C,O){return(O=K(C),O&128)&&(O=O&127|K(C)<<7),O},H_=function(C,O,J,p){return(p=g[C.substring(0,3)+"_"])?p(C.substring(3),O,J):Ec(O,C)},F=function(C,O,J){J[V(O,C,J),qs]=2796},g,V=function(C,O,J){if(286==C||215==C)O.X[C]?O.X[C].concat(J):O.X[C]=uo(O,J);else{if(O.I&&373!=C)return;265==C||9==C||417==C||358==C||498==C?O.X[C]||(O.X[C]=P_(118,C,J,O)):O.X[C]=P_(9,C,J,O)}373==C&&(O.N=D(false,O,32),O.h=void 0)},kc=function(C,O,J){return C.V(function(p){J=p},false,O),J},f8=function(C){return C},Ec=function(C,O){return C(function(J){J(O)}),[function(){return O}]},uo=function(C,O,J){return(J=T[C.G](C.j8),J)[C.G]=function(){return O},J.concat=function(p){O=p},J},C8=function(C,O,J,p,L){for(p=(C=(L=C[2]|0,C)[3]|0,0);14>p;p++)J=J>>>8|J<<24,J+=O|0,J^=L+2298,O=O<<3|O>>>29,C=C>>>8|C<<24,C+=L|0,L=L<<3|L>>>29,C^=p+2298,L^=C,O^=J;return[O>>>24&255,O>>>16&255,O>>>8&255,O>>>0&255,J>>>24&255,J>>>16&255,J>>>8&255,J>>>0&255]},K=function(C){return C.D?v_(C,C.U):D(true,C,8)},W_=function(C,O){(O.Yx.push(O.X.slice()),O.X)[286]=void 0,V(286,O,C)},ac=function(C,O,J,p){return(V(286,C,((p=w(C,286),C.g)&&p<C.F?(V(286,C,C.F),W_(J,C)):V(286,C,J),tx(C,O),p)),w)(C,22)},X,w=function(C,O){if((C=C.X[O],void 0)===C)throw[a,30,O];if(C.value)return C.create();return(C.create(4*O*O+-12*O+4),C).prototype},U=function(C,O,J){J=this;try{TN(O,this,C)}catch(p){m(p,this),O(function(L){L(J.Y)})}},P_=function(C,O,J,p,L,v,l,z){return J=[87,-12,-24,-71,(v=C&7,z=xc,14),-5,J,-72,-32,90],l=T[p.G](p.wZ),l[p.G]=function(I){v+=6+7*C,v&=(L=I,7)},l.concat=function(I){return(I=(I=(I=O%16+1,-224*L+(z()|0)*I-I*L+56*L*L+v+J[v+51&7]*O*I- -672*O*L-224*O*O*L+4*O*O*I),J[I]),L=void 0,J[(v+29&7)+(C&2)]=I,J)[v+(C&2)]=-12,I},l},D=function(C,O,J,p,L,v,l,z,I,b,t,B,Q,r){if(t=w(O,286),t>=O.F)throw[a,31];for(r=(v=(B=0,L=O.NL.length,J),t);0<v;)Q=r>>3,I=r%8,p=8-(I|0),p=p<v?p:v,l=O.g[Q],C&&(b=O,b.h!=r>>6&&(b.h=r>>6,z=w(b,373),b.L=C8([0,0,z[1],z[2]],b.N,b.h)),l^=O.L[Q&L]),B|=(l>>8-(I|0)-(p|0)&(1<<p)-1)<<(v|0)-(p|0),v-=p,r+=p;return V(286,(C=B,O),(t|0)+(J|0)),C},m=function(C,O){O.Y=((O.Y?O.Y+"~":"E:")+C.message+":"+C.stack).slice(0,2048)},c=this||self,E=c.requestIdleCallback?function(C){requestIdleCallback(function(){C()},{timeout:4})}:c.setImmediate?function(C){setImmediate(C)}:function(C){setTimeout(C,0)},p8=function(C,O,J,p,L){if((L=C[0],L)==M)O.S=25,O.s(C);else if(L==R){J=C[1];try{p=O.Y||O.s(C)}catch(v){m(v,O),p=O.Y}J(p)}else if(L==bo)O.s(C);else if(L==h)O.s(C);else if(L==Sw){try{for(p=0;p<O.A.length;p++)try{J=O.A[p],J[0][J[1]](J[2])}catch(v){}}catch(v){}(0,C[1])(function(v,l){O.V(v,true,l)},(O.A=[],function(v){(e((v=!O.K.length,[ew]),O),v)&&W(O,true,false)}))}else{if(L==Y)return p=C[2],V(247,O,C[6]),V(22,O,p),O.s(C);L==ew?(O.g=[],O.W=[],O.X=null):L==qs&&"loading"===c.document.readyState&&(O.B=function(v,l){function z(){l||(l=true,v())}(c.document.addEventListener("DOMContentLoaded",z,(l=false,G)),c).addEventListener("load",z,G)})}},L8=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),bo=[],ew=[],M=(U.prototype.kx=void 0,U.prototype.T="toString",[]),R=[],a=(U.prototype.Da=false,U.prototype.RF=void 0,{}),h=[],Sw=[],qs=[],Y=[],xc=(((wV,function(){})(N),Ns,function(){})(sc),void 0),T=a.constructor,n8=(((((((X=U.prototype,U).prototype.G="create",X.m5=function(C,O,J,p,L){for(L=p=0;L<C.length;L++)p+=C.charCodeAt(L),p+=p<<10,p^=p>>6;return(p=(p+=p<<3,p^=p>>11,C=p+(p<<15)>>>0,new Number(C&(1<<O)-1)),p)[0]=(C>>>O)%J,p},X.V=function(C,O,J,p,L){if((J="array"===rV(J)?J:[J],this).Y)C(this.Y);else try{p=!this.K.length,L=[],e([M,L,J],this),e([R,C,L],this),O&&!p||W(this,O,true)}catch(v){m(v,this),C(this.Y)}},X).aF=function(C,O,J,p,L,v){for(L=v=(p=[],0);L<C.length;L++)for(J=J<<O|C[L],v+=O;7<v;)v-=8,p.push(J>>v&255);return p},X.B6=function(C,O,J){return C^(O^=O<<13,O^=O>>17,(O=(O^O<<5)&J)||(O=1),O)},X).ML=function(){return Math.floor(this.J+(this.j()-this.o))},X.j=(window.performance||{}).now?function(){return this.hU+window.performance.now()}:function(){return+new Date},X).Ul=function(){return Math.floor(this.j())},U).prototype.s=function(C,O){return O=(xc=function(){return C==O?4:-46},C={},{}),function(J,p,L,v,l,z,I,b,t,B,Q,r,Z,q,f){t=C,C=O;try{if(B=J[0],B==h){I=J[1];try{for(f=(L=[],v=atob(I),Z=0);Z<v.length;Z++)p=v.charCodeAt(Z),255<p&&(L[f++]=p&255,p>>=8),L[f++]=p;V(373,this,(this.F=(this.g=L,this.g.length<<3),[0,0,0]))}catch(k){x(k,17,this);return}tx(this,8001)}else if(B==M)J[1].push(w(this,265).length,w(this,417).length,w(this,430),w(this,9).length),V(22,this,J[2]),this.X[101]&&ac(this,8001,w(this,101));else{if(B==R){b=(q=(L=J[2],n((w(this,265).length|0)+2,2)),this.C),this.C=this;try{z=w(this,358),0<z.length&&A(this,n(z.length,2).concat(z),265,10),A(this,n(this.H,1),265,109),A(this,n(this[R].length,1),265),v=0,v+=w(this,466)&2047,r=w(this,9),v-=(w(this,265).length|0)+5,4<r.length&&(v-=(r.length|0)+3),0<v&&A(this,n(v,2).concat(N(v)),265,15),4<r.length&&A(this,n(r.length,2).concat(r),265,156)}finally{this.C=b}if(Q=(((f=N(2).concat(w(this,265)),f)[1]=f[0]^6,f)[3]=f[1]^q[0],f[4]=f[1]^q[1],this).dZ(f))Q="!"+Q;else for(Q="",v=0;v<f.length;v++)l=f[v][this.T](16),1==l.length&&(l="0"+l),Q+=l;return w(this,(V(430,((w(this,(Z=Q,265)).length=L.shift(),w)(this,417).length=L.shift(),this),L.shift()),9)).length=L.shift(),Z}if(B==bo)ac(this,J[2],J[1]);else if(B==Y)return ac(this,8001,J[1])}}finally{C=t}}}(),U.prototype.oF=0,U.prototype).tU=0,/./);U.prototype.dZ=function(C,O,J,p){if(O=window.btoa){for(p=0,J="";p<C.length;p+=8192)J+=String.fromCharCode.apply(null,C.slice(p,p+8192));C=O(J).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else C=void 0;return C};var Yc,jw=(U.prototype[Sw]=[0,0,1,1,0,1,1],h).pop.bind(U.prototype[M]),ZC=((Yc=zN({get:jw},(n8[U.prototype.T]=jw,U.prototype.G)),U).prototype.v6=void 0,function(C,O){return(O=Qz())&&1===C.eval(O.createScript("1"))?function(J){return O.createScript(J)}:function(J){return""+J}}(c));(40<(g=c.botguard||(c.botguard={}),g).m||(g.m=41,g.bg=B_,g.a=H_),g).hDL_=function(C,O,J){return[(J=new U(C,O),function(p){return kc(J,p)})]};}).call(this);'));
}).call(this);
#7 JavaScript::Eval (size: 22) - SHA256: 1bb4b16c7de163ff866b60976156d8c769e3cd8f2b5bdea3c85e854c986003d6
0,
function(v) {
    Jx(1, v)
}
#8 JavaScript::Eval (size: 62) - SHA256: 656ddb7093a608f140df5a991c579e27ad31e247a6ded28fa406e948965cf12a
0,
function(v, l, z) {
    z = (l = (z = H(v), H(v)), v.X[z]) && w(v, z), V(l, v, z)
}
#9 JavaScript::Eval (size: 62) - SHA256: 6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8
typeof 1 n === "bigint" && BigInt(1) === 1 n && Number(1 n) === 1
#10 JavaScript::Eval (size: 25) - SHA256: d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400
3.141592653589793 * * -100
#11 JavaScript::Eval (size: 15953) - SHA256: d0d1b26e4fa2f644b69b9df45493230df45057adbb0a82fc5e72335e7a79dd2d
(function() {
    var A = function(C, O, J, p, L, v) {
            if (C.C == C)
                for (L = w(C, J), 9 == J ? (J = function(l, z, I, b) {
                        if (I = (b = L.length, (b | 0) - 4 >> 3), L.Fl != I) {
                            I = (I << 3) - (z = [0, 0, v[1], v[L.Fl = I, 2]], 4);
                            try {
                                L.G7 = C8(z, Oc(I, L), Oc((I | 0) + 4, L))
                            } catch (t) {
                                throw t;
                            }
                        }
                        L.push(L.G7[b & 7] ^ l)
                    }, v = w(C, 498)) : J = function(l) {
                        L.push(l)
                    }, p && J(p & 255), C = O.length, p = 0; p < C; p++) J(O[p])
        },
        e = function(C, O) {
            O.K.splice(0, 0, C)
        },
        v_ = function(C, O) {
            return O = O.create().shift(), C.D.create().length || C.U.create().length || (C.D = void 0, C.U = void 0), O
        },
        Jx = function(C, O, J, p) {
            for (p = (J = H(O), 0); 0 < C; C--) p = p << 8 | K(O);
            V(J, O, p)
        },
        n = function(C, O, J, p) {
            for (p = (J = (O | 0) - 1, []); 0 <= J; J--) p[(O | 0) - 1 - (J | 0)] = C >> 8 * J & 255;
            return p
        },
        lo = function(C, O, J, p, L, v) {
            function l() {
                if (p.C == p) {
                    if (p.X) {
                        var z = [Y, O, C, void 0, L, v, arguments];
                        if (2 == J) var I = W(p, (e(z, p), false), false);
                        else if (1 == J) {
                            var b = !p.K.length;
                            e(z, p), b && W(p, false, false)
                        } else I = p8(z, p);
                        return I
                    }
                    L && v && L.removeEventListener(v, l, G)
                }
            }
            return l
        },
        zN = function(C, O) {
            return T[O](T.prototype, {
                prototype: C,
                pop: C,
                call: C,
                splice: C,
                floor: C,
                replace: C,
                propertyIsEnumerable: C,
                parent: C,
                length: C,
                stack: C,
                document: C,
                console: C
            })
        },
        N = function(C, O) {
            for (O = []; C--;) O.push(255 * Math.random() | 0);
            return O
        },
        W = function(C, O, J, p, L, v) {
            if (C.K.length) {
                C.O = !(C.K3 = (C.O && 0(), O), 0);
                try {
                    p = C.j(), C.o = p, C.R = p, C.u = 0, v = $c(C, O), L = C.j() - C.o, C.J += L, L < (J ? 0 : 10) || 0 >= C.S-- || (L = Math.floor(L), C.W.push(254 >= L ? L : 254))
                } finally {
                    C.O = false
                }
                return v
            }
        },
        Ic = function(C, O, J, p, L, v) {
            for (J = (L = ((p = (O = C[L8] || {}, H(C)), O).Xl = H(C), O.v = [], C).C == C ? (K(C) | 0) - 1 : 1, H(C)), v = 0; v < L; v++) O.v.push(H(C));
            for ((O.i = w(C, p), O).C3 = w(C, J); L--;) O.v[L] = w(C, O.v[L]);
            return O
        },
        P = function(C, O, J, p, L, v, l, z, I) {
            if (C.C = (C.H += ((I = (l = (L = (O || C.u++, 0 < C.l && C.O && C.K3 && 1 >= C.P && !C.D && !C.B) && (!O || 1 < C.Z - J) && 0 == document.hidden, (v = 4 == C.u) || L ? C.j() : C.R), l) - C.R, z = I >> 14, C).N && (C.N ^= z * (I << 2)), z), z || C.C), v || L) C.R = l, C.u = 0;
            if (!L || l - C.o < C.l - (p ? 255 : O ? 5 : 2)) return false;
            return C.B = ((V(286, (p = (C.Z = J, w(C, O ? 215 : 286)), C), C.F), C).K.push([bo, p, O ? J + 1 : J]), E), true
        },
        wV = function(C, O) {
            ((O.push(C[0] << 24 | C[1] << 16 | C[2] << 8 | C[3]), O).push(C[4] << 24 | C[5] << 16 | C[6] << 8 | C[7]), O).push(C[8] << 24 | C[9] << 16 | C[10] << 8 | C[11])
        },
        x = function(C, O, J, p, L, v) {
            if (!J.I) {
                if (3 < (C = ((0 == (p = w(J, ((v = void 0, C) && C[0] === a && (v = C[2], O = C[1], C = void 0), 358)), p.length) && (L = w(J, 215) >> 3, p.push(O, L >> 8 & 255, L & 255), void 0 != v && p.push(v & 255)), O = "", C) && (C.message && (O += C.message), C.stack && (O += ":" + C.stack)), w(J, 430)), C)) {
                    J.C = (v = (O = (C -= (O = O.slice(0, (C | 0) - 3), O.length | 0) + 3, Ax(O)), J.C), J);
                    try {
                        A(J, n(O.length, 2).concat(O), 9, 9)
                    } finally {
                        J.C = v
                    }
                }
                V(430, J, C)
            }
        },
        tx = function(C, O, J, p, L, v) {
            if (!C.Y) {
                C.P++;
                try {
                    for (p = (v = 0, void 0), J = C.F; --O;) try {
                        if ((L = void 0, C).D) p = v_(C, C.D);
                        else {
                            if (v = w(C, 286), v >= J) break;
                            p = w(C, (L = (V(215, C, v), H(C)), L))
                        }(p && p[ew] & 2048 ? p(C, O) : x([a, 21, L], 0, C), P)(C, false, O, false)
                    } catch (l) {
                        w(C, 391) ? x(l, 22, C) : V(391, C, l)
                    }
                    if (!O) {
                        if (C.Da) {
                            C.P--, tx(C, 261929697120);
                            return
                        }
                        x([a, 33], 0, C)
                    }
                } catch (l) {
                    try {
                        x(l, 22, C)
                    } catch (z) {
                        m(z, C)
                    }
                }
                C.P--
            }
        },
        $c = function(C, O, J, p) {
            for (; C.K.length;) {
                p = (C.B = null, C.K.pop());
                try {
                    J = p8(p, C)
                } catch (L) {
                    m(L, C)
                }
                if (O && C.B) {
                    (O = C.B, O)(function() {
                        W(C, true, true)
                    });
                    break
                }
            }
            return J
        },
        B_ = function(C, O, J, p) {
            function L() {}
            return p = H_(C, function(v) {
                L && (O && E(O), J = v, L(), L = void 0)
            }, (J = void 0, !!O))[0], {
                invoke: function(v, l, z, I) {
                    function b() {
                        J(function(t) {
                            E(function() {
                                v(t)
                            })
                        }, z)
                    }
                    if (!l) return l = p(z), v && v(l), l;
                    J ? b() : (I = L, L = function() {
                        E((I(), b))
                    })
                }
            }
        },
        Qz = function(C, O) {
            if (!(O = (C = null, c.trustedTypes), O) || !O.createPolicy) return C;
            try {
                C = O.createPolicy("bg", {
                    createHTML: f8,
                    createScript: f8,
                    createScriptURL: f8
                })
            } catch (J) {
                c.console && c.console.error(J.message)
            }
            return C
        },
        rV = function(C, O, J) {
            if ("object" == (O = typeof C, O))
                if (C) {
                    if (C instanceof Array) return "array";
                    if (C instanceof Object) return O;
                    if ("[object Window]" == (J = Object.prototype.toString.call(C), J)) return "object";
                    if ("[object Array]" == J || "number" == typeof C.length && "undefined" != typeof C.splice && "undefined" != typeof C.propertyIsEnumerable && !C.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == J || "undefined" != typeof C.call && "undefined" != typeof C.propertyIsEnumerable && !C.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == O && "undefined" == typeof C.call) return "object";
            return O
        },
        Oc = function(C, O) {
            return O[C] << 24 | O[(C | 0) + 1] << 16 | O[(C | 0) + 2] << 8 | O[(C | 0) + 3]
        },
        K8 = function(C, O, J, p) {
            A(O, n((p = H((J = H(O), O)), w(O, J)), C), p)
        },
        G = {
            passive: true,
            capture: true
        },
        Ax = function(C, O, J, p, L) {
            for (C = C.replace(/\r\n/g, "\n"), O = [], p = L = 0; L < C.length; L++) J = C.charCodeAt(L), 128 > J ? O[p++] = J : (2048 > J ? O[p++] = J >> 6 | 192 : (55296 == (J & 64512) && L + 1 < C.length && 56320 == (C.charCodeAt(L + 1) & 64512) ? (J = 65536 + ((J & 1023) << 10) + (C.charCodeAt(++L) & 1023), O[p++] = J >> 18 | 240, O[p++] = J >> 12 & 63 | 128) : O[p++] = J >> 12 | 224, O[p++] = J >> 6 & 63 | 128), O[p++] = J & 63 | 128);
            return O
        },
        H = function(C, O) {
            if (C.D) return v_(C, C.U);
            return (O = D(true, C, 8), O) & 128 && (O ^= 128, C = D(true, C, 2), O = (O << 2) + (C | 0)), O
        },
        sc = function(C, O, J) {
            if (3 == C.length) {
                for (J = 0; 3 > J; J++) O[J] += C[J];
                for (J = (C = 0, [13, 8, 13, 12, 16, 5, 3, 10, 15]); 9 > C; C++) O[3](O, C % 3, J[C])
            }
        },
        Vz = function(C, O, J, p, L) {
            J = w(O, (L = H((J = (C &= (p = C & 3, 4), H(O)), O)), J)), C && (J = Ax("" + J)), p && A(O, n(J.length, 2), L), A(O, J, L)
        },
        TN = function(C, O, J, p, L) {
            for (L = (p = (O.j8 = (O.wZ = zN({get: (O.El = (O.NL = O[R], O.c6 = Yc, n8), function() {
                        return this.concat()
                    })
                }, O.G), T[O.G](O.wZ, {
                    value: {
                        value: {}
                    }
                })), 0), []); 128 > p; p++) L[p] = String.fromCharCode(p);
            W(O, true, (e(((e([(F((V((V(107, O, (V(443, O, (F(O, 40, (V(430, (F(O, 35, (F((F(O, (F(O, (V(9, (F(O, (V(265, O, (V(358, O, (F(O, (V(466, (F((F(O, 387, (F(O, (F((F(O, (F(O, 489, (F(O, ((F(O, (F(O, 457, (F(O, 64, (F(O, 261, (F(((F(O, 287, (F(O, 485, (V((F(O, 477, (V(391, (F((F(O, (V(22, (F(O, 496, (F(O, (V(498, O, (V(215, (V(286, ((O.f3 = function(v) {
                this.C = v
            }, O.H = (O.Y = void 0, O.l = 0, p = window.performance || {}, O.K = [], 1), O).X = (O.W = [], O.L = void 0, O.I = false, (O.h = void 0, O).J = (O.K3 = (O.S = 25, O.D = void 0, false), O.B = null, O.C = O, O.Yx = (O.O = false, []), (O.Z = 8001, O.o = 0, O).A = [], 0), O.P = 0, (O.F = 0, O).g = (O.sl = (O.U = void 0, 0), []), O.R = 0, O.u = (O.N = void 0, void 0), []), O.hU = p.timeOrigin || (p.timing || {}).navigationStart || 0, O), 0), O), 0), [0, 0, 0])), 411), function(v, l, z, I, b, t, B, Q, r, Z, q, f) {
                function k(u, S) {
                    for (; Z < u;) f |= K(v) << Z, Z += 8;
                    return f >>= (Z -= u, S = f & (1 << u) - 1, u), S
                }
                for (Q = (z = (r = (f = Z = (t = H(v), 0), (k(3) | 0) + 1), l = k(5), 0), []), I = 0; z < l; z++) B = k(1), Q.push(B), I += B ? 0 : 1;
                for (q = (z = ((I | 0) - 1).toString(2).length, []), I = 0; I < l; I++) Q[I] || (q[I] = k(z));
                for (z = 0; z < l; z++) Q[z] && (q[z] = H(v));
                for (b = []; r--;) b.push(w(v, H(v)));
                F(v, t, function(u, S, io, d, y) {
                    for (io = (d = (S = 0, []), []); S < l; S++) {
                        if (!(y = q[S], Q)[S]) {
                            for (; y >= d.length;) d.push(H(u));
                            y = d[y]
                        }
                        io.push(y)
                    }
                    u.U = (u.D = uo(u, b.slice()), uo(u, io))
                })
            }), function(v, l) {
                (v = (l = H(v), w(v.C, l)), v[0]).removeEventListener(v[1], v[2], G)
            })), O), {}), 68), function(v) {
                K8(4, v)
            }), O), 230, function(v, l, z, I, b) {
                0 !== (l = w(v, (z = (I = w(v, (b = (l = (I = H((z = (b = H(v), H)(v), v)), H(v)), w(v.C, b)), I)), w(v, z)), l)), b) && (l = lo(l, I, 1, v, b, z), b.addEventListener(z, l, G), V(471, v, [b, z, l]))
            }), O), 677), function(v, l, z, I) {
                (I = (l = (z = H(v), K)(v), H)(v), V)(I, v, w(v, z) >>> l)
            })), 417), O, []), function(v, l) {
                W_((l = w(v, H(v)), l), v.C)
            })), function(v, l, z, I) {
                !P(v, true, l, false) && (l = Ic(v), z = l.i, I = l.C3, v.C == v || z == v.f3 && I == v) && (V(l.Xl, v, z.apply(I, l.v)), v.R = v.j())
            })), O).xx = 0, O), 3, function(v) {
                K8(1, v)
            }), function(v, l, z, I, b) {
                (l = H((b = (z = H(v), H(v)), v)), v.C == v) && (I = w(v, z), l = w(v, l), b = w(v, b), I[b] = l, 373 == z && (v.h = void 0, 2 == b && (v.N = D(false, v, 32), v.h = void 0)))
            })), function(v, l, z) {
                (l = H((z = H(v), v)), V)(l, v, "" + w(v, z))
            })), function(v, l, z, I) {
                V((l = w(v, (I = w(v, (l = H((I = H(v), v)), z = H(v), I)), l)), z), v, +(I == l))
            })), O.gZ = 0, 347), function(v, l, z, I) {
                V((l = w(v, (I = w((z = (I = H(v), H(v)), v), I), z)), z), v, l + I)
            }), O).bm = 0, 112), function(v) {
                Jx(4, v)
            }), function(v, l, z, I) {
                if (l = v.Yx.pop()) {
                    for (z = K(v); 0 < z; z--) I = H(v), l[I] = v.X[I];
                    v.X = (l[l[358] = v.X[358], 430] = v.X[430], l)
                } else V(286, v, v.F)
            })), 17), function(v, l, z, I, b) {
                for (l = (I = GN((b = H(v), v)), z = 0, []); z < I; z++) l.push(K(v));
                V(b, v, l)
            }), O), 181, function(v) {
                Vz(4, v)
            }), 376), function(v, l, z, I, b, t) {
                P(v, true, l, false) || (b = Ic(v.C), l = b.Xl, z = b.i, t = b.C3, b = b.v, I = b.length, z = 0 == I ? new t[z] : 1 == I ? new t[z](b[0]) : 2 == I ? new t[z](b[0], b[1]) : 3 == I ? new t[z](b[0], b[1], b[2]) : 4 == I ? new t[z](b[0], b[1], b[2], b[3]) : 2(), V(l, v, z))
            }), function(v, l, z, I) {
                V((l = w((z = (I = (l = (z = H(v), H(v)), H)(v), w(v, z)), v), l), I), v, z in l | 0)
            })), O), 351, function(v, l, z) {
                V((l = (l = w(v, (l = H(v), z = H(v), l)), rV(l)), z), v, l)
            }), O), 0), 252), function(v, l, z) {
                P(v, true, l, false) || (l = H(v), z = H(v), V(z, v, function(I) {
                    return eval(I)
                }(ZC(w(v.C, l)))))
            }), [])), F(O, 244, function(v, l, z, I, b, t) {
                if (!P(v, true, l, true)) {
                    if ("object" == (v = w((t = (b = (b = (t = (l = H((z = H(v), v)), H(v)), H(v)), l = w(v, l), w(v, b)), w)(v, t), v), z), rV(v))) {
                        for (I in z = [], v) z.push(I);
                        v = z
                    }
                    for (z = (t = 0 < (I = 0, t) ? t : 1, v.length); I < z; I += t) l(v.slice(I, (I | 0) + (t | 0)), b)
                }
            }), [160, 0, 0])), 504), function(v, l, z) {
                0 != w((z = w(v, (z = H((l = H(v), v)), z)), v), l) && V(286, v, z)
            }), O), N(4)), 322), function(v, l, z, I, b, t, B) {
                for (B = (t = (z = w(v, (I = (b = H(v), GN)(v), l = "", 484)), z).length, 0); I--;) B = ((B | 0) + (GN(v) | 0)) % t, l += L[z[B]];
                V(b, v, l)
            }), 393), function(v, l, z, I) {
                l = w(v, (I = (z = H((I = (l = H(v), H)(v), v)), w(v, I)), l)), V(z, v, l[I])
            }), O), 442, function(v, l, z, I) {
                (l = (z = H((I = H(v), v)), H(v)), V)(l, v, w(v, I) || w(v, z))
            }), function() {})), O), 2048), function(v) {
                Vz(3, v)
            })), O)), c)), 471), O, 0), O), 486, function(v, l, z, I, b) {
                V((l = w(v, (z = w(v, (b = H((z = (I = H(v), H(v)), l = H(v), v)), z)), b = w(v, b), l)), I), v, lo(l, z, b, v))
            }), qs)], O), e)([h, J], O), [Sw, C]), O), true))
        },
        Ns = function(C, O, J, p) {
            try {
                p = C[((O | 0) + 2) % 3], C[O] = (C[O] | 0) - (C[((O | 0) + 1) % 3] | 0) - (p | 0) ^ (1 == O ? p << J : p >>> J)
            } catch (L) {
                throw L;
            }
        },
        GN = function(C, O) {
            return (O = K(C), O & 128) && (O = O & 127 | K(C) << 7), O
        },
        H_ = function(C, O, J, p) {
            return (p = g[C.substring(0, 3) + "_"]) ? p(C.substring(3), O, J) : Ec(O, C)
        },
        F = function(C, O, J) {
            J[V(O, C, J), qs] = 2796
        },
        g, V = function(C, O, J) {
            if (286 == C || 215 == C) O.X[C] ? O.X[C].concat(J) : O.X[C] = uo(O, J);
            else {
                if (O.I && 373 != C) return;
                265 == C || 9 == C || 417 == C || 358 == C || 498 == C ? O.X[C] || (O.X[C] = P_(118, C, J, O)) : O.X[C] = P_(9, C, J, O)
            }
            373 == C && (O.N = D(false, O, 32), O.h = void 0)
        },
        kc = function(C, O, J) {
            return C.V(function(p) {
                J = p
            }, false, O), J
        },
        f8 = function(C) {
            return C
        },
        Ec = function(C, O) {
            return C(function(J) {
                J(O)
            }), [function() {
                return O
            }]
        },
        uo = function(C, O, J) {
            return (J = T[C.G](C.j8), J)[C.G] = function() {
                return O
            }, J.concat = function(p) {
                O = p
            }, J
        },
        C8 = function(C, O, J, p, L) {
            for (p = (C = (L = C[2] | 0, C)[3] | 0, 0); 14 > p; p++) J = J >>> 8 | J << 24, J += O | 0, J ^= L + 2298, O = O << 3 | O >>> 29, C = C >>> 8 | C << 24, C += L | 0, L = L << 3 | L >>> 29, C ^= p + 2298, L ^= C, O ^= J;
            return [O >>> 24 & 255, O >>> 16 & 255, O >>> 8 & 255, O >>> 0 & 255, J >>> 24 & 255, J >>> 16 & 255, J >>> 8 & 255, J >>> 0 & 255]
        },
        K = function(C) {
            return C.D ? v_(C, C.U) : D(true, C, 8)
        },
        W_ = function(C, O) {
            (O.Yx.push(O.X.slice()), O.X)[286] = void 0, V(286, O, C)
        },
        ac = function(C, O, J, p) {
            return (V(286, C, ((p = w(C, 286), C.g) && p < C.F ? (V(286, C, C.F), W_(J, C)) : V(286, C, J), tx(C, O), p)), w)(C, 22)
        },
        X, w = function(C, O) {
            if ((C = C.X[O], void 0) === C) throw [a, 30, O];
            if (C.value) return C.create();
            return (C.create(4 * O * O + -12 * O + 4), C).prototype
        },
        U = function(C, O, J) {
            J = this;
            try {
                TN(O, this, C)
            } catch (p) {
                m(p, this), O(function(L) {
                    L(J.Y)
                })
            }
        },
        P_ = function(C, O, J, p, L, v, l, z) {
            return J = [87, -12, -24, -71, (v = C & 7, z = xc, 14), -5, J, -72, -32, 90], l = T[p.G](p.wZ), l[p.G] = function(I) {
                v += 6 + 7 * C, v &= (L = I, 7)
            }, l.concat = function(I) {
                return (I = (I = (I = O % 16 + 1, -224 * L + (z() | 0) * I - I * L + 56 * L * L + v + J[v + 51 & 7] * O * I - -672 * O * L - 224 * O * O * L + 4 * O * O * I), J[I]), L = void 0, J[(v + 29 & 7) + (C & 2)] = I, J)[v + (C & 2)] = -12, I
            }, l
        },
        D = function(C, O, J, p, L, v, l, z, I, b, t, B, Q, r) {
            if (t = w(O, 286), t >= O.F) throw [a, 31];
            for (r = (v = (B = 0, L = O.NL.length, J), t); 0 < v;) Q = r >> 3, I = r % 8, p = 8 - (I | 0), p = p < v ? p : v, l = O.g[Q], C && (b = O, b.h != r >> 6 && (b.h = r >> 6, z = w(b, 373), b.L = C8([0, 0, z[1], z[2]], b.N, b.h)), l ^= O.L[Q & L]), B |= (l >> 8 - (I | 0) - (p | 0) & (1 << p) - 1) << (v | 0) - (p | 0), v -= p, r += p;
            return V(286, (C = B, O), (t | 0) + (J | 0)), C
        },
        m = function(C, O) {
            O.Y = ((O.Y ? O.Y + "~" : "E:") + C.message + ":" + C.stack).slice(0, 2048)
        },
        c = this || self,
        E = c.requestIdleCallback ? function(C) {
            requestIdleCallback(function() {
                C()
            }, {
                timeout: 4
            })
        } : c.setImmediate ? function(C) {
            setImmediate(C)
        } : function(C) {
            setTimeout(C, 0)
        },
        p8 = function(C, O, J, p, L) {
            if ((L = C[0], L) == M) O.S = 25, O.s(C);
            else if (L == R) {
                J = C[1];
                try {
                    p = O.Y || O.s(C)
                } catch (v) {
                    m(v, O), p = O.Y
                }
                J(p)
            } else if (L == bo) O.s(C);
            else if (L == h) O.s(C);
            else if (L == Sw) {
                try {
                    for (p = 0; p < O.A.length; p++) try {
                        J = O.A[p], J[0][J[1]](J[2])
                    } catch (v) {}
                } catch (v) {}(0, C[1])(function(v, l) {
                    O.V(v, true, l)
                }, (O.A = [], function(v) {
                    (e((v = !O.K.length, [ew]), O), v) && W(O, true, false)
                }))
            } else {
                if (L == Y) return p = C[2], V(247, O, C[6]), V(22, O, p), O.s(C);
                L == ew ? (O.g = [], O.W = [], O.X = null) : L == qs && "loading" === c.document.readyState && (O.B = function(v, l) {
                    function z() {
                        l || (l = true, v())
                    }(c.document.addEventListener("DOMContentLoaded", z, (l = false, G)), c).addEventListener("load", z, G)
                })
            }
        },
        L8 = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        bo = [],
        ew = [],
        M = (U.prototype.kx = void 0, U.prototype.T = "toString", []),
        R = [],
        a = (U.prototype.Da = false, U.prototype.RF = void 0, {}),
        h = [],
        Sw = [],
        qs = [],
        Y = [],
        xc = (((wV, function() {})(N), Ns, function() {})(sc), void 0),
        T = a.constructor,
        n8 = (((((((X = U.prototype, U).prototype.G = "create", X.m5 = function(C, O, J, p, L) {
            for (L = p = 0; L < C.length; L++) p += C.charCodeAt(L), p += p << 10, p ^= p >> 6;
            return (p = (p += p << 3, p ^= p >> 11, C = p + (p << 15) >>> 0, new Number(C & (1 << O) - 1)), p)[0] = (C >>> O) % J, p
        }, X.V = function(C, O, J, p, L) {
            if ((J = "array" === rV(J) ? J : [J], this).Y) C(this.Y);
            else try {
                p = !this.K.length, L = [], e([M, L, J], this), e([R, C, L], this), O && !p || W(this, O, true)
            } catch (v) {
                m(v, this), C(this.Y)
            }
        }, X).aF = function(C, O, J, p, L, v) {
            for (L = v = (p = [], 0); L < C.length; L++)
                for (J = J << O | C[L], v += O; 7 < v;) v -= 8, p.push(J >> v & 255);
            return p
        }, X.B6 = function(C, O, J) {
            return C ^ (O ^= O << 13, O ^= O >> 17, (O = (O ^ O << 5) & J) || (O = 1), O)
        }, X).ML = function() {
            return Math.floor(this.J + (this.j() - this.o))
        }, X.j = (window.performance || {}).now ? function() {
            return this.hU + window.performance.now()
        } : function() {
            return +new Date
        }, X).Ul = function() {
            return Math.floor(this.j())
        }, U).prototype.s = function(C, O) {
            return O = (xc = function() {
                    return C == O ? 4 : -46
                }, C = {}, {}),
                function(J, p, L, v, l, z, I, b, t, B, Q, r, Z, q, f) {
                    t = C, C = O;
                    try {
                        if (B = J[0], B == h) {
                            I = J[1];
                            try {
                                for (f = (L = [], v = atob(I), Z = 0); Z < v.length; Z++) p = v.charCodeAt(Z), 255 < p && (L[f++] = p & 255, p >>= 8), L[f++] = p;
                                V(373, this, (this.F = (this.g = L, this.g.length << 3), [0, 0, 0]))
                            } catch (k) {
                                x(k, 17, this);
                                return
                            }
                            tx(this, 8001)
                        } else if (B == M) J[1].push(w(this, 265).length, w(this, 417).length, w(this, 430), w(this, 9).length), V(22, this, J[2]), this.X[101] && ac(this, 8001, w(this, 101));
                        else {
                            if (B == R) {
                                b = (q = (L = J[2], n((w(this, 265).length | 0) + 2, 2)), this.C), this.C = this;
                                try {
                                    z = w(this, 358), 0 < z.length && A(this, n(z.length, 2).concat(z), 265, 10), A(this, n(this.H, 1), 265, 109), A(this, n(this[R].length, 1), 265), v = 0, v += w(this, 466) & 2047, r = w(this, 9), v -= (w(this, 265).length | 0) + 5, 4 < r.length && (v -= (r.length | 0) + 3), 0 < v && A(this, n(v, 2).concat(N(v)), 265, 15), 4 < r.length && A(this, n(r.length, 2).concat(r), 265, 156)
                                } finally {
                                    this.C = b
                                }
                                if (Q = (((f = N(2).concat(w(this, 265)), f)[1] = f[0] ^ 6, f)[3] = f[1] ^ q[0], f[4] = f[1] ^ q[1], this).dZ(f)) Q = "!" + Q;
                                else
                                    for (Q = "", v = 0; v < f.length; v++) l = f[v][this.T](16), 1 == l.length && (l = "0" + l), Q += l;
                                return w(this, (V(430, ((w(this, (Z = Q, 265)).length = L.shift(), w)(this, 417).length = L.shift(), this), L.shift()), 9)).length = L.shift(), Z
                            }
                            if (B == bo) ac(this, J[2], J[1]);
                            else if (B == Y) return ac(this, 8001, J[1])
                        }
                    } finally {
                        C = t
                    }
                }
        }(), U.prototype.oF = 0, U.prototype).tU = 0, /./);
    U.prototype.dZ = function(C, O, J, p) {
        if (O = window.btoa) {
            for (p = 0, J = ""; p < C.length; p += 8192) J += String.fromCharCode.apply(null, C.slice(p, p + 8192));
            C = O(J).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
        } else C = void 0;
        return C
    };
    var Yc, jw = (U.prototype[Sw] = [0, 0, 1, 1, 0, 1, 1], h).pop.bind(U.prototype[M]),
        ZC = ((Yc = zN({get: jw
        }, (n8[U.prototype.T] = jw, U.prototype.G)), U).prototype.v6 = void 0, function(C, O) {
            return (O = Qz()) && 1 === C.eval(O.createScript("1")) ? function(J) {
                return O.createScript(J)
            } : function(J) {
                return "" + J
            }
        }(c));
    (40 < (g = c.botguard || (c.botguard = {}), g).m || (g.m = 41, g.bg = B_, g.a = H_), g).hDL_ = function(C, O, J) {
        return [(J = new U(C, O), function(p) {
            return kc(J, p)
        })]
    };
}).call(this);
#12 JavaScript::Eval (size: 2757) - SHA256: c52568c21c907ffc5a72b2fe2aa133f3f2495ded3d771a7b9d385df5ce620fa1
(function() {
    if (typeof irongate == 'undefined') irongate = {};
    irongate.gr = function(callback) {
        if (typeof irongate.g != 'undefined') {
            callback()
        } else {
            if (typeof irongate.gcb == 'undefined') {
                irongate.gcb = []
            }
            irongate.gcb.push(callback)
        }
    };
    irongate.gsl = function() {
        var st = document.createElement("script");
        st.type = "text/javascript";
        st.src = "https://ww.steelhousemedia.com/gs";
        var list = document.getElementsByTagName("script");
        var last = Number(list.length) - 1;
        var scpt = document.getElementsByTagName("script")[last];
        scpt.parentNode.insertBefore(st, scpt);
        irongate.timeout = setInterval(irongate.dl, 2000)
    };
    irongate.dl = function() {
        if (typeof irongate.g != 'undefined') {
            clearInterval(irongate.timeout)
        }
        while (irongate.gcb.length > 0) {
            var callback = irongate.gcb.pop();
            callback()
        }
    };
    var request = function() {
        var st = document.createElement('script');
        st.type = 'text/javascript';
        var g = (typeof irongate.g != 'undefined' ? irongate.g() : 'null');
        var gt = (typeof irongate.gt != 'undefined' ? irongate.gt() : 'null');
        var sturl = 'px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=743503097.1670381855&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22743503097.1670381855%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221670381855.1%22%2C%22dcm_gid%22%3A%22386483337.1670381856%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292618%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1670381855.1&dcm_gid=386483337.1670381856&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cb=1670381857897283&shguid=' + g + '&shgts=' + gt;
        st.src = ('https:' == document.location.protocol ? 'https://' : 'http://') + sturl;
        var list = document.getElementsByTagName('script');
        var last = Number(list.length) - 1;
        var scpt = document.getElementsByTagName('script')[last];
        scpt.parentNode.insertBefore(st, scpt)
    };
    irongate.gr(request);
    irongate.gsl()
})();
#13 JavaScript::Eval (size: 2273) - SHA256: 79a03e5e067f08f2b40ffa0c811a16201852d39f4dd7b14c66bc913f76c451d6
�
(function() {�
    var s = '9a74f8b353780f2fbe59d8dc1d9cd901437be0b823f8ee60d0ab36264e2503ce3a5dcdcdf0175068eaac348367e3fccfc1d93277aa1ab6274b3b6862e0e7c686b3ee5de755fb8858d67374975a9193e450d02b64da0b5c6a7d8766b4642a697b5073afdca166de8d3a45cf172a8821bbe6906861a7ce1b86077226775a1c93';�
    function setCookie(cname, cvalue, domain, exdays) {�
        var d = new Date();�
        d.setTime(d.getTime() + (60 * 24 * 60 * exdays * 1000));�
        var expires = "expires=" + d.toUTCString();�
        var cookie = cname + "=" + cvalue;�
        if (domain) {�
            cookie += ";" + "domain=" + domain;�
        }�
        cookie += ";" + expires + ";path=/";�
        document.cookie = cookie;�
    }�
    function deleteCookie(cname, domain) {�
        setCookie(cname, "", domain, 0);�
    }�
    var ta = ["document.$cdc_asdjflasutopfhvcZLmcfl_", "window.callPhantom", "window.__nightmare", "window.__webdriver_script_fn", "window._phantom", "navigator.webdriver"];�
    var re;�
    try {�
        re = [!!document.$cdc_asdjflasutopfhvcZLmcfl_, !!window.callPhantom, !!window.__nightmare, !!window.__webdriver_script_fn, !!window._phantom, !!navigator.webdriver];�
    }�
    catch (err) {��}�
    if (re && re.indexOf(true) == -1) {�
        setCookie("TMIS2", s, ".etoro.com", 14);�
    }�
    else {�
        var resultsObj = {};�
        for (var i = 0; i < ta.length; i++) {�
            resultsObj[ta[i]] = re[i];�
        }�
        var img = new Image();�
        img.src = 'https://etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=JSCClient&LogEvents=' + encodeURIComponent(JSON.stringify([{�
            ApplicationIdentifier: 'JSCClient',
            �ApplicationVersion: '0.0.11',
            �Level: "error",
            �Message: "ClientSel",
            �Results: resultsObj,
            �Type: 'log'�
        }]));�
    }�
})();��
#14 JavaScript::Eval (size: 22) - SHA256: 96bc32102142a2b26979b51faca0349f415898ceeba6ca594e7498b337aa0808
0,
function(v) {
    Jx(2, v)
}

Executed Writes (0)


HTTP Transactions (164)


Request Response
                                        
                                            GET /4/4292618/ HTTP/1.1 
Host: inoradde.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             139.45.197.238
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf8
                                            
Server: nginx
Date: Wed, 07 Dec 2022 02:57:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 48089b3aafe389f7037063e18058f507
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://med.etoro.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=a0fba9ff400541dcb3385cdc25ff08a4; expires=Thu, 07 Dec 2023 02:57:29 GMT; path=/ oaidts=1670381849; expires=Thu, 07 Dec 2023 02:57:29 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   608
Md5:    91f43646cc8aa03c2f48ae5217454c34
Sha1:   bbbd5293cb34f383f3dc2946ed31afb83d59abe4
Sha256: cb6252b8334d7f0ad3c7bc69c698a4a98fc1c369c9420eeb707a85852e9dcede

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4411
Expires: Wed, 07 Dec 2022 04:11:01 GMT
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5728
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:30 GMT
Last-Modified: Wed, 07 Dec 2022 01:22:02 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11101
Expires: Wed, 07 Dec 2022 06:02:31 GMT
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 02:20:26 GMT
cache-control: public,max-age=3600
age: 2224
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: DTWdaVzqc+usAqwn86RrqXgNlG5laYqj7YWOYp6VDOce5qWIZV/QSSV7ViLPaf+vBe/09DDOrC0=
x-amz-request-id: X282669VG6FQ24RT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 02:49:12 GMT
age: 498
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Wed, 07 Dec 2022 02:57:30 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EF2E0268A5ED0CA7D64DFC1BAA3D56D55F4062E4D84972BC9423FE56DF585673"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16517
Expires: Wed, 07 Dec 2022 07:32:47 GMT
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: inoradde.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=a0fba9ff400541dcb3385cdc25ff08a4; oaidts=1670381849

                                        
                                             139.45.197.238
HTTP/1.1 204 No Content
                                            
Server: nginx
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /img.gif?f=merge&userId=a0fba9ff400541dcb3385cdc25ff08a4 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             139.45.195.8
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Wed, 07 Dec 2022 02:57:30 GMT
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a0fba9ff400541dcb3385cdc25ff08a4; expires=Thu, 07 Dec 2023 02:57:30 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /B15349_A115832_TClick_SPRP_DJULBREG_4292618.aspx?rdk=rk1 HTTP/1.1 
Host: med.etoro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             23.32.86.79
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                            
Content-Length: 239
Location: http://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
X-Robots-Tag: noindex
Expires: Wed, 07 Dec 2022 02:57:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   239
Md5:    13b923cef07c5e4b54bdf29fda0fb389
Sha1:   acd727ea4c7d41f12b8db470560658e9e9c2deb5
Sha256: 60e659c9d345efe46e29f0ac165b8b2ed3daf3de8f364da89912ac281ae35d3c
                                        
                                            GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1 HTTP/1.1 
Host: med.etoro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             23.32.86.79
HTTP/1.1 301 Moved Permanently
                                            
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1
Expires: Wed, 07 Dec 2022 02:57:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive

                                        
                                            GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292618&rdk=rk1 HTTP/1.1 
Host: med.etoro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             23.32.86.79
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Content-Length: 0
Location: https://www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292618&utm_campaign=PRP_DJULBREG_4292618&utm_term=&rdk=rk1
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Wed, 07 Dec 2022 02:57:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Dec 2022 02:57:30 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=m1z30yasucinkri251ctcvfo; path=/; HttpOnly AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Sun, 05-Feb-2023 00:00:00 GMT; path=/ RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4292618&rdk=rk1; domain=.etoro.com; expires=Fri, 06-Jan-2023 00:00:00 GMT; path=/

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 02:11:20 GMT
cache-control: public,max-age=3600
age: 2770
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2056
Cache-Control: max-age=145156
Date: Wed, 07 Dec 2022 02:57:30 GMT
Etag: "638f8d16-2d7"
Expires: Thu, 08 Dec 2022 19:16:46 GMT
Last-Modified: Tue, 06 Dec 2022 18:42:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5716
Cache-Control: max-age=114276
Date: Wed, 07 Dec 2022 02:57:30 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:42:06 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2057
Cache-Control: max-age=145156
Date: Wed, 07 Dec 2022 02:57:31 GMT
Etag: "638f8d16-2d7"
Expires: Thu, 08 Dec 2022 19:16:47 GMT
Last-Modified: Tue, 06 Dec 2022 18:42:30 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /maintenance.json HTTP/1.1 
Host: maintenance.etoro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                        
                                             23.32.86.79
HTTP/1.1 200 OK
Content-Type: application/json
                                            
x-amz-id-2: gNu0WSmUfT2FLlh8vPBJeVDx6BvYbT5/KnaOuNRSsgoLkACOzaFWMyPWfEd/brTgh2neShPvu6Y=
x-amz-request-id: 5NB3CPPGA9XQDW40
Last-Modified: Sun, 23 Oct 2022 04:14:24 GMT
ETag: "c47549fa5fc30f994fcac453124a8e7b"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 309
Cache-Control: max-age=300
Expires: Wed, 07 Dec 2022 03:02:31 GMT
Date: Wed, 07 Dec 2022 02:57:31 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (308)
Size:   309
Md5:    c47549fa5fc30f994fcac453124a8e7b
Sha1:   0f412a6d214bb46455c050727fea088988675055
Sha256: 0c24a034718dc60de1753b99f17a8446ca525807a6a35899a3dcb9fd4f68eb6b
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8Pi5Z1PZhB4QpfQhruTCzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.228.207.167
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lll7mEexOcgCongucQwm03bQjew=

                                        
                                            GET /496.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:28 GMT
etag: W/"eM1zeYFj+/5L5O/LLsC2NQ=="
content-encoding: gzip
content-length: 989
cache-control: public, max-age=31377383
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1834), with no line terminators
Size:   989
Md5:    b812ce2c9a9459dbacd0b93a3b2cff54
Sha1:   0be647987d5befbcf2e4412e6a7edc0a70f7952e
Sha256: 2a0cb36357059f192cd794e4dfb1d2ef5e41dd6df5754c37896d644b619bb529
                                        
                                            GET /496.0.1/js_files/?m[]=tools/browser-support HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "3ces8aXjHU4XoLCEomamyg=="
content-encoding: gzip
content-length: 5720
cache-control: public, max-age=31377299
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13040), with no line terminators
Size:   5720
Md5:    cedba04530d809fe2960afa8fd581927
Sha1:   4cfade97fc9315cdca0d58ee07be305a12a5da8d
Sha256: c0c0fcbf59f4c6590897014b35bbd4f7b52ad7c4c9bf9fabeb98d1aae394ed47
                                        
                                            GET /496.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:28 GMT
etag: W/"WlBOGAWSwPiCRSnvG+RRYg=="
content-encoding: gzip
content-length: 27123
cache-control: public, max-age=31377297
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   27123
Md5:    cff377b0f027f4cf2efba0f1827a6ac1
Sha1:   0f86e6e39b9d7c0d4aa84caac0aad079ba5ccae3
Sha256: 75baeb162272bc3a969e44d930ee73803411ad3b9299cc27dade9ba3bf38934d
                                        
                                            GET /496.0.1/sem-etoro-ng/styles.0b04516674787ac6.css HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:16 GMT
etag: W/"Mt9GofK2CZ8vrbHojER95w=="
content-encoding: gzip
content-length: 22255
cache-control: public, max-age=31377355
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   22255
Md5:    97752c8c682c2474f4194a078e231ea8
Sha1:   57b1f1da0eee8e6d926f54b1d54f84383db82bd4
Sha256: 446e9df6cb1bac975e8339f845b83119b3703e8fba37674c8eb9408cec878f7b
                                        
                                            GET /496.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "O1S4QFJxtfDCUb7g7e8jUA=="
content-encoding: gzip
content-length: 404329
cache-control: public, max-age=31377399
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33321)
Size:   404329
Md5:    0298a217ec806a1744f54a49d08ba95e
Sha1:   64832668ba2cf3a69bfd61f21dd419aa41d24fd4
Sha256: 43c74227fce511fc535ec28e346be24e857ec3da0ca2887a9dbb9f65c0eca140
                                        
                                            GET /api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_95b1e4b508ae2a8f8c6c78f588b3aea6 HTTP/1.1 
Host: api.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
request-context: appId=cid-v1:8632999c-01c3-415f-8d41-4dca9d4a345a
content-encoding: gzip
x-robots-tag: noindex
content-length: 6834
cache-control: max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (33443), with no line terminators
Size:   6834
Md5:    1bc394be86b65f84a3f7821e717397d4
Sha1:   e872f5f9d730a6368c84ad84c2045bb9d1ab59a8
Sha256: 842781ebb3032627b0b27505b3405ebb2adf34524c09a7d0e7ad26b420fc53e1
                                        
                                            GET /496.0.1/css_files/?p[]=styles/style.css HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "3ZJXXIEj+bKGn8ebuBrKzA=="
content-encoding: gzip
content-length: 297553
cache-control: public, max-age=31377322
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   297553
Md5:    4fa273499fa302cc77d85cb13694be0a
Sha1:   194c0b4c1e620f2ad9e58debd6f02a8823e3ea9a
Sha256: b29c3edf450aa61f084b86d9ddf7d5c18c881b2aa56cca460ebbcccc686be5db
                                        
                                            GET /sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=e986b4ae96f28a56149003fff2c071d5_8ebc433af3ac79a87a8f478c665bf558&totalBulks=1 HTTP/1.1 
Host: api.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
request-context: appId=cid-v1:486a9dd7-b5cc-49fa-ae5e-a2ea9ee3e36e
content-encoding: gzip
x-robots-tag: noindex
content-length: 312539
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   312539
Md5:    3248d11c9bebd29ae78e3566eefff8a2
Sha1:   275e1559213b66fbff179511f1dd03363db4998b
Sha256: e3c6ba07787c1296369cc4fa6474f64d76912fc4d62dae24b0fe77cc6d0fb30f
                                        
                                            GET /sapi/candles/closingprices.json?cv=baed4b1c59ffa664154a8a934987dfa3_df99c0f883565ed76e1ecee6ba247f3c HTTP/1.1 
Host: api.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-encoding: gzip
x-robots-tag: noindex
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
content-length: 148178
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   148178
Md5:    a8950fcea12e3069f4b1000753974d43
Sha1:   f9eab36628ab802697221ccf85d8423930d6886a
Sha256: cfd3e7eecb5945dae3a6ba43bc81ab15b021f42cb494875ae95d1ab7ccdd1a69
                                        
                                            GET /sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_d17aed7ede20d5e14230786861f56ab8 HTTP/1.1 
Host: api.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/octet-stream
                                            
accept-ranges: bytes
access-control-max-age: 3000
etag: W/"16c81beb818ecd15f024ae9606a53f74"
last-modified: Sun, 01 Dec 2019 10:07:21 GMT
x-amz-id-2: bIkebaYRUe3jEWFZABYUYjruc2Ea2jLxVLYa0DREpYzxlqVc4O/VO2fvkqK/LAth4KjZw9Hlom0=
x-amz-meta-s3b-last-modified: 20191201T100206Z
x-amz-replication-status: COMPLETED
x-amz-request-id: AE655MC1PBMZM4J0
x-amz-version-id: YJZIwhKbLzAkKfpv9wKr1PH76VdQu2_5
content-encoding: gzip
x-robots-tag: noindex
content-length: 788
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (3081), with no line terminators
Size:   788
Md5:    18afcb9729a9802cc68f6ffd543d1784
Sha1:   4569392aa9271a43a2780790d20124c53d073940
Sha256: 3f3373c5f225713cb5262813c0966d4e7f38ca0806b4e54f12ea166b2e54e77b
                                        
                                            GET /sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=d201ab3ca3cb4eb2b57342d8ce80438e_5e56737f908a913a2a0384b5f25d63a2&totalBulks=1 HTTP/1.1 
Host: api.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
access-control-allow-credentials: true
request-context: appId=cid-v1:da6cfa5a-5dde-4d38-9665-5bd2b94cd342
accept: application/json
content-encoding: gzip
x-robots-tag: noindex
content-length: 347765
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   347765
Md5:    fdacebf126e1ef1bf257b115821f9755
Sha1:   79d192eb261135f04f5aec52db0518be65feb99d
Sha256: bd7db157714c9f41afe747e0b9fe10b67f87a7b053c98dd1ede78abafafe3a3b
                                        
                                            GET /web-client/img/preloader.png HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/png
                                            
x-amz-id-2: HqWlyvFWJDbYXvn+iBzeJlpU+EHNusBpfkYEgJ4CyOuyJqvbxfWRXsYgERY8SXO2Uty8vXGjtBs=
x-amz-request-id: 0ESYPX93H97JNZG6
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 07:40:21 GMT
etag: "b0f268da8d890fc3afc15e32480e866e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 07:39:12 GMT
x-amz-version-id: ypOW0sjHuKqXDROJg6L6MTOp1Z0lHcDD
accept-ranges: bytes
server: AmazonS3
content-length: 1206
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Size:   1206
Md5:    b0f268da8d890fc3afc15e32480e866e
Sha1:   1465c0de6f4871bbe22dc940cf2530a7a516568f
Sha256: 90c5b9934bc4952a0bec1284d8e63468b0cf8eb1af23cdfd56b735e83691b79f
                                        
                                            GET /web-client/img/avatar.png HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/png
                                            
x-amz-id-2: 0/y9bE197UJxPRTVFYy7P/+nKzeb0xicMs8KtbmCgF1c1RUFjmN2l2WF7hMib6OXE24ToEt5OX4=
x-amz-request-id: PGNT0B3TBRSVZ60B
x-amz-replication-status: COMPLETED
last-modified: Tue, 08 Sep 2015 10:58:53 GMT
etag: "299143d79774a5a4581a0e3a7f0a0038"
x-amz-version-id: TJHv2UgTAtmK_z5ntjVcX71guH3fsI7I
accept-ranges: bytes
content-length: 4095
server: AmazonS3
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size:   4095
Md5:    299143d79774a5a4581a0e3a7f0a0038
Sha1:   971f38ccaf41dab068a4f9eb5c4d6d7a25bb67bb
Sha256: 94e3a489999508f5d2367de8ef15434d1f41afc24b2c94b08976d96438ec5530
                                        
                                            GET /496.0.1/sem-etoro-ng/main.415815588583d307.js HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Mon, 05 Dec 2022 06:49:28 GMT
etag: W/"IfSQZ/Lgno4RKgYDKGesEg=="
content-encoding: gzip
content-length: 2736202
cache-control: public, max-age=31377318
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   2736202
Md5:    4de5a5031302f7995465a822c20f2c78
Sha1:   a6974898e9c5936b5a4f676fb6d455f444166bc4
Sha256: ad1b32520a0ff2999fadb9abc4bea4180228af778670a569e26a9338e42933b3
                                        
                                            GET /web-client/img/sprite.png HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/png
                                            
x-amz-id-2: iJWzXYFdvEsHbEaNHHt7HyUvdx4wEIrq7y/s8sADj0jPVLPimD+kxmxwzrBJ2Y0eY+jtrrKWVtQ=
x-amz-request-id: XNEMD1WGBMP43YZ2
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Jan 2019 08:39:49 GMT
etag: "e1e136d8c9c87238c1faecbe30de864a"
x-amz-version-id: c7040_.mWfwV0MHOIOsnAOoCalddmt_9
accept-ranges: bytes
content-length: 71400
server: AmazonS3
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 170 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Size:   71400
Md5:    e1e136d8c9c87238c1faecbe30de864a
Sha1:   4dd3ff46c7a92fb59e0b4e86f0ad408c67867f66
Sha256: 1f97ddc0a725e59b6f4f9e1cd03eeff0399145b5f9074e9dde10f04856541c9f
                                        
                                            GET /web-client/img/Splash/touch-icon-ipad-144.png HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/png
                                            
x-amz-id-2: WmexICEBtjnn/vjtNmdvVtYbdZBQ7M12KuffRhP4+16/KkWF4A2AuppSBdWnZrXGpjBDqBIhS4I=
x-amz-request-id: QDN89A8E97GC0VGY
x-amz-replication-status: COMPLETED
last-modified: Sun, 27 Dec 2015 14:45:23 GMT
etag: "f092565f3aad3709b6078be9d3d7c6de"
x-amz-version-id: rmovFrrcZBM1dXrI_13uWeeISqQczKQq
accept-ranges: bytes
server: AmazonS3
content-length: 5740
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:32 GMT
date: Wed, 07 Dec 2022 02:57:32 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Size:   5740
Md5:    f092565f3aad3709b6078be9d3d7c6de
Sha1:   84b518cacb1f0c6ebaa58a7a81c3d5e376405d43
Sha256: ffae9c7e791049222450c9ca98e57830313b8e918a8e825944a1b6376f5397ac
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8340
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:57:32 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   3217
Md5:    67c1f8bb1f1436902249ca6efbf74c69
Sha1:   cdbfd5731a6387dc4f379f1a58ff2192d741685d
Sha256: f42a5f321fa82d5dd656a3c1a6b282e7f356804386f67b2ef32343996300508c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9891
x-amzn-requestid: f15dc6ba-901b-4ef6-8589-d8918fe84173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csU8lF3MoAMF47g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6850-496d269b228065a365a67eea;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:53:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3SFFPJye5LvexbHVfPukXIdJ-BSkP5MCpesIJhqxtSNKamcRNr1lFA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 18:21:44 GMT
age: 30948
etag: "9ec84996b63362ad370ff67b0fd8136a343c1bbf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9891
Md5:    c2ae931d0f14a81013f782d43b8c7b85
Sha1:   9ec84996b63362ad370ff67b0fd8136a343c1bbf
Sha256: 9b4a2b3e5e2d2b4fac094135fed10a3040598f1208f6b2ec52d95d10aca66ed5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:06 GMT
age: 18146
etag: "62ef59be034071e667e3476ea0740077c86778c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8906
Md5:    b89a7fe1080499e4f7171f962b57fec4
Sha1:   62ef59be034071e667e3476ea0740077c86778c1
Sha256: e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9613
x-amzn-requestid: 3542fd4f-74e3-450b-b7fc-04034d680bf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cslIEEDtIAMFfuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e8233-40eaebed627d374d0910e456;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 23:43:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2aI7z8gOkQiNDlj2tbsoWibfupjl25ZjoO_QRbfmXQKwO-yF455yXg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:18:37 GMT
age: 70735
etag: "3628390c62642dcc375b28f58c9b48180c4abd73"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9613
Md5:    b92721cbe24623f1713a5248d6a7c1b2
Sha1:   3628390c62642dcc375b28f58c9b48180c4abd73
Sha256: 37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f6b1394-57be-42ed-ad12-94fa7a0b4be7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7609
x-amzn-requestid: 02299a39-6804-49ae-b415-313b6e06b2ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfj24G39oAMF25Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63894cf8-5f578e3f211063bd125b645a;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 00:55:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uMTaiFjrcbJxWm4M7BuSHPu0BFUMp9UIpMvnvlLs_dajlM0_iObY2A==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:52 GMT
age: 17980
etag: "b3d22d146c6094cb539de40a72b9c5a140802ee5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7609
Md5:    0d0219e6bee2a28f003f396f872eecf0
Sha1:   b3d22d146c6094cb539de40a72b9c5a140802ee5
Sha256: 41c1b037e8e654c19f36b74cceccd1fc841cc9fb7de39ac552ab5089dc3e82db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1go6MAGUUThlH59lQ8FRciYwPrzYJbcTKlNPmzqxNWynDV7SHrwmTw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:47:40 GMT
age: 76192
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12259
Md5:    0a317faf49d8e057d1da40f9441b6c30
Sha1:   f01497a3eef693b70b18885156f63c9c7305ed7e
Sha256: 5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9367069b-64ab-4e4d-b8c9-fa115e0681a9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3744
x-amzn-requestid: 73eab74b-e50c-46d1-adde-3ef85fb772f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlj7FDiIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb618-70ffb1925e3a9ef6081d1cd1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: F-LcglSz1NX1Q2t84r1dv0vQzONyYMhlGB6TdS6CeKf9I8Krk1mDUg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:41 GMT
etag: "84d060f66accd412503d52c385ee47cb35795c07"
age: 18111
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3744
Md5:    bdf4703f3372054a7aadce1cb0e11bd0
Sha1:   84d060f66accd412503d52c385ee47cb35795c07
Sha256: c5853b653ee328e567e2456be12450e04c1704ed64fb6234f008532e4b6c8363
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 02:57:34 GMT
expires: Wed, 07 Dec 2022 02:57:34 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103786
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35498)
Size:   103786
Md5:    e7aa7a004bffb87402b0adb0a3951904
Sha1:   7c9fecd2a19e2426a7a4528c32a5ac72d3016df6
Sha256: edb146e8c42c96371c21abec04563a39f044aae7b64b1180517ae938341b9731
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4458
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:43:16 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /libs/mixpanel-2.2.min.js HTTP/1.1 
Host: cdn.mxpnl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             130.211.5.208
HTTP/2 200 OK
content-type: text/javascript
                                            
x-guploader-uploadid: ADPycdsp4arcwAxC-K0mSzZWezXVXJv7AscRdZZlLEB2Nevk_D4WbvgOIyHi41VyGaH4IZy43RmyiJpXa-4w2GMGCssyhA
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Wed, 07 Dec 2022 02:50:02 GMT
expires: Wed, 07 Dec 2022 03:00:02 GMT
cache-control: public,max-age=600
age: 452
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (755)
Size:   17435
Md5:    bea784dce86d30e1f2e59387f85cccb6
Sha1:   90665d4cc2e3f1e8c6da1247096c0af28b70ae04
Sha256: b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4458
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:43:16 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 727

                                        
                                            GET /web-client/img/login-logo-hd.png HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/png
                                            
x-amz-id-2: nCcBu0v76yZROM0UVGS1psQM+n6uBqlFKHJzRUWzZDMK7MJL4ybJmRA+6EElyvapUivLLJlrUyo=
x-amz-request-id: VS0NZZ2EWE45GE1C
x-amz-replication-status: COMPLETED
last-modified: Thu, 29 Sep 2022 12:49:46 GMT
etag: "b41babf405ad72c9fa6455dccd372380"
x-amz-meta-s3b-last-modified: 20220929T094658Z
x-amz-version-id: 078Rkok.ZhnHyEE5EUR82hq7nZDNmuJ3
accept-ranges: bytes
server: AmazonS3
content-length: 1171
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 198 x 64, 8-bit colormap, non-interlaced\012- data
Size:   1171
Md5:    b41babf405ad72c9fa6455dccd372380
Sha1:   83841f3d6f390fddbf774b397daf051c890a8c32
Sha256: ac2ec5d1e65ba32849742fe3ed0899214ba9e063ebf31b7549175f2b66394b08
                                        
                                            GET /web-client/et/img/settings/general/flags/norway-flag.svg HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/svg+xml
                                            
x-amz-id-2: 9kK/qpr6Ta8fMIkv0nUChxWg7wslUbk4ijFiq9X5LU3+rqPr5pGUhJr+EATBeD8/etJ63uLoymI=
x-amz-request-id: FP59KRJFWP3V99B4
x-amz-replication-status: COMPLETED
last-modified: Wed, 19 Feb 2020 12:32:58 GMT
etag: "7ee02734ec1f49f74d970aea31b057e0"
x-amz-meta-sha256: e143bb1d025c5ab640ec3df3c8b80829a62eff2d46e654618f865479aa3d7374
x-amz-meta-s3b-last-modified: 20200219T114039Z
x-amz-version-id: d0T8a9zUHLaL3Zp1SI66mmUeybQ6zeZH
accept-ranges: bytes
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
content-length: 909
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   909
Md5:    6d8d67e95d438776e32632b4f8e8c4e2
Sha1:   6b5eac8fc9722e1d12f05e6e3dae6748215e0238
Sha256: 2bf43a304aa34d530722842db131841969dffb18d2625b58851926d5fc011e26
                                        
                                            GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/octet-stream
                                            
x-amz-id-2: jhOnM69WpoiV8oSTTNXetipBb7pUc9tS6FuF/XnPxNUwhBi6Q+ANBt25PNF2dXvmEtDCkoFPZ5g=
x-amz-request-id: F37B07A5E1D6416F
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-length: 59600
server: AmazonS3
cache-control: max-age=2592000
expires: Fri, 06 Jan 2023 02:57:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Size:   59600
Md5:    e78dce533ecee30c5efd812bb23c248d
Sha1:   87d988c2f0343952ccded7c17b000e33db6f3d15
Sha256: 03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             143.204.42.165
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=113538
Date: Wed, 07 Dec 2022 02:57:34 GMT
Etag: "638f035b-1d7"
Expires: Thu, 08 Dec 2022 10:29:52 GMT
Last-Modified: Tue, 06 Dec 2022 08:54:51 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2kZh2Stov3mCmm0wWmlDHIvXepZWZ6iaqsE8ir5L3tB-I1FCS_Lwrg==
Age: 5701

                                        
                                            GET /loaders/history-changes-r.html?target=historyChange&guid=ec8bac60-a43b-4c7b-a884-d2fa6aad8f83&referrer= HTTP/1.1 
Host: etoro-px.s3-eu-west-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             52.92.32.50
HTTP/1.1 200 OK
Content-Type: text/html
                                            
x-amz-id-2: b1vdPQtfLE27/ETJ+BltyWIVDzG0pn4uiVmtMQd9uHVlC5HEswSzbfrsUFXYYrx5xP/s8nsGzP0=
x-amz-request-id: 09M841QDD6MV0GG5
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Tue, 07 Jul 2020 12:01:19 GMT
ETag: "6dfc495da4241bd88a002aa677dd2778"
x-amz-meta-sha256: 0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
x-amz-meta-s3b-last-modified: 20200707T114930Z
x-amz-version-id: 2.0Pc3hXrEIlcYYVezOUu66Og0lWOrsY
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 5667


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   5667
Md5:    6dfc495da4241bd88a002aa677dd2778
Sha1:   8e6bb2aa50cc0bfea4942b1e3c9945d920894080
Sha256: 0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
                                        
                                            GET /web-client/recaptcha/index.html?guid=62454e1b-ec83-45d7-8566-895ddd40770f HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: text/html
                                            
x-amz-id-2: FxBWOR/fjuKc+liaCjNbANgnRvdCXzJ4TggjaK9J8Iolg23MIdp7PKnUBUaOEnWwsj2KPVMXluU=
x-amz-request-id: 2SPZ1CQKHNKS1JZN
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Oct 2020 10:42:40 GMT
etag: "ef2039619799b54abf85f25976ff7199"
x-amz-meta-sha256: 349fb58237f7f8abb11e68632be1859f31c19fa4fa6a64d143ec18f7f6d59cf3
x-amz-meta-s3b-last-modified: 20201004T104155Z
x-amz-version-id: 9jyXMd7S_i_.xXnWVDXRZHjUkqd_s38N
accept-ranges: bytes
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
content-length: 1547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   1547
Md5:    63cef4e6cfa61992fc2ef740353a6215
Sha1:   62181e33a58d5d220a1346974145dcce39b423ea
Sha256: 0d00919723aa25df1d7ef980698c420e706488ceb8f8098033e2b2d268da35b4
                                        
                                            GET /web-client/et/img/registration/i_fb.svg HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/svg+xml
                                            
x-amz-id-2: Q8CEaY6a3UJ8HgVnKvuo+Cq1jtPaLboCQgJPgg/5Oqztjxd7Doc2/AnaD4IYgi+cGt2LYXKJRVY=
x-amz-request-id: T4H199ND35XVJCF2
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   14619
Md5:    d2356f8e41a0763130d9732981a775ff
Sha1:   a0ceca62fd3e426aa85e02954854d28ca1f52440
Sha256: 7689fd52c94995522939e087bb99c4f42466b38de57ee84892c55bdbab81d622
                                        
                                            GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/svg+xml
                                            
x-amz-id-2: rpPTwOu0pDtkTZdoPd7yU4ncwWLLg0TCgE5/bjZsIn5WGw732imkFJu+NhymSUY9gZyKA7zbcys=
x-amz-request-id: 8VEADDHMEWHAZMD5
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   645
Md5:    3b8f3342ef1ebe6f5c64bafff3131548
Sha1:   99b5ac271a65175ff24696d9a24c9ebda02b71fc
Sha256: fc1f1deaf7d4759c0a6e573a65f7961733cbf05f66f93c44511881dd0b471596
                                        
                                            GET /web-client/et/img/registration/discover_01.jpg HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/jpeg
                                            
x-amz-id-2: xBzX74AN6Sn6JtVvT1qUv8FKtzPvjrgBjO9bshrZQeHvsGCcyFbLIZ54Tau9Esrpr++6dgq/95B18OEcw1psjQ==
x-amz-request-id: 9BFAETD9J78TH30Z
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Jul 2022 14:52:13 GMT
etag: "2f6d6f1e997f3a2a15888feb99459bb0"
x-amz-meta-origin-date-iso8601: 2022-07-07T14:50:14.504Z
x-amz-version-id: QF_QgkRGCy62K6vDY_bK8WU3cAQLR7db
accept-ranges: bytes
server: AmazonS3
content-length: 36791
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1079, components 3\012- data
Size:   36791
Md5:    2f6d6f1e997f3a2a15888feb99459bb0
Sha1:   ce895db684c81debb871f8d59c45e8451a53809f
Sha256: 8a697f855d5b794eb68aa944977572f87334126a4b717952f61d6e48acc7edc1
                                        
                                            GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/octet-stream
                                            
x-amz-id-2: MiVZL/kbY13iBYmpteEVq6ia/0McBnVUjv9Gv+aG6n8LoAYr3bu/dyvs1kxqWcreHhbAxj7nY7w=
x-amz-request-id: P84TFZ8HCEYTJMA2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-length: 61036
server: AmazonS3
cache-control: max-age=2592000
expires: Fri, 06 Jan 2023 02:57:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Size:   61036
Md5:    96f3835aa784a280a0e1e7fa64b97b60
Sha1:   1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
Sha256: 78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
                                        
                                            GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2 HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/octet-stream
                                            
x-amz-id-2: X1QIfIKr9mBBwVT8s2yKOj0YVt7edPyypgNUpe2lA082Np/m8G5zgD443xVHa4cb8Ba2zhuP4eg=
x-amz-request-id: PN7QTASNM9B7CB7N
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "e9681ca3d29d814a5621d4764dd1a11e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: HgUsNFmOXgC1eDiETddzJSTtCGDefKwY
accept-ranges: bytes
content-length: 61548
server: AmazonS3
cache-control: max-age=2592000
expires: Fri, 06 Jan 2023 02:57:34 GMT
date: Wed, 07 Dec 2022 02:57:34 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Size:   61548
Md5:    e9681ca3d29d814a5621d4764dd1a11e
Sha1:   bbda68459fc0531b915bdf9e524ecc8f782db0aa
Sha256: 51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456
                                        
                                            GET /sapi/app-data/web-client-locales/nb-no.js?cv=ff2185725390c1e9ae9745cd71c893c8_103fa1b3af30b4c3904cef7772e32a14 HTTP/1.1 
Host: api.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/octet-stream
                                            
accept-ranges: bytes
etag: W/"d34480c53d752c03fabaf696f9961c73"
last-modified: Mon, 05 Dec 2022 18:02:27 GMT
x-amz-id-2: IJpgC9A8Qa1vsdR4vKKZlAXB6StaAfgKPwF+RqNwJeUs0ZM1XJzwuF8WadV93jbZceu1LzY5nwg=
x-amz-replication-status: COMPLETED
x-amz-request-id: WSMCENVF1E8D2YPS
x-amz-version-id: z28kE2_DG7e7.c5FBHebb20X7aIlGHuC
content-encoding: gzip
x-robots-tag: noindex
content-length: 401776
cache-control: public, max-age=1209600
expires: Wed, 21 Dec 2022 02:57:31 GMT
date: Wed, 07 Dec 2022 02:57:31 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, general \012- data
Size:   27825
Md5:    6302252a22f24df6b9f82359bdbf95b8
Sha1:   d994191775cd0d394744c43f42450d06d1001ac9
Sha256: ce6a86e972f103d7af7372a0369449425b06e2ad502235c45b467711ea0448ac
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5377
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:27:57 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.78
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Wed, 07 Dec 2022 02:57:34 GMT
expires: Wed, 07 Dec 2022 02:57:34 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1279)
Size:   20984
Md5:    7ac44ef24e267df17ff72f195b252806
Sha1:   62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
Sha256: aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
                                        
                                            GET /en_US/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                            
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: bbbde21d45e74dd18c9d5d176999294a
etag: "a68a42ffd3754a77bb473f85fcbc45a5"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 07 Dec 2022 03:14:33 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: A+8MizPCQFcvoHHajMAdXA==
x-fb-debug: wb1z6ZXgvo/W304Y3viAJpjzccjoSZCxk4DieT2R52gnwI8OKUzqbwzrHUrhUdylLIdPkINS4/D05hTfORrg0w==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Wed, 07 Dec 2022 02:57:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1957)
Size:   1686
Md5:    03ef0c8b33c240572fa071da8cc01d5c
Sha1:   1b35b947979c6dc6dc8a8b11b4ee3e6e9a7b5981
Sha256: c939e5ad4ba78f1ed5ace489d52e59418349633f3b1f3dfd576290deb4f878e8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5377
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:34 GMT
Last-Modified: Wed, 07 Dec 2022 01:27:57 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /web-client/et/img/registration/ab-light.svg HTTP/1.1 
Host: etoro-cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: image/svg+xml
                                            
x-amz-id-2: fQUh5Q7eEFJR/+onQY9Welsu14MA7ys0hh+4JHENtY6t3DlaBimGssHQeAPYdBGUPXXlGffkEz8=
x-amz-request-id: 8B763ECC8KT5XAZB
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 09:31:03 GMT
etag: "c197f3c533b1fd3cf5924eb2f30239c9"
x-amz-meta-origin-date-iso8601: 2022-06-16T08:36:18.000Z
x-amz-version-id: nooP56Rwm1oOt60h99pUHxP6xvOxopAy
accept-ranges: bytes
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:35 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 24989
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   25199
Md5:    ca2b33325cb115edca9573356346e099
Sha1:   5bd216740cb7d7899e55df4b597cf8b53b16f413
Sha256: 4d21750918af1aef20d2d0a9c7152f2918c46a3713bf8866ab9aca99853c74aa
                                        
                                            GET /nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292618&utm_campaign=PRP_DJULBREG_4292618&utm_term=&rdk=rk1 HTTP/1.1 
Host: www.etoro.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292618&Custom=&ClickDateTime=2022-12-07T02:57:30.5890469Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4292618&rdk=rk1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.18.35.149
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Wed, 07 Dec 2022 02:57:31 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
expires: Tue, 31 Mar 1981 05:00:00 GMT
content-security-policy: frame-ancestors 'self' file://*
x-frame-options: allow-fromfile://*
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: eToroLocale=nb-no; Path=/ TS01047baf=01d53e58182267886504bb38fb0b7bd06f8e8714eab1702efa59cf0c5d92e52aa3158b2c58825d4abb5a8788d7b1d7f6a886f3b617; Path=/ __cf_bm=.jGbQXeeqd3o3YRipk5z9AToXmeEva3nOugtDL8BsXI-1670381851-0-AbU1WwG8KPINITMjlZRTFm+9KON9wleCL47759S69/ZNl0akRPHQAz1sElgZ0E0vE7ZhrE5nGwYcJ3NBSycKpCLbXCKgVFCaYC6KJzrz97Sf; path=/; expires=Wed, 07-Dec-22 03:27:31 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None __cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgw9zuvAyM7pE5D16; SameSite=None; Secure; path=/; expires=Thu, 08-Dec-22 01:57:31 GMT; HttpOnly __cfruid=869991cd0883684250b088f984f452f7e7d3e224-1670381851; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7759fe888c70fac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58147)
Size:   72794
Md5:    9614ad887bab999b791bba35d41ae767
Sha1:   deaa1172cf67842ec375016817db468a3b8fa249
Sha256: 1f372a7e185138a537b93a99a8f06504039df044193f0f41ce25e1aa3d891165
                                        
                                            GET /496.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html HTTP/1.1 
Host: cdn.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "WM91upZzxqcGhUsvXTONjw=="
content-encoding: gzip
content-length: 814
cache-control: public, max-age=31377409
date: Wed, 07 Dec 2022 02:57:35 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2600), with no line terminators
Size:   814
Md5:    9fb4e76e84c051366edefd126d73358d
Sha1:   b5258607a0001e51df1dd8a72e51b0061cf3a00c
Sha256: df95ea3e29ac53a69ec60818d29e6d8406f0d82c02839d1e14c5222f7709e1f3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?onload=onload HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Wed, 07 Dec 2022 02:57:35 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 565
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (899), with no line terminators
Size:   565
Md5:    20b487acdbb6fccd68a96c18b6f90db0
Sha1:   01e57fe16b0cb7f12578bc08281db1ed442b8387
Sha256: 504f955db77b3802e747a66a4762a2f5697631befb1d1ad4491308f83f75771a
                                        
                                            GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1 
Host: zero.pointlessplay.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.27
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
content-length: 30231
content-encoding: gzip
server: Caddy
date: Tue, 06 Dec 2022 20:41:01 GMT
cache-control: max-age=43200
expires: Wed, 07 Dec 2022 08:41:01 GMT
etag: "14351-RIWjsv313PWYI4RyEPNyETuIUAc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lphICjIPpqCG_y3QiSR4dJ7c3ZyKqvw1yhjvNV4Ovcmau7ttxkCOKQ==
age: 22594
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size:   30231
Md5:    bbf12f5d9b89f3c0c8b3d7bd445cfcbb
Sha1:   c3979a6e1c61a65f017279d12fa1926bd1eca260
Sha256: 2aa420f8725b71fcf2877ba23310d35279fc81bff5be050edc49fdeecbcf3411
                                        
                                            GET /scevent.min.js HTTP/1.1 
Host: sc-static.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.82.240
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                            
content-length: 11972
server: CloudFront
date: Wed, 07 Dec 2022 02:57:35 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 08 Dec 2022 01:47:44 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JIM1qHCD92ecxNRum_sttIQYYAoO2NIKBK66bY6TR8da3piCEKD1xw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (27646), with no line terminators
Size:   11972
Md5:    62585b7e4a4eab6ba3984a2cd4de5365
Sha1:   14e3b07044b095c9b8fd7b84bf00adb32233edb0
Sha256: 8e0a43da6d5b986bdf45ccdc4bfc11742086d59e2dbf2ae3a04701602c6b8bb7
                                        
                                            GET /up_loader.1.1.0.js HTTP/1.1 
Host: js.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.45.46
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 16:19:20 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nf8HoPBr9LghTKFei5k-37pPT7EeMJwaEXcR5OHCuqZOrLNmIWdRHg==
Age: 38296


--- Additional Info ---
Magic:  ASCII text, with very long lines (4593), with no line terminators
Size:   1887
Md5:    8dc722d27824e60548fd25752623cd07
Sha1:   33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
Sha256: 14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 11:03:19 GMT
expires: Wed, 06 Dec 2023 11:03:19 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
age: 57256
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (730)
Size:   162976
Md5:    79d18cf4265108d7cecca1bf4ada6109
Sha1:   e51d0285a545381d4c39e9e0292a650ffeeecbb9
Sha256: 59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
                                        
                                            GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1 
Host: 9944765.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.38
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 03:12:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (562), with no line terminators
Size:   275
Md5:    1ab2a97338ed3a74084554ba95e3c920
Sha1:   9607de2f32b9ca12b92257f1469eaf7e688b6f80
Sha256: 1f91225ca593af121d56d4553e90970bb0eb6b267a9de6ed812906ed9c7efe0d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5182
Cache-Control: max-age=129559
Date: Wed, 07 Dec 2022 02:57:35 GMT
Etag: "638f43f8-1d7"
Expires: Thu, 08 Dec 2022 14:56:54 GMT
Last-Modified: Tue, 06 Dec 2022 13:30:32 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5840
Cache-Control: max-age=141788
Date: Wed, 07 Dec 2022 02:57:35 GMT
Etag: "638f712c-1d7"
Expires: Thu, 08 Dec 2022 18:20:43 GMT
Last-Modified: Tue, 06 Dec 2022 16:43:24 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /adalyser.js?cid=etoro HTTP/1.1 
Host: c0.adalyser.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.30.85.81
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31834)
Size:   12183
Md5:    5301983312500f1fa818e866832a8ede
Sha1:   96c054b07049abe3b764dbcf0f8189055de98e78
Sha256: 24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
                                        
                                            GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1 
Host: appleid.cdn-apple.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.60.29.145
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
                                            
Server: Apple
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1668786461811"
Last-Modified: Fri, 18 Nov 2022 15:47:41 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Wed, 07 Dec 2022 02:57:35 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (39267)
Size:   17247
Md5:    12a5f480c5a23efc80304d3bbc35d746
Sha1:   4043357825f2e91df5c4f339a9bc95f8e5b48fa1
Sha256: b7be9b25bef3ce5c830263ba56bc3235a6683a9950115e4d4368144de3bbd2ec
                                        
                                            GET /others/general/js/seo.js HTTP/1.1 
Host: marketing.etorostatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.38.201.117
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 07 Dec 2022 03:02:35 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 2209
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (366), with CRLF line terminators
Size:   2209
Md5:    f22c155ea9a463fee325cc2f52cb2c5b
Sha1:   67913d0b1cdaa875752a36f5c22fc21884cd6b22
Sha256: 115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Wed, 07 Dec 2022 01:47:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Wed, 07 Dec 2022 01:47:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=7e988ae4-83c5-4257-9c15-02d0a69590d8&u_sclid=1ec0bd52-0255-4048-9c28-a1e7d0d46971 HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             35.190.43.134
HTTP/2 200 OK
content-type: text/html
                                            
date: Wed, 07 Dec 2022 02:57:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /p HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 652
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.190.43.134
HTTP/2 200 OK
content-type: text/html
                                            
date: Wed, 07 Dec 2022 02:57:35 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAA3GwQ0AIAgEsIlIQEDOcVR0CobXvsoIzWlKw2FkHn+CoHZw1+zZbGeV9GCFwL34AVI9GkIyAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 4
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size:   68
Md5:    c4a2b870062c2bb98c500bc1526c0498
Sha1:   528666ccdb12997358077bc8fcdbfb6b825c7788
Sha256: 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4187
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:35 GMT
Last-Modified: Wed, 07 Dec 2022 01:47:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /collector/is_enabled?pids=2b300842-74be-4e72-8ed5-3bab9449a996&tld=com HTTP/1.1 
Host: tr.snapchat.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.190.43.134
HTTP/2 200 OK
content-type: application/json
                                            
date: Wed, 07 Dec 2022 02:57:35 GMT
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (36216)
Size:   23254
Md5:    134c24444271b9f7e67842c825303a87
Sha1:   da1e852ca333d3e9e07a8c4271fde7fded299d9f
Sha256: 9a75570032dbf230c7cd755ed9b51a3948e4524eb80074ff04e51ebdf5152807
                                        
                                            GET /tracking/track/v3/p?stm=1670381855578&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1670381855577%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292618%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22d323d418-27d6-4c8f-b95e-cf43415fb817%22%2C%22duid%22%3A%22df539ddd-a50e-4295-93d6-743e1c57f914%22%2C%22cw%22%3A1670381855577%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1 
Host: c0.adalyser.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             52.30.85.81
HTTP/2 200 OK
content-type: image/gif
                                            
date: Wed, 07 Dec 2022 02:57:35 GMT
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/ HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 298
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (595), with no line terminators
Size:   298
Md5:    525907b0684ec7519d08f2e76501ab1e
Sha1:   26e15a273d581389cf3630e497a4ba5f871b5532
Sha256: e10d3482a569832cc2d23db7f1bcad3eee1aefe8be303cd56f12e50be47953cf
                                        
                                            GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (561), with no line terminators
Size:   275
Md5:    2888301990c4b794774d7d3454f5ef45
Sha1:   9a0cf2d83268e6dc1097bcbf7607a2728e8ef514
Sha256: 3be969207e485fb819f87c8bf994dcfafac7d29c32750eeac9d8454ac8d25c18
                                        
                                            GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1 HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 356
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (666), with no line terminators
Size:   356
Md5:    4360bfe8c85d218bc3981d18f9b8c5e1
Sha1:   36ccb009fc602999804433dd7a95e9a808b13129
Sha256: 1f13f82ba963d1fe3607bd997c9a8acd4ad781e13785812b1c8d2dd849dd7823
                                        
                                            GET /cp/obtp.js HTTP/1.1 
Host: amplify.outbrain.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.201.81
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Wed, 07 Dec 2022 03:17:36 GMT
Date: Wed, 07 Dec 2022 02:57:36 GMT
Content-Length: 5269
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (16574), with no line terminators
Size:   5269
Md5:    5cdda5ed80a4ee13f700ae502f7cd4ec
Sha1:   0e6aa932abf3c56561a686aa3e8d069aaa3ca228
Sha256: d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.36.76.121
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                            
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=49328
date: Wed, 07 Dec 2022 02:57:36 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12961)
Size:   4581
Md5:    c1a25b303b61b25e995516f5559bcdea
Sha1:   3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
Sha256: 2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.239.34.178
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 07 Dec 2022 02:41:08 GMT
expires: Wed, 07 Dec 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 988
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             204.79.197.200
HTTP/2 200 OK
content-type: application/javascript
                                            
cache-control: private,max-age=1800
content-length: 11460
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=3752C5E6FC0065B439D7D795FDF564EC; domain=.bing.com; expires=Mon, 01-Jan-2024 02:57:36 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2715E7745574447D8B43AA8F9BFAC014 Ref B: OSL30EDGE0105 Ref C: 2022-12-07T02:57:36Z
date: Wed, 07 Dec 2022 02:57:35 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Size:   11460
Md5:    d925a898de26295fdebfc90203ef46fa
Sha1:   77dd3f5893b76530e08058d50e8f9aef017e80c7
Sha256: 8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm/optimize.js?id=GTM-W2RM4JN HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.239.34.178
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=900
last-modified: Wed, 07 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43922
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43922
Md5:    472d7194231fb5d07979e79ff159c0ab
Sha1:   9230177e0e0ed5bfa4a30c6e94c6083bdd066779
Sha256: 6bbbb5993a3cb46d462ec0b243b5eb7a0fe2c00f4a2633e4e05943ac7573bb42
                                        
                                            GET /libtrc/unip/1005612/tfa.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.193.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
x-amz-id-2: iCJqqHGroiOX6CSTSJeobEA4PIodWrLYTdIpFb4pdmFUBHHys2aM2LrBcFJ4D2XbbTd9NY50V64=
x-amz-request-id: E1MAS72MCJHJRDTZ
x-amz-replication-status: PENDING
last-modified: Tue, 06 Dec 2022 13:03:15 GMT
etag: "375088fcaa82b4244c6b164a193beaef"
x-amz-version-id: xC2nQ3r_Qk7W2rPoR_MneLPEevr2xf7i
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 02:57:36 GMT
via: 1.1 varnish
age: 26
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670381856.119938,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 80
content-length: 18110
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58957)
Size:   18110
Md5:    5e3a6e6ff2771996b946c623f7ab6a95
Sha1:   66538ef487bf796e6e5b9dae63f42eb00b3c7119
Sha256: e7d309038650ace6b1d64f03f6198936913d8f36c7a0c540c95f03ce7b0dd3aa
                                        
                                            GET /uwt.js HTTP/1.1 
Host: static.ads-twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.244.157
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 07 Dec 2022 02:57:36 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57596), with no line terminators
Size:   15375
Md5:    573e6a7f86f6f3063763360ef0672c01
Sha1:   b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
Sha256: 02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /o/oauth2/iframe HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.109
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 02:57:35 GMT
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport, script-src 'nonce-eSovM2ExUPBH6v18OpEAEw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1670381855324&hl=4&op=0&ag=1317291471&rand=945971669290298119221891765026621261166798780091702278929665715090120751176&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=aPNuw1Kovu&pto=5418&ver=48&gac=-&mei=&ap=&duid=1.1670381855.LiEQzqU7PgvcKpcM&suid=1.1670381855.FFRpJHA9bYBegtCU&tuid=1.1670381855.P6uV3cxbQeD7EuDi&fbc=-&gtm=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=99%2C5198%2C55&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1 
Host: one.pointlessplay.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             50.16.211.97
HTTP/2 200 OK
content-type: text/javascript
                                            
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=3d14512aaf7b1e6f365ad2002e6d533a; Max-Age=29030400; Path=/; Expires=Wed, 08 Nov 2023 02:57:36 GMT; HttpOnly; Secure; SameSite=None
content-length: 1056
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3134), with no line terminators
Size:   1056
Md5:    40d94f61684dc0ef8a35ab9f21d9c1ae
Sha1:   5f652c5a91e32d2513297f1979441c0beb939ab5
Sha256: 81d822cfb51cfc5ed75dd8d65613c219f64248fcfe97c1a00e11ff879fa1bfda
                                        
                                            GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.743503097.1670381855;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.743503097.1670381855undefined;~oref=https://www.etoro.com/ HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.66
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   85
Md5:    4a3b3637744caa4a0b08fabbd76cc830
Sha1:   755e5626762ecf38f55012da892a227bf50f15f1
Sha256: 6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
                                        
                                            GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=130935121430;gtm=2wgbu0;auiddc=561435949.1670381855;u8=GA1.1.743503097.1670381855;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1 HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.66
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   85
Md5:    4a3b3637744caa4a0b08fabbd76cc830
Sha1:   755e5626762ecf38f55012da892a227bf50f15f1
Sha256: 6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
                                        
                                            GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.66
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   85
Md5:    4a3b3637744caa4a0b08fabbd76cc830
Sha1:   755e5626762ecf38f55012da892a227bf50f15f1
Sha256: 6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-B0NS054E7V&gtm=2oebu0&_p=1429353741&_gaz=1&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer= HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.etoro.com
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /partner/2929684/domain/etoro.com/token HTTP/1.1 
Host: cdn.linkedin.oribi.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             65.9.44.86
HTTP/2 200 OK
                                            
content-length: 0
date: Tue, 06 Dec 2022 08:13:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 9dc04feb591f6b5ae6ea4527a23d28da.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: Sw7H_2p4UgaCoxohJk2QgyNkd-RKyg903FMUH8As_u6wrB3xLwbFKg==
age: 67474
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-B0NS054E7V&cid=743503097.1670381855&gtm=2oebu0&aip=1 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             108.177.14.155
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.etoro.com
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-B0NS054E7V&gtm=2oebu0&_p=1429353741&ul=NA&cid=743503097.1670381855&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&sid=1670381855&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4 HTTP/1.1 
Host: region1.analytics.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.etoro.com
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=743503097.1670381855&jid=1672452391&gjid=1156124644&_gid=386483337.1670381856&_u=IADAAEAAQAAAACAAI~&z=1430880769 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             108.177.14.155
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Wed, 07 Dec 2022 02:57:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=743503097.1670381855&jid=724127345&gjid=1045760817&_gid=386483337.1670381856&_u=YADAAEABQAAAACAEK~&z=1534654216 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             108.177.14.155
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 07 Dec 2022 02:57:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             52.223.40.198
HTTP/2 200 OK
content-type: text/html
                                            
date: Wed, 07 Dec 2022 02:57:36 GMT
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   46
Md5:    21e2ae430121102daa2c1810b5cf910b
Sha1:   ffef080cc2eacc942a9bcb67561f790c34ed3fb0
Sha256: a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3078
Cache-Control: max-age=121707
Date: Wed, 07 Dec 2022 02:57:36 GMT
Etag: "638f2d85-138"
Expires: Thu, 08 Dec 2022 12:46:03 GMT
Last-Modified: Tue, 06 Dec 2022 11:54:45 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 312

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2913
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:36 GMT
Last-Modified: Wed, 07 Dec 2022 02:09:03 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /tracker/tc_imp.gif?e=37dfbd8ee84e00136deec43deb4f8f9b9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f674ad6828d022d3d4aaf2e7056866ed934c4023554779152005d60020bc3bd681e77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c791527540fa6da78667d01f1f2412b8bfaa478c6e85c724f29f8f7f1c79e7fbccfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6335f51b07f3aeccf563bf08ba4299058ad5becdb07931c98903a9a7c7689da7e8f3b8d97a8fccaabbe7677a37beffea7242f61f8943cd2ef01a500025cb81e05c09282cf9eafd667927b80daa29e77d37d7638927f2782cbc2197686b337bc17e8ae5c9167a47e4c1466fc04822bf4f0805f88a01dfa4ab7d48c8f34d41d537bf2631550715b7dcca96feb77e4feba028da94bdda00bffbfbfae26dfe4b40522699ee66352dca7060546e4eaeb6be6619bf840fdb47ba076a12d8711814594f762d51024e5ad8e746c2d6a1154744e0bb8b39e66d01ea5001f5123fca85d9dcd4e59bcfa8af8ae66d0fff8eed5a0bdfb595d20e919d7f00039d2073c448971576332e467bd2148b1b79836d424ae7199a13ed0aa118b2d5d527c5b294dd8b9b0c9366948880457d78fcbb1dbc9520682adbb7d96d36e78ded67f207badd4800233bd3584419e1ce43f981adac016fda44ebbeee998d922658fb77d30f936f5f0a2b704df296d42179e7a424eb0a5588fef1ccb919ecd4abbf1e573744f36b76fc277ff02f6f20c842e51650463296deb488f9f3253be6fc3aff43ddcca53ec7236c9122f64cd89847e5d9b3481d702c61573401cae3147efb3c52a8f0e2c90850fb3869e86c030860206794cac203758cac1501fef71&cri=aPNuw1Kovu&ts=799&cb=1670381856123 HTTP/1.1 
Host: one.pointlessplay.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=3d14512aaf7b1e6f365ad2002e6d533a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             50.16.211.97
HTTP/2 200 OK
content-type: image/gif
                                            
cache-control: no-cache, no-store, must-revalidate
date: Wed, 07 Dec 2022 02:57:36 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    db04c7b378cb2db912c3ba8a5a774ee3
Sha1:   dee34bd86c3484d31002182aa2b7caa4699126b8
Sha256: 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4907
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 02:57:36 GMT
Last-Modified: Wed, 07 Dec 2022 01:35:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5750
Cache-Control: max-age=157887
Date: Wed, 07 Dec 2022 02:57:36 GMT
Etag: "638fb069-1d7"
Expires: Thu, 08 Dec 2022 22:49:03 GMT
Last-Modified: Tue, 06 Dec 2022 21:13:13 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.124.249.36
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Sucuri/Cloudproxy
Date: Wed, 07 Dec 2022 02:57:36 GMT
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Dec 2022 20:22:19 GMT
Expires: Wed, 07 Dec 2022 20:22:19 GMT
ETag: "391aae451d93d08996c1237c59c993d9e0882f7a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    7060883c19d89e05aa8daa071bae5b7b
Sha1:   391aae451d93d08996c1237c59c993d9e0882f7a
Sha256: 98c8033d6fc10a6ee8d99bff80e580035b1e6cfa3fdbe3091bd627f8c475a077
                                        
                                            GET /wi/ytc.js HTTP/1.1 
Host: s.yimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             87.248.119.252
HTTP/2 200 OK
content-type: application/javascript
                                            
x-amz-id-2: 01GXen47cU5T4Wvr0qEa/KVqxjgllnW2UXbCfRv8APz2i2jNKB4M88tB3vOF2VYZwwCMFPB8XP0=
x-amz-request-id: ET3S8M2V4XBWC9E5
date: Wed, 07 Dec 2022 02:57:04 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 33
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5972
Md5:    06919c87d5757fdd2cf9c0b763275d8f
Sha1:   16d2e149643b7ba18adece05ba1995689d84248c
Sha256: 2664901b9643b2dd5a1b42a7458ef7a4c491ad17e8e1a873f09f56233764cf81
                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=c6f9eff5-b5f2-467b-9329-69d19c4db3d4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a1022611-81c0-496d-9832-4b649691cdb7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292618%26utm_campaign%3DPRP_DJULBREG_4292618%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1