buikolered.com/4/2809530
139.45.197.237200 OK 615 B IP 139.45.197.237:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6638a57891bf2c14aa9d7fa8ecd6cf80
b015d4f65869e73a3e8e584aa7f844ce529f29eb
c0e96382ecf66d355b9ab18c1d0aa24744f8eeeda50d7e2eba9f235f7a60034e
GET /4/2809530 HTTP/1.1
Host: buikolered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 Feb 2023 02:32:41 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 2956d30db48ef84598e6b6b3b6e0fa56
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://med.etoro.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=e5d8b71e8e13495496bf72392e163ac4; expires=Fri, 09 Feb 2024 02:32:41 GMT; path=/
oaidts=1675909961; expires=Fri, 09 Feb 2024 02:32:41 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3030
Expires: Thu, 09 Feb 2023 03:23:12 GMT
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 458fffce762c6706dd3aa5b3db5dd204
099f210920c9672ab5b0562bffd9254408a2c6cc
1d34f2ae075f53c097c1f4b0d3cca506344b5e9a04576d7d444482aea96135fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D34F2AE075F53C097C1F4B0D3CCA506344B5E9A04576D7D444482AEA96135FB"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7615
Expires: Thu, 09 Feb 2023 04:39:37 GMT
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
34.120.5.221200 OK 48 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP 34.120.5.221:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 60e3eaa28eef2380cf854a55c77a3205
e3b615e283a83917a4bdc06be6bdfef181bd54da
243f15723b90ef4ba81a8d57e6597a92a8e9404ba3e0a6816bf11989986caae3
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: WWbe-vl9lpC_imG9IkelVYUW7yNGWyH4h3c2FGpCbanC5tBr68meVw==
content-encoding: gzip
via: 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Feb 2023 02:28:50 GMT
content-type: application/json
content-length: 47601
age: 232
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13510
Expires: Thu, 09 Feb 2023 06:17:52 GMT
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JzZSV7kqHIsdNpzYQ5pfz62NcJKW/UJAxWKdY9OlARv09rtphqeRXtcWIYWE96ARblY9HJ/YzLXD0brrLAY0ig==
x-amz-request-id: HX3JF7VT0T251CW2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Feb 2023 01:46:11 GMT
age: 2791
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 02:32:42 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10322
Expires: Thu, 09 Feb 2023 05:24:44 GMT
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Feb 2023 01:34:15 GMT
content-type: application/json
age: 3507
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 9c14e228f19415f2af825294ff401241
dabb4fa3c22980b27aa873fd8aa429366655c95e
df9ed274a8026ea08f348145695717b6f8a11fa8f3c14e60b30b4cd60f7e2fde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF9ED274A8026EA08F348145695717B6F8A11FA8F3C14E60B30B4CD60F7E2FDE"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17906
Expires: Thu, 09 Feb 2023 07:31:08 GMT
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
buikolered.com/favicon.ico
139.45.197.237204 No Content 0 B URL HTTP/1.1 buikolered.com/favicon.ico
IP 139.45.197.237:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: buikolered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=e5d8b71e8e13495496bf72392e163ac4; oaidts=1675909961
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
my.rtmark.net/img.gif?f=merge&userId=e5d8b71e8e13495496bf72392e163ac4
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=e5d8b71e8e13495496bf72392e163ac4
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=e5d8b71e8e13495496bf72392e163ac4 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 02:32:42 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=e5d8b71e8e13495496bf72392e163ac4; expires=Fri, 09 Feb 2024 02:32:42 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_2809530.aspx?rdk=rk1
104.88.18.91301 Moved Permanently 239 B URL HTTP/1.1 med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_2809530.aspx?rdk=rk1
IP 104.88.18.91:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6bafcd3e2f3c0e356fb8dcf558a4cd3e
d2207b120445aaa6e85c25ddf6fe942ec77f8370
a5645912544e4a4166d86c136c8529f59ee49dad2258d12028b8e09587399876
GET /B15349_A115832_TClick_SPRP_DJULBREG_2809530.aspx?rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 239
Location: http://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1
X-Robots-Tag: noindex
Expires: Thu, 09 Feb 2023 02:32:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1
104.88.18.91301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1
IP 104.88.18.91:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1
Expires: Thu, 09 Feb 2023 02:32:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1
104.88.18.91301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1
IP 104.88.18.91:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_2809530&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_2809530&utm_campaign=PRP_DJULBREG_2809530&utm_term=&rdk=rk1
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Thu, 09 Feb 2023 02:32:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 09 Feb 2023 02:32:42 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=vyqebhi1pu4f3iidd0yj0spv; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Mon, 10-Apr-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_2809530&rdk=rk1; domain=.etoro.com; expires=Sat, 11-Mar-2023 00:00:00 GMT; path=/
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 3f27fdbe6ae912e5a15e5479cfbc4f2e
934c9caee0d49334e7486d49c82f0826f8c3926e
06af5a9301212c17f0e83b2c0d5dd71bf8486757276be74a79c030942c16768c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5486
Cache-Control: max-age=150081
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:42 GMT
Etag: "63e3ed1d-2d7"
Expires: Fri, 10 Feb 2023 20:14:03 GMT
Last-Modified: Wed, 08 Feb 2023 18:42:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 727
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Feb 2023 02:14:53 GMT
age: 1069
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_2809530&utm_campaign=PRP_DJULBREG_2809530&utm_term=&rdk=rk1
172.64.152.107200 OK 36 kB URL HTTP/2 www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_2809530&utm_campaign=PRP_DJULBREG_2809530&utm_term=&rdk=rk1
IP 172.64.152.107:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (63639)
Hash b1ef347277b6f4b76791ce80f8b01f6d
befcc1cb037ba4007e136c487fd8c2d7f87b9a57
8162bc7fa7e0250be3380c9094f7f5b7fe18d523086dab9e81c6bb3450e10a18
GET /nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_2809530&utm_campaign=PRP_DJULBREG_2809530&utm_term=&rdk=rk1 HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_2809530&Custom=&ClickDateTime=2023-02-09T02:32:42.7242109Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_2809530&rdk=rk1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:42 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
expires: Tue, 31 Mar 1981 05:00:00 GMT
content-security-policy: frame-ancestors 'self' file://*
x-frame-options: allow-fromfile://*
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: eToroLocale=nb-no; Path=/
TS01047baf=01d53e5818d3e85dc98a1301f861bd1d3492b5f7cd666de72291c35cc5a2458af60ae2c4d7a7857a4d972a487ede5a2b0088e0e5b9; Path=/
__cf_bm=SjgLpHgC5DbfzlSp0p3WIZbyxCh2cY1WeFfYVbd0yGg-1675909962-0-AetxITFYXiCUt2S/K7LTnI0MQ+Y1Ug8Y8CpZFF77l59Qqm2Nk1nIr/wky2JhqbNFZp8+uCt/JmL/8mOkAuAcCRB+tGklrsTtpQJnZePbdMnj; path=/; expires=Thu, 09-Feb-23 03:02:42 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgwA1XWAecmfo65oa; SameSite=None; Secure; path=/; expires=Fri, 10-Feb-23 01:32:42 GMT; HttpOnly
__cfruid=b9e1990d88c174b7e1808414182ad13bc061072e-1675909962; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7969323409660b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 248ce16379b12f11927ecc3142aec450
fa5b189f2d9182479170cb61cc1723571e437bd2
a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3166
Expires: Thu, 09 Feb 2023 03:25:29 GMT
Date: Thu, 09 Feb 2023 02:32:43 GMT
Connection: keep-alive
api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_92b7fa1854cada02742ea10126013713
2.18.173.108200 OK 6.8 kB URL HTTP/2 api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_92b7fa1854cada02742ea10126013713
IP 2.18.173.108:0
File type JSON data\012- , ASCII text, with very long lines (33443), with no line terminators
Hash 5b247d1a83379f87bf7f488300d5d43b
3ee581e1b43bee8043ba370592cd2b82d233aa51
c4be21bc9be4781ed8df7f8a2b43f80f15e7bdc2abc07a56693dfacfe0d1c618
GET /api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_92b7fa1854cada02742ea10126013713 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:14591840-b1dd-4126-9a8e-18803188a73d
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 6799
cache-control: max-age=1209600
expires: Thu, 23 Feb 2023 02:32:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=0ae3200a19bf7214f3b8f5e16436c58e_92af8667faab70bc0f80459ee66931e6
2.18.173.108200 OK 412 kB URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=0ae3200a19bf7214f3b8f5e16436c58e_92af8667faab70bc0f80459ee66931e6
IP 2.18.173.108:0
File type Unicode text, UTF-8 text, with very long lines (64902), with no line terminators
Size 412 kB (411511 bytes)
Hash ad6777ed3b6d7d8c9dc766a221f893b1
626f5066a4d46bf50d8f43d86fb328e5090aeef2
28012cb88d5eb1cf3020cdeecc3c9797293bbc77466b0db65e01fd8cae1d9d00
GET /sapi/app-data/web-client-locales/nb-no.js?cv=0ae3200a19bf7214f3b8f5e16436c58e_92af8667faab70bc0f80459ee66931e6 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/octet-stream
etag: W/"50094292d89306b3be53464c0dc00ca2"
last-modified: Wed, 08 Feb 2023 15:14:10 GMT
x-amz-id-2: kKcwk9dpFP+ZyDhO/MTtZ1hgYCfOFHpWe5tX8gmIRV7E/oBgna54mZFK0O3oSL9yeUgt3WHcpgM=
x-amz-replication-status: COMPLETED
x-amz-request-id: ZQXE2M4K6RFGG1P2
x-amz-server-side-encryption: AES256
x-amz-version-id: OoHsoOFfozzBq39xvyN0UwM5vc8YvtAS
content-encoding: gzip
x-robots-tag: noindex
content-length: 411511
cache-control: public, max-age=1209600
expires: Thu, 23 Feb 2023 02:32:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_4e2ecd8d0248b9233b0912b96f383cde
2.18.173.108200 OK 788 B URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_4e2ecd8d0248b9233b0912b96f383cde
IP 2.18.173.108:0
File type JSON data\012- , ASCII text, with very long lines (3081), with no line terminators
Hash 18afcb9729a9802cc68f6ffd543d1784
4569392aa9271a43a2780790d20124c53d073940
3f3373c5f225713cb5262813c0966d4e7f38ca0806b4e54f12ea166b2e54e77b
GET /sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_4e2ecd8d0248b9233b0912b96f383cde HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-max-age: 3000
content-type: application/octet-stream
etag: W/"16c81beb818ecd15f024ae9606a53f74"
last-modified: Sun, 01 Dec 2019 10:07:21 GMT
x-amz-id-2: L2bHFBuo4YFTunisR2Baab3OsAhy0KoZx3ORU3wuFdwkEj/YPx7K6Osnu70SCrnQjaSxXudqZy4=
x-amz-meta-s3b-last-modified: 20191201T100206Z
x-amz-replication-status: COMPLETED
x-amz-request-id: X21Q3CJTCJDCGB7A
x-amz-version-id: YJZIwhKbLzAkKfpv9wKr1PH76VdQu2_5
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 788
cache-control: public, max-age=1209600
expires: Thu, 23 Feb 2023 02:32:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/css_files/?p[]=styles/style.css
2.18.173.108200 OK 279 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/css_files/?p[]=styles/style.css
IP 2.18.173.108:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 279 kB (278800 bytes)
Hash a9566a99218feec2e54fe6416acc5257
ee3354e05ef8f8f48204f10a6e4ff526830d46f3
1399a103926d5a6cdf6a65a80e305de56e09954f3947657348c0b1e95daf11f6
GET /526.0.1/css_files/?p[]=styles/style.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "auJk14DhyhW6RQkLEyMBBQ=="
content-encoding: gzip
cache-control: public, max-age=31485269
date: Thu, 09 Feb 2023 02:32:43 GMT
content-length: 278800
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/candles/closingprices.json?cv=4d83fac4ef3824126454cf3e4026a8f5_cf889381754c4544926cce1ff1ce10c8
2.18.173.108200 OK 150 kB URL HTTP/2 api.etorostatic.com/sapi/candles/closingprices.json?cv=4d83fac4ef3824126454cf3e4026a8f5_cf889381754c4544926cce1ff1ce10c8
IP 2.18.173.108:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 150 kB (150192 bytes)
Hash 6eb8072b3e43613e4bf47f77e6166bf1
f2e2c3d0d9a04d21b15a28b804c84b1448a91e83
55036209e589c8854b44f560558ea1f3825d62eea9fb8fe570457147bf1deaab
GET /sapi/candles/closingprices.json?cv=4d83fac4ef3824126454cf3e4026a8f5_cf889381754c4544926cce1ff1ce10c8 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 150192
cache-control: public, max-age=1209600
expires: Thu, 23 Feb 2023 02:32:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
2.18.173.108200 OK 989 B URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
IP 2.18.173.108:0
File type ASCII text, with very long lines (1834), with no line terminators
Hash b812ce2c9a9459dbacd0b93a3b2cff54
0be647987d5befbcf2e4412e6a7edc0a70f7952e
2a0cb36357059f192cd794e4dfb1d2ef5e41dd6df5754c37896d644b619bb529
GET /526.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:18:13 GMT
etag: W/"fysOYxV9T19K92eEzYllgA=="
content-encoding: gzip
content-length: 989
cache-control: public, max-age=31485293
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
2.18.173.108200 OK 27 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
IP 2.18.173.108:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash cff377b0f027f4cf2efba0f1827a6ac1
0f86e6e39b9d7c0d4aa84caac0aad079ba5ccae3
75baeb162272bc3a969e44d930ee73803411ad3b9299cc27dade9ba3bf38934d
GET /526.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:18:13 GMT
etag: W/"OSiVOQgofxFBuo+z0KSimg=="
content-encoding: gzip
content-length: 27123
cache-control: public, max-age=31485270
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/sem-etoro-ng/styles.59cd2a5f72e99372.css
2.18.173.108200 OK 25 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/styles.59cd2a5f72e99372.css
IP 2.18.173.108:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash b255b5afa8de578c3562679d4b5ea474
68369f03d8cd04ae555c91e8f02d1a20118a723f
6d7b7193ce4e6a31614d229a70fa794ae87cae4bd1986f8465e8a1909a5b99d1
GET /526.0.1/sem-etoro-ng/styles.59cd2a5f72e99372.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:16:41 GMT
etag: W/"FItAuNxiRwGnIbqQT/Stng=="
content-encoding: gzip
content-length: 25201
cache-control: public, max-age=31485249
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.40.49.56101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.40.49.56:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ew/4Dnv/NT9nWcH/eG0fWA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lTHi+kxjgtVO0eTRfTER+Fh73I4=
cdn.etorostatic.com/526.0.1/js_files/?m[]=tools/browser-support
2.18.173.108200 OK 5.7 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/js_files/?m[]=tools/browser-support
IP 2.18.173.108:0
File type ASCII text, with very long lines (13040), with no line terminators
Hash d402106ef1717493100b74f75ac519db
39e8321fa08561d589f788fb71eb9467d7155038
54a6eacbe22f1223b9f10177efd54b9c2eaf6ba6d76c777677cc35a2737e7352
GET /526.0.1/js_files/?m[]=tools/browser-support HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "dvAs3BbGu5bxiAbI/3K+fg=="
content-encoding: gzip
content-length: 5720
cache-control: public, max-age=31485291
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
2.18.173.108200 OK 390 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
IP 2.18.173.108:0
File type ASCII text, with very long lines (35879)
Size 390 kB (389690 bytes)
Hash 493a3e3c7319f83afaf42e0f5327abe7
ecaac3f80f01ff702e00773fe73f60c76f1e78f7
4ab6826b0caf5d378018490e309e70dee19f15c1b1e4b3e83e408860717d9342
GET /526.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "0xbTQBdXslJoX6R5P4EtQg=="
content-encoding: gzip
cache-control: public, max-age=31485247
date: Thu, 09 Feb 2023 02:32:43 GMT
content-length: 389690
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=b80565ba9f88471d4da60e6c2170ff80_28d86f8ad42691ec755397b149c06787&totalBulks=1
2.18.173.108200 OK 346 kB URL HTTP/2 api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=b80565ba9f88471d4da60e6c2170ff80_28d86f8ad42691ec755397b149c06787&totalBulks=1
IP 2.18.173.108:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 346 kB (346004 bytes)
Hash abc6351891aa1523ec7473e86f616bc1
e69848f65b68e10f1e51b99f2e3eb04ab151d369
07904b515fee531dd547feaedb2d46dae4acfb2947d3eec477cf898651ed23ab
GET /sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=b80565ba9f88471d4da60e6c2170ff80_28d86f8ad42691ec755397b149c06787&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:da6cfa5a-5dde-4d38-9665-5bd2b94cd342
accept: application/json
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true, true
x-robots-tag: noindex
content-length: 346004
cache-control: public, max-age=1209600
expires: Thu, 23 Feb 2023 02:32:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sprite.png
2.18.173.108200 OK 71 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sprite.png
IP 2.18.173.108:0
File type PNG image data, 170 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Hash e1e136d8c9c87238c1faecbe30de864a
4dd3ff46c7a92fb59e0b4e86f0ad408c67867f66
1f97ddc0a725e59b6f4f9e1cd03eeff0399145b5f9074e9dde10f04856541c9f
GET /web-client/img/sprite.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GXJ09iezztMOcZchZuKrqftesXrKIPosJAKn3IvPIFIQmJ/DbareBjGNIiZtD3vKtcF+XAfwc3Q=
x-amz-request-id: SDAVMPKYSN6R3RRA
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Jan 2019 08:39:49 GMT
etag: "e1e136d8c9c87238c1faecbe30de864a"
x-amz-version-id: c7040_.mWfwV0MHOIOsnAOoCalddmt_9
accept-ranges: bytes
content-type: image/png
content-length: 71400
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/preloader.png
2.18.173.108200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/preloader.png
IP 2.18.173.108:0
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash b0f268da8d890fc3afc15e32480e866e
1465c0de6f4871bbe22dc940cf2530a7a516568f
90c5b9934bc4952a0bec1284d8e63468b0cf8eb1af23cdfd56b735e83691b79f
GET /web-client/img/preloader.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UH+ATK60E6ROQ9TsYcHeU/RFVBFFMGrtaqw+V0IEC6jHrEpED4Gz4DQgWTnwRsH/A//TuZKINag=
x-amz-request-id: F84TVQCQWZSV9QG2
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 07:40:21 GMT
etag: "b0f268da8d890fc3afc15e32480e866e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 07:39:12 GMT
x-amz-version-id: ypOW0sjHuKqXDROJg6L6MTOp1Z0lHcDD
accept-ranges: bytes
content-type: image/png
content-length: 1206
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
maintenance.etoro.com/maintenance.json
104.88.18.91200 OK 309 B URL HTTP/1.1 maintenance.etoro.com/maintenance.json
IP 104.88.18.91:0
File type JSON data\012- , ASCII text, with very long lines (308)
Hash c47549fa5fc30f994fcac453124a8e7b
0f412a6d214bb46455c050727fea088988675055
0c24a034718dc60de1753b99f17a8446ca525807a6a35899a3dcb9fd4f68eb6b
GET /maintenance.json HTTP/1.1
Host: maintenance.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
x-amz-id-2: YR/g6RKKXOnwp2GxKCbJQpFXNpuS/ibhbiOYuEBUQqY8u8i3qM13Hw9ka9wwVR1Kpgs1fsWGHag=
x-amz-request-id: XZRN7K1CCFQ0WFJE
Last-Modified: Sun, 08 Jan 2023 07:18:02 GMT
ETag: "c47549fa5fc30f994fcac453124a8e7b"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 309
Cache-Control: max-age=300
Expires: Thu, 09 Feb 2023 02:37:43 GMT
Date: Thu, 09 Feb 2023 02:32:43 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Type: application/json
cdn.etorostatic.com/526.0.1/sem-etoro-ng/main.71d38ee09d161c18.js
2.18.173.108200 OK 2.9 MB URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/main.71d38ee09d161c18.js
IP 2.18.173.108:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 2.9 MB (2944997 bytes)
Hash 8374200382e587ad5a5bdd21394b2d6e
e6203fe3d1a1ffc3636d417a6d320e4341b504b7
66e52e83f489fdfc247d30a87ea3d660cd93f8a6c9c190a53b64c06ab19039af
GET /526.0.1/sem-etoro-ng/main.71d38ee09d161c18.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:18:13 GMT
etag: W/"6h6NmfqvPjklm6FexqI6Yw=="
content-encoding: gzip
cache-control: public, max-age=31485293
date: Thu, 09 Feb 2023 02:32:43 GMT
content-length: 2944997
vary: Accept-Encoding
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/Splash/touch-icon-ipad-144.png
2.18.173.108200 OK 5.7 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/Splash/touch-icon-ipad-144.png
IP 2.18.173.108:0
File type PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Hash f092565f3aad3709b6078be9d3d7c6de
84b518cacb1f0c6ebaa58a7a81c3d5e376405d43
ffae9c7e791049222450c9ca98e57830313b8e918a8e825944a1b6376f5397ac
GET /web-client/img/Splash/touch-icon-ipad-144.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7aWLyhPxDLZBj09mHeVuVsARmx0NSXFIokqSeF3TdWKs357vou4ygYSObnjhqM2nxZgbFJIEqvg=
x-amz-request-id: KD3XD49D5QQKYHYE
x-amz-replication-status: COMPLETED
last-modified: Sun, 27 Dec 2015 14:45:23 GMT
etag: "f092565f3aad3709b6078be9d3d7c6de"
x-amz-version-id: rmovFrrcZBM1dXrI_13uWeeISqQczKQq
accept-ranges: bytes
content-type: image/png
content-length: 5740
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:44 GMT
date: Thu, 09 Feb 2023 02:32:44 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
2.18.173.108200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
IP 2.18.173.108:0
File type Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Hash e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VoVKI/9JsMea6fWtxtt8R9nFaRKJz8kqToFlDmyON1so/a+S+9AJkyqDiPwJwuZmDmDPXEOkJjQ=
x-amz-request-id: 5E70NEWKDZYYA9YJ
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-type: application/octet-stream
content-length: 59600
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Sat, 11 Mar 2023 02:32:45 GMT
date: Thu, 09 Feb 2023 02:32:45 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
172.217.21.168200 OK 101 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP 172.217.21.168:0
File type ASCII text, with very long lines (35498)
Size 101 kB (101056 bytes)
Hash 7a251c3cfe17f202629f4b48dcbd8360
0bbc2bc720b50b64ef3e314c2f9daf9abf002ba3
e6039d32da144076d60145f8e5fe4aa1406f0740adff86409d6f9b214234d6a8
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 Feb 2023 02:32:46 GMT
expires: Thu, 09 Feb 2023 02:32:46 GMT
cache-control: private, max-age=900
last-modified: Thu, 09 Feb 2023 00:33:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101056
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
130.211.5.208200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP 130.211.5.208:0
File type ASCII text, with very long lines (755)
Hash bea784dce86d30e1f2e59387f85cccb6
90665d4cc2e3f1e8c6da1247096c0af28b70ae04
b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu3_kFiIA31DWA9PWhbefgKelQtqPRx_fhRWBIqMYCb5TOKQy8nmvPR9UPVCg2x6dCeViSCYBC0Eligiu2L6H_Ziw
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17435
access-control-allow-origin: *
server: UploadServer
vary: Accept-Encoding
date: Thu, 09 Feb 2023 02:24:58 GMT
expires: Thu, 09 Feb 2023 02:34:58 GMT
cache-control: public,max-age=600
age: 468
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash f6baceeb66585e252c13d53812220b1a
6c3f7481645ff38545c1b1f5299620ba8ba6ebc8
b32b97a1fb9d6b14aeb9d4d3fcbd5cb9b40a553a1fe4173c4e7bbff3e9833c22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4668
Cache-Control: max-age=163674
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:46 GMT
Etag: "63e4256c-2d7"
Expires: Sat, 11 Feb 2023 00:00:40 GMT
Last-Modified: Wed, 08 Feb 2023 22:42:52 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 727
etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
2.18.173.108200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
IP 2.18.173.108:0
File type PNG image data, 198 x 64, 8-bit colormap, non-interlaced\012- data
Hash b41babf405ad72c9fa6455dccd372380
83841f3d6f390fddbf774b397daf051c890a8c32
ac2ec5d1e65ba32849742fe3ed0899214ba9e063ebf31b7549175f2b66394b08
GET /web-client/img/login-logo-hd.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: PorXpYuLeZEJR1S1l7x0MZpKfNRfvTY0z05AtH5eA1Vw0sqGFAMterLhA4YyQO4zAeoCB9EZhZc=
x-amz-request-id: C0ZAWA85CAYQMY45
x-amz-replication-status: COMPLETED
last-modified: Thu, 29 Sep 2022 12:49:46 GMT
etag: "b41babf405ad72c9fa6455dccd372380"
x-amz-meta-s3b-last-modified: 20220929T094658Z
x-amz-version-id: 078Rkok.ZhnHyEE5EUR82hq7nZDNmuJ3
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1171
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:46 GMT
date: Thu, 09 Feb 2023 02:32:46 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
2.18.173.108200 OK 909 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
IP 2.18.173.108:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6d8d67e95d438776e32632b4f8e8c4e2
6b5eac8fc9722e1d12f05e6e3dae6748215e0238
2bf43a304aa34d530722842db131841969dffb18d2625b58851926d5fc011e26
GET /web-client/et/img/settings/general/flags/norway-flag.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QQKUB08k08I6uUSVyVG8KLeUZwn33TUAsq/ELlQd7LRUUFjhtauF/j7U9n46fcbMos85056HhOg=
x-amz-request-id: G7YRDT0XZ95CY7S7
x-amz-replication-status: COMPLETED
last-modified: Wed, 19 Feb 2020 12:32:58 GMT
etag: "7ee02734ec1f49f74d970aea31b057e0"
x-amz-meta-sha256: e143bb1d025c5ab640ec3df3c8b80829a62eff2d46e654618f865479aa3d7374
x-amz-meta-s3b-last-modified: 20200219T114039Z
x-amz-version-id: d0T8a9zUHLaL3Zp1SI66mmUeybQ6zeZH
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:46 GMT
date: Thu, 09 Feb 2023 02:32:46 GMT
content-length: 909
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 1eda8296b6d8216c11823c218d93fc53
5bc5e214594948f6110df8d9a119a1812463598a
724adcc68ddd999d2a9d70c069850398fd3390ca0e45ca4d6af01c3da5a3597d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115060
Date: Thu, 09 Feb 2023 02:32:47 GMT
Etag: "63e3634e-1d7"
Expires: Fri, 10 Feb 2023 10:30:27 GMT
Last-Modified: Wed, 08 Feb 2023 08:54:38 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0i-DT0CWaSSuTSNBB4NjchdHuKh52UqlkWUNimVRbu1CaaljfvlZkg==
Age: 5749
etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=9b833249-3607-4859-a055-6253d03011a1&referrer=
52.92.33.194200 OK 5.7 kB URL HTTP/1.1 etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=9b833249-3607-4859-a055-6253d03011a1&referrer=
IP 52.92.33.194:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6dfc495da4241bd88a002aa677dd2778
8e6bb2aa50cc0bfea4942b1e3c9945d920894080
0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
GET /loaders/history-changes-r.html?target=historyChange&guid=9b833249-3607-4859-a055-6253d03011a1&referrer= HTTP/1.1
Host: etoro-px.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: pJ+jQyzhKgdFU3Z+vd91BNhXJi7twIhiVcZwDm0ySS86dXi7DQwoE9eYHDSSqetc3LT81IYXvf0=
x-amz-request-id: X41FBGH5AJQC86BP
Date: Thu, 09 Feb 2023 02:32:48 GMT
Last-Modified: Tue, 07 Jul 2020 12:01:19 GMT
ETag: "6dfc495da4241bd88a002aa677dd2778"
x-amz-meta-sha256: 0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
x-amz-meta-s3b-last-modified: 20200707T114930Z
x-amz-version-id: 2.0Pc3hXrEIlcYYVezOUu66Og0lWOrsY
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 5667
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 045294ef2be05fe937917957f47e71c6
666ea697fe7c389c45b0d66163e2afad43ff4d83
63e4fd58fffcaf2b9f3b40e53866a8a703cbd3626336fba410894ae621117570
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1452
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Last-Modified: Thu, 09 Feb 2023 02:08:36 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
cdn.etorostatic.com/526.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
2.18.173.108200 OK 814 B URL HTTP/2 cdn.etorostatic.com/526.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
IP 2.18.173.108:0
File type HTML document, ASCII text, with very long lines (2600), with no line terminators
Hash 9fb4e76e84c051366edefd126d73358d
b5258607a0001e51df1dd8a72e51b0061cf3a00c
df95ea3e29ac53a69ec60818d29e6d8406f0d82c02839d1e14c5222f7709e1f3
GET /526.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "WM91upZzxqcGhUsvXTONjw=="
content-encoding: gzip
content-length: 814
cache-control: public, max-age=31485419
date: Thu, 09 Feb 2023 02:32:47 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.mixpanel.com/track/?img=1
130.211.34.183200 OK 68 B URL HTTP/2 api.mixpanel.com/track/?img=1
IP 130.211.34.183:0
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 978c1bee49d7ad5fc1a4d81099b13e18
afcb011cfe6b924f202ee9544f17f631b32a01b1
93ae7d494fad0fb30cbf3ae746a39c4bc7a0f8bbf87fbb587a3f3c01f3c5ce20
GET /track/?img=1 HTTP/1.1
Host: api.mixpanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate
content-type: image/png
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 68
x-envoy-upstream-service-time: 2
server: envoy
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash cd3e500e8186489efd1a5f3e3e4959f2
35545650e3fc1fe7d86931efc959469192b64077
e445306312a066cc9740ca7a1317f71e60d8dce00e7059ac9fdb05ebd9727d22
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 09 Feb 2023 02:32:47 GMT
Last-Modified: Thu, 09 Feb 2023 01:57:41 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: e1YVSCM7ht5NeYGkMlHT1kbmN7-u5kfHuKRKMxocdxTnxZ_psTvkuA==
Age: 2106
js.adsrvr.org/up_loader.1.1.0.js
54.230.241.118200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP 54.230.241.118:0
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 08 Feb 2023 07:31:39 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tN_UunXLucGTBlhb-WMUET8jMF4eNONkafs4G8978QtE5KNqMnq57Q==
Age: 68469
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
54.230.111.97200 OK 32 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP 54.230.111.97:0
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 6d95ff10eeca571bee4f51f32e41b948
df00d5465c3b1f108a6a7cf755668caf91ec9ff5
40d3f60ce1b1477483ed194cbce80d938e70393e7d6288a323c0757d329164c4
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 31922
content-encoding: gzip
server: Caddy
date: Wed, 08 Feb 2023 21:05:26 GMT
cache-control: max-age=43200
expires: Thu, 09 Feb 2023 09:05:26 GMT
etag: "15767-GhMB74kM7mI615THnmEla1bwmvU"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FscJJ91n7VkLtxtlBI5vmDRN677uBMkPwNGd0sFmozd3d5KuqN8_hg==
age: 19641
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
54.230.82.240200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP 54.230.82.240:0
File type ASCII text, with very long lines (31034), with no line terminators
Hash aebfe79a43ab3b40d473082cb240bfe7
e176237cc68803a9dfc6ac7f5db919a6c8f4c5c3
a562e759047435340c5e9816df15a44f08f49c04482365e139a1591f1d1507ac
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13295
server: CloudFront
date: Thu, 09 Feb 2023 02:32:47 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Fri, 10 Feb 2023 00:18:06 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: GeneratedResponse from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: maCZ__CadXEOIEu1pvfs_5oro2NR0nF48Yr4H6UMrnL74ZJsZcC2YQ==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
142.250.74.70200 OK 299 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (601), with no line terminators
Hash 9c094b2b9bfb684fb385afd2d675c442
d6f12118695690d0ea07be628f75428b6db79fa0
0dc2731e933fc5e046824b6d85d42d12075254fc3826458ef1b037617f40e4c6
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:47 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 299
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 09-Feb-2023 02:47:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 30992d9a32d26479fed272933c0d21b4
cc0c08c6e9be141057ed2987bacb951acc12cf4a
01f8923722d2b729b3c68122e00b7c991bc76c5f41c67aac8b99142c1bc90b16
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3891
Cache-Control: max-age=129752
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Etag: "63e3a3f4-1d7"
Expires: Fri, 10 Feb 2023 14:35:19 GMT
Last-Modified: Wed, 08 Feb 2023 13:30:28 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
marketing.etorostatic.com/others/general/js/seo.js
2.18.173.108200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP 2.18.173.108:0
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IRCfMyEJ6XLVHS/waVgNagZe5cBkkf5SsjeMeX2BsaGV0iLq5UuJYwCvgNj2V5su0u0580EuP1A=
x-amz-request-id: X57JYQH54681RNKS
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 2209
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=164ac53a-016c-458f-990a-5c7d44cf470d
2.18.173.108200 OK 1.5 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=164ac53a-016c-458f-990a-5c7d44cf470d
IP 2.18.173.108:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 63cef4e6cfa61992fc2ef740353a6215
62181e33a58d5d220a1346974145dcce39b423ea
0d00919723aa25df1d7ef980698c420e706488ceb8f8098033e2b2d268da35b4
GET /web-client/recaptcha/index.html?guid=164ac53a-016c-458f-990a-5c7d44cf470d HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 5jmDPX7s/2/H9fqL+1lG9WpvJlmKRQ4VXpd8OZUCR7tC638Md3VbzOhZgzLssABsIKpx5JqcPZo=
x-amz-request-id: YF39Y851FN0F3PS3
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Oct 2020 10:42:40 GMT
etag: "ef2039619799b54abf85f25976ff7199"
x-amz-meta-sha256: 349fb58237f7f8abb11e68632be1859f31c19fa4fa6a64d143ec18f7f6d59cf3
x-amz-meta-s3b-last-modified: 20201004T104155Z
x-amz-version-id: 9jyXMd7S_i_.xXnWVDXRZHjUkqd_s38N
accept-ranges: bytes
content-type: text/html
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 1547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.adalyser.com/adalyser.js?cid=etoro
54.217.112.41200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP 54.217.112.41:0
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:47 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
2.18.173.108200 OK 377 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
IP 2.18.173.108:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5c4699717e2af42d1674a9008ffbfe85
cf2ee13be98793210c3b2c8eec66ac830510ebe1
d608b0e2406e7ee895c50292d358d848267796d637eaa16a6a6144dc14ed7bd8
GET /web-client/et/img/registration/i_fb.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: wJ59IKBWiDMMj1rsDpfd852rUGtzZfdKU9zirzUs9UXZ1KrIaHHAztq3+qRIPPWFLRiSsP9xdWk=
x-amz-request-id: 6RXYNJ643R78SNA5
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
2.18.173.108200 OK 645 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
IP 2.18.173.108:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b8f3342ef1ebe6f5c64bafff3131548
99b5ac271a65175ff24696d9a24c9ebda02b71fc
fc1f1deaf7d4759c0a6e573a65f7961733cbf05f66f93c44511881dd0b471596
GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7hrLTF189oZ983sS07xC8htEwbBqVSDXTKf5wRGZFZvZNMsvN9scmh2RnqfmsRWHkwVB7oQmJnw=
x-amz-request-id: 9VRZRH3QEAAJV71M
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
2.18.173.108200 OK 37 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
IP 2.18.173.108:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1079, components 3\012- data
Hash 2f6d6f1e997f3a2a15888feb99459bb0
ce895db684c81debb871f8d59c45e8451a53809f
8a697f855d5b794eb68aa944977572f87334126a4b717952f61d6e48acc7edc1
GET /web-client/et/img/registration/discover_01.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: yrvYOXwrqsGtjgtnB3d0Pc2eH0wQZXQbStmnMARCd/pMpbiy2TJtFteu6Qx7Qr0TjU1aQQ+8o7c=
x-amz-request-id: NN55C79JR6MNSD5C
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Jul 2022 14:52:13 GMT
etag: "2f6d6f1e997f3a2a15888feb99459bb0"
x-amz-meta-origin-date-iso8601: 2022-07-07T14:50:14.504Z
x-amz-version-id: QF_QgkRGCy62K6vDY_bK8WU3cAQLR7db
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 36791
cache-control: max-age=300
expires: Thu, 09 Feb 2023 02:37:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
2.18.173.108200 OK 61 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
IP 2.18.173.108:0
File type Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Hash 96f3835aa784a280a0e1e7fa64b97b60
1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Gw7K/z+rgE3lm94JaU9fY51MKxB1UhoCoa14rrSc0mf8h6uk7TvG8doh2uvZxQ39dSlEjZiVHyY=
x-amz-request-id: DPFNYW2P9N2GKZM2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61036
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Sat, 11 Mar 2023 02:32:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
2.18.173.108200 OK 62 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
IP 2.18.173.108:0
File type Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Hash e9681ca3d29d814a5621d4764dd1a11e
bbda68459fc0531b915bdf9e524ecc8f782db0aa
51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1QogDNt4Ym96Vu2S0DSGDvNU/xL9xL282y/IbSw4e5JO86fAj3PhPy9W6Nf05vDrisrWElU1wtk=
x-amz-request-id: 5DYMW9M2QQPFK36S
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "e9681ca3d29d814a5621d4764dd1a11e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: HgUsNFmOXgC1eDiETddzJSTtCGDefKwY
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61548
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Sat, 11 Mar 2023 02:32:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2
2.18.173.108200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2
IP 2.18.173.108:0
File type Web Open Font Format (Version 2), TrueType, length 60472, version 1.0\012- data
Hash 691f774319fda1ccf9ea172ffaee815e
100f7c4b9a1a070f683e579e51a27ad848e89858
ef1afe72be678d91398fc959d6920d4e8e0df4ddc00af772f5174340a60391d2
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 8gXhOYnXQfCvxQh0AsyWhWSRGvYtb/6TnrZUxLx+Yus9yOaswvUOKe9ec4GnL7aMBc+KXi4na6g=
x-amz-request-id: P3PEE8NZ92NF1X21
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:53 GMT
etag: "691f774319fda1ccf9ea172ffaee815e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: BdK.NAI.RcrH6e.JJwXTdFJi3m9OJbQ_
accept-ranges: bytes
content-type: application/octet-stream
content-length: 60472
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Sat, 11 Mar 2023 02:32:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
95.101.11.57200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP 95.101.11.57:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=15669
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
2.18.173.108200 OK 30 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
IP 2.18.173.108:0
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, general \012- data
Hash eb628962945195053f9882538308e68d
5ed47d9fb1edead143384b64e85a3f2b35d66443
94650c8a7a751eb548355905a6b5464d1528f2b722616d3e6d69ddf6fe7f7535
GET /web-client/et/fonts/icomoon/general/general.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: w5/ofec4rcC4U3RBAFCpRkP1Ij18jh2Do4eUOEJrnf6BugT5VqPCYKPD9looUSN2XQx+/fsHMbU=
x-amz-request-id: 78C513DFTXNS0BWJ
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 31 Jan 2023 14:02:38 GMT
etag: "3f8a7babbf9014bdc38e4d293dbfdc1c"
x-amz-meta-sha256: 662b8ebfb6fe1b256fdf727237638b4a03fd060d989e85327c242c286abf9ae2
x-amz-meta-s3b-last-modified: 20230131T135604Z
x-amz-version-id: CP0h_W7tEkojUr0Q2j9OUuOkhz6Lobtw
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2592000
expires: Sat, 11 Mar 2023 02:32:47 GMT
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 29795
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
2.18.173.74200 OK 5.9 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP 2.18.173.74:0
File type ASCII text, with very long lines (17769), with no line terminators
Hash 939f95ffc91ae8a9eacb6998ec5a635f
e122fe07195821f6abf871cc65f315c6b9e27f4a
49462b3c223095ac3fc223f11a29e4bceed96feba62e167d444e9a082626fc17
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "b07048fb19f7c325242e254218118e14:1675339769.124179"
Last-Modified: Thu, 02 Feb 2023 09:48:30 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 09 Feb 2023 02:52:47 GMT
Date: Thu, 09 Feb 2023 02:32:47 GMT
Content-Length: 5911
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1695
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Last-Modified: Thu, 09 Feb 2023 02:04:32 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 09 Feb 2023 01:44:06 GMT
expires: Thu, 09 Feb 2023 03:44:06 GMT
cache-control: public, max-age=7200
age: 2921
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
151.101.129.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP 151.101.129.44:0
File type ASCII text, with very long lines (59748)
Hash a95cc9220801404bf4466f2b6c584c19
35c3ecc73803c900839cf2035df18db67b8c965d
e4735534dc10e8e758034a93652bf0c7c0added1a685f7f6a5280137bad46786
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8T5auxI1DDAjvvxfwjS7Q2cICJn9QvMm/KSZ+nss3rmLV98+uF/0jYKemGu//J33bWgd9Ie5YnM=
x-amz-request-id: HPEKGQNK7SQ8P7CV
x-amz-replication-status: COMPLETED
last-modified: Sun, 05 Feb 2023 11:31:16 GMT
etag: "fc56fb8f66bd1a17d92b953a788b9cae"
x-amz-version-id: txyMIeNtA7ovWGZV66czkKCx5bR6VAPG
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 09 Feb 2023 02:32:47 GMT
via: 1.1 varnish
age: 17
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675909968.829440,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 80
content-length: 18369
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
151.101.84.157200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP 151.101.84.157:0
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Thu, 09 Feb 2023 02:32:47 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200200 OK 12 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 289231d0e5757acc05e84b359924fe17
1acd227f83b46faf7b5989672f7fdc468ed9d1be
4c8c539da00429778e556067e7c246b70fc337a98d0411ec929a1d5003c0c06e
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11563
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 82B7388B84DC47B9AC8E480BFA641C8B Ref B: OSL30EDGE0212 Ref C: 2023-02-09T02:32:47Z
date: Thu, 09 Feb 2023 02:32:47 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=781600707.1675910025>m=45je3280&aip=1&z=323012547
142.250.74.67200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=781600707.1675910025>m=45je3280&aip=1&z=323012547
IP 142.250.74.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=781600707.1675910025>m=45je3280&aip=1&z=323012547 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.205.11200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.205.11:0
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: i3+FUy652JDD7zF8/154K/CqyCekxltBm+wtZf8wzYaI3ESyasOl26E3nDgyOdxyNoImpjso0UFAwriUhDto3A==
content-length: 27843
x-fb-trip-id: 1679558926
date: Thu, 09 Feb 2023 02:32:47 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1695
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Last-Modified: Thu, 09 Feb 2023 02:04:32 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 6250bcba58c2659a296fe4f3151b1e16
307b32afca5148b6faef5b40284906b649f6d963
d6e8d31cae981d39085629a8bd20894b1612fa2b638a6adef331b34c7e912dac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
142.250.74.46200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 142.250.74.46:0
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Thu, 09 Feb 2023 02:32:47 GMT
expires: Thu, 09 Feb 2023 02:32:47 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/tracking/track/v3/p?stm=1675910025125&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1675910025124%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_2809530%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22aa85a3cf-7973-4d1c-bce5-642fd95a4eef%22%2C%22duid%22%3A%2250267cda-0629-4e85-b452-39f67336619c%22%2C%22cw%22%3A1675910025124%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
54.217.112.41200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1675910025125&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1675910025124%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_2809530%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22aa85a3cf-7973-4d1c-bce5-642fd95a4eef%22%2C%22duid%22%3A%2250267cda-0629-4e85-b452-39f67336619c%22%2C%22cw%22%3A1675910025124%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP 54.217.112.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1675910025125&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1675910025124%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_2809530%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22aa85a3cf-7973-4d1c-bce5-642fd95a4eef%22%2C%22duid%22%3A%2250267cda-0629-4e85-b452-39f67336619c%22%2C%22cw%22%3A1675910025124%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:48 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2998
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Last-Modified: Thu, 09 Feb 2023 01:42:50 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5946
Cache-Control: max-age=107735
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Etag: "63e345ed-1d7"
Expires: Fri, 10 Feb 2023 08:28:23 GMT
Last-Modified: Wed, 08 Feb 2023 06:49:17 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4983
Cache-Control: max-age=106772
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Etag: "63e345ed-1d7"
Expires: Fri, 10 Feb 2023 08:12:20 GMT
Last-Modified: Wed, 08 Feb 2023 06:49:17 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3c38daede8e669173cc93b43b686fde4
17894f0ebdb6a6052661c9fac3adaee4738daa83
546bb906705296e744e003efe975d6c40ae06a838ce2ee00cbffc1461a204f5a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Server: ECS (amb/6B87)
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash b12b1d05813a0ca7964c2f8f52d295f2
bb482e4e14e936fe7200e8208eccb2175be7330c
f81a9d9a37cbb2692ea757c962953f8d18ef2f11bf0625c79c5dea7b40643dec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 840
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Last-Modified: Thu, 09 Feb 2023 02:18:48 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 314
tr.snapchat.com/p
35.190.43.134200 OK 68 B IP 35.190.43.134:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 652
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:48 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgRUAIAQFwIm8px9inJSmMHx3khnj2KLariTTQY7JlAVcPU8etHvY0uAI8+YPH9SKsDIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 6
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=8a3cc646-abd4-4ff8-9c3a-dd44175ae704&u_sclid=424db34d-d435-4b51-b4e4-7c1f8c5c1796
35.190.43.134200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=8a3cc646-abd4-4ff8-9c3a-dd44175ae704&u_sclid=424db34d-d435-4b51-b4e4-7c1f8c5c1796
IP 35.190.43.134:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=8a3cc646-abd4-4ff8-9c3a-dd44175ae704&u_sclid=424db34d-d435-4b51-b4e4-7c1f8c5c1796 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:48 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.206200 OK 6.0 kB IP 188.125.94.206:0
Hash f6c4a1cfe19421976e66e42157f64065
46b069d313fa1be07b64856c7e52461f37e8ce3c
0a404143f2e0820cf5d364a329811026674d50f1f7b43195292253e3c943088c
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JgGiu4emU6yC3d7O6Jd3xdnBlIEKumqeDBahEMCqKR1g14b4og4ElpVFgfg8LNA/7fSPBoCTroY=
x-amz-request-id: 5EHEFZ9TNST2A4FW
date: Thu, 09 Feb 2023 02:21:07 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 702
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 6b34f0a4ade92182d7bb3e8397747c6a
c73cd9e5b215e71377c82b699daeac0ca616a466
5213a839c4f855fa269ad2a699a463c59b54483628f92604b35b51d3d7985fe5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 09 Feb 2023 02:32:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 Feb 2023 21:06:33 GMT
Expires: Thu, 09 Feb 2023 21:06:33 GMT
ETag: "c73cd9e5b215e71377c82b699daeac0ca616a466"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1467
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Last-Modified: Thu, 09 Feb 2023 02:08:21 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2056847-1&cid=781600707.1675910025&jid=805908333&gjid=127723867&_gid=49986269.1675910025&_u=IADAAEAAAAAAACAAI~&z=569534720
64.233.164.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2056847-1&cid=781600707.1675910025&jid=805908333&gjid=127723867&_gid=49986269.1675910025&_u=IADAAEAAAAAAACAAI~&z=569534720
IP 64.233.164.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2056847-1&cid=781600707.1675910025&jid=805908333&gjid=127723867&_gid=49986269.1675910025&_u=IADAAEAAAAAAACAAI~&z=569534720 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=781600707.1675910025>m=45je3280&aip=1
64.233.164.156204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=781600707.1675910025>m=45je3280&aip=1
IP 64.233.164.156:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=781600707.1675910025>m=45je3280&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 365e4c73a4876ffd7f5980516925e17c
149890b4229707564a0bf8bd0814d496c8e36c68
efd737a944071ddd150f1281f8c35f1a7039385d7bb031318b23c5f3ba32430f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 618
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Last-Modified: Thu, 09 Feb 2023 02:22:30 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2056847-65&cid=781600707.1675910025&jid=630382391&gjid=152408738&_gid=49986269.1675910025&_u=YADAAEABAAAAACAEK~&z=1173384414
64.233.164.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2056847-65&cid=781600707.1675910025&jid=630382391&gjid=152408738&_gid=49986269.1675910025&_u=YADAAEABAAAAACAEK~&z=1173384414
IP 64.233.164.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-2056847-65&cid=781600707.1675910025&jid=630382391&gjid=152408738&_gid=49986269.1675910025&_u=YADAAEABAAAAACAEK~&z=1173384414 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=45je3280&_p=1649852689&_gaz=1&ul=NA&cid=781600707.1675910025&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&sid=1675910024&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
216.239.34.36204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=45je3280&_p=1649852689&_gaz=1&ul=NA&cid=781600707.1675910025&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&sid=1675910024&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=45je3280&_p=1649852689&_gaz=1&ul=NA&cid=781600707.1675910025&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&sid=1675910024&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
23.43.132.13200 OK 17 kB URL HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP 23.43.132.13:0
File type Unicode text, UTF-8 text, with very long lines (39267)
Hash 12a5f480c5a23efc80304d3bbc35d746
4043357825f2e91df5c4f339a9bc95f8e5b48fa1
b7be9b25bef3ce5c830263ba56bc3235a6683a9950115e4d4368144de3bbd2ec
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1637089134330"
Last-Modified: Tue, 16 Nov 2021 18:58:54 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Thu, 09 Feb 2023 02:32:48 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=8239286011082;gtm=45He3280;auiddc=664195690.1675910025;u8=GA1.1.781600707.1675910025;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1
172.217.21.162200 OK 356 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=8239286011082;gtm=45He3280;auiddc=664195690.1675910025;u8=GA1.1.781600707.1675910025;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1
IP 172.217.21.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (669), with no line terminators
Hash 0a07a89093df84c05c61f5fdd70fdf0d
10fe203fda62fdfdf5778c8cc23ce65535b839e6
012d7042d5baa76360eb1a4c0bbe9d75d660056de132584e672d21155117c90a
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=8239286011082;gtm=45He3280;auiddc=664195690.1675910025;u8=GA1.1.781600707.1675910025;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 356
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=be5470bd-0c57-44ac-b235-1dce924d2b91&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=5dadb80a-aed7-496a-96ec-9a196bb2e6e7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29
104.244.42.133200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=be5470bd-0c57-44ac-b235-1dce924d2b91&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=5dadb80a-aed7-496a-96ec-9a196bb2e6e7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29
IP 104.244.42.133:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=be5470bd-0c57-44ac-b235-1dce924d2b91&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=5dadb80a-aed7-496a-96ec-9a196bb2e6e7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:47 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=f28e5a52-eacd-430d-a85b-48053eb4d031; Max-Age=63072000; Expires=Sat, 08 Feb 2025 02:32:48 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 0a39928c157fdfbd
strict-transport-security: max-age=0
x-response-time: 109
x-connection-hash: 6e854be81542a8cbc81dc4b09bf95b281511660cab9efdf800a8041de721a058
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675910025005&hl=4&op=0&ag=1317291471&rand=930251101961022577510157081011016891621270765212500782212286602695221510177&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=HHgidJPnkP&pto=5638&ver=50&gac=781600707.1675910025&mei=&ap=&duid=1.1675910025.UuOyxbObcVSatwAO&suid=1.1675910025.JxHTlAenSdFS6jyd&tuid=1.1675910025.Pxpnzwu3ddllqhZ8&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=80%2C5142%2C144&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
3.227.190.204200 OK 1.1 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675910025005&hl=4&op=0&ag=1317291471&rand=930251101961022577510157081011016891621270765212500782212286602695221510177&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDU2NzZdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDMsMCwwLDAsMCw0LDE0LDAsMSwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSw1LDAsMCwwLDAsMCwwLDAsNiwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDMiXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMiwiLSJdLFstMywiW10iXSxbLTQsIi0iXSxbLTUsIi0iXSxbLTYsIntcIndcIjpbXCIwXCIsXCJyZXF1aXJlU3R1YnNcIixcIlRFVE9ST1wiLFwiU0NSSVBUX1RJTUVPVVRcIixcImFwcGxvYWRlZFwiLFwidGltZUxhYmVsXCIsXCJzdHJpbmdpZnlcIixcIm9uTW9kdWxlRXJyb3JcIixcImVUb3JvU2Vzc2lvbkd1aWRcIixcInNpbmdsZUxvZ1wiLFwiYm9vdHN0cmFwVGltZXJcIixcImFjY2VsZXJhdG9yRGljdFwiLFwiZVRvcm9Mb2FkUGVyZm9ybWFuY2VcIixcIk5vdGlmeVBhaW50RXZlbnRcIixcIndlYnBhY2tDaHVua2V0b3JvXCIsXCJfX2NvcmUtanNfc2hhcmVkX19cIixcIl9fem9uZV9zeW1ib2xfX1VOUEFUQ0hFRF9FVkVOVFNcIixcIlpvbmVcIixcIl9fem9uZV9zeW1ib2xfX1Byb21pc2VcIixcIl9fem9uZV9zeW1ib2xfX2ZldGNoXCIsXCJfX3pvbmVfc3ltYm9sX19CTEFDS19MSVNURURfRVZFTlRTXCIsXCJfX3pvbmVfc3ltYm9sX19sZWdhY3lQYXRjaFwiLFwiX196b25lX3N5bWJvbF9fcXVldWVNaWNyb3Rhc2tcIixcIl9fem9uZV9zeW1ib2xfX3NldFRpbWVvdXRcIixcIl9fem9uZV9zeW1ib2xfX2NsZWFyVGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fc2V0SW50ZXJ2YWxcIixcIl9fem9uZV9zeW1ib2xfX2NsZWFySW50ZXJ2YWxcIixcIl9fem9uZV9zeW1ib2xfX3JlcXVlc3RBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fY2FuY2VsQW5pbWF0aW9uRnJhbWVcIixcIl9fem9uZV9zeW1ib2xfX2FsZXJ0XCIsXCJfX3pvbmVfc3ltYm9sX19wcm9tcHRcIixcIl9fem9uZV9zeW1ib2xfX2NvbmZpcm1cIixcIl9fem9uZV9zeW1ib2xfX011dGF0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ludGVyc2VjdGlvbk9ic2VydmVyXCIsXCJfX3pvbmVfc3ltYm9sX19GaWxlUmVhZGVyXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGV2aWNlbW90aW9ucGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmRldmljZW9yaWVudGF0aW9ucGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFic29sdXRlZGV2aWNlb3JpZW50YXRpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9udnJkaXNwbGF5Y29ubmVjdHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub252cmRpc3BsYXlkaXNjb25uZWN0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbnZyZGlzcGxheWFjdGl2YXRlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbnZyZGlzcGxheWRlYWN0aXZhdGVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9udnJkaXNwbGF5cHJlc2VudGNoYW5nZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25hYm9ydHBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25ibHVycGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmZvY3VzcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmF1eGNsaWNrcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmJlZm9yZWlucHV0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmNhbnBsYXlwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2FucGxheXRocm91Z2hwYXRjaGVkXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstNywiLSJdLFstOCwiLSJdLFstOSwiKyJdLFstMTAsIi0iXSxbLTExLCJ7XCJ0XCI6XCJcIixcIm1cIjpbXCJkZXNjcmlwdGlvblwiLFwib2c6dGl0bGVcIixcIm9nOmRlc2NyaXB0aW9uXCIsXCJ0d2l0dGVyOnRpdGxlXCIsXCJ0d2l0dGVyOmRlc2NyaXB0aW9uXCJdfSJdLFstMTIsIlwidW5zcGVjaWZpZWRcIiJdLFstMTMsIi0iXSxbLTE0LCItIl0sWy0xNSwiLSJdLFstMTYsIjAiXSxbLTE3LCIxNiJdLFstMTgsIlsxLDAsMCwwXSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAwMiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsOTM5LDAsMCwwLDAsXCItXCIsXCItXCJdIl0sWy0yMCwiNzgxNjAwNzA3LjE2NzU5MTAwMjUiXSxbLTIxLCItIl0sWy0yMiwiW1wiLVwiLFwiblwiXSJdLFstMjMsIisiXSxbLTI0LCJbXSJdLFstMjUsIltcIls0MzY4NzUxMjUsZnVuY3Rpb24oKXtyZXR1cm4gTSh0aGlzLGFyZ3VtZW50cyl9XVwiLFwiXCIsXCJbMzYwMzc1Njc4NSxmdW5jdGlvbiB0b1N0cmluZygpIHtcXG4gICAgW25hdGl2ZSBjb2RlXVxcbn1dXCJdIl0sWy0yNiwiLSJdLFstMjcsIi0iXSxbLTI4LCJlbi1VUyxlbiJdLFstMjksIi0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzIsIjAiXSxbLTMzLCJbXCJbNDM2ODc1MTI1LGZ1bmN0aW9uKCl7cmV0dXJuIE0odGhpcyxhcmd1bWVudHMpfV1cIixcIlwiLFwiWzM2MDM3NTY3ODUsZnVuY3Rpb24gdG9TdHJpbmcoKSB7XFxuICAgIFtuYXRpdmUgY29kZV1cXG59XVwiXSJdLFstMzQsIltcIls0MzY4NzUxMjUsZnVuY3Rpb24oKXtyZXR1cm4gTSh0aGlzLGFyZ3VtZW50cyl9XVwiLFwiXCIsXCJbMzYwMzc1Njc4NSxmdW5jdGlvbiB0b1N0cmluZygpIHtcXG4gICAgW25hdGl2ZSBjb2RlXVxcbn1dXCJdIl0sWy0zNSwiWzE2NzU5MTAwMjQ5ODQsMF0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstMzcsIi0iXSxbLTM4LCJjLC0xLC0xLDQ2NiwwLDUsMCw5NiwzOCw3NiwtMSwwLCw3MjIsNTYxNyw1NjE2Il0sWy0zOSwiW1wiMjAxMDAxMDFcIiwwLFwiR2Vja29cIixcIk5ldHNjYXBlXCIsXCJNb3ppbGxhXCIsXCIyMDE4MTAwMTAwMDAwMFwiLG51bGwsZmFsc2UsbnVsbCxmYWxzZSxudWxsLDBdIl0sWy00MCwiMzciXSxbLTQxLCItIl0sWy00MiwiMTc3MDA1MDA4MSJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMTExMTAwMTAwIl0sWy00NCwiMCw1LDAsNSJdLFstNDUsIi0iXSxbLTQ2LCIwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNDgsIjAsMCJdLFstNDksIi0iXSxbLTUwLCItIl0sWy01MSwiLSJdLFstNTIsIi0iXSxbLTUzLCIwMTAiXSxbLTU0LCJ7XCJoXCI6W10sXCJkXCI6W1wiXzFcIixcIjQyNzYyMzQzOFwiXSxcImJcIjpbXCJfMVwiLFwiMzgzNzg5NzkwNFwiXSxcInNcIjoxfSJdLFstNTUsIjEiXSxbImRkYiIsIjAsMCwwLDEsMSwyLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMiwxLDAsMCwxLDAsMCwwLDEsMCwwLDEsMSwwLDAsMTQsMCwxLDAsMCwwLDAsMSwwIl0sWyJibmNoIiw3Ml0sWyJhYm5jaCIsNzJdXQ%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=HHgidJPnkP&pto=5638&ver=50&gac=781600707.1675910025&mei=&ap=&duid=1.1675910025.UuOyxbObcVSatwAO&suid=1.1675910025.JxHTlAenSdFS6jyd&tuid=1.1675910025.Pxpnzwu3ddllqhZ8&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=80%2C5142%2C144&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP 3.227.190.204:0
File type ASCII text, with very long lines (3310), with no line terminators
Hash 6077c5d2b0c2ff2b3e52716cdfaf524c
154deb40980974874a720a84d5a5fcf886e1d0f6
014ab86ac86c10cd56309624e841eaf3d3ad8e63925df6c699e1e392051c8136
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675910025005&hl=4&op=0&ag=1317291471&rand=930251101961022577510157081011016891621270765212500782212286602695221510177&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=HHgidJPnkP&pto=5638&ver=50&gac=781600707.1675910025&mei=&ap=&duid=1.1675910025.UuOyxbObcVSatwAO&suid=1.1675910025.JxHTlAenSdFS6jyd&tuid=1.1675910025.Pxpnzwu3ddllqhZ8&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=80%2C5142%2C144&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Thu, 09 Feb 2023 02:32:48 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=dad6a34058aeeedf603422cc3ab264b6; Max-Age=29030400; Path=/; Expires=Thu, 11 Jan 2024 02:32:48 GMT; HttpOnly; Secure; SameSite=None
content-length: 1111
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
35.190.43.134200 OK 449 B URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP 35.190.43.134:0
Hash 4c6084ca74cec8c823c6f2c70b4b19eb
f8c9ae37826ad7b9c4e5ea2dcf5f39b023273df4
530628c5c40609dd414f88312dd915caa35a6e709c0ef55ffa79c7637d86cf1f
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:48 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-2056847-1&cid=781600707.1675910025&jid=805908333&_u=IADAAEAAAAAAACAAI~&z=1182278933
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-2056847-1&cid=781600707.1675910025&jid=805908333&_u=IADAAEAAAAAAACAAI~&z=1182278933
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-2056847-1&cid=781600707.1675910025&jid=805908333&_u=IADAAEAAAAAAACAAI~&z=1182278933 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-2056847-65&cid=781600707.1675910025&jid=630382391&_u=YADAAEABAAAAACAEK~&z=258453491
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-2056847-65&cid=781600707.1675910025&jid=630382391&_u=YADAAEABAAAAACAEK~&z=258453491
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-2056847-65&cid=781600707.1675910025&jid=630382391&_u=YADAAEABAAAAACAEK~&z=258453491 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.781600707.1675910025;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.781600707.1675910025undefined;~oref=https://www.etoro.com/
172.217.21.162200 OK 321 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.781600707.1675910025;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.781600707.1675910025undefined;~oref=https://www.etoro.com/
IP 172.217.21.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (634), with no line terminators
Hash fb289db4fc0c45c46257237c4fb88cf6
f3e3072461386ea6fdbc5fa81aac3e6fc83358c8
46e7c9c3423fd31bb30e5f878a368d9c09fb19bd1281d0c51d76808d5eb26b89
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.2.781600707.1675910025;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.2.781600707.1675910025undefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 321
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=dcb8986f-e182-4c09-b534-f146a50d60aa&sid=2cc980f0a82211ed815e5f5a9b1d9e79&vid=2cc9c010a82211ed846f6b56a752cf6c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&r=<=3090&evt=pageLoad&sv=1&rn=756845
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=dcb8986f-e182-4c09-b534-f146a50d60aa&sid=2cc980f0a82211ed815e5f5a9b1d9e79&vid=2cc9c010a82211ed846f6b56a752cf6c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&r=<=3090&evt=pageLoad&sv=1&rn=756845
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=dcb8986f-e182-4c09-b534-f146a50d60aa&sid=2cc980f0a82211ed815e5f5a9b1d9e79&vid=2cc9c010a82211ed846f6b56a752cf6c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&r=<=3090&evt=pageLoad&sv=1&rn=756845 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1CD9E7E346B56C09254DF55047406DB1; domain=.bing.com; expires=Tue, 05-Mar-2024 02:32:48 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 201C180074534843AF1090DA5D83787B Ref B: OSL30EDGE0212 Ref C: 2023-02-09T02:32:48Z
date: Thu, 09 Feb 2023 02:32:48 GMT
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?onload=onload
142.250.74.164200 OK 565 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onload
IP 142.250.74.164:0
File type ASCII text, with very long lines (899), with no line terminators
Hash 52d3d4bbedf1505d4797cd4c4a1c7dd9
6f5ff4dc1098062aa14e62b8ba80620d9b8bbc6b
e9bde7e7abc4095996ce081a788eaae3d86ffa0c0a83ea6eacb06d0f8fb7efd0
GET /recaptcha/api.js?onload=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 09 Feb 2023 02:32:48 GMT
date: Thu, 09 Feb 2023 02:32:48 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 565
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cb=61490069897997650term=value
44.236.162.197200 OK 4.6 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cb=61490069897997650term=value
IP 44.236.162.197:0
File type ASCII text, with very long lines (1892)
Hash cad2184b3df2d50fd0f2c45e599562b4
be03b4b18ae1c48131dc33c2fac9f1798e0c569d
82e3956e455cb817051cef9c6b907136720e2926898c554ebba8688b41cba9c3
GET /spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cb=61490069897997650term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Thu, 09 Feb 2023 02:32:48 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
one.pointlessplay.com/tracker/tc_imp.gif?e=37dfbd8ee84e00136debce35e34e8c959225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f671dd3d78f562f3b1bfb702651d26e8b34c1043301219101535c64565dc0ba394977be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c2d40760e5af2dd24627400a4ac4828dfadf37f94e80927197da2a2a3949d26b7cfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6335f51b07f3aeccf563bf08ba4299058ad5becdb07931c98903a9a7c7689da7e8f3b8d97a8fccaabbe7677a37beffea7242f61f8943cd2ef01a500025cb81e05c09282cf9eafd667927b80daa29e77d37d7638927f2782cbc2197686b337bc17e8ae5c9167a47e4c1466fc04822bf4f0805f88a01dfa4cbddd878c36dc1d537bf2631550715b7dcca96feb77e4feba028da94bdda00bffbfb9a42fd4e7b60d22699ee66352dca7060546e4eaeb6be6619bf840fdb47ba076a12d8711814594f762d51024e5ad8e746c2d6a1154744e0bb8b39e66d01ea5001f5123fca85d9dcd4e59bcfa8af8ae66d0fff8eed5a0bdfb595d20e919d7f00039d2073c448971576332e467bd2148b1b79836d424ae7199a13ecab00c9f7b0f26200562129ac7e1d23d7b55981d5789c18fe9c3960a50c0f4c42984c56166cace007e35eb9bb2523db4268643821ce33f870fd8ce1795a620b6ded1868a4d70eefe3a658573af8cb0ab14997251537add20112fe3f039ecbd508de8e4da48dfc4c26a5a254dac3cb504ac52b78868963241245f4035078506ffd46d36ed19a3a1af7c8ddd519e3036f6456e268de9cf0b5ce974fc8f10da05341e2af47b72c8e8926b9f0362c6c44bcbd7cfe392009a0b47287e9f6b3710d8c91e56ba20f5aa9069deafb35d0c38fb357e6a51984e0fb88be4190d823b32aad7f51d9687e1960775a83aed5636159903&cri=HHgidJPnkP&ts=451&cb=1675910025456
3.227.190.204200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=HHgidJPnkP&ts=451&cb=1675910025456
IP 3.227.190.204:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=37dfbd8ee84e00136debce35e34e8c959225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f671dd3d78f562f3b1bfb702651d26e8b34c1043301219101535c64565dc0ba394977be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c2d40760e5af2dd24627400a4ac4828dfadf37f94e80927197da2a2a3949d26b7cfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6335f51b07f3aeccf563bf08ba4299058ad5becdb07931c98903a9a7c7689da7e8f3b8d97a8fccaabbe7677a37beffea7242f61f8943cd2ef01a500025cb81e05c09282cf9eafd667927b80daa29e77d37d7638927f2782cbc2197686b337bc17e8ae5c9167a47e4c1466fc04822bf4f0805f88a01dfa4cbddd878c36dc1d537bf2631550715b7dcca96feb77e4feba028da94bdda00bffbfb9a42fd4e7b60d22699ee66352dca7060546e4eaeb6be6619bf840fdb47ba076a12d8711814594f762d51024e5ad8e746c2d6a1154744e0bb8b39e66d01ea5001f5123fca85d9dcd4e59bcfa8af8ae66d0fff8eed5a0bdfb595d20e919d7f00039d2073c448971576332e467bd2148b1b79836d424ae7199a13ecab00c9f7b0f26200562129ac7e1d23d7b55981d5789c18fe9c3960a50c0f4c42984c56166cace007e35eb9bb2523db4268643821ce33f870fd8ce1795a620b6ded1868a4d70eefe3a658573af8cb0ab14997251537add20112fe3f039ecbd508de8e4da48dfc4c26a5a254dac3cb504ac52b78868963241245f4035078506ffd46d36ed19a3a1af7c8ddd519e3036f6456e268de9cf0b5ce974fc8f10da05341e2af47b72c8e8926b9f0362c6c44bcbd7cfe392009a0b47287e9f6b3710d8c91e56ba20f5aa9069deafb35d0c38fb357e6a51984e0fb88be4190d823b32aad7f51d9687e1960775a83aed5636159903&cri=HHgidJPnkP&ts=451&cb=1675910025456 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=dad6a34058aeeedf603422cc3ab264b6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 09 Feb 2023 02:32:48 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1
13.107.42.14302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675910025118%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_2809530%2526utm_campaign%253DPRP_DJULBREG_2809530%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQK_A1R68eExOQAAAYY0BLJMwy-EC3P_Q-kZDYuk7sL6XJocq27Y1n48EASoo6qcTUSGIEn5Bolmmg; Max-Age=2592000; Expires=Sat, 11 Mar 2023 02:32:48 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIrfczddMVvLgAAAYY0BLJMNisEqCdltI8SEKn4bi3NPZfFxyNDB866tUcmLVYG0ddySSncI2i7ZN0QOBmbIQ; Max-Age=2592000; Expires=Sat, 11 Mar 2023 02:32:48 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&188a3ae3-438c-4aee-86b1-bdf60e6a85c5"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 09-Feb-2024 02:32:48 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675909968:t=1675996368:v=2:sig=AQGzj4XHLzLN72Uensrl8CTDkbZyenWP"; Expires=Fri, 10 Feb 2023 02:32:48 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0OzJYR5T3fD0EkVx8Gw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5F5978786DC54AB3AFB91D6E04DA8023 Ref B: OSL30EDGE0512 Ref C: 2023-02-09T02:32:48Z
date: Thu, 09 Feb 2023 02:32:47 GMT
content-length: 0
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=8239286011082;gtm=45He3280;auiddc=664195690.1675910025;u8=GA1.1.781600707.1675910025;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1
142.250.74.2200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=8239286011082;gtm=45He3280;auiddc=664195690.1675910025;u8=GA1.1.781600707.1675910025;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1
IP 142.250.74.2:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=8239286011082;gtm=45He3280;auiddc=664195690.1675910025;u8=GA1.1.781600707.1675910025;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
expires: Thu, 09 Feb 2023 02:32:48 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
54.230.111.42200 OK 105 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP 54.230.111.42:0
Hash 7296b6c8f8108cecc713e0df1dcacadd
32afc82c706cd81618cc4837bde4650a40b86a5a
50160213cd439a5c99951618e61da3e37ce8074486b55dc1c0e8d968bbb3ea45
GET /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Thu, 09 Feb 2023 00:07:10 GMT
access-control-allow-origin: *
cache-control: public, max-age=17998
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7wsNik1JqcoV-lt41ezTLdP_6o6oP8gKALloOQeysLMgFlmo1TGMyQ==
age: 8738
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2009%20Feb%202023%2002%3A33%3A45%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2009%20Feb%202023%2002%3A33%3A45%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Thu%2C%2009%20Feb%202023%2002%3A33%3A45%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:48 GMT
expires: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBFBb5GMCEIpw-555RWuBJDosBeVOc3AFEgEBAQGs5WPuYwAAAAAA_eMAAA&S=AQAAAmY3DQQJi58MXoovI32-_J0; Expires=Fri, 9 Feb 2024 08:32:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js
142.250.74.35200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (633)
Size 164 kB (163841 bytes)
Hash fe98364486b3206867b17008f995646f
35a5e9aa210970f7abd718d99e629c6982a3cc02
1fd703cb16e3f6f3f7192109d19c69d6e5ac1cfa0feb5b105a86564b7970d28a
GET /recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 08:53:11 GMT
expires: Wed, 07 Feb 2024 08:53:11 GMT
cache-control: public, max-age=31536000
age: 149977
last-modified: Tue, 31 Jan 2023 02:51:47 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 747bbf2337acb491b05d18a51597fbd9
3d6d0034c4df2c88cb2e6648d935f0bf9e13e0d9
23de6b29b8ae6ad5a47c9b612ca3c579c89e6882b71d817a97e87bf7748549d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2646
Cache-Control: max-age=163789
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Etag: "63e42dc7-138"
Expires: Sat, 11 Feb 2023 00:02:37 GMT
Last-Modified: Wed, 08 Feb 2023 23:18:31 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f16eecdd472f99af839e8e6dfc101bc0
33e345a8e9f776920b90dc78acefc457e15da35c
9a819ca8ca6890f29a418e976b224ae9095b72538324800f38eefc4d95050448
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
52.223.40.198302 Found 671 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
IP 52.223.40.198:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (671), with no line terminators
Hash 8dd34ce89aafbb652e9c5d6bbfcc3ef2
649068bbd0a6406f8c84995a6aee507bbc92c414
598e157ff5ddd41c0d929575aac2dfdff801a109fcd5123088893d8f5eb032e1
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 09 Feb 2023 02:32:48 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=41998cb7-bfaf-432a-aa27-611e81d3284f; domain=.adsrvr.org; expires=Fri, 09-Feb-2024 02:32:48 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.outbrain.com/cachedClickId?marketerId=undefined
70.42.32.223200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP 70.42.32.223:0
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 02:32:48 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 4eea5857635664f938fa719acee1f377
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=be5470bd-0c57-44ac-b235-1dce924d2b91&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=5dadb80a-aed7-496a-96ec-9a196bb2e6e7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29
104.244.42.131200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=be5470bd-0c57-44ac-b235-1dce924d2b91&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=5dadb80a-aed7-496a-96ec-9a196bb2e6e7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29
IP 104.244.42.131:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=be5470bd-0c57-44ac-b235-1dce924d2b91&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=5dadb80a-aed7-496a-96ec-9a196bb2e6e7&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:47 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167590996868424664; Max-Age=63072000; Expires=Sat, 08 Feb 2025 02:32:48 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167590996868424664; Max-Age=63072000; Expires=Sat, 08 Feb 2025 02:32:48 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_7K2CNyuqvRnkn/UNd6aWGA=="; Max-Age=63072000; Expires=Sat, 08 Feb 2025 02:32:48 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167590996868424664; Max-Age=63072000; Expires=Sat, 08 Feb 2025 02:32:48 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: c1e3165ab9110dd6
strict-transport-security: max-age=631138519
x-response-time: 107
x-connection-hash: 49d503c900e8567233513a5d1c76278fde3e63a589ee13d02685503cbf4d0b34
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&g=1&optOut=false&bust=06093383219976773&referrer=
70.42.32.223200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&g=1&optOut=false&bust=06093383219976773&referrer=
IP 70.42.32.223:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&g=1&optOut=false&bust=06093383219976773&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 02:32:48 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: b6b36ea6306c2ccd87970eb813ea7c06
accounts.google.com/o/oauth2/iframe
142.250.74.109200 OK 35 kB URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP 142.250.74.109:0
File type HTML document, ASCII text, with very long lines (1864)
Hash 46e0df1a0a941cc3222b4debb35c347a
6dd6a37b7afe5c05e4f36fd582fa4d9b5ef74c61
3d171fda50545a0b7db76b9376f54988c3fc07a530ce58e4e5a846deaa14e529
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Feb 2023 02:32:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-_p4sPXsWYfN-p74l2uccUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"IdpIFrameHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdpIFrameHttp/external"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="IdpIFrameHttp"
cross-origin-embedder-policy: require-corp
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1675910025823&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1675910025822.237726487&it=1675910025194&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1675910025823&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1675910025822.237726487&it=1675910025194&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1675910025823&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1675910025822.237726487&it=1675910025194&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 09 Feb 2023 02:32:48 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675910025118%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_2809530%2526utm_campaign%253DPRP_DJULBREG_2809530%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
13.107.42.14302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675910025118%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_2809530%2526utm_campaign%253DPRP_DJULBREG_2809530%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675910025118%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_2809530%2526utm_campaign%253DPRP_DJULBREG_2809530%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&liSync=true
set-cookie: bcookie="v=2&e792b7c9-856f-49cf-8e37-6e08e06dd568"; Domain=.linkedin.com; Expires=Fri, 09-Feb-2024 02:32:48 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202302090232486ccef5fa-0916-4ff8-8f3f-9d2dd9277d31AQH0BMELFj6ieBHOQGnqOMEMaI5G4W_H"; Domain=.www.linkedin.com; Expires=Fri, 09-Feb-2024 02:32:48 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzU5MDk5Njg7MjswMjGiDXwbS3qxbvHPAP6/MdEICDTCJfTCkKd2jZeadrSPIw==; Domain=.linkedin.com; Expires=Tue, 08 Aug 2023 02:32:48 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675909968:t=1675996368:v=2:sig=AQGzj4XHLzLN72Uensrl8CTDkbZyenWP"; Expires=Fri, 10 Feb 2023 02:32:48 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0OzJfrF6vFXqTUhOLkg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 72D03E662052447891BFAF2EA48C01E6 Ref B: OSL30EDGE0512 Ref C: 2023-02-09T02:32:48Z
date: Thu, 09 Feb 2023 02:32:48 GMT
content-length: 0
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675910025786&cv=11&fst=1675910025786&fmt=3&bg=ffffff&guid=ON&async=1>m=45be3280&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=664195690.1675910025&data=event%3Dconversion&gcp=1&ct_cookie_present=1
142.250.74.66200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675910025786&cv=11&fst=1675910025786&fmt=3&bg=ffffff&guid=ON&async=1>m=45be3280&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=664195690.1675910025&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP 142.250.74.66:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1675910025786&cv=11&fst=1675910025786&fmt=3&bg=ffffff&guid=ON&async=1>m=45be3280&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=664195690.1675910025&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 09-Feb-2023 02:47:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 83f94acf9db53e3f3efda637f69f85da
ef5e23703c13a1bf43524c23d33b5be1a3b21feb
53707cd0cafea206bc3b66ef2959f58c957c2a8003cbab039361df4fbcb28b0d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 02:32:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:54:22 GMT
Expires: Wed, 15 Feb 2023 02:54:21 GMT
Etag: "ef5e23703c13a1bf43524c23d33b5be1a3b21feb"
Cache-Control: max-age=519091,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7969325a3a211c12-OSL
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 02:32:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675910025779&cv=11&fst=1675910025779&bg=ffffff&guid=ON&async=1>m=45be3280&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=664195690.1675910025&data=event%3Dgtag.config&rfmt=3&fmt=4
142.250.74.66200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675910025779&cv=11&fst=1675910025779&bg=ffffff&guid=ON&async=1>m=45be3280&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=664195690.1675910025&data=event%3Dgtag.config&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2485), with no line terminators
Hash 03b00735ce38ce1c93a06a921c7b3770
18d539da3fcb87435694d36c8aebab2812c29e36
d0d3f94332e5d9db85f5145a06ac7912a9d9de6ff84b812ed33d86757ed38f16
GET /pagead/viewthroughconversion/745546367/?random=1675910025779&cv=11&fst=1675910025779&bg=ffffff&guid=ON&async=1>m=45be3280&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=664195690.1675910025&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 09 Feb 2023 02:32:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1056
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 09-Feb-2023 02:47:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1675910025118&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&475acbe6-3b15-45d9-8706-80c3fc8abaf3"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 09-Feb-2024 02:32:49 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2454:u=1:x=1:i=1675909969:t=1675996369:v=2:sig=AQEmVjMGB4YjnvXLNH054ufut_mHR3gg"; Expires=Fri, 10 Feb 2023 02:32:49 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX0OzJi14PO7gMGbL9xZQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4AAB5F679E854D139985AA9D2B44BC96 Ref B: OSL30EDGE0512 Ref C: 2023-02-09T02:32:49Z
date: Thu, 09 Feb 2023 02:32:48 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
3.227.190.204200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP 3.227.190.204:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1790
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=dad6a34058aeeedf603422cc3ab264b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Thu, 09 Feb 2023 02:32:49 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
3.227.190.204200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP 3.227.190.204:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1785
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=dad6a34058aeeedf603422cc3ab264b6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Thu, 09 Feb 2023 02:32:49 GMT
content-length: 0
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=781600707.1675910025&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22781600707.1675910025%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%22781600707.1675910025%22%2C%22dcm_gid%22%3A%2249986269.1675910025%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_2809530%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=781600707.1675910025&dcm_gid=49986269.1675910025&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cb=61490069897997650term%3Dvalue
54.245.46.233200 OK 1.3 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=781600707.1675910025&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22781600707.1675910025%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%22781600707.1675910025%22%2C%22dcm_gid%22%3A%2249986269.1675910025%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_2809530%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=781600707.1675910025&dcm_gid=49986269.1675910025&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cb=61490069897997650term%3Dvalue
IP 54.245.46.233:0
File type ASCII text, with very long lines (2702)
Hash b23a680943219c94c78a4cbd30f5febe
0e235e56008ca37ba68adba16cc9793ca8f27d02
5b5753a11085826d441c9c9c704c775fcdabda0cd5d231c68025ae40449b0300
GET /st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=781600707.1675910025&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22781600707.1675910025%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%22781600707.1675910025%22%2C%22dcm_gid%22%3A%2249986269.1675910025%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_2809530%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=781600707.1675910025&dcm_gid=49986269.1675910025&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&cb=61490069897997650term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 09 Feb 2023 02:32:49 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=0bbdb5e0-a822-11ed-9f38-6b2c505c3412;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=0&ssd=1&est=1675910025138&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1675910026754&vi=1675910025136&ri=e0e3a30d03c42da09fc2aaa0f10d7e48&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&ler=other
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=0&ssd=1&est=1675910025138&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1675910026754&vi=1675910025136&ri=e0e3a30d03c42da09fc2aaa0f10d7e48&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&ler=other
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1613&scd=0&ssd=1&est=1675910025138&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1675910026754&vi=1675910025136&ri=e0e3a30d03c42da09fc2aaa0f10d7e48&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 09 Feb 2023 02:32:49 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ww.steelhousemedia.com/gs
35.84.224.193200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP 35.84.224.193:0
File type ASCII text, with no line terminators
Hash 6b61d2e4441abe2bc6dc836f87e5db63
ff78f4a58c430febd4c9931cd926cf956afc1ee9
0171ade12a8a37bb7800890bfe413bdae1233b6b50f292045e9cf7ab61ac27df
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 09 Feb 2023 02:32:50 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
20.54.209.212200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
IP 20.54.209.212:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=ReToro HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13543
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:50 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://www.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1675910025145&data=%7B%22id%22%3A24%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675910025136%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675910025144%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.129.44200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1675910025145&data=%7B%22id%22%3A24%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675910025136%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675910025144%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.129.44:0
GET /1005612/trc/3/json?tim=1675910025145&data=%7B%22id%22%3A24%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675910025136%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675910025144%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 09 Feb 2023 02:32:48 GMT
via: 1.1 varnish
x-served-by: cache-bma1647-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675909968.353731,VS0,VE100
vary: Accept-Encoding
x-vcl-time-ms: 100
X-Firefox-Spdy: h2
match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
52.223.40.198200 OK 0 B URL HTTP/2 match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
IP 52.223.40.198:0
GET /track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_2809530%26utm_campaign%3DPRP_DJULBREG_2809530%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 02:32:48 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=48799fef7c05a47a0f9818c8b9cdc4a5_35c887eeebaa8ae423a50443e409a51a&totalBulks=1
2.18.173.108200 OK 0 B URL HTTP/2 api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=48799fef7c05a47a0f9818c8b9cdc4a5_35c887eeebaa8ae423a50443e409a51a&totalBulks=1
IP 2.18.173.108:0
GET /sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=48799fef7c05a47a0f9818c8b9cdc4a5_35c887eeebaa8ae423a50443e409a51a&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:486a9dd7-b5cc-49fa-ae5e-a2ea9ee3e36e
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 317487
cache-control: public, max-age=1209600
expires: Thu, 23 Feb 2023 02:32:43 GMT
date: Thu, 09 Feb 2023 02:32:43 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2