onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2
301 Moved Permanently 0 B URL HTTP/1.1 onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2 HTTP/1.1
Host: onlinetopchoice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 27 Mar 2023 11:46:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 27 Mar 2023 12:46:17 GMT
Location: https://onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KpylkA5ndzU9Vw7HXSQiaPsThRsP2kYmJRvY%2B8JzbhdN0NZ4shobHLk4QQvEFctawsWk0ffuiuJ5acwR6EBYbQBXLUrhyhaDWMK9hrx6oT0agCBZNHg%2F5m7oiSDcBfp%2BNGwGuCKe"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae7645c2e22b511-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c83d39f350161ed2f5d20dcd68e47c92
2695a888e652cb314f8094cc6073c3364336d272
62e5cc6aea61c3c32acd964d4bbe143806416008181eebc4451a8f035b69a0bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62E5CC6AEA61C3C32ACD964D4BBE143806416008181EEBC4451A8F035B69A0BC"
Last-Modified: Mon, 27 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11905
Expires: Mon, 27 Mar 2023 15:04:42 GMT
Date: Mon, 27 Mar 2023 11:46:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18739
Expires: Mon, 27 Mar 2023 16:58:36 GMT
Date: Mon, 27 Mar 2023 11:46:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ad3eec59bebbf969f175627757507c1
b176af3a70db378c9e1f219bab24d9d446070d6f
704fa284035b4c9aa487331b516f5f11c324e204756ae2503bad2606ed34f25e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "704FA284035B4C9AA487331B516F5F11C324E204756AE2503BAD2606ED34F25E"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10616
Expires: Mon, 27 Mar 2023 14:43:13 GMT
Date: Mon, 27 Mar 2023 11:46:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 27 Mar 2023 11:15:42 GMT
content-type: application/json
age: 1835
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kIGcfCgFcAAR2xIqT7b1+OUIHiqrvcy8D9aHu/1flAgOI7+XMq9XVhwJlNFb3JtWp4mWnT6mU2FgvwL7A6q6FQ==
x-amz-request-id: DMKBX8HRS9C68CD4
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 27 Mar 2023 10:55:45 GMT
age: 3032
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 11:46:18 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 27 Mar 2023 11:14:35 GMT
age: 1903
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2
302 Found 210 B URL HTTP/2 onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 0f5f41f9da019531095d7c26547a47aa
e24d70ba406c6a425d481016ef0e3116370fd13c
086395d427ebbb11033e36e5da017e27cae92989a2a156be197be0463e677e88
GET /go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=w074ncln2t3h93jn2b9gncbe&pl=2 HTTP/1.1
Host: onlinetopchoice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 27 Mar 2023 11:46:18 GMT
content-type: text/html; charset=UTF-8
location: https://med.etoro.com/B13050_A99511_TClick_SMFTN.aspx
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: no-cache, no-store, must-revalidate, max-age=0
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jMS13kz0c%2BM2NPEdWHDL8yoVqTLMrMCNO46tqEmUj94pGD4A8IqfyH9jBl3F5LLvIUygUU4rqz0Cfha2iWcIHbNk1XPN7aVUVIgjvXU6lvGo27otzc261lNa24OpdwWIj1TAiX14"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae7645dfa7e1c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
Expires: Mon, 27 Mar 2023 11:46:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 27 Mar 2023 11:46:18 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com/lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term=
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Mon, 27 Mar 2023 11:46:18 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 27 Mar 2023 11:46:18 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=1hmwe2opeualoavtvwyjzgij; path=/; HttpOnly
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Fri, 26-May-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=13050&a=99511&task=click&subaffiliateid=mftn; domain=.etoro.com; expires=Wed, 26-Apr-2023 00:00:00 GMT; path=/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da5340ee69a1000f751686df9e716663
a5da880a61ed119790a7990bbdcc0c97eecf04f2
d1ff10bfe40f290935abe1feeb975a6af8cf310f9ce9d45bbf482a604da73560
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1FF10BFE40F290935ABE1FEEB975A6AF8CF310F9CE9D45BBF482A604DA73560"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2583
Expires: Mon, 27 Mar 2023 12:29:21 GMT
Date: Mon, 27 Mar 2023 11:46:18 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZDc3KAbJV9JEpNNbQgPhEg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bkfE6JzYYgQob4e0N5b0gKUqDU8=
marketing.etorostatic.com/lp/signup2017/v2/images/logo_g.png
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/lp/signup2017/v2/images/logo_g.png
IP
File type PNG image data, 111 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f2b33a199e335acfabfb40a77635b81
717b1dd9ebf751004a96e61e61f3e15d72073da0
974be4e3d18b0e19d5901e639b9b9ab9b7411fe896898a64a1a94e978904c58b
GET /lp/signup2017/v2/images/logo_g.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xpro9OOan2tRA9pMlIdqvT11vRdnSh5x7h2pZNMVyqaCpiobXhl+LE7w0dS1WS2RUP++B4ICJ9M=
x-amz-request-id: YCPETDGRJQNWF3NH
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Feb 2017 10:06:17 GMT
etag: "6f2b33a199e335acfabfb40a77635b81"
x-amz-meta-s3b-last-modified: 20161207T175255Z
x-amz-version-id: p_uN7jIMXFRGmQvxtHYrB6VuP70Y1U8C
accept-ranges: bytes
content-type: image/png
content-length: 2165
server: AmazonS3
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:19 GMT
date: Mon, 27 Mar 2023 11:46:19 GMT
X-Firefox-Spdy: h2
cdn.etorostatic.com/latest/js/embed/sign-up.js
302 Found 94 B URL HTTP/2 cdn.etorostatic.com/latest/js/embed/sign-up.js
IP
File type HTML document, ASCII text, with no line terminators
Hash 6ba0726e4e19bc6cec5cc9cf28b3fa8d
9ae0e7b02eaf99fac43e78774b5a0d07a383dcaf
a54c850477fbf9b90afcc757bd38aabf72b1c0edbd6844a891ed02d729773693
GET /latest/js/embed/sign-up.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
location: /481.0.5/js/embed/sign-up.js
content-encoding: gzip
content-length: 94
date: Mon, 27 Mar 2023 11:46:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/481.0.5/js/embed/sign-up.js
200 OK 4.8 kB URL HTTP/2 cdn.etorostatic.com/481.0.5/js/embed/sign-up.js
IP
Hash 39bb2f04d63e424bfd6a49099d28c00f
1cee06b1e0bce3ea0233187bd1115fadbf242361
c3602673b25f6224d50929dc8cd401549ee1c7a07830672ba466ce4cf5b0457a
GET /481.0.5/js/embed/sign-up.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "Yv88pf8Zo0uJADySfztXLQ=="
content-encoding: gzip
content-length: 2071
cache-control: public, max-age=18404135
date: Mon, 27 Mar 2023 11:46:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
marketing.etorostatic.com/lp/signup2017/v2/images/flags.jpg
200 OK 5.6 kB URL HTTP/2 marketing.etorostatic.com/lp/signup2017/v2/images/flags.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 180x13, components 3\012- data
Hash 9eac13118e7c1f46fef6251732cae4bd
a27d2fc14ba890ba7362185cf329a1ab672f36f8
5dc573078db86035bda8e87a9deefa593766b377787e004e11a68b49f85a0891
GET /lp/signup2017/v2/images/flags.jpg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TCsbdH87NsAd2MAhxbd06L/aR1tlGWgXIPvtvGj2tUYyZK7UN0Zqy56bps1KnP+eHabqn7nuTKk=
x-amz-request-id: HSB540855CXB28DG
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Feb 2017 10:06:16 GMT
etag: "9eac13118e7c1f46fef6251732cae4bd"
x-amz-meta-s3b-last-modified: 20170126T143245Z
x-amz-version-id: _ZVfN_9X5YjXvEbf13I.YKwJfQaMSTjU
accept-ranges: bytes
content-type: image/jpeg
content-length: 5561
server: AmazonS3
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:19 GMT
date: Mon, 27 Mar 2023 11:46:19 GMT
X-Firefox-Spdy: h2
cdn.etorostatic.com/544.0.2/js/integrations/embed/registration/registration.js
200 OK 482 kB URL HTTP/2 cdn.etorostatic.com/544.0.2/js/integrations/embed/registration/registration.js
IP
File type ASCII text, with very long lines (46663)
Size 482 kB (482259 bytes)
Hash 68be17d670e487375cc99bb61c0e873a
58b20bc0cb8c086f9aa5a169480cf0f2bfe7508d
56d741d200399f0a51a8b45f64b18c708e1113c3036e92878fc6230b3350b4a1
GET /544.0.2/js/integrations/embed/registration/registration.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "Bh3t7pEhrVd0Fex+iIM7sA=="
content-encoding: gzip
content-length: 482259
cache-control: public, max-age=31184007
date: Mon, 27 Mar 2023 11:46:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9461
Expires: Mon, 27 Mar 2023 14:24:01 GMT
Date: Mon, 27 Mar 2023 11:46:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9461
Expires: Mon, 27 Mar 2023 14:24:01 GMT
Date: Mon, 27 Mar 2023 11:46:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9461
Expires: Mon, 27 Mar 2023 14:24:01 GMT
Date: Mon, 27 Mar 2023 11:46:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F217b24c4-6cf4-4be4-bdbf-764890bd9672.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F217b24c4-6cf4-4be4-bdbf-764890bd9672.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8cc79a830964d923d24a45f5ccc9939b
557cc4827414912c41319ad961c14cce71ed4a18
b3b1c73b34057cb6e41920f3d55213ad8c193076525767c051960ec26d17ca3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F217b24c4-6cf4-4be4-bdbf-764890bd9672.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4775
x-amzn-requestid: 28d0e56d-ed03-4686-bd49-34f193f1c65a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK96KF9coAMFvMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa9da-122cd32a6f23e8442a52464c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:10:18 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: F03oSAwgUrcVqWUUt9uaapaCtWSDLrmDlz142D4DtYYctMpy5nA3qA==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 16:38:20 GMT
age: 68880
etag: "557cc4827414912c41319ad961c14cce71ed4a18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4429ed9b-a655-45dc-a59b-78db53c9c2f6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4429ed9b-a655-45dc-a59b-78db53c9c2f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e999a9d79efe60a30b2942c5f2940294
c3891c43b16521f66eb3a52d83694de2ddd39871
290ed1232883a4ec63ef42c30f40b819983c5544e35261d2d1e0d1e55d0c8b07
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4429ed9b-a655-45dc-a59b-78db53c9c2f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12017
x-amzn-requestid: 4f61a0c7-4b18-4289-b47c-eeeff93d873f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ca6yQGNtoAMFsxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64210b41-350e4e2425d9606e478872b5;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 03:19:29 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: TCzHm5qTtnAUDSmayc-LLFmDfV7o6PaaYYfVtN_w7cC3o66HCa3DEg==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 03:34:08 GMT
age: 29532
etag: "c3891c43b16521f66eb3a52d83694de2ddd39871"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d7ce900-ce9b-481b-9205-9748eeded2e8.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d7ce900-ce9b-481b-9205-9748eeded2e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 22905e8a7c8b1741dd51842c114a6517
c5900fe2396e0ca371c4847af4e96149850c3577
1525f9f39c09370fcb1f58f079f2d741a4c6d13fba26e6dd5b79466153d7685e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d7ce900-ce9b-481b-9205-9748eeded2e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10405
x-amzn-requestid: 0b8dad7a-2ec1-4eed-9a2c-06079ed46662
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRi69E9xoAMFiJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d4b79-2f606ac041c5db24583c8d51;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 07:04:25 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: qbbEi0tXZLKo6qjrbJMtTHdhWziYrLrgzY1hzt_LrQJoeDDBbJnZBA==
via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 07:49:08 GMT
age: 14232
etag: "c5900fe2396e0ca371c4847af4e96149850c3577"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1ec08d4bd079a92161fc80f41281b5a9
bf61369962342cce85de8f48942b4b150fd2721e
8a8ed12c31d89d71c3cb88f0813ded83939529206461e917dcb0b8bc11abdda4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3589
x-amzn-requestid: 9c09af43-79e8-4734-b28b-4194e0bb1e4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1uyE2joAMF50g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6991-7607d33f6301182b591c56e8;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:21 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: pjRA439kqSg5daR_Zuvsf2l45R4oqv3AMWNiMCGQ_C5o2KA8kEd3TQ==
via: 1.1 46673955829b59a6da0ab071e0b7fbea.cloudfront.net (CloudFront), 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 21:53:16 GMT
age: 49984
etag: "bf61369962342cce85de8f48942b4b150fd2721e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08096a44-ba77-41a2-a4ac-0f06204be981.png
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08096a44-ba77-41a2-a4ac-0f06204be981.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 20047337336b1101727717972decfc5e
73423dd11172dea2f48d8d29b0218ee4e7d05ca0
c5820d8739ad2c80f2248974a3fc0452776ede76f517958fa7efdb2139001f96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08096a44-ba77-41a2-a4ac-0f06204be981.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8891
x-amzn-requestid: 67fc02b0-2382-46bc-83a2-ac1d5c69b434
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CYJXGFDZoAMFb9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641fef60-34353ddb674de73a438738c5;Sampled=0
x-amzn-remapped-date: Sun, 26 Mar 2023 07:08:16 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 1rmUDxPWQtM6wzafHtqUwU4OfULHTd3M_KT4ehtmBP6NYD5g6HR2UQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 03:16:49 GMT
age: 30571
etag: "73423dd11172dea2f48d8d29b0218ee4e7d05ca0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: vOBDFA2LzOIp_0dMXApotrithfiToWtpM2xMRyx1pWAE86olKT6EpQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 09:22:12 GMT
age: 8648
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 103 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35310)
Size 103 kB (102766 bytes)
Hash 88bfaf70f29b6aff9220c8eea6e1c39d
23d21e6ef714c63a3b1d2ee2b5b754d9f6512ec6
cfc37f0eb72875eda728fc1de5a4b59d4f43ec977cfc07458ffe44c67b7951fc
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Mon, 27 Mar 2023 11:46:20 GMT
cache-control: private, max-age=900
last-modified: Mon, 27 Mar 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102766
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
content-length: 2209
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5b21211f5d1af92f9e60dc83f0ccd8f7
04de976f011d979c95262f985675c3a5dddc4e20
6f72e2a902bd7c5ac35cb9a59a905bfe6a1154163c16c5967acfdd9be7b54a0f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6452
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Last-Modified: Mon, 27 Mar 2023 09:58:48 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
200 OK 17 kB URL HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
File type Unicode text, UTF-8 text, with very long lines (39267)
Hash d1e2e5f784ff10d3ca84077fb67f921d
637e871007455a0af34129e9a12ea64479d697e4
5ae855137e2620e8df8bcbb9550ea836fa17e37e5e800152cc922ae0d9b525a4
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1678988607496"
Last-Modified: Thu, 16 Mar 2023 17:43:27 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Mon, 27 Mar 2023 11:46:20 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 32 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 599a8a3b68f3d673480701ad841428a0
4426d5fc5b2d1edbe92867cbc6a4b111b11c7ee8
c21878edb5c3e495052218cb29170927c18030aad51917a866d9858ac3569274
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 32099
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Mon, 27 Mar 2023 09:15:34 GMT
expires: Mon, 27 Mar 2023 21:15:34 GMT
etag: "15974-R8MUvAeoR/8S2daDo+RSWCCkdX4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fums9AY5BNTLIr1GtOjcPn0twI6IQBQjAnyzWp77UZajNP0pr0lt-g==
age: 9046
X-Firefox-Spdy: h2
cdn.etorostatic.com/544.0.2/css_files/?p[]=styles/style.css
200 OK 279 kB URL HTTP/2 cdn.etorostatic.com/544.0.2/css_files/?p[]=styles/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 279 kB (278774 bytes)
Hash 0bf250b9db10a36b64a817a7c95e37d0
87df453a39bc0a4e9b550d0eee6fb5a423a8cf76
66c094bcc86f582d9f33156028db18ecd7d93ba2142fbbde5620e447980eee05
GET /544.0.2/css_files/?p[]=styles/style.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "5XDUjeeyAVIMKIa9AeeMOA=="
content-encoding: gzip
content-length: 278774
cache-control: public, max-age=31183911
date: Mon, 27 Mar 2023 11:46:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (31112), with no line terminators
Hash ced43b482bc1e51ed1bccdc98f089862
3459a7c7ff82b6240b5fc31787365ce633680a50
978404ad8ad5ff756892de874487f8de79bb68bbb9b7c4b137d9f91f6977f8b4
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13327
server: CloudFront
date: Mon, 27 Mar 2023 11:46:20 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Tue, 28 Mar 2023 10:06:41 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l_38jfaDZFooXicDAFGB8jjLy45FSS_yw_Vzm1VzE4ZdTDKlP-8X-g==
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
200 OK 377 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5c4699717e2af42d1674a9008ffbfe85
cf2ee13be98793210c3b2c8eec66ac830510ebe1
d608b0e2406e7ee895c50292d358d848267796d637eaa16a6a6144dc14ed7bd8
GET /web-client/et/img/registration/i_fb.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Q8CEaY6a3UJ8HgVnKvuo+Cq1jtPaLboCQgJPgg/5Oqztjxd7Doc2/AnaD4IYgi+cGt2LYXKJRVY=
x-amz-request-id: T4H199ND35XVJCF2
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
200 OK 645 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b8f3342ef1ebe6f5c64bafff3131548
99b5ac271a65175ff24696d9a24c9ebda02b71fc
fc1f1deaf7d4759c0a6e573a65f7961733cbf05f66f93c44511881dd0b471596
GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rpPTwOu0pDtkTZdoPd7yU4ncwWLLg0TCgE5/bjZsIn5WGw732imkFJu+NhymSUY9gZyKA7zbcys=
x-amz-request-id: 8VEADDHMEWHAZMD5
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=63fe5c0c-7f8e-462e-8782-3f713258919c
200 OK 1.5 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=63fe5c0c-7f8e-462e-8782-3f713258919c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 63cef4e6cfa61992fc2ef740353a6215
62181e33a58d5d220a1346974145dcce39b423ea
0d00919723aa25df1d7ef980698c420e706488ceb8f8098033e2b2d268da35b4
GET /web-client/recaptcha/index.html?guid=63fe5c0c-7f8e-462e-8782-3f713258919c HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: FxBWOR/fjuKc+liaCjNbANgnRvdCXzJ4TggjaK9J8Iolg23MIdp7PKnUBUaOEnWwsj2KPVMXluU=
x-amz-request-id: 2SPZ1CQKHNKS1JZN
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Oct 2020 10:42:40 GMT
etag: "ef2039619799b54abf85f25976ff7199"
x-amz-meta-sha256: 349fb58237f7f8abb11e68632be1859f31c19fa4fa6a64d143ec18f7f6d59cf3
x-amz-meta-s3b-last-modified: 20201004T104155Z
x-amz-version-id: 9jyXMd7S_i_.xXnWVDXRZHjUkqd_s38N
accept-ranges: bytes
content-type: text/html
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
content-length: 1547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Hash e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jhOnM69WpoiV8oSTTNXetipBb7pUc9tS6FuF/XnPxNUwhBi6Q+ANBt25PNF2dXvmEtDCkoFPZ5g=
x-amz-request-id: F37B07A5E1D6416F
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-type: application/octet-stream
content-length: 59600
server: AmazonS3
cache-control: max-age=2592000
expires: Wed, 26 Apr 2023 11:46:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
200 OK 61 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Hash 96f3835aa784a280a0e1e7fa64b97b60
1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MiVZL/kbY13iBYmpteEVq6ia/0McBnVUjv9Gv+aG6n8LoAYr3bu/dyvs1kxqWcreHhbAxj7nY7w=
x-amz-request-id: P84TFZ8HCEYTJMA2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61036
server: AmazonS3
cache-control: max-age=2592000
expires: Wed, 26 Apr 2023 11:46:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 27 Mar 2023 02:11:41 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 71jNJPJJFrds45H4IbnK746FGK94XCIavzpRMariiiQ3bB2ZtD0UQA==
Age: 34480
api.etorostatic.com/sapi/app-data/web-client-locales/en-gb.js?cv=30978f1fe138b1189acd6d7961de8ac6_909ab4721ac4dd7b27471e5f020cad92
200 OK 395 kB URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client-locales/en-gb.js?cv=30978f1fe138b1189acd6d7961de8ac6_909ab4721ac4dd7b27471e5f020cad92
IP
File type Unicode text, UTF-8 text, with very long lines (65425), with no line terminators
Size 395 kB (395231 bytes)
Hash 95d5e3fcf3365ce8882d417ae97fad96
7c5a835cea40cf4e7da6027af6ced8959741e546
2bc3637abedb8ee81083752ceb90fe51dd2bb834a2325852c76b23ac5af88691
GET /sapi/app-data/web-client-locales/en-gb.js?cv=30978f1fe138b1189acd6d7961de8ac6_909ab4721ac4dd7b27471e5f020cad92 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/octet-stream
etag: W/"681917dd5c10df35672c5a01b401fede"
last-modified: Mon, 27 Mar 2023 10:21:31 GMT
x-amz-id-2: 8t8aKWk7C01x1TDTmIUEO85DQcyKixfBO63gq7Zy2nRNIesix8mfEQc5/XR+ffk0w1iEZOtbNjQ=
x-amz-replication-status: COMPLETED
x-amz-request-id: ZY24376PF3WF8E23
x-amz-server-side-encryption: AES256
x-amz-version-id: otbTdy2NdHlz1BV4gULMMpEBlDjkm0_L
content-encoding: gzip
x-robots-tag: noindex
content-length: 395231
cache-control: public, max-age=1209600
expires: Mon, 10 Apr 2023 11:46:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
9944765.fls.doubleclick.net/activityi;src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49?
200 OK 445 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1017), with no line terminators
Hash a1b6cc47c5cd9e8ce4dff68d3d31eed0
2aec2148be833467cbd56476d8e50872dd0117bc
075942fa2b329459647ae38789a8aa2e61ec8df6794d53a529a06338287c893c
GET /activityi;src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49? HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 445
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 12:01:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 27fdf62f599da29e1a5ee3a710d0e4b9
68e7dbcf0f16a57f66b205734dd34eda12dab4ec
43501f2a262d237274b56bca89d4b31a0d083dcb45162366a92c65edb0aad485
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4136
Cache-Control: max-age=93184
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Etag: "64203ae4-1d7"
Expires: Tue, 28 Mar 2023 13:39:24 GMT
Last-Modified: Sun, 26 Mar 2023 12:30:28 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:20 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 09e13d06974ecf2eab3daa3a832a5d7d
03de1def670193609161cf2406beffb48068de05
f7b01ee0eff6002476ea8b320e01757489414f0a8ce4b36a77ae57f180a72796
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6204
Cache-Control: max-age=157577
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Etag: "64212e59-1d7"
Expires: Wed, 29 Mar 2023 07:32:37 GMT
Last-Modified: Mon, 27 Mar 2023 05:49:13 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
c0.adalyser.com/tracking/track/v3/p?stm=1679917598619&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&refr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cid=etoro&p=%7B%22et%22%3A1679917598616%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2299511%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22MFTN%22%2C%22co%22%3A%2213050%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22f30116df-3c4e-43a2-a56e-d47c73059da5%22%2C%22duid%22%3A%2295d76e4e-0167-4769-b995-682884bac787%22%2C%22cw%22%3A1679917598616%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1679917598619&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&refr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cid=etoro&p=%7B%22et%22%3A1679917598616%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2299511%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22MFTN%22%2C%22co%22%3A%2213050%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22f30116df-3c4e-43a2-a56e-d47c73059da5%22%2C%22duid%22%3A%2295d76e4e-0167-4769-b995-682884bac787%22%2C%22cw%22%3A1679917598616%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1679917598619&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&refr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cid=etoro&p=%7B%22et%22%3A1679917598616%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2299511%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22MFTN%22%2C%22co%22%3A%2213050%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%22f30116df-3c4e-43a2-a56e-d47c73059da5%22%2C%22duid%22%3A%2295d76e4e-0167-4769-b995-682884bac787%22%2C%22cw%22%3A1679917598616%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:20 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aacadb94b44e557195c202f9eac3d422
ae45e0a668927354b659a0050ec4f37421acfc12
e3efec2ec99be9c753808134094e95ea88d59e2898a180327a5a0818050a3859
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 09e13d06974ecf2eab3daa3a832a5d7d
03de1def670193609161cf2406beffb48068de05
f7b01ee0eff6002476ea8b320e01757489414f0a8ce4b36a77ae57f180a72796
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4115
Cache-Control: max-age=155488
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Etag: "64212e59-1d7"
Expires: Wed, 29 Mar 2023 06:57:48 GMT
Last-Modified: Mon, 27 Mar 2023 05:49:13 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
www.google.com/recaptcha/api.js?onload=onload
200 OK 568 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onload
IP
File type ASCII text, with very long lines (899), with no line terminators
Hash 63c79d67f09d6e1b1103d0f069ea6f06
184d61e26b579e8aefbf84924444c0d961d9e420
469ad8d7d6066d5e0a52a6bdde4892a6dfcbf67031ab44e8ed0eea5fb5843414
GET /recaptcha/api.js?onload=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 27 Mar 2023 11:46:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 568
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=b2b7b5c0-746d-4592-a09a-6e72ca6f4f05&u_sclid=63a26ac2-283c-4926-b19f-c01df5ec2c23
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=b2b7b5c0-746d-4592-a09a-6e72ca6f4f05&u_sclid=63a26ac2-283c-4926-b19f-c01df5ec2c23
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=b2b7b5c0-746d-4592-a09a-6e72ca6f4f05&u_sclid=63a26ac2-283c-4926-b19f-c01df5ec2c23 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:20 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 759
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:20 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ0AIQgDwIlIKLxix/FRpmB478JqZBplw02++lN4cGVzeU3VexzdmEEixtLWB+pnDUMyAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 5
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
200 OK 444 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1016), with no line terminators
Hash bcde80fab93ac09ca8b10f76f074683a
48793c562efa621d5473178d9fb82f4287dcbd19
0e27f023714f1cba395138846729647be46f80934d904a956f6b354e81979007
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 444
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 299 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (600), with no line terminators
Hash cce57c047e7f75fd554166059e96616f
a9efe86b1c06d9c976d5874c22e668dfc02246be
a85276e714ad66cfe59844a1b667e0204824c5c5402c3ab6ecd819836c47f313
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 299
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 09e13d06974ecf2eab3daa3a832a5d7d
03de1def670193609161cf2406beffb48068de05
f7b01ee0eff6002476ea8b320e01757489414f0a8ce4b36a77ae57f180a72796
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6024
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Last-Modified: Mon, 27 Mar 2023 10:05:56 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/vpEprwpCoBMgy-fvZET0Mz6L/recaptcha__en.js
200 OK 166 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/vpEprwpCoBMgy-fvZET0Mz6L/recaptcha__en.js
IP
File type HTML document, ASCII text, with very long lines (597)
Size 166 kB (166058 bytes)
Hash 4043af37a3392a9db521ff9ab62d9608
83828688e7a2259ed2f77345851a16122383b422
ee076822f35390ee382cda71759a2eec8f4db2bc18e4e3acd586173c29dab321
GET /recaptcha/releases/vpEprwpCoBMgy-fvZET0Mz6L/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166058
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Mar 2023 11:09:56 GMT
expires: Tue, 26 Mar 2024 11:09:56 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Mar 2023 04:02:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 2184
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=3302116885801;gtm=45He33m0;auiddc=1314651643.1679917598;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Mon, 27 Mar 2023 11:46:20 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Mon, 27 Mar 2023 11:46:20 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1679917598437&hl=1&op=0&ag=1317291471&rand=947987702907726665829550067622208221198121212972672525062527215102151012790&fs=1268x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%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%3D&dep=1&pre=0&sdd=%7B%7D&cri=Q910X5DcAi&pto=1016&ver=50&gac=-&mei=&ap=&duid=1.1679917598.g39GAWKPSC6QxUVG&suid=1.1679917598.TfcHeB9H09MDkXHD&tuid=1.1679917598.fjFaNdcvpHlHwl4U&fbc=->m=WyJHVE0gZXZlbnQgdG8gR0EiXQ%3D%3D&it=54%2C793%2C95&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.1 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1679917598437&hl=1&op=0&ag=1317291471&rand=947987702907726665829550067622208221198121212972672525062527215102151012790&fs=1268x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%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%3D&dep=1&pre=0&sdd=%7B%7D&cri=Q910X5DcAi&pto=1016&ver=50&gac=-&mei=&ap=&duid=1.1679917598.g39GAWKPSC6QxUVG&suid=1.1679917598.TfcHeB9H09MDkXHD&tuid=1.1679917598.fjFaNdcvpHlHwl4U&fbc=->m=WyJHVE0gZXZlbnQgdG8gR0EiXQ%3D%3D&it=54%2C793%2C95&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3222), with no line terminators
Hash db19ae50e4afb4381be22610cebfe8a8
add17cb15f2711742a95b5d9a5ec371b9091dc34
ca74dbc4ca1589b332462db26133234a6b08135b7f0b125443209564f6228eff
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1679917598437&hl=1&op=0&ag=1317291471&rand=947987702907726665829550067622208221198121212972672525062527215102151012790&fs=1268x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%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%3D&dep=1&pre=0&sdd=%7B%7D&cri=Q910X5DcAi&pto=1016&ver=50&gac=-&mei=&ap=&duid=1.1679917598.g39GAWKPSC6QxUVG&suid=1.1679917598.TfcHeB9H09MDkXHD&tuid=1.1679917598.fjFaNdcvpHlHwl4U&fbc=->m=WyJHVE0gZXZlbnQgdG8gR0EiXQ%3D%3D&it=54%2C793%2C95&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Mon, 27 Mar 2023 11:46:20 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=85fb3d7fd0892ee06fb35b58c0dd7df1; Max-Age=29030400; Path=/; Expires=Mon, 26 Feb 2024 11:46:20 GMT; HttpOnly; Secure; SameSite=None
content-length: 1084
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (40607), with no line terminators
Hash 04651bf0c51742f9007b1ae2b4486dee
6ffc71fcb5db1cf0283b60150a62f2c219ac3dbd
5d7392c44731e52810337eb1a3eb3ae1ffab31b8f8d55daba20d658701604666
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11894
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 16 Feb 2023 18:31:53 GMT
accept-ranges: bytes
etag: "8072cff03442d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7EB8B5E16A8147908C83020D75E77A70 Ref B: OSL30EDGE0321 Ref C: 2023-03-27T11:46:20Z
date: Mon, 27 Mar 2023 11:46:20 GMT
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 6.4 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (20183), with no line terminators
Hash 8fe038c10fe586e30698a6644ccd26e0
62311d0a818b84d8ce467e7d9a4fa2d7653a4d35
402c14d42c932eb09b7932fd384f7b921679e3142ed79c356f03f84c4958f290
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "f5b26a8a79c33830b47954a53cc355f9:1679753797.689802"
Last-Modified: Sat, 25 Mar 2023 14:14:18 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Mon, 27 Mar 2023 12:06:21 GMT
Date: Mon, 27 Mar 2023 11:46:21 GMT
Content-Length: 6385
Connection: keep-alive
X-RG: EU
X-CC: NO
ocsp.digicert.com/
200 OK 727 B IP
Hash 35bb21cf6d26a46a96fc8b56491cc6ac
41ccd708f90d174a381f87b6467073658fb5b4ae
7ad6247d4a2ba5d5090cfae25fc2d7f87663c735ce9568dc6144cd4cd10fbf91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3900
Cache-Control: max-age=126106
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Etag: "6420bc6b-2d7"
Expires: Tue, 28 Mar 2023 22:48:07 GMT
Last-Modified: Sun, 26 Mar 2023 21:43:07 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5610
Cache-Control: max-age=105138
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Etag: "642063d5-1d7"
Expires: Tue, 28 Mar 2023 16:58:39 GMT
Last-Modified: Sun, 26 Mar 2023 15:25:09 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5574
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Last-Modified: Mon, 27 Mar 2023 10:13:27 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 27 Mar 2023 10:05:11 GMT
expires: Mon, 27 Mar 2023 12:05:11 GMT
cache-control: public, max-age=7200
age: 6070
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a873365aef9f63848ddfa6ab7de5ca4
ba556722f3daebf2b21e033f667978b4e470212b
1dfd02f9c3423ed27543bed03b2fe1fe8c8d475c851a5b32a21d9f0224676acf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
200 OK 18 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP
File type ASCII text, with very long lines (755)
Hash 88d2a3d8f79473a7ff0b5302ebfc5467
742540c47a9952aa7ee8c9d509afcc450843bb52
e8673608e650c1c47a6980bc6025d04a7e1891431a91424ef503d87117d1167c
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvwmwvabbLIIij-S-SZxQ8kjziAOuqYvBoJKs0g9z5KAWmwNzEOh_XimLNYqCfUE0-6mUQrgWauqIitbeqzEZ1O
x-goog-generation: 1679684874111783
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17668
content-encoding: gzip
x-goog-hash: crc32c=UgEUpw==, md5=iNKj2PeUc6f/C1MC6/xUZw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17668
access-control-allow-origin: *
server: UploadServer
date: Sun, 26 Mar 2023 20:05:12 GMT
expires: Mon, 27 Mar 2023 20:05:12 GMT
cache-control: public,max-age=86400
age: 56469
last-modified: Fri, 24 Mar 2023 19:07:54 GMT
etag: "88d2a3d8f79473a7ff0b5302ebfc5467"
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (59072)
Hash 9dd4829cbaa696f62ba98659664b1b64
5fc9398b7c7a978c291cc6b1cb49a35f42716eb3
35b6d913e0501336a630c42252a63b70f19b3a22bf83d661fb8b018a8990a2c2
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FP9lCd/Ux1kC+eNKA4LPtTBg1SyqmAOlMt1Uu1BARlsEAF6JDcl95o+gEAW7Xa4QOksG2/17NEo=
x-amz-request-id: MZNXQP291JQXCMQ3
x-amz-replication-status: PENDING
last-modified: Sun, 26 Mar 2023 11:13:36 GMT
etag: "5b8226d09454b17c9e2645a4b83e4db0"
x-amz-server-side-encryption: AES256
x-amz-version-id: X3U9WKZfk7ZYW_b7KnKCvyt_kWdoxiP1
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 27 Mar 2023 11:46:21 GMT
via: 1.1 varnish
age: 84
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1679917581.072491,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 99
access-control-allow-origin: *
content-length: 18188
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=41734
date: Mon, 27 Mar 2023 11:46:21 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 6eaa92aa204d713a4cfc80237276d765
631fa659d9e5a03d09fd1b290ba4edfb38682364
b3dfde19cb00d2477de21d3931eb83ff5e3e7444ec0bdaed3b59116b5038420e
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 3bd188d23781712093f4750e963f6199
etag: "f6c50c752923d0e81a8d1e46ae5418b4"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 27 Mar 2023 11:51:36 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: bqqSqiBNcTpM/IAjcnbXZQ==
x-fb-debug: 3WDEzqBEiaccpxJcPvY58mi38Xw7KHQrtAY831/L/WFY+dw7z5X5J571dQgxmQsR5h86negN9koP9azHusbAhQ==
content-length: 1687
x-fb-trip-id: 1904183273
date: Mon, 27 Mar 2023 11:46:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=984621437.1679917598>m=45je33m0&aip=1&z=2003682789
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=984621437.1679917598>m=45je33m0&aip=1&z=2003682789
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=984621437.1679917598>m=45je33m0&aip=1&z=2003682789 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
x-amz-server-side-encryption: AES256
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Mon, 27 Mar 2023 11:46:21 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
200 OK 21 kB URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP
File type ASCII text, with very long lines (1429)
Hash 66dde19dab4bf47d0642500790fbb955
fda743d60a58f214c1ed5f9ccb0a76d71a1b1f2f
4cb514b5257a03db9b3fab2b1ad4d4df178878924981b5abfedf45ab2b5d6a0d
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:20 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=Q910X5DcAi&ts=554&cb=1679917598991
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=Q910X5DcAi&ts=554&cb=1679917598991
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=Q910X5DcAi&ts=554&cb=1679917598991 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=85fb3d7fd0892ee06fb35b58c0dd7df1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Mon, 27 Mar 2023 11:46:21 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 35bb21cf6d26a46a96fc8b56491cc6ac
41ccd708f90d174a381f87b6467073658fb5b4ae
7ad6247d4a2ba5d5090cfae25fc2d7f87663c735ce9568dc6144cd4cd10fbf91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1466
Cache-Control: max-age=123672
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Etag: "6420bc6b-2d7"
Expires: Tue, 28 Mar 2023 22:07:33 GMT
Last-Modified: Sun, 26 Mar 2023 21:43:07 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 471 B IP
Hash 06953cb94ffd45b8c9cb07fe3e8836bd
90fa44e15c64a9529f024064e2b8c366d9942c15
d1f3d202380d47f1b6b6a993ca3efa0837df4e73fe0bdaa58f9a92d4184e42f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5605
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Last-Modified: Mon, 27 Mar 2023 10:12:56 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=c034574fe1fcce2f7c401670af303246
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=c034574fe1fcce2f7c401670af303246
IP
File type ASCII text, with very long lines (12439)
Hash 7dc1e0b251de100298dff0a767e8dfa3
d4f28cb004ec8fed3c37123740485ff5fc6ed3da
fb6add09add6249c9e5e3d14ecdaa78df23927757b31eb4c51a1e6721c93f1c5
GET /en_US/sdk.js?hash=c034574fe1fcce2f7c401670af303246 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: ac322d8a65350efff531393aee79d08a
etag: "6de43de573160003e4d32adf5e823c7e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 26 Mar 2024 11:05:13 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: fcHgslHeEAKY3/CnZ+jfow==
x-fb-debug: 1amm8iccutdJ8I7IQLSBey9s6XBlsQ1PqtboEZFC6VtHWSuhH6GwmHLGtfssVt0ptiGzBh5CcD4Hs3Oie44T4A==
content-length: 87111
x-fb-trip-id: 1904183273
date: Mon, 27 Mar 2023 11:46:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D037D789544F4C6F8382540E0E552BA0 Ref B: OSL30EDGE0321 Ref C: 2023-03-27T11:46:21Z
date: Mon, 27 Mar 2023 11:46:20 GMT
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=45je33m0&_p=1928490364&_gaz=1&ul=NA&cid=984621437.1679917598&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&sid=1679917598&sct=1&seg=0&dr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&dt=
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=45je33m0&_p=1928490364&_gaz=1&ul=NA&cid=984621437.1679917598&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&sid=1679917598&sct=1&seg=0&dr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&dt=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=45je33m0&_p=1928490364&_gaz=1&ul=NA&cid=984621437.1679917598&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&sid=1679917598&sct=1&seg=0&dr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&dt= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1175
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=984621437.1679917598>m=45je33m0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=984621437.1679917598>m=45je33m0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=984621437.1679917598>m=45je33m0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=f22aa3ca-22ad-44ca-9ec6-8303ba86c108&sid=08f9cc30cc9511edae04e5aa5f8e539d&vid=08f9e3e0cc9511edb440f1c89a136f81&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&r=<=238&evt=pageLoad&ifm=1&sv=1&rn=411016
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=f22aa3ca-22ad-44ca-9ec6-8303ba86c108&sid=08f9cc30cc9511edae04e5aa5f8e539d&vid=08f9e3e0cc9511edb440f1c89a136f81&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&r=<=238&evt=pageLoad&ifm=1&sv=1&rn=411016
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=f22aa3ca-22ad-44ca-9ec6-8303ba86c108&sid=08f9cc30cc9511edae04e5aa5f8e539d&vid=08f9e3e0cc9511edb440f1c89a136f81&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&r=<=238&evt=pageLoad&ifm=1&sv=1&rn=411016 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=37EC96511C4664220DED84B01D11655B; domain=.bing.com; expires=Sat, 20-Apr-2024 11:46:21 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7D96FE5485194C1A98E876372FA0E8FC Ref B: OSL30EDGE0321 Ref C: 2023-03-27T11:46:21Z
date: Mon, 27 Mar 2023 11:46:20 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5d533a1f92c93095a062176569c6b1a2
f168dcec6a86ef945ca9582ca3f80dd1250f7213
2740fb4a44abeb324a68e735f79628f06509daf3dcac42b15c23a93d84bbdbe5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 11:46:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 19:43:14 GMT
Expires: Mon, 27 Mar 2023 19:43:14 GMT
ETag: "f168dcec6a86ef945ca9582ca3f80dd1250f7213"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=3822086838691862term=value
200 OK 4.5 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=3822086838691862term=value
IP
File type ASCII text, with very long lines (1838)
Hash e3363d8be3a89e516478acbf4f43d74e
ecd511d62dda0f08e0a778ea8b3aff74a29de6c4
1aaec5de9401cac5f1c5a4134deb549dfd524fda6374ee09cda4b7967ee56da1
GET /spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=3822086838691862term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Mon, 27 Mar 2023 11:46:21 GMT
x-envoy-upstream-service-time: 1
be: spx-prod
server: istio-envoy
transfer-encoding: chunked
ocsp.digicert.com/
200 OK 313 B IP
Hash f828c54d54a18bb4e6788452a0e3f4dd
8b16387be86cdb8f8fb7eb0fcd15d688f5feb942
d80cc7343e19f97aba088d0ffd4e779fb675637989d9c0336c577c58777dbc38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2075
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Last-Modified: Mon, 27 Mar 2023 11:11:46 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZGJ53togdKkROvRYpkbdIsa2Y3Rt6lFN3lLhjTOmsf/QGR0hqKcZEbbyufzLM0wr1Rx1iDJ6IAo=
x-amz-request-id: EQSQD2QXYBE7X8QS
date: Mon, 27 Mar 2023 11:45:55 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 27
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash bc0de21c57f1a31f0992d527944201ce
44fabc8677ef55f6aba34bb70a66c60e3a2ed871
9b217da693366b3910031bc392dcaa4aa0f466d0b92af5d54c57b997cfb9312d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3799
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Last-Modified: Mon, 27 Mar 2023 10:43:02 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash bc0de21c57f1a31f0992d527944201ce
44fabc8677ef55f6aba34bb70a66c60e3a2ed871
9b217da693366b3910031bc392dcaa4aa0f466d0b92af5d54c57b997cfb9312d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3070
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Last-Modified: Mon, 27 Mar 2023 10:55:11 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=7700adb4-b2b8-438d-9ce9-76c62cfe58da&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=02aca7b3-83a5-479d-a39d-1749b0f116b1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&txn_id=nyxtd&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=7700adb4-b2b8-438d-9ce9-76c62cfe58da&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=02aca7b3-83a5-479d-a39d-1749b0f116b1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&txn_id=nyxtd&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=7700adb4-b2b8-438d-9ce9-76c62cfe58da&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=02aca7b3-83a5-479d-a39d-1749b0f116b1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:21 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=2b34006a-746a-47fd-8db0-12e103e650fa; Max-Age=63072000; Expires=Wed, 26 Mar 2025 11:46:21 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 3784463ccabffbe0
strict-transport-security: max-age=0
x-response-time: 114
x-connection-hash: 8c998fa7f9a6bef4842bbb1cc9a8877de241ecba8a3621c8b65ec7320122e674
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 174 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4321897f205a02825a40c21cf0184cef
1295a0f513b65846f8c805ec52b57173ebf99382
ce92eb5119a3d9e0923a2f92436728d31370e862f2800dd3d15b550e98d355dc
GET /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Mon, 27 Mar 2023 11:07:08 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c-FWi2bKYzb0XXBFUYRpdhSstss7AXYN27h3CFchukZfGcT4L7hcfQ==
age: 2353
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash caccde36b79eb46176b5a2d4ab180315
9f0fbe3f8f8af20a8ce360fc34920728bd27dad3
d225db2034d100252da4cf48994616fd55a18ae9c461c25943769395140503c3
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iwHFzTcMOIdeUUXNHybHSrrXrFuuyBHcIRN7VScEvzlhqMxBxd/hro/yRgWjUuvjb0Hxa4e8lcQ=
x-amz-request-id: 4RWM8QVBCG34JBDZ
date: Mon, 27 Mar 2023 11:46:09 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 13
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?optOut=false&bust=05432539531772759&referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&marketerId=00995ec51eb23fc05a0627b93976ed9179%2C00444d53aaa69516fdd4f38cb01a408ffb%2C007bfa109c755ce2abc89bcca6ab1ec76b%2C00e5c90732d6db4c996b8e51ecf69f2be4%2C009db2f50602ec66a785ccba2f2190d042%2C0035680ae49e7216a26be3859972ee9575&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=05432539531772759&referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&marketerId=00995ec51eb23fc05a0627b93976ed9179%2C00444d53aaa69516fdd4f38cb01a408ffb%2C007bfa109c755ce2abc89bcca6ab1ec76b%2C00e5c90732d6db4c996b8e51ecf69f2be4%2C009db2f50602ec66a785ccba2f2190d042%2C0035680ae49e7216a26be3859972ee9575&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=05432539531772759&referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&marketerId=00995ec51eb23fc05a0627b93976ed9179%2C00444d53aaa69516fdd4f38cb01a408ffb%2C007bfa109c755ce2abc89bcca6ab1ec76b%2C00e5c90732d6db4c996b8e51ecf69f2be4%2C009db2f50602ec66a785ccba2f2190d042%2C0035680ae49e7216a26be3859972ee9575&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:21 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 2314e549a5124cc60e80cd899577febe
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1679917599206&cv=11&fst=1679917599206&bg=ffffff&guid=ON&async=1>m=45be33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&hn=www.googleadservices.com&frm=1&auid=1314651643.1679917598&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1679917599206&cv=11&fst=1679917599206&bg=ffffff&guid=ON&async=1>m=45be33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&hn=www.googleadservices.com&frm=1&auid=1314651643.1679917598&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (3083), with no line terminators
Hash 2a5eac99d44b2ab5df7a30f251a6ba59
4e00a8d0852bab5cb987bc9fb3465b025dd3ffeb
12f8fc1d53f8ca64f28b2756732462f9a2edf67b20b7600cf54841ad64550dcc
GET /pagead/viewthroughconversion/745546367/?random=1679917599206&cv=11&fst=1679917599206&bg=ffffff&guid=ON&async=1>m=45be33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&hn=www.googleadservices.com&frm=1&auid=1314651643.1679917598&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1266
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 12:01:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1679917599212&cv=11&fst=1679917599212&fmt=3&bg=ffffff&guid=ON&async=1>m=45be33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=1>m_ee=1&auid=1314651643.1679917598&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1679917599212&cv=11&fst=1679917599212&fmt=3&bg=ffffff&guid=ON&async=1>m=45be33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=1>m_ee=1&auid=1314651643.1679917598&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1679917599212&cv=11&fst=1679917599212&fmt=3&bg=ffffff&guid=ON&async=1>m=45be33m0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=1>m_ee=1&auid=1314651643.1679917598&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 12:01:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 2a0e973bf9cbb9290feac55e09769cb8
4628830ebb3c5944b6ff2f6e080b3479727ffab9
f3a4841bc21746d66179b42219b7f7bbd7ec7dd70791f91bf2b58c25cfe440d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6026
Cache-Control: max-age=89372
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Etag: "6420249f-138"
Expires: Tue, 28 Mar 2023 12:35:53 GMT
Last-Modified: Sun, 26 Mar 2023 10:55:27 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 312
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f956b44b6eab8cba188d0afeb3a1cce6
194d1f30ef0f46450a56e88a1bd81c436ac03f9e
74a7b96cd2986d3cb7f2e0281a42414078bd20cf881c379d424ab2d2dac05026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sp.analytics.yahoo.com/sp.pl?a=10000&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:21 GMT
expires: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBA2CIWQCENxomPo7fOrGO0_fFi4l8SsFEgEBAQHTImQrZAAAAAAA_eMAAA&S=AQAAArH2UYv_83hdawdezlNGCHU; Expires=Tue, 26 Mar 2024 17:46:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1679917599179&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1679917599179&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1679917599179&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1679917599179%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKnfYtniFvhSQAAAYci5AXVsg2Nx6LRDbXDuIg7x-WnAqz-eIiwHAOJePJKtjTWMAyoq3xJ27uH5Q; Max-Age=2592000; Expires=Wed, 26 Apr 2023 11:46:21 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIqkVynlq-gOwAAAYci5AXV5IALqyUJhf-0NusZ7qWQgqtxHOQA7NPi99SU_XsMWeTFVjA333sNLGVY8c71Jg; Max-Age=2592000; Expires=Wed, 26 Apr 2023 11:46:21 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&b5c05b31-760d-437a-830f-86d17eff04c7"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 26-Mar-2024 11:46:21 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2478:u=1:x=1:i=1679917581:t=1680003981:v=2:sig=AQFUGPXjvNgjg8OG45Go3eQS3dJ2PlCK"; Expires=Tue, 28 Mar 2023 11:46:21 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAX34Eq2pWIrduxvzVIZJg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: ED8C2BB4E858457DA080A248A485DB52 Ref B: OSL30EDGE0319 Ref C: 2023-03-27T11:46:21Z
date: Mon, 27 Mar 2023 11:46:21 GMT
content-length: 0
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2011%3A46%3A39%20GMT&n=0&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2011%3A46%3A39%20GMT&n=0&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2011%3A46%3A39%20GMT&n=0&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:21 GMT
expires: Mon, 27 Mar 2023 11:46:21 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBA2CIWQCEDTVE8GoW2pK9GLKqlxT-f4FEgEBAQHTImQrZAAAAAAA_eMAAA&S=AQAAAidXaheF7csAH1MuOyheyrU; Expires=Tue, 26 Mar 2024 17:46:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/iframe
200 OK 36 kB URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP
File type HTML document, ASCII text, with very long lines (1867)
Hash c282267638f2a3711084cfe315e5fac4
2ea262db78081275f08186205cdd421434894873
19bc956db6092e5e362cf6b76ae3166bb18f31d568473eaa32a4b63a85e8b725
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 27 Mar 2023 11:46:21 GMT
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport, script-src 'nonce-kPrFkVZj9KiP3SdIi9kB2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"IdpIFrameHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdpIFrameHttp/external"}]}
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin; report-to="IdpIFrameHttp"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=7700adb4-b2b8-438d-9ce9-76c62cfe58da&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=02aca7b3-83a5-479d-a39d-1749b0f116b1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&txn_id=nyxtd&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=7700adb4-b2b8-438d-9ce9-76c62cfe58da&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=02aca7b3-83a5-479d-a39d-1749b0f116b1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&txn_id=nyxtd&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=7700adb4-b2b8-438d-9ce9-76c62cfe58da&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=02aca7b3-83a5-479d-a39d-1749b0f116b1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:20 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167991758185183703; Max-Age=63072000; Expires=Wed, 26 Mar 2025 11:46:21 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167991758185183703; Max-Age=63072000; Expires=Wed, 26 Mar 2025 11:46:21 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_sXaEiTGuGyU47Q5j5+xpTA=="; Max-Age=63072000; Expires=Wed, 26 Mar 2025 11:46:21 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167991758185183703; Max-Age=63072000; Expires=Wed, 26 Mar 2025 11:46:21 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: efed268250aec803
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: d445ed8d965a31b820169bf4b7081fcb276401ab2b5a11b6087d02f7d89b17b7
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&rl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&if=true&ts=1679917599857&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1679917599857.383214574&it=1679917599196&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&rl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&if=true&ts=1679917599857&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1679917599857.383214574&it=1679917599196&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&rl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&if=true&ts=1679917599857&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1679917599857.383214574&it=1679917599196&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 27 Mar 2023 11:46:22 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1679917599179%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26liSync%3Dtrue
429 Too Many Requests 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1679917599179%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1679917599179%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 429 Too Many Requests
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX34Eq5bqTZsYbgFOu15g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F4CA98913FEE4ADFA88B1918FD6A6369 Ref B: OSL30EDGE0319 Ref C: 2023-03-27T11:46:21Z
date: Mon, 27 Mar 2023 11:46:21 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 969d378c99021f09ce43ee68b0804842
51a0a4d31c357a9ec9d99c7319bb973dc6e32f96
7e82b8e56897281068ef84011e726ddfb8c36e19bd58be9a568e75bf2f6db12c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 14:54:27 GMT
Expires: Sat, 01 Apr 2023 14:54:26 GMT
Etag: "51a0a4d31c357a9ec9d99c7319bb973dc6e32f96"
Cache-Control: max-age=442684,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae764766f610b45-OSL
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1672
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=85fb3d7fd0892ee06fb35b58c0dd7df1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Mon, 27 Mar 2023 11:46:22 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1667
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=85fb3d7fd0892ee06fb35b58c0dd7df1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Mon, 27 Mar 2023 11:46:22 GMT
content-length: 0
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 555 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (555), with no line terminators
Hash fff892d03aeccd378961bc5c849d7066
3098b2aebf00346bc22ae6dab83793917414a17f
4c348ea1c9684878661d6678415b36a686bbc1bb3642bb019fe819c517cc2615
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 11:46:22 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=c1596646-f677-43ce-8f1f-2870ce9d7ff8; domain=.adsrvr.org; expires=Wed, 27-Mar-2024 11:46:22 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1667
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=85fb3d7fd0892ee06fb35b58c0dd7df1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Mon, 27 Mar 2023 11:46:24 GMT
content-length: 0
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/sandbox/sandbox.js
200 OK 599 B URL HTTP/2 marketing.etorostatic.com/others/sandbox/sandbox.js
IP
File type ASCII text, with very long lines (599), with no line terminators
Hash 65b9bdf3d4c592d54c642537e1bcd08e
59bc549048221d22997c9f0cd367ba7b4771a3b8
577908df069de972e3a4849f587b8c0468fdf57593817bf401d867a6d0c2cf63
GET /others/sandbox/sandbox.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: hq6MiANjab/PUlN6qLHIB1Nc14Qwx2Ec5nR9E4q3fv10zmdTjxDYdkjM29I62OTcmjWOomaN8go=
x-amz-request-id: QPWMFA4XA64XDCPF
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Jun 2020 11:23:35 GMT
etag: "65b9bdf3d4c592d54c642537e1bcd08e"
x-amz-meta-sha256: 577908df069de972e3a4849f587b8c0468fdf57593817bf401d867a6d0c2cf63
x-amz-meta-s3b-last-modified: 20200618T105901Z
x-amz-version-id: 4Czv95J2vuarxmudWSYaGwxpLBDDhdRW
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
content-length: 599
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:24 GMT
date: Mon, 27 Mar 2023 11:46:24 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/logger/logger.js
200 OK 2.3 kB URL HTTP/2 marketing.etorostatic.com/others/logger/logger.js
IP
File type ASCII text, with very long lines (5055), with no line terminators
Hash f620bec033fe844135374191b331937d
ef75dd9e7bddaaa53d9171c7b6869f5d72553f51
c61b3f992c23497120340e96694c29b94ca8b2576820677e0432031b636eee87
GET /others/logger/logger.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rFRtyRRvy8awZWbEw8KKBuYcsMr0FOn3VrHsw7WXTDWRDWcW8NmTXAtMX967njSth5isxYRudTE=
x-amz-request-id: 114803B553D57FD9
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Jan 2020 16:04:01 GMT
etag: "3a046ce8f3379b2e5a5fa5ee3ed02808"
x-amz-meta-s3b-last-modified: 20200115T160219Z
x-amz-version-id: RlsNx2j0zjqTyHD11R2PocORgBI_87x2
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Mon, 27 Mar 2023 11:51:24 GMT
date: Mon, 27 Mar 2023 11:46:24 GMT
content-length: 2285
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 811ac4c4386255ba914ef8fb5adba180
d355c28da35d3d70598b327653c856088a05549b
8de923591a92e70bbf7bea8c8e2e526695196da3b76812ae95ba49a0f2b86349
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163780
Date: Mon, 27 Mar 2023 11:46:24 GMT
Etag: "64214bc4-1d7"
Expires: Wed, 29 Mar 2023 09:16:04 GMT
Last-Modified: Mon, 27 Mar 2023 07:54:44 GMT
Server: ECAcc (nya/78C0)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6Alrj_PGuHRTapMuoASLId3sUJ3Jig-wdLVSgWc-g4O3JitFEqDJVg==
Age: 4880
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=marketingSites HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 538
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://www.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:9ca8c352-5fcb-4c17-b640-90373f23089b
X-Firefox-Spdy: h2
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=marketingSites
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=marketingSites HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 518
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://www.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:9ca8c352-5fcb-4c17-b640-90373f23089b
X-Firefox-Spdy: h2
etoro-px.s3-eu-west-1.amazonaws.com/loaders/sb.html?target=%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D
200 OK 5.0 kB URL HTTP/1.1 etoro-px.s3-eu-west-1.amazonaws.com/loaders/sb.html?target=%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f91a088fde72c3e8c77a354b9a1df69d
01a3caf6e7047d1168482d3b4b32b775c8e482ab
4ee216e4d829f49441844f17b2040fbda53b15dd24b4c9770084e072b7dbfcc6
GET /loaders/sb.html?target=%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D HTTP/1.1
Host: etoro-px.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: g4qXbjgkykVBkpJasEO0NE1+oy0Vc6cfjA3dj6NMJuUcti9imnpWb8qOD0u+uXNvWSW0GofEp28=
x-amz-request-id: HHR761C67RR4P18K
Date: Mon, 27 Mar 2023 11:46:26 GMT
Last-Modified: Mon, 22 Jan 2018 11:07:44 GMT
ETag: "f91a088fde72c3e8c77a354b9a1df69d"
x-amz-meta-cb-modifiedtime: Mon, 22 Jan 2018 11:06:14 GMT
x-amz-version-id: 6K2GyUlFsel.hpXCh8Xezu2JUQW8Mg1R
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 5048
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=984621437.1679917598&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22984621437.1679917598%22%2C%22dcm_cid%22%3A%221679917598.1%22%2C%22dcm_gid%22%3A%221463543819.1679917599%22%2C%22ga_utm_campaign%22%3A%22MFTN%22%2C%22ga_utm_source%22%3A%2299511%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22FAILED%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dcm_cid=1679917598.1&dcm_gid=1463543819.1679917599&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=3822086838691862term%3Dvalue
200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=984621437.1679917598&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22984621437.1679917598%22%2C%22dcm_cid%22%3A%221679917598.1%22%2C%22dcm_gid%22%3A%221463543819.1679917599%22%2C%22ga_utm_campaign%22%3A%22MFTN%22%2C%22ga_utm_source%22%3A%2299511%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22FAILED%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dcm_cid=1679917598.1&dcm_gid=1463543819.1679917599&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=3822086838691862term%3Dvalue
IP
File type ASCII text, with very long lines (2477)
Hash 86ae8a72663fad406eca11132cbde42d
0ecd48ffd61d64a59df037cb1a6a6ba81d09c1da
a24f1a210860a2126c907eb5fcde9477fc76a27667b4ee0aa66bbb3b1ba14a95
GET /st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=984621437.1679917598&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22984621437.1679917598%22%2C%22dcm_cid%22%3A%221679917598.1%22%2C%22dcm_gid%22%3A%221463543819.1679917599%22%2C%22ga_utm_campaign%22%3A%22MFTN%22%2C%22ga_utm_source%22%3A%2299511%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22FAILED%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dcm_cid=1679917598.1&dcm_gid=1463543819.1679917599&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=3822086838691862term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=009a9ee0-cc95-11ed-a857-fbed97096194;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
static.ads-twitter.com/uwt.js
304 Not Modified 0 B URL HTTP/2 static.ads-twitter.com/uwt.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Thu, 27 Oct 2022 18:55:37 GMT
If-None-Match: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
TE: trailers
HTTP/2 304 Not Modified
date: Mon, 27 Mar 2023 11:46:25 GMT
cache-control: no-cache
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
x-served-by: cache-hel1410027-HEL
x-cache: HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
X-Firefox-Spdy: h2
c1.rfihub.net/js/tc.min.js
200 OK 6.2 kB URL HTTP/2 c1.rfihub.net/js/tc.min.js
IP
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6162
date: Mon, 27 Mar 2023 10:52:36 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
cache-control: public, max-age=3600
expires: Mon, 27 Mar 2023 11:52:36 GMT
last-modified: Mon, 27 Mar 2023 10:52:26 GMT
content-encoding: gzip
server: Jetty(9.3.29.v20201019)
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3Ey2OgXfdpymtE_gjSv_ZOClvh0AofF5uG_XRHy1d9g2oAXW4RKWLQ==
age: 3229
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10023761.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10023761.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 69f3029947b0e38a529f90a82f48a48e
6824dd8ba7919ac044805ac11ec7c2a3d677ab2a
4b880b011a76d27fd7c338ea0b616e645c0d417cb0046ff85a7bf0061365f9d7
GET /wi/config/10023761.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-px.s3-eu-west-1.amazonaws.com
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: goa/ZoBrtV0WkohfDGPayPDukK8bM1grmUyJKjA3FpBxVQaQCeUwr+5M6YzL8708WZHISCqCV7wW3xFbDzfijwHlHrwy8MxSUKaFRd0lJLE=
x-amz-request-id: 82N55Y2WGHZJHEBK
date: Sun, 26 Mar 2023 23:16:00 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Tue, 15 Mar 2022 11:52:47 GMT
x-amz-expiration: expiry-date="Thu, 20 Apr 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: ttsELqBQfVDADzNY8xEqC.O360gkSno2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "69f3029947b0e38a529f90a82f48a48e"
age: 45026
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=005fe47c1f2705c6e17a95a2785393e279
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=005fe47c1f2705c6e17a95a2785393e279
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=005fe47c1f2705c6e17a95a2785393e279 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:25 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: c39917b23aaffafde4a63a447bcfb386
t.co/i/adsct?bci=3&eci=2&event_id=807c6458-a1a3-4b0e-9781-9ca467267109&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=56d3e458-9746-4d07-90dc-1c53fec762c6&tw_document_href=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyxtd&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=807c6458-a1a3-4b0e-9781-9ca467267109&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=56d3e458-9746-4d07-90dc-1c53fec762c6&tw_document_href=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyxtd&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=807c6458-a1a3-4b0e-9781-9ca467267109&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=56d3e458-9746-4d07-90dc-1c53fec762c6&tw_document_href=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Cookie: muc_ads=2b34006a-746a-47fd-8db0-12e103e650fa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: a0edf35367111a1c
strict-transport-security: max-age=0
x-response-time: 116
x-connection-hash: 8c998fa7f9a6bef4842bbb1cc9a8877de241ecba8a3621c8b65ec7320122e674
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2011%3A46%3A43%20GMT&n=0&.yp=10023761&f=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&e=https%3A%2F%2Fwww.etoro.com%2F&enc=windows-1252&yv=1.13.0&isIframe=1&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2011%3A46%3A43%20GMT&n=0&.yp=10023761&f=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&e=https%3A%2F%2Fwww.etoro.com%2F&enc=windows-1252&yv=1.13.0&isIframe=1&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2027%20Mar%202023%2011%3A46%3A43%20GMT&n=0&.yp=10023761&f=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&e=https%3A%2F%2Fwww.etoro.com%2F&enc=windows-1252&yv=1.13.0&isIframe=1&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
expires: Mon, 27 Mar 2023 11:46:25 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBGCIWQCEPP2WfHjn0BtcIiPuDO73sIFEgEBAQHTImQrZAAAAAAA_eMAAA&S=AQAAAvta3e2uSO3Y_YpZngpVG0o; Expires=Tue, 26 Mar 2024 17:46:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?optOut=false&bust=0839133313578769&referrer=https%3A%2F%2Fwww.etoro.com%2F&marketerId=005fe47c1f2705c6e17a95a2785393e279&name=PAGE_VIEW&dl=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?optOut=false&bust=0839133313578769&referrer=https%3A%2F%2Fwww.etoro.com%2F&marketerId=005fe47c1f2705c6e17a95a2785393e279&name=PAGE_VIEW&dl=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?optOut=false&bust=0839133313578769&referrer=https%3A%2F%2Fwww.etoro.com%2F&marketerId=005fe47c1f2705c6e17a95a2785393e279&name=PAGE_VIEW&dl=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&g=1&obApiVersion=1.1&obtpVersion=2.0.5 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:25 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: d91721931f1d1739387e483f8c56cd4b
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=807c6458-a1a3-4b0e-9781-9ca467267109&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=56d3e458-9746-4d07-90dc-1c53fec762c6&tw_document_href=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyxtd&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=807c6458-a1a3-4b0e-9781-9ca467267109&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=56d3e458-9746-4d07-90dc-1c53fec762c6&tw_document_href=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyxtd&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=807c6458-a1a3-4b0e-9781-9ca467267109&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=56d3e458-9746-4d07-90dc-1c53fec762c6&tw_document_href=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:24 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_zJpnYEGaA9hoS6FPGc/hKA=="; Max-Age=63072000; Expires=Wed, 26 Mar 2025 11:46:25 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 4ec11124f9bfacd7
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: d445ed8d965a31b820169bf4b7081fcb276401ab2b5a11b6087d02f7d89b17b7
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 99694cadabf5f5ccb2ffe5658a3be56a
f4b247569a3056c2b3f93978c4bab95c77258fea
9548e3cac18bf9dfef48aa812c40e3fedc5e1985a683575b451667ef8173b8ab
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 14:15:45 GMT
Expires: Sat, 01 Apr 2023 14:15:44 GMT
Etag: "f4b247569a3056c2b3f93978c4bab95c77258fea"
Cache-Control: max-age=440358,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae7648e5dc30b45-OSL
20815068p.rfihub.com/ca.html?ver=9&rb=38471&ca=20815068&_o=38471&_t=20815068&pe=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&pf=https%3A%2F%2Fwww.etoro.com%2F&ra=7133333072377712
200 OK 2.5 kB URL HTTP/1.1 20815068p.rfihub.com/ca.html?ver=9&rb=38471&ca=20815068&_o=38471&_t=20815068&pe=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&pf=https%3A%2F%2Fwww.etoro.com%2F&ra=7133333072377712
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2492), with no line terminators
Hash bd83c558d778aa63677c0b6f645a258c
be7085dc0c826966f4f67a18c6cc693ac97fdeaa
529ef2d0ddb6903e152d4b71fd2936c6aac78816c2e8176cb609a4394772d933
GET /ca.html?ver=9&rb=38471&ca=20815068&_o=38471&_t=20815068&pe=https%3A%2F%2Fetoro-px.s3-eu-west-1.amazonaws.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26domain%3Dwww.etoro.com%26referrer%3D&pf=https%3A%2F%2Fwww.etoro.com%2F&ra=7133333072377712 HTTP/1.1
Host: 20815068p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:25 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: eud=H4sIAAAAAAAA_5vFyGtoZm5paWhuamFqbmy-C41_Co3_Co3_C40_iQmVPwuNvwiNvwqNvwmNvwtdPQsq_xYafxMrmn5uVP4jYVQ-AN1Z4mIAAQAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:25 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjEyNDE2tTQ3MhDiM9Q1Sg9KqzJ2Lo73KfMEAFSYwI0lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjEyNDE2tTQ3MhDiM9Q1Sg9KqzJ2Lo73KfMEAFSYwI0lAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:25 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2492
Server: Jetty(9.3.29.v20201019)
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=4557&scd=0&ssd=1&est=1679917599250&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679917603809&vi=1679917599249&ri=83d71c6db80c85198db39f851cfa020b&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=4557&scd=0&ssd=1&est=1679917599250&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679917603809&vi=1679917599249&ri=83d71c6db80c85198db39f851cfa020b&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=4557&scd=0&ssd=1&est=1679917599250&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1679917603809&vi=1679917599249&ri=83d71c6db80c85198db39f851cfa020b&ref=null&cv=20230326-2-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 27 Mar 2023 11:46:25 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ww.steelhousemedia.com/gs
200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP
File type ASCII text, with no line terminators
Hash 37c64e3f955ca4cbb767b7600d2801a8
a0d307832d2d81a0477932d813ebfb8ec51f0d1d
9d5125e3be2df9ffc9f8ffcf1801362aeb113a33b1f0cfb8e089f4a6399e94d4
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359720&referrer=https%3A%2F%2Fwww.etoro.com%2F&forward=
302 Found 761 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359720&referrer=https%3A%2F%2Fwww.etoro.com%2F&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (675)
Hash bcb6b60a32d69ae64711b8fbadfb2e65
aaef21b07d665548c19bb75a76a122d5f7d6e1b1
13617b44e642ea7837ba21a4f55995d2359aadcd186d189a393f2e5fcf431178
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359720&referrer=https%3A%2F%2Fwww.etoro.com%2F&forward= HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 761
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408&cb=1679917585.984664
date: Mon, 27 Mar 2023 11:46:25 GMT
set-cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; Domain=rezync.com; Expires=Sat, 23 Sep 2023 11:46:25 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNylEOgyAMANC79FsWWkBaLmMcloRsskX0Z8a7z8-XvBOmr27r3LTtkPbt0AHyu97qkE7o9bfqCxIE9EhomTyhd0EiWbgG6Np7_bSpLvcpxWr2WQ0iqfHsimHOzhSkmONzYTtrwjGKYAwcHsIORUa4_sToJjk.ZCGCEQ.h-fsHoluyzbmrZr-_Da46NM7hQI; Expires=Sat, 23 Sep 2023 11:46:25 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QkjW4G4AFIP6_SwAELPWyqUe1tsEtoGLZHI0CgI7H17kuPxRhMcPhg==
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyNDIxNDM1OTcyMA==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyNDIxNDM1OTcyMA==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 47b95f2fa90a35012d2aa87a9cbaa5cd
b15f22b8bf4548f154071a1ce9d576136aaf072a
d36c678444e56d5ec2aacc0c3d0e525527f4c2864b71c15f3226f996b5c25328
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyNDIxNDM1OTcyMA==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyNDIxNDM1OTcyMA==&forward=&google_tc=
date: Mon, 27 Mar 2023 11:46:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 27-Mar-2023 12:01:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210824214359720
200 OK 65 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210824214359720
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 9fc4a410879e22eeb224e6c43c95ec52
21aa9fe1c1d54cb7479008698efdb167c8915ca6
e9265c8d1f568b85f487c3cfadb4305e5d7b122a16a9ec9f8a7d116f2fa5fdab
GET /cksync.php?cs=3&type=rkt&ovsid=5141210824214359720 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 65
content-type: image/gif
set-cookie: visitor-id=3229191863580253000V10; Expires=Tue, 26 Mar 2024 11:46:26 GMT; domain=.media.net; Path=/;
data-rk=5141210824214359720~~3;Expires=Mon, 25 Mar 2024 11:46:26 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Mon, 27 Mar 2023 11:46:26 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Mar 2023 11:46:26 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash ac2ae69afc70f2a8941ed6b658f4bd0e
5bac1a2c66dd04024217bd79173e2d00098ea987
1565e942701c0c33f8b78d2d64049fea418ee9b2466b3294db350ed57dd3881d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 26 Mar 2023 20:38:00 GMT
Expires: Sun, 02 Apr 2023 20:37:59 GMT
Etag: "5bac1a2c66dd04024217bd79173e2d00098ea987"
Cache-Control: max-age=549692,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae76490d8940b45-OSL
status.geotrust.com/
200 OK 471 B IP
Hash 5ef408cfeb78e39323658f0d79b8ca5e
bb8bb51a7829d85379e18fa606063019f62c8f57
8b2c44a54b4dd773065c35d1a112ee856f69666b64a34775036e735ad8c51f7a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3845
Cache-Control: max-age=97948
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Etag: "64204ea9-1d7"
Expires: Tue, 28 Mar 2023 14:58:54 GMT
Last-Modified: Sun, 26 Mar 2023 13:54:49 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
idsync.rlcdn.com/360947.gif?partner_uid=5141210824214359720
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5141210824214359720
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5141210824214359720 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=czrO2hafD4No5MtsWOtCbdhQJcNQMUfy4bRBtt5tlNE=; Path=/; Domain=rlcdn.com; Expires=Tue, 26 Mar 2024 11:46:26 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 26 May 2023 11:46:26 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Mon, 27 Mar 2023 11:46:26 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 8d51b13a6018234a2d68562f32f81946
83ac05fe90b2c2087a403dfab04440b696719edc
e5ac554745afc073b36f50793a9665d24dc92403c8e9b0eeea5f9fd9749f6e79
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 11:46:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 20:54:54 GMT
Expires: Mon, 27 Mar 2023 20:54:54 GMT
ETag: "83ac05fe90b2c2087a403dfab04440b696719edc"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ib.adnxs.com/setuid?entity=18&code=5141210824214359720
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5141210824214359720
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5141210824214359720 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210824214359720
AN-X-Request-Uuid: 28670bcf-8cc7-44f6-9eb9-26a94a4c2380
Set-Cookie: uuid2=3434080223017666422; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 11:46:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
status.geotrust.com/
200 OK 471 B IP
Hash bf004190df3132d6a2ffa03a0ae326b8
f76cbac7bca9e893acdeb7fc7d15db58df7e2444
9a55e9b3a49654ac92cd7c5fc011daec6a7fff96711d0741b32e9a8c49aacfe6
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2631
Cache-Control: max-age=130230
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Etag: "6420d181-1d7"
Expires: Tue, 28 Mar 2023 23:56:56 GMT
Last-Modified: Sun, 26 Mar 2023 23:13:05 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 262cc14f8e028288ac8d8c3699430a9e
ad3d0f245046c7b89879a5b7a415c3d63aeab1b3
c2640346fa5df06aca8ba719d05032164b651a75ecf039608b9526bc07c3a1f2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4279
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Last-Modified: Mon, 27 Mar 2023 10:35:07 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 727 B IP
Hash 4833aef4521cf85140e562e259c96853
c851595ee721027d22b2601a02a59242c04283af
9777236efd284cb7b6ab237fc7b75ee9bac2e3aebf0855df3ab681d00f616749
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 70
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Last-Modified: Mon, 27 Mar 2023 11:45:17 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 727
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 11:46:26 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZCGCEjCjgRhsWlwGmVcMMwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 26 Mar 2024 11:46:26 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4399; Path=/; Domain=casalemedia.com; Expires=Sun, 25 Jun 2023 11:46:26 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4399; Path=/; Domain=casalemedia.com; Expires=Sun, 25 Jun 2023 11:46:26 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
p.rfihub.com/cm?pub=24472&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 11:46:26 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: eud=H4sIAAAAAAAA_7vFwmtoZm5paWhuamFmaGIJADgZd3IQAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjExNTUxMjQ3MrC0MDIzMxLiM9SNMkkLS_KLMM4ITjIHAIsuCdslAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0NjExNTUxMjQ3MrC0MDIzMxLiM9SNMkkLS_KLMM4ITjIHAIsuCdslAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5134455421720982662&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
us-u.openx.net/w/1.0/sd?id=537073062&val=5141210824214359720&r=
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537073062&val=5141210824214359720&r=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537073062&val=5141210824214359720&r= HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Mon, 27 Mar 2023 11:46:26 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1667
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=85fb3d7fd0892ee06fb35b58c0dd7df1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Mon, 27 Mar 2023 11:46:26 GMT
content-length: 0
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5141210824214359720
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5141210824214359720
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5141210824214359720 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Mon, 27 Mar 2023 11:46:26 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Mar 2023 11:46:26 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 29f05f7d279b743c4b25c76dce984575
ca5a9f50d1fc3a0a0b8ac96e1bf226ab1222ad48
86250416d554342062e3bb21a67b359428e0c704a754bd1e1e13219697cafcc3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3337
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Last-Modified: Mon, 27 Mar 2023 10:50:49 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash bfc76a1aad25c3c8810c841f1091e15b
c00604d10b30e724a429222a418f50e9d79140d0
2c9307cc7d576375c4ea7b304303fe700c85afa2bb00a8d0afcdd6d4834f9811
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 27 Mar 2023 11:46:26 GMT
Last-Modified: Mon, 27 Mar 2023 10:31:25 GMT
Server: ECAcc (bsa/EA8F)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yEgv5HgWbkVlMbZi8pzHhGphojHrQzUT4tJIhqgwtR4lZR9UfRnILw==
Age: 4501
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210824214359720
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210824214359720
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210824214359720 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: bef4fbab-71b1-45df-bb13-926429f4a5a6
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2GUaY_[5P!1yIE`Wq3dShskA5Hr@K4gusq3N^D@4glsw4hM3%V.3UrSE4@QN3FR@PsXH%!?DLGsh2]n; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 11:46:26 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5141210824214359720&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:26 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210824214359720&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210824214359720&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5141210824214359720&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=014aa316-cc95-11ed-87e6-1384e0ef0306; expires=Mon, 24-Apr-2023 11:46:26 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5141210824214359720&img=1&__user_check__=1&sync_id=014aa385-cc95-11ed-87e6-1384e0ef0306
X-fe: 45
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
p.rfihub.com/cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408&cb=1679917585.984664
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408&cb=1679917585.984664
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408&cb=1679917585.984664 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 11:46:26 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: euds=H4sIAAAAAAAA_wXBwRHAIAgEwE_aIeOJypFuEgKFWLm7-7KqljEiBegpg1pChkqhW9j3s735YJk7bHLeToX7OlSkPOs6AAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_1XIuxGAMAgA0AmsMgdegISP2yjCQJaWTmrnneV7V9OqnjEiAZEShnGBWTAUkoYep_U9NxR1R502VzdGd7nb8qUQ8fP3eAGwqYg-WgAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjEyNDE2tbQwMhbiM9R1KouyrNBN9g_0LAsFAHpYZ4wlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjEyNDE2tbQwMhbiM9R1KouyrNBN9g_0LAsFAHpYZ4wlAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
Location: https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359823&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
dpm.demdex.net/ibs:dpid=1121&dpuuid=5141210824214359720&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5141210824214359720&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5141210824214359720&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v046-0674a406d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210824214359720&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=64922407307691494342349035595329789717; Max-Age=15552000; Expires=Sat, 23 Sep 2023 11:46:26 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: 9MnFAm00Sdw=
Content-Length: 0
Connection: keep-alive
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5141210824214359720
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5141210824214359720
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5141210824214359720 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:26 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210824214359720&img=1&__user_check__=1&sync_id=014aa385-cc95-11ed-87e6-1384e0ef0306
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210824214359720&img=1&__user_check__=1&sync_id=014aa385-cc95-11ed-87e6-1384e0ef0306
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5141210824214359720&img=1&__user_check__=1&sync_id=014aa385-cc95-11ed-87e6-1384e0ef0306 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=015066aa-cc95-11ed-b30d-1afcdea00506; expires=Mon, 24-Apr-2023 11:46:26 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 130
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5141210824214359720
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5141210824214359720
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5141210824214359720 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 11:46:26 GMT
set-cookie: _kuid_=PdaQntw5; Expires=Sat, 23-Sep-23 11:46:26 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n024-dub-prod.krxd.net
x-request-time: D=38 t=1679917586
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 5ef408cfeb78e39323658f0d79b8ca5e
bb8bb51a7829d85379e18fa606063019f62c8f57
8b2c44a54b4dd773065c35d1a112ee856f69666b64a34775036e735ad8c51f7a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5022
Cache-Control: max-age=99125
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Etag: "64204ea9-1d7"
Expires: Tue, 28 Mar 2023 15:18:31 GMT
Last-Modified: Sun, 26 Mar 2023 13:54:49 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ef51c0fa2320bb875996a5e9dc8a3b2
9800551f1f2e2b51d6bd2142972770683dc5df97
0e153635305bdf3a1bcda79feac0d97209af15bc0044cc176c3b8a621c768f22
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 01:56:50 GMT
Expires: Sat, 01 Apr 2023 01:56:49 GMT
Etag: "9800551f1f2e2b51d6bd2142972770683dc5df97"
Cache-Control: max-age=396022,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae76491fa1b0b45-OSL
sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~ZCGCEgAExSzyCAA9; Path=/; Domain=.everesttech.net; Expires=Tue, 26-Mar-2024 11:46:26 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=ZCGCEgAExSzyCAA9
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Mon, 27 Mar 2023 11:46:26 GMT
via: 1.1 varnish
x-served-by: cache-bma1675-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679917586.188893,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=ZCGCEgAExSzyCAA9
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=ZCGCEgAExSzyCAA9
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=ZCGCEgAExSzyCAA9 HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Mon, 27 Mar 2023 11:46:26 GMT
via: 1.1 varnish
age: 1890
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 6074
x-timer: S1679917586.296912,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD}
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD}
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD} HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 11:46:26 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD}
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=9055a630-bf63-4064-8281-0acd0d050854; path=/; expires=Tue, 26-Mar-2024 11:46:26 GMT; domain=.bidswitch.net; samesite=none; secure
c=1679917586; path=/; expires=Tue, 26-Mar-2024 11:46:26 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1679917586; path=/; expires=Tue, 26-Mar-2024 11:46:26 GMT; domain=.bidswitch.net; samesite=none; secure
c=1679917586; path=/; expires=Tue, 26-Mar-2024 11:46:26 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash f25a0282e7fe6c82bde3941b1d481035
e57f2b26066c62ed1aa5ed18e80ac8518940cdf3
58e65609db8fb644e535c8f7a772d30732b4b0e2d0806adcde240ac300534ba4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 709
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:46:26 GMT
Last-Modified: Mon, 27 Mar 2023 11:34:37 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 727
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210824214359720&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210824214359720&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210824214359720&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v046-0f60c6d97.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: svfC55O+RC4=
Content-Length: 59
Connection: keep-alive
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD}
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD}
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5141210824214359720&expires=30&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT_469}&gdpr_pd={GDPR_PD} HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:26 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash 6cf65e080e7d89399ad4710e0a1f3053
2f429b42d4879c7fc66e6cdd523bd8848d1e3b0c
84b2c8a375b9364f4c0913c6548367a58d1f2954c01d586c67e408c051f00de3
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 24 Mar 2023 10:24:27 GMT
Expires: Fri, 31 Mar 2023 10:24:26 GMT
Etag: "2f429b42d4879c7fc66e6cdd523bd8848d1e3b0c"
Cache-Control: max-age=602668,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1482
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae76492b9eb069b-OSL
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
302 Found 0 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 11:46:26 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0M7e0NDQ3tTAzNrVYJIzKBwC0l0QOIwAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjExNTUxMjQ3MrC0MDI3NBDiM9StyMiMNM7KqAwKMnEDALDKFXAlAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0NjExNTUxMjQ3MrC0MDI3NBDiM9StyMiMNM7KqAwKMnEDALDKFXAlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421720982710&referrer={encSite}&forward=
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
api-js.mixpanel.com/track/?verbose=1&ip=1&_=1679917604160
200 OK 25 B URL HTTP/2 api-js.mixpanel.com/track/?verbose=1&ip=1&_=1679917604160
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fa4859df2aaba80141861afa205fe74e
d486b5a249527d022cc009bdc9c197efb66f23a2
e39a8118ec6cdf6ac33e6961518e9fe6ba3f6caf099aeeaec1389c2108ba90ba
POST /track/?verbose=1&ip=1&_=1679917604160 HTTP/1.1
Host: api-js.mixpanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3563
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://www.etoro.com
access-control-expose-headers: X-MP-CE-Backoff
access-control-max-age: 1728000
cache-control: no-cache, no-store
content-type: application/json
strict-transport-security: max-age=604800; includeSubDomains
date: Mon, 27 Mar 2023 11:46:26 GMT
content-length: 25
x-envoy-upstream-service-time: 16
server: envoy
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ps.eyeota.net/match?uid=5134455421720982662&bid=omt9pi0
200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5134455421720982662&bid=omt9pi0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5134455421720982662&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=18609~DM; Domain=eyeota.net; Path=/; Expires=Mon, 27 Mar 2023 11:56:26 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Mon, 27 Mar 2023 11:46:26 GMT
bpi.rtactivate.com/tag/?id=11017&user_id=5141210824214359720
200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5141210824214359720
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5141210824214359720 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Mon, 27 Mar 2023 11:46:26 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 08616c220c73eef2fda92faae0c10886
9c1ee6d218cb1bb8e94e53ffe23c282ba65f8380
bf3c853b3332bbddc0bc59f887abd312b57cf789bd96cc109086b1c74b09d2de
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=119120
Date: Mon, 27 Mar 2023 11:46:26 GMT
Etag: "64209c24-1d7"
Expires: Tue, 28 Mar 2023 20:51:46 GMT
Last-Modified: Sun, 26 Mar 2023 19:25:24 GMT
Server: ECAcc (nya/788E)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: l40F9qo8AUn5GudDBiS97egr1dRF8WMJF__KevcJ_ujRX3wruciSoQ==
Age: 5182
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359823&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408
302 Found 447 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359823&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (361)
Hash 61a01b3d3ae5f84924bfaae7619929a9
5d201a260eb9015747dcd3cde16de1f1fd22d3d2
163762cc8a230096b7622950c92c44470f63fd9928f6c1b9e2da6cf5fded18ce
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359823&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917585.9846408 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; sd-session-id=.eJwNylEOgyAMANC79FsWWkBaLmMcloRsskX0Z8a7z8-XvBOmr27r3LTtkPbt0AHyu97qkE7o9bfqCxIE9EhomTyhd0EiWbgG6Np7_bSpLvcpxWr2WQ0iqfHsimHOzhSkmONzYTtrwjGKYAwcHsIORUa4_sToJjk.ZCGCEQ.h-fsHoluyzbmrZr-_Da46NM7hQI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 447
location: https://idsync.rlcdn.com/501709.gif?partner_uid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&_=1679917585.9846408
date: Mon, 27 Mar 2023 11:46:26 GMT
set-cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; Domain=rezync.com; Expires=Sat, 23 Sep 2023 11:46:26 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNylEOgyAMANC79FsWWkBaLmMcloRsskX0Z8a7z8-XvBOmr27r3LTtkPbt0AHyu97qkE7o9bfqCxIE9EhomTyhd0GYHFwDdO29ftpUl_uUYjX7rAaR1Hh2xTBnZwpSzPG5sJ014RhFMAYOD2GHIiNcf8YWJj0.ZCGCEg.S4dnzbz-RWTQCzxxEwRtMeX7ptY; Expires=Sat, 23 Sep 2023 11:46:26 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9rWtcKzcTpUU_AffkxV_sZc_fVCu2Iaci0WWpyDqMpxll9vb49qO-Q==
X-Firefox-Spdy: h2
idsync.rlcdn.com/501709.gif?partner_uid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&_=1679917585.9846408
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/501709.gif?partner_uid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&_=1679917585.9846408
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /501709.gif?partner_uid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&_=1679917585.9846408 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdmZjBlYzRjZS0xMTJlLTQ4M2YtODhjMy1mMTI3YzdiZDgwYWU6MTY3OTkxNzU4NS45ODMxOTk2EAAaDQiShIahBhIFCOgHEABCAEoA
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 26 May 2023 11:46:26 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Mon, 27 Mar 2023 11:46:26 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash ac2ae69afc70f2a8941ed6b658f4bd0e
5bac1a2c66dd04024217bd79173e2d00098ea987
1565e942701c0c33f8b78d2d64049fea418ee9b2466b3294db350ed57dd3881d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 11:46:26 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 26 Mar 2023 20:38:00 GMT
Expires: Sun, 02 Apr 2023 20:37:59 GMT
Etag: "5bac1a2c66dd04024217bd79173e2d00098ea987"
Cache-Control: max-age=549692,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae764922be7b4ed-OSL
idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdmZjBlYzRjZS0xMTJlLTQ4M2YtODhjMy1mMTI3YzdiZDgwYWU6MTY3OTkxNzU4NS45ODMxOTk2EAAaDQiShIahBhIFCOgHEABCAEoA
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdmZjBlYzRjZS0xMTJlLTQ4M2YtODhjMy1mMTI3YzdiZDgwYWU6MTY3OTkxNzU4NS45ODMxOTk2EAAaDQiShIahBhIFCOgHEABCAEoA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1000.gif?memo=CM3PHhJBCj0IARAFGjdmZjBlYzRjZS0xMTJlLTQ4M2YtODhjMy1mMTI3YzdiZDgwYWU6MTY3OTkxNzU4NS45ODMxOTk2EAAaDQiShIahBhIFCOgHEABCAEoA HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CJKEhqEGEgUI6AcQABIGCLrqARAA; Path=/; Domain=rlcdn.com; Expires=Fri, 26 May 2023 11:46:26 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Mon, 27 Mar 2023 11:46:26 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421720982710&referrer={encSite}&forward=
302 Found 761 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421720982710&referrer={encSite}&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (675)
Hash 7a54def5aace44f108ab00eef12efd7e
d2c7adbca2211c6dc53339b2552d6d2a4f5488ef
012cd87da6bf4237b0b84fef6a9f7768a54e8d8eccbd75aa65316a880a3819c2
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5134455421720982710&referrer={encSite}&forward= HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; sd-session-id=.eJwNylEOgyAMANC79FsWWkBaLmMcloRsskX0Z8a7z8-XvBOmr27r3LTtkPbt0AHyu97qkE7o9bfqCxIE9EhomTyhd0EiWbgG6Np7_bSpLvcpxWr2WQ0iqfHsimHOzhSkmONzYTtrwjGKYAwcHsIORUa4_sToJjk.ZCGCEQ.h-fsHoluyzbmrZr-_Da46NM7hQI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 761
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265&cb=1679917586.4543386
date: Mon, 27 Mar 2023 11:46:26 GMT
set-cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; Domain=rezync.com; Expires=Sat, 23 Sep 2023 11:46:26 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNykkOgzAMAMC_-EyqOAu28xlEgyNFLWlF4FLE38txpDlh-uq2zk3bDmnfDh0gv-utDumEXn-rviBBRB9CjMEhOSvsCC1cA3TtvX7aVJf7lGI1h6wG0akJ7Ithzt4UdJTpubCdNeFIIkiR40PYo8gI1x_IGCZC.ZCGCEg.VgWb6HTEmn6lnUAMTXapWscdqps; Expires=Sat, 23 Sep 2023 11:46:26 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: swE7BvoiIgfUvexrVChgF5OZKD6Zz_DxbvgedA08AuLkY-xLEdm-kQ==
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265&cb=1679917586.4543386
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265&cb=1679917586.4543386
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265&cb=1679917586.4543386 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 11:46:26 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: euds=H4sIAAAAAAAA_wXBwRHAIAgEwE_aIeOJypFuEgKFWLm7-7KqljEiBegpg1pChkqhW9j3s735YJk7bHLeToX7OlSkPOs6AAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_13IuxWAMAgAwAmsMge-EMLPbRRhIEtLJ7WzsLy7mlb1jBkJiCNhGhWYBUHh0NDjtL7nhqLuqGy8uhG6y92WL4XZn59fOQsLk1oAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjEyNDE2tbQ0MBfiM9QNNsjRTXMrLK_0jy8BAFQYM0YlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjEyNDE2tbQ0MBfiM9QNNsjRTXMrLK_0jy8BAFQYM0YlAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 11:46:26 GMT; Secure; SameSite=None
Location: https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359907&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359907&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265
302 Found 445 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359907&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (359)
Hash 6e2bb406a58fc75f681b0a63748cb11d
7e630966ae607323b71d7f314f471044a2784fd8
22e40cfc2473bf8443e5565978c6c0d51096fbd3e80962f75e27fe1a90ad9f72
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210824214359907&referrer={encSite}&forward=https%3A%2F%2Fidsync.rlcdn.com%2F501709.gif%3Fpartner_uid%3Dff0ec4ce-112e-483f-88c3-f127c7bd80ae%253A1679917585.9831996%26_%3D1679917586.454265 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20815068p.rfihub.com/
Connection: keep-alive
Cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; sd-session-id=.eJwNykkOgzAMAMC_-EyqOAu28xlEgyNFLWlF4FLE38txpDlh-uq2zk3bDmnfDh0gv-utDumEXn-rviBBRB9CjMEhOSvsCC1cA3TtvX7aVJf7lGI1h6wG0akJ7Ithzt4UdJTpubCdNeFIIkiR40PYo8gI1x_IGCZC.ZCGCEg.VgWb6HTEmn6lnUAMTXapWscdqps
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 445
location: https://idsync.rlcdn.com/501709.gif?partner_uid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae%3A1679917585.9831996&_=1679917586.454265
date: Mon, 27 Mar 2023 11:46:26 GMT
set-cookie: zync-uuid=ff0ec4ce-112e-483f-88c3-f127c7bd80ae:1679917585.9831996; Domain=rezync.com; Expires=Sat, 23 Sep 2023 11:46:26 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNykkOgzAMAMC_-EyqOAux8xlEgyNFLWmF4VLE38txpDlh-sq2zl36DnnfDhmgvNsthXyCtt8qL8gQMaBDSy44DD4y2wTXACqq7dOnttynVislFDGITkwgXw1R8aaiSyU9F7KzZBwTM6ZI8cHkkXmE6w_G9yZA.ZCGCEg.O5W06_j1ZdgIZY2QmWDGnzuBQwM; Expires=Sat, 23 Sep 2023 11:46:26 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _HSbFPK9wyTZaS-QpiD26RuyjODzznv4c2AgyFTH8GoeOX1cSKeXKA==
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=984621437.1679917598&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22984621437.1679917598%22%2C%22dcm_cid%22%3A%221679917598.1%22%2C%22dcm_gid%22%3A%221463543819.1679917599%22%2C%22ga_utm_campaign%22%3A%22MFTN%22%2C%22ga_utm_source%22%3A%2299511%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22FAILED%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dcm_cid=1679917598.1&dcm_gid=1463543819.1679917599&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=1679917585068940&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1679917585930
200 OK 1.3 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=984621437.1679917598&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22984621437.1679917598%22%2C%22dcm_cid%22%3A%221679917598.1%22%2C%22dcm_gid%22%3A%221463543819.1679917599%22%2C%22ga_utm_campaign%22%3A%22MFTN%22%2C%22ga_utm_source%22%3A%2299511%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22FAILED%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dcm_cid=1679917598.1&dcm_gid=1463543819.1679917599&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=1679917585068940&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1679917585930
IP
File type ASCII text, with very long lines (5695), with no line terminators
Hash 1c86d11e8d26180eed36f6406dbfaf1e
eab5b5bfd53e26bb30f6fbf17c432d7e5573d2a3
917bfe5e12e52a58985642a49794862edcdfb30d506cf3c7edb446dd4556647c
GET /st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=984621437.1679917598&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22984621437.1679917598%22%2C%22dcm_cid%22%3A%221679917598.1%22%2C%22dcm_gid%22%3A%221463543819.1679917599%22%2C%22ga_utm_campaign%22%3A%22MFTN%22%2C%22ga_utm_source%22%3A%2299511%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22FAILED%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dcm_cid=1679917598.1&dcm_gid=1463543819.1679917599&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=1679917585068940&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1679917585930 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Mon, 27 Mar 2023 11:46:26 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt="MzA0OTg6MTY3OTkwMDQ0MSwzMzg3NjoxNjc5ODM3NTIzLDMyMTUzOjE2Nzk5MDUwMTIsMzE5NTA6MTY3OTg0MDUyOQ==";Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 40
server: istio-envoy
connection: close
transfer-encoding: chunked
www.etoro.com/lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term=
200 OK 0 B URL HTTP/2 www.etoro.com/lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term=
IP
GET /lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term= HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2023-03-27T11:46:18.5103702Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=13050&a=99511&task=click&subaffiliateid=mftn
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:18 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
set-cookie: TS01047baf=01d53e581833efefbc5b86792fe3f96ba176f96c9a857de0a0bf1193ce64f116837fe29d21428d3ebcb0a28410341f3b6136f0433a; Path=/
__cf_bm=KxwpyOlT7uqgCq1u8oGRbj8_oimOIi1KTuMm0NFzkZg-1679917578-0-ARC/cjiej3GbN6Xl+kiCfuLIqZx9kgQW2t9erzMvx0YjfgaCGd8h59Wb+D6qO4e/NFfvPD4wfBxjNQ6YYdUPhh1Z9Iv1lsAQ+tMGarrDsqir; path=/; expires=Mon, 27-Mar-23 12:16:18 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgwA2Lc4nuoD8HSt4; SameSite=None; Secure; path=/; expires=Tue, 28-Mar-23 10:46:18 GMT; HttpOnly
__cfruid=3255af4a48252346cbbbb05708fa6a057f665d96-1679917578; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7ae764629d28b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maintenance.etoro.com/maintenance.json?client_request_id=12e3cb17-b3ca-427f-bd98-2a40ccc7087a
403 Forbidden 0 B URL HTTP/1.1 maintenance.etoro.com/maintenance.json?client_request_id=12e3cb17-b3ca-427f-bd98-2a40ccc7087a
IP
OPTIONS /maintenance.json?client_request_id=12e3cb17-b3ca-427f-bd98-2a40ccc7087a HTTP/1.1
Host: maintenance.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accounttype,applicationidentifier,applicationversion,x-sts-deviceid
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 403 Forbidden
x-amz-request-id: S1Q7QN28136A8DX8
x-amz-id-2: MqNA+62k06inxnjV5T8oBRlDlk+PMwuX528danJQ5tbtijNopXgmCbHMK2ps7N1CtRToLoxiruY=
Server: AmazonS3
Cache-Control: max-age=300
Expires: Mon, 27 Mar 2023 11:51:20 GMT
Date: Mon, 27 Mar 2023 11:46:20 GMT
Connection: close
Access-Control-Allow-Origin: *
Content-Type: application/json
etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
200 OK 0 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
IP
GET /web-client/et/fonts/icomoon/general/general.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: az7/9S5knLcEIgW/IwPCeJ29gEgOypw2EFimCw7uJyaQyUpUSswel8sTZYtq5ioMQch8BDsB4is=
x-amz-request-id: TMNY8KDGW9EZSANW
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Mon, 27 Mar 2023 09:09:11 GMT
etag: "d466cd5a68c9ba494448c956b669a82d"
x-amz-server-side-encryption: AES256
x-amz-meta-sha256: 51e5d968230ed68c0eb92e41b11fe42862768961d4aafe8569d4b40be834958d
x-amz-meta-s3b-last-modified: 20230327T083418Z
x-amz-version-id: JXzdki9yIK2oR2F9bSGTwcYk7GbH4Mdi
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2592000
expires: Wed, 26 Apr 2023 11:46:20 GMT
date: Mon, 27 Mar 2023 11:46:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1679917599255&data=%7B%22id%22%3A695%2C%22ii%22%3A%22%2Fen%2Fembed%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679917599249%2C%22cv%22%3A%2220230326-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679917599255%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1679917599255&data=%7B%22id%22%3A695%2C%22ii%22%3A%22%2Fen%2Fembed%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679917599249%2C%22cv%22%3A%2220230326-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679917599255%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1679917599255&data=%7B%22id%22%3A695%2C%22ii%22%3A%22%2Fen%2Fembed%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1679917599249%2C%22cv%22%3A%2220230326-2-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1679917599255%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 27 Mar 2023 11:46:21 GMT
via: 1.1 varnish
x-served-by: cache-bma1652-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679917582.665852,VS0,VE117
vary: Accept-Encoding
x-vcl-time-ms: 117
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=r5t8riu&ref=https%3A%2F%2Fwww.etoro.com%2F&upid=by3vm07&upv=1.1.0
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=r5t8riu&ref=https%3A%2F%2Fwww.etoro.com%2F&upid=by3vm07&upv=1.1.0
IP
GET /track/up?adv=r5t8riu&ref=https%3A%2F%2Fwww.etoro.com%2F&upid=by3vm07&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-px.s3-eu-west-1.amazonaws.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:25 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5141210824214359720&r=vCnuR-AT-KAZ
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5141210824214359720&r=vCnuR-AT-KAZ
IP
GET /sync?UIRF=5141210824214359720&r=vCnuR-AT-KAZ HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20815068p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:46:26 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
104.21.56.151
3.224.136.91
87.248.119.252
31.13.72.36
23.38.201.81
212.82.100.181
52.59.114.125
185.94.180.125
185.80.36.245
151.101.244.157