inoradde.com/4/4292614/
200 OK 610 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 521b96efa40fcfcf2890d3800ec2557c
5379992a8b37ee0ac09f3fc1bdec3ce432a971ea
cda54cd32529c059f7da34ea6aba55a6edc1dbecd65aabee416af04b533fb89a
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /4/4292614/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:05:10 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 42721eb0d67bdac125b0c325fd3b57a2
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://med.etoro.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=f5f94d9a571946758c0b4540983cc062; expires=Thu, 08 Feb 2024 23:05:10 GMT; path=/
oaidts=1675897510; expires=Thu, 08 Feb 2024 23:05:10 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9334
Expires: Thu, 09 Feb 2023 01:40:44 GMT
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8229
Expires: Thu, 09 Feb 2023 01:22:19 GMT
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3149
Expires: Wed, 08 Feb 2023 23:57:39 GMT
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 22:34:13 GMT
content-type: application/json
age: 1857
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0uqxHbznht55gzkCbnklgNvBmwkGZnVBnUryoSMc2SPnfTZN5eAVvoHZr9YWr+yEzVy4g1NLQkM=
x-amz-request-id: 6CTFDRHAGFK3TEZ6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 22:46:08 GMT
age: 1142
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:05:10 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c14e228f19415f2af825294ff401241
dabb4fa3c22980b27aa873fd8aa429366655c95e
df9ed274a8026ea08f348145695717b6f8a11fa8f3c14e60b30b4cd60f7e2fde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF9ED274A8026EA08F348145695717B6F8A11FA8F3C14E60B30B4CD60F7E2FDE"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13668
Expires: Thu, 09 Feb 2023 02:52:58 GMT
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
inoradde.com/favicon.ico
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=f5f94d9a571946758c0b4540983cc062; oaidts=1675897510
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
my.rtmark.net/img.gif?f=merge&userId=f5f94d9a571946758c0b4540983cc062
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=f5f94d9a571946758c0b4540983cc062
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=f5f94d9a571946758c0b4540983cc062 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:05:10 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f5f94d9a571946758c0b4540983cc062; expires=Thu, 08 Feb 2024 23:05:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_4292614.aspx?rdk=rk1
301 Moved Permanently 239 B URL HTTP/1.1 med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_4292614.aspx?rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 2b2e6463558eb952a0e8883a09d54068
114a4cde532841d64fa3620b17b9f242dfbff5b7
4545ab1fd99e26e4fbfa01e941e68421e0959095fff7ee3969f111c9e41886d7
GET /B15349_A115832_TClick_SPRP_DJULBREG_4292614.aspx?rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 239
Location: http://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1
X-Robots-Tag: noindex
Expires: Wed, 08 Feb 2023 23:05:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1
Expires: Wed, 08 Feb 2023 23:05:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4292614&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292614&utm_campaign=PRP_DJULBREG_4292614&utm_term=&rdk=rk1
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Wed, 08 Feb 2023 23:05:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 08 Feb 2023 23:05:10 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=kklidy3fqwr2xluxvkhuqyns; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Sun, 09-Apr-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4292614&rdk=rk1; domain=.etoro.com; expires=Fri, 10-Mar-2023 00:00:00 GMT; path=/
ocsp.digicert.com/
200 OK 727 B IP
Hash 3f27fdbe6ae912e5a15e5479cfbc4f2e
934c9caee0d49334e7486d49c82f0826f8c3926e
06af5a9301212c17f0e83b2c0d5dd71bf8486757276be74a79c030942c16768c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1746
Cache-Control: max-age=158792
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:11 GMT
Etag: "63e3ed1d-2d7"
Expires: Fri, 10 Feb 2023 19:11:43 GMT
Last-Modified: Wed, 08 Feb 2023 18:42:37 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 727
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 22:51:21 GMT
age: 830
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 3f27fdbe6ae912e5a15e5479cfbc4f2e
934c9caee0d49334e7486d49c82f0826f8c3926e
06af5a9301212c17f0e83b2c0d5dd71bf8486757276be74a79c030942c16768c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1746
Cache-Control: max-age=158792
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:11 GMT
Etag: "63e3ed1d-2d7"
Expires: Fri, 10 Feb 2023 19:11:43 GMT
Last-Modified: Wed, 08 Feb 2023 18:42:37 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 727
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8632
Expires: Thu, 09 Feb 2023 01:29:03 GMT
Date: Wed, 08 Feb 2023 23:05:11 GMT
Connection: keep-alive
maintenance.etoro.com/maintenance.json
200 OK 309 B URL HTTP/1.1 maintenance.etoro.com/maintenance.json
IP
File type JSON data\012- , ASCII text, with very long lines (308)
Hash c47549fa5fc30f994fcac453124a8e7b
0f412a6d214bb46455c050727fea088988675055
0c24a034718dc60de1753b99f17a8446ca525807a6a35899a3dcb9fd4f68eb6b
GET /maintenance.json HTTP/1.1
Host: maintenance.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
x-amz-id-2: YR/g6RKKXOnwp2GxKCbJQpFXNpuS/ibhbiOYuEBUQqY8u8i3qM13Hw9ka9wwVR1Kpgs1fsWGHag=
x-amz-request-id: XZRN7K1CCFQ0WFJE
Last-Modified: Sun, 08 Jan 2023 07:18:02 GMT
ETag: "c47549fa5fc30f994fcac453124a8e7b"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 309
Cache-Control: max-age=300
Expires: Wed, 08 Feb 2023 23:10:11 GMT
Date: Wed, 08 Feb 2023 23:05:11 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Type: application/json
api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_92b7fa1854cada02742ea10126013713
200 OK 6.8 kB URL HTTP/2 api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_92b7fa1854cada02742ea10126013713
IP
File type JSON data\012- , ASCII text, with very long lines (33443), with no line terminators
Hash 5b247d1a83379f87bf7f488300d5d43b
3ee581e1b43bee8043ba370592cd2b82d233aa51
c4be21bc9be4781ed8df7f8a2b43f80f15e7bdc2abc07a56693dfacfe0d1c618
GET /api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_92b7fa1854cada02742ea10126013713 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:14591840-b1dd-4126-9a8e-18803188a73d
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 6799
cache-control: max-age=1209600
expires: Wed, 22 Feb 2023 23:05:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_4e2ecd8d0248b9233b0912b96f383cde
200 OK 788 B URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_4e2ecd8d0248b9233b0912b96f383cde
IP
File type JSON data\012- , ASCII text, with very long lines (3081), with no line terminators
Hash 18afcb9729a9802cc68f6ffd543d1784
4569392aa9271a43a2780790d20124c53d073940
3f3373c5f225713cb5262813c0966d4e7f38ca0806b4e54f12ea166b2e54e77b
GET /sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_4e2ecd8d0248b9233b0912b96f383cde HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-max-age: 3000
content-type: application/octet-stream
etag: W/"16c81beb818ecd15f024ae9606a53f74"
last-modified: Sun, 01 Dec 2019 10:07:21 GMT
x-amz-id-2: L2bHFBuo4YFTunisR2Baab3OsAhy0KoZx3ORU3wuFdwkEj/YPx7K6Osnu70SCrnQjaSxXudqZy4=
x-amz-meta-s3b-last-modified: 20191201T100206Z
x-amz-replication-status: COMPLETED
x-amz-request-id: X21Q3CJTCJDCGB7A
x-amz-version-id: YJZIwhKbLzAkKfpv9wKr1PH76VdQu2_5
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 788
cache-control: public, max-age=1209600
expires: Wed, 22 Feb 2023 23:05:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=0ae3200a19bf7214f3b8f5e16436c58e_92af8667faab70bc0f80459ee66931e6
200 OK 412 kB URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=0ae3200a19bf7214f3b8f5e16436c58e_92af8667faab70bc0f80459ee66931e6
IP
File type Unicode text, UTF-8 text, with very long lines (64902), with no line terminators
Size 412 kB (411511 bytes)
Hash ad6777ed3b6d7d8c9dc766a221f893b1
626f5066a4d46bf50d8f43d86fb328e5090aeef2
28012cb88d5eb1cf3020cdeecc3c9797293bbc77466b0db65e01fd8cae1d9d00
GET /sapi/app-data/web-client-locales/nb-no.js?cv=0ae3200a19bf7214f3b8f5e16436c58e_92af8667faab70bc0f80459ee66931e6 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/octet-stream
etag: W/"50094292d89306b3be53464c0dc00ca2"
last-modified: Wed, 08 Feb 2023 15:14:10 GMT
x-amz-id-2: kKcwk9dpFP+ZyDhO/MTtZ1hgYCfOFHpWe5tX8gmIRV7E/oBgna54mZFK0O3oSL9yeUgt3WHcpgM=
x-amz-replication-status: COMPLETED
x-amz-request-id: ZQXE2M4K6RFGG1P2
x-amz-server-side-encryption: AES256
x-amz-version-id: OoHsoOFfozzBq39xvyN0UwM5vc8YvtAS
content-encoding: gzip
x-robots-tag: noindex
content-length: 411511
cache-control: public, max-age=1209600
expires: Wed, 22 Feb 2023 23:05:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/candles/closingprices.json?cv=bae9cc2807923c34995f193c82c30817_cf889381754c4544926cce1ff1ce10c8
200 OK 150 kB URL HTTP/2 api.etorostatic.com/sapi/candles/closingprices.json?cv=bae9cc2807923c34995f193c82c30817_cf889381754c4544926cce1ff1ce10c8
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 150 kB (150329 bytes)
Hash bdf4d02094d97f2d129111dfc0a646a2
52b7f00fda018661a22887c1ab2208b44711b18b
b6ac3cfac5a866a6d331f213d73a77ebe45f347fae9a171139925322c6c94405
GET /sapi/candles/closingprices.json?cv=bae9cc2807923c34995f193c82c30817_cf889381754c4544926cce1ff1ce10c8 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 150329
cache-control: public, max-age=1209600
expires: Wed, 22 Feb 2023 23:05:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=48799fef7c05a47a0f9818c8b9cdc4a5_35c887eeebaa8ae423a50443e409a51a&totalBulks=1
200 OK 318 kB URL HTTP/2 api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=48799fef7c05a47a0f9818c8b9cdc4a5_35c887eeebaa8ae423a50443e409a51a&totalBulks=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 318 kB (317487 bytes)
Hash 210f96fdaa9c4ba499df196e99e450b8
c8fa3b070e764dfd250cf08ed6d26f31219b22a9
1f805370bb058900ebc9a4b8aaca382f16c540d98d0c5fea73937ac9739e125b
GET /sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=48799fef7c05a47a0f9818c8b9cdc4a5_35c887eeebaa8ae423a50443e409a51a&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:486a9dd7-b5cc-49fa-ae5e-a2ea9ee3e36e
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true
x-robots-tag: noindex
content-length: 317487
cache-control: public, max-age=1209600
expires: Wed, 22 Feb 2023 23:05:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=b80565ba9f88471d4da60e6c2170ff80_28d86f8ad42691ec755397b149c06787&totalBulks=1
200 OK 346 kB URL HTTP/2 api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=b80565ba9f88471d4da60e6c2170ff80_28d86f8ad42691ec755397b149c06787&totalBulks=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 346 kB (346004 bytes)
Hash abc6351891aa1523ec7473e86f616bc1
e69848f65b68e10f1e51b99f2e3eb04ab151d369
07904b515fee531dd547feaedb2d46dae4acfb2947d3eec477cf898651ed23ab
GET /sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=b80565ba9f88471d4da60e6c2170ff80_28d86f8ad42691ec755397b149c06787&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:da6cfa5a-5dde-4d38-9665-5bd2b94cd342
accept: application/json
content-encoding: gzip
access-control-expose-headers: x-unauthorizedstatus,x-ab-test
access-control-allow-credentials: true, true
x-robots-tag: noindex
content-length: 346004
cache-control: public, max-age=1209600
expires: Wed, 22 Feb 2023 23:05:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/js_files/?m[]=tools/browser-support
200 OK 5.7 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/js_files/?m[]=tools/browser-support
IP
File type ASCII text, with very long lines (13040), with no line terminators
Hash d402106ef1717493100b74f75ac519db
39e8321fa08561d589f788fb71eb9467d7155038
54a6eacbe22f1223b9f10177efd54b9c2eaf6ba6d76c777677cc35a2737e7352
GET /526.0.1/js_files/?m[]=tools/browser-support HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "dvAs3BbGu5bxiAbI/3K+fg=="
content-encoding: gzip
content-length: 5720
cache-control: public, max-age=31497743
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/css_files/?p[]=styles/style.css
200 OK 279 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/css_files/?p[]=styles/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 279 kB (278800 bytes)
Hash a9566a99218feec2e54fe6416acc5257
ee3354e05ef8f8f48204f10a6e4ff526830d46f3
1399a103926d5a6cdf6a65a80e305de56e09954f3947657348c0b1e95daf11f6
GET /526.0.1/css_files/?p[]=styles/style.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "auJk14DhyhW6RQkLEyMBBQ=="
content-encoding: gzip
cache-control: public, max-age=31497721
date: Wed, 08 Feb 2023 23:05:11 GMT
content-length: 278800
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
200 OK 27 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cff377b0f027f4cf2efba0f1827a6ac1
0f86e6e39b9d7c0d4aa84caac0aad079ba5ccae3
75baeb162272bc3a969e44d930ee73803411ad3b9299cc27dade9ba3bf38934d
GET /526.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:18:13 GMT
etag: W/"OSiVOQgofxFBuo+z0KSimg=="
content-encoding: gzip
content-length: 27123
cache-control: public, max-age=31497722
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/sem-etoro-ng/styles.59cd2a5f72e99372.css
200 OK 25 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/styles.59cd2a5f72e99372.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b255b5afa8de578c3562679d4b5ea474
68369f03d8cd04ae555c91e8f02d1a20118a723f
6d7b7193ce4e6a31614d229a70fa794ae87cae4bd1986f8465e8a1909a5b99d1
GET /526.0.1/sem-etoro-ng/styles.59cd2a5f72e99372.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:16:41 GMT
etag: W/"FItAuNxiRwGnIbqQT/Stng=="
content-encoding: gzip
content-length: 25201
cache-control: public, max-age=31497701
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WmMkNw4GV9iO5fJMyZ4b6g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Bue3v8NlwtO8ohQr1hAAkK4ppN8=
cdn.etorostatic.com/526.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
200 OK 989 B URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
IP
File type ASCII text, with very long lines (1834), with no line terminators
Hash b812ce2c9a9459dbacd0b93a3b2cff54
0be647987d5befbcf2e4412e6a7edc0a70f7952e
2a0cb36357059f192cd794e4dfb1d2ef5e41dd6df5754c37896d644b619bb529
GET /526.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:18:13 GMT
etag: W/"fysOYxV9T19K92eEzYllgA=="
content-encoding: gzip
content-length: 989
cache-control: public, max-age=31497745
date: Wed, 08 Feb 2023 23:05:11 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/preloader.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/preloader.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash b0f268da8d890fc3afc15e32480e866e
1465c0de6f4871bbe22dc940cf2530a7a516568f
90c5b9934bc4952a0bec1284d8e63468b0cf8eb1af23cdfd56b735e83691b79f
GET /web-client/img/preloader.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UH+ATK60E6ROQ9TsYcHeU/RFVBFFMGrtaqw+V0IEC6jHrEpED4Gz4DQgWTnwRsH/A//TuZKINag=
x-amz-request-id: F84TVQCQWZSV9QG2
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 07:40:21 GMT
etag: "b0f268da8d890fc3afc15e32480e866e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 07:39:12 GMT
x-amz-version-id: ypOW0sjHuKqXDROJg6L6MTOp1Z0lHcDD
accept-ranges: bytes
content-type: image/png
content-length: 1206
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
200 OK 390 kB URL HTTP/2 cdn.etorostatic.com/526.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
IP
File type ASCII text, with very long lines (35879)
Size 390 kB (389690 bytes)
Hash 493a3e3c7319f83afaf42e0f5327abe7
ecaac3f80f01ff702e00773fe73f60c76f1e78f7
4ab6826b0caf5d378018490e309e70dee19f15c1b1e4b3e83e408860717d9342
GET /526.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "0xbTQBdXslJoX6R5P4EtQg=="
content-encoding: gzip
cache-control: public, max-age=31497699
date: Wed, 08 Feb 2023 23:05:11 GMT
content-length: 389690
vary: Accept-Encoding
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sprite.png
200 OK 71 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sprite.png
IP
File type PNG image data, 170 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Hash e1e136d8c9c87238c1faecbe30de864a
4dd3ff46c7a92fb59e0b4e86f0ad408c67867f66
1f97ddc0a725e59b6f4f9e1cd03eeff0399145b5f9074e9dde10f04856541c9f
GET /web-client/img/sprite.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GXJ09iezztMOcZchZuKrqftesXrKIPosJAKn3IvPIFIQmJ/DbareBjGNIiZtD3vKtcF+XAfwc3Q=
x-amz-request-id: SDAVMPKYSN6R3RRA
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Jan 2019 08:39:49 GMT
etag: "e1e136d8c9c87238c1faecbe30de864a"
x-amz-version-id: c7040_.mWfwV0MHOIOsnAOoCalddmt_9
accept-ranges: bytes
content-type: image/png
content-length: 71400
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/eToro.png
200 OK 2.7 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/eToro.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 26762307f35f8ad6510ac9ae15a9286e
f152e82f3fabc6f5809a064ae9985e00ddbe6d6a
3e23034db4d4d5dd806dbdd52587cfccddec21a47ec146406db1f1bd59bafb6e
GET /web-client/img/eToro.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UlOxm6ovhflHdpMltwaEHi/HC60B+6k6wEjEklKC/DQWXKaUBPanXrwEcTCQ2Fn1u7at0AVATEA=
x-amz-request-id: SPR4SKCW6QD53NRW
x-amz-replication-status: COMPLETED
last-modified: Wed, 26 Aug 2015 13:53:21 GMT
etag: "26762307f35f8ad6510ac9ae15a9286e"
x-amz-version-id: C4K7m5KD911B831tKwc9dRE4hGW8f4G_
accept-ranges: bytes
content-type: image/png
content-length: 2729
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/avatar.png
200 OK 4.1 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/avatar.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 299143d79774a5a4581a0e3a7f0a0038
971f38ccaf41dab068a4f9eb5c4d6d7a25bb67bb
94e3a489999508f5d2367de8ef15434d1f41afc24b2c94b08976d96438ec5530
GET /web-client/img/avatar.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: u96jcsZKc51k0MOcOc90z9Wg1gT6oHC6j5+T11FGXJLNoSqzBPZBHlmlfJwXGXk2k+9wD8/9pgE=
x-amz-request-id: JPMGDCN49JDFCKD1
x-amz-replication-status: COMPLETED
last-modified: Tue, 08 Sep 2015 10:58:53 GMT
etag: "299143d79774a5a4581a0e3a7f0a0038"
x-amz-version-id: TJHv2UgTAtmK_z5ntjVcX71guH3fsI7I
accept-ranges: bytes
content-type: image/png
content-length: 4095
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:11 GMT
date: Wed, 08 Feb 2023 23:05:11 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/526.0.1/sem-etoro-ng/main.71d38ee09d161c18.js
200 OK 2.9 MB URL HTTP/2 cdn.etorostatic.com/526.0.1/sem-etoro-ng/main.71d38ee09d161c18.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 2.9 MB (2944997 bytes)
Hash 8374200382e587ad5a5bdd21394b2d6e
e6203fe3d1a1ffc3636d417a6d320e4341b504b7
66e52e83f489fdfc247d30a87ea3d660cd93f8a6c9c190a53b64c06ab19039af
GET /526.0.1/sem-etoro-ng/main.71d38ee09d161c18.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:18:13 GMT
etag: W/"6h6NmfqvPjklm6FexqI6Yw=="
content-encoding: gzip
cache-control: public, max-age=31497745
date: Wed, 08 Feb 2023 23:05:11 GMT
content-length: 2944997
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3346
Expires: Thu, 09 Feb 2023 00:00:59 GMT
Date: Wed, 08 Feb 2023 23:05:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 764b732e88dd1e9c1824529b24b3dffc
2ba954a51c2972b267ae0536e343e608aa9aa7f4
a1efdf03b14bb05cf8e407b92476592c35fa2d27c5e66705322abdb4c6412a06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8150
x-amzn-requestid: 3834493a-4162-4cc9-b67c-541cc9be895b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8IH0TIAMFWqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb380-3746ff7b0a6894366efa848e;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HNuUU4SaVvuPbW0clgJa6UZ-0zefgWJWfIJEsz_yCfKiCrx2wsu6vA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 09:58:24 GMT
age: 47209
etag: "2ba954a51c2972b267ae0536e343e608aa9aa7f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4930c104-0ac3-49ae-9506-13702874f821.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4930c104-0ac3-49ae-9506-13702874f821.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c1f5626e7ff7e681468c3c5820f3633
a8bb267f929b734a53b3dab0283c717270f6eb43
38d81274cc9f71f149091f72494c74872d99909c69d612a595c930c4755c4da3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4930c104-0ac3-49ae-9506-13702874f821.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 1b0f88cf-460b-4ed2-8235-86c9e3e3ff93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffW2uG3LIAMF3cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d604f7-42e5c38315bdbd47615985b6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 05:32:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nfLYmz3SEBzBp32-FDPDF-rqh4-pAjLixYD4abVqF5fl3awttBNRUA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:47:56 GMT
age: 1037
etag: "a8bb267f929b734a53b3dab0283c717270f6eb43"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3346
Expires: Thu, 09 Feb 2023 00:00:59 GMT
Date: Wed, 08 Feb 2023 23:05:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95081172f8e19d19921acc802488e019
8531c150cb11de44361a95624b11cf46b9e0ba02
7a2d8f012c7d590f3f39ad834d4f3f9fb729143b7395bc588bd608b5bdee039b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15019
x-amzn-requestid: 574e3e2c-2fbe-4215-9500-021147338832
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f583LHiioAMFqkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a82d-4f12aac524c39f822ca4f422;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:11:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _3jIo3Giw3zmTmnSkJArAllT6uigN7EEzLPfkGpd6168_mSdqdk_Cg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 08:24:16 GMT
age: 52857
etag: "8531c150cb11de44361a95624b11cf46b9e0ba02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9203cfb9f0c1c958dd008eac55a9d3c4
6bdd1047590dd3fb54c15d5d6d38e7c86274b203
09770229be5ff3037708543e3204c66de84253b3a858a83a0e1672a04c0e9cb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11760
x-amzn-requestid: b2863a01-4714-4554-a478-5402467b3448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKHc_oAMFwlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-1c5a3edf37bc7cc937c800d2;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: euok7HXthk9GEynD8n9wXgf85lD0shxOdtT5VZvj-xHkoxEMxuohmA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:42:38 GMT
age: 4955
etag: "6bdd1047590dd3fb54c15d5d6d38e7c86274b203"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa565275-3a2e-4292-b935-18f8fc648689.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa565275-3a2e-4292-b935-18f8fc648689.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ebad32ed6e84736b26623ed3d9b6cfe7
f9ddc5333953bafc7de7c971a693771a179e8bab
c8cc0ee6bcc93f226bcf774f1354e094bd6715c86e680be7523c84e457b7922d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa565275-3a2e-4292-b935-18f8fc648689.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 5d2c1f9d-9088-461f-ad0d-d5ebcc54f78f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsw9gGk5IAMF1fg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db61ef-1318c7ba1dc92b30228a1aaf;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 07:10:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jCwYb_u5z_XDADfhooA_MtH6KDONfrUsOUESiOTcZciCPM3jwyMgAA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 13:40:47 GMT
etag: "f9ddc5333953bafc7de7c971a693771a179e8bab"
content-type: image/jpeg
age: 33866
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b42802dc628e38e9631a01b6320040a
c83355f0828815ecbff47d8195d2deed8077e368
d0f093b1769b568a5d68ada359eadfd1ab3360488a20e1deeb99b0a51b649441
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11256
x-amzn-requestid: fc079b98-a94a-4945-8e51-9b5941fda799
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8SEOMIAMFomA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb381-72b83330325d280821ecf4c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tlIxKyJ3tqYVM667Uz4n2OHk2eiLer2Nc7bnFKqJUZcYDoPqjRlagQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 19:24:56 GMT
age: 13217
etag: "c83355f0828815ecbff47d8195d2deed8077e368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Hash e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VoVKI/9JsMea6fWtxtt8R9nFaRKJz8kqToFlDmyON1so/a+S+9AJkyqDiPwJwuZmDmDPXEOkJjQ=
x-amz-request-id: 5E70NEWKDZYYA9YJ
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-type: application/octet-stream
content-length: 59600
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 10 Mar 2023 23:05:13 GMT
date: Wed, 08 Feb 2023 23:05:13 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 101 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35498)
Size 101 kB (101022 bytes)
Hash 4bcee4866effc62e83fd7a94ab4c8799
cc1e4b908da22c2fcabbdda4bf6bba058ae23de3
3a00f1f2553ebd717febe8ddb71fd64a2b2342691f9641941a89e32f48523e56
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 Feb 2023 23:05:15 GMT
expires: Wed, 08 Feb 2023 23:05:15 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 Feb 2023 22:05:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101022
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c99599d6628f41d54430edaa40f5c533
4bbd35fd1097784ae5e1e046ba35595eb49ac57f
3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP
File type ASCII text, with very long lines (755)
Hash bea784dce86d30e1f2e59387f85cccb6
90665d4cc2e3f1e8c6da1247096c0af28b70ae04
b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu3_kFiIA31DWA9PWhbefgKelQtqPRx_fhRWBIqMYCb5TOKQy8nmvPR9UPVCg2x6dCeViSCYBC0Eligiu2L6H_Ziw
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Wed, 08 Feb 2023 22:55:28 GMT
expires: Wed, 08 Feb 2023 23:05:28 GMT
cache-control: public,max-age=600
age: 587
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 0c0d79c29cb1a52c425e78d1b40d15f5
f535942593821c807ef3f6a8c4d9239b89e2cfbc
a73783238a8f95b95ae14625ca18e317937e01a17cae3e2a5baac95eef650566
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3042
Cache-Control: max-age=88099
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:15 GMT
Etag: "63e2d3ec-2d7"
Expires: Thu, 09 Feb 2023 23:33:34 GMT
Last-Modified: Tue, 07 Feb 2023 22:42:52 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 727
etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
IP
File type PNG image data, 198 x 64, 8-bit colormap, non-interlaced\012- data
Hash b41babf405ad72c9fa6455dccd372380
83841f3d6f390fddbf774b397daf051c890a8c32
ac2ec5d1e65ba32849742fe3ed0899214ba9e063ebf31b7549175f2b66394b08
GET /web-client/img/login-logo-hd.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: PorXpYuLeZEJR1S1l7x0MZpKfNRfvTY0z05AtH5eA1Vw0sqGFAMterLhA4YyQO4zAeoCB9EZhZc=
x-amz-request-id: C0ZAWA85CAYQMY45
x-amz-replication-status: COMPLETED
last-modified: Thu, 29 Sep 2022 12:49:46 GMT
etag: "b41babf405ad72c9fa6455dccd372380"
x-amz-meta-s3b-last-modified: 20220929T094658Z
x-amz-version-id: 078Rkok.ZhnHyEE5EUR82hq7nZDNmuJ3
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1171
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:15 GMT
date: Wed, 08 Feb 2023 23:05:15 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
200 OK 909 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6d8d67e95d438776e32632b4f8e8c4e2
6b5eac8fc9722e1d12f05e6e3dae6748215e0238
2bf43a304aa34d530722842db131841969dffb18d2625b58851926d5fc011e26
GET /web-client/et/img/settings/general/flags/norway-flag.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QQKUB08k08I6uUSVyVG8KLeUZwn33TUAsq/ELlQd7LRUUFjhtauF/j7U9n46fcbMos85056HhOg=
x-amz-request-id: G7YRDT0XZ95CY7S7
x-amz-replication-status: COMPLETED
last-modified: Wed, 19 Feb 2020 12:32:58 GMT
etag: "7ee02734ec1f49f74d970aea31b057e0"
x-amz-meta-sha256: e143bb1d025c5ab640ec3df3c8b80829a62eff2d46e654618f865479aa3d7374
x-amz-meta-s3b-last-modified: 20200219T114039Z
x-amz-version-id: d0T8a9zUHLaL3Zp1SI66mmUeybQ6zeZH
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:15 GMT
date: Wed, 08 Feb 2023 23:05:15 GMT
content-length: 909
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1eda8296b6d8216c11823c218d93fc53
5bc5e214594948f6110df8d9a119a1812463598a
724adcc68ddd999d2a9d70c069850398fd3390ca0e45ca4d6af01c3da5a3597d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123695
Date: Wed, 08 Feb 2023 23:05:15 GMT
Etag: "63e3634e-1d7"
Expires: Fri, 10 Feb 2023 09:26:50 GMT
Last-Modified: Wed, 08 Feb 2023 08:54:38 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8p-h1io8mWpSK9NiIbSkuazjGXbEhd2TasQBPGU7Nw3RFTvbGZhTPg==
Age: 1932
etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=c5137150-6943-406d-b32d-0705c4727170&referrer=
200 OK 5.7 kB URL HTTP/1.1 etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=c5137150-6943-406d-b32d-0705c4727170&referrer=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6dfc495da4241bd88a002aa677dd2778
8e6bb2aa50cc0bfea4942b1e3c9945d920894080
0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
GET /loaders/history-changes-r.html?target=historyChange&guid=c5137150-6943-406d-b32d-0705c4727170&referrer= HTTP/1.1
Host: etoro-px.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: TylSFuy86X1ApwFiI8vIOPp3Iwzne20hNFUWxkxa6BrzsVsgL/nmF+oeMyO1TSNNGOmALQX5U4I=
x-amz-request-id: HT91FSEAK75H40B0
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Tue, 07 Jul 2020 12:01:19 GMT
ETag: "6dfc495da4241bd88a002aa677dd2778"
x-amz-meta-sha256: 0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
x-amz-meta-s3b-last-modified: 20200707T114930Z
x-amz-version-id: 2.0Pc3hXrEIlcYYVezOUu66Og0lWOrsY
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 5667
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 32 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 6d95ff10eeca571bee4f51f32e41b948
df00d5465c3b1f108a6a7cf755668caf91ec9ff5
40d3f60ce1b1477483ed194cbce80d938e70393e7d6288a323c0757d329164c4
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 31922
content-encoding: gzip
server: Caddy
date: Wed, 08 Feb 2023 21:05:26 GMT
cache-control: max-age=43200
expires: Thu, 09 Feb 2023 09:05:26 GMT
etag: "15767-GhMB74kM7mI615THnmEla1bwmvU"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7QJ2fGeKrrOIOHARPYHcVaXahkSGdWDBkcA3BHfcTzZRrvKPdYZ9Og==
age: 7190
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 310 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
Size 310 kB (309459 bytes)
Hash e6e8614e7278bec00800168b31d5d1f8
b78b3f694732378ebbf5f8fe3051ff2e8ffcf02b
fd854fa537c9a572339a9d830794a2c2fcf9aff0aa55c1698e6c50d699e4c83f
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13295
server: CloudFront
date: Wed, 08 Feb 2023 23:05:16 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 09 Feb 2023 22:52:45 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: GeneratedResponse from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dM4Q5e7Hf7HELCv20WnwbgFKYD5lmGVYRjqmolSS-QIibLcgbXT5jg==
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 08 Feb 2023 07:31:39 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8KsDyc2_ZZFKpNp0FzOG5WpZGYS0asmlBMKnX6nTsBOwW7LLV3gfDA==
Age: 56018
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
200 OK 602 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP
File type JSON data\012- , ASCII text, with very long lines (1333), with no line terminators
Hash 76110249790cc70ab8c8e38ad2bae1f0
5bf7efcf06c94206c167605baadd5ef85100b0b9
f371b2be1843f5154938c1e7fd2080425be7950d9912d09aaf1520a478ad326d
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:05:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 299
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 23:20:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IRCfMyEJ6XLVHS/waVgNagZe5cBkkf5SsjeMeX2BsaGV0iLq5UuJYwCvgNj2V5su0u0580EuP1A=
x-amz-request-id: X57JYQH54681RNKS
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
content-length: 2209
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash 30992d9a32d26479fed272933c0d21b4
cc0c08c6e9be141057ed2987bacb951acc12cf4a
01f8923722d2b729b3c68122e00b7c991bc76c5f41c67aac8b99142c1bc90b16
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6136
Cache-Control: max-age=144448
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Etag: "63e3a3f4-1d7"
Expires: Fri, 10 Feb 2023 15:12:44 GMT
Last-Modified: Wed, 08 Feb 2023 13:30:28 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 467
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Wed, 08 Feb 2023 22:57:29 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
cdn.etorostatic.com/526.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
200 OK 814 B URL HTTP/2 cdn.etorostatic.com/526.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
IP
File type HTML document, ASCII text, with very long lines (2600), with no line terminators
Hash 9fb4e76e84c051366edefd126d73358d
b5258607a0001e51df1dd8a72e51b0061cf3a00c
df95ea3e29ac53a69ec60818d29e6d8406f0d82c02839d1e14c5222f7709e1f3
GET /526.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "WM91upZzxqcGhUsvXTONjw=="
content-encoding: gzip
content-length: 814
cache-control: public, max-age=31497870
date: Wed, 08 Feb 2023 23:05:16 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 467
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Wed, 08 Feb 2023 22:57:29 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4558
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Wed, 08 Feb 2023 21:49:18 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=bf4e3eec-a801-4f38-b3ae-ed8fa021dbae&u_sclid=f4f518d8-bc2c-4177-b3bd-1d8b6961b7fd
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=bf4e3eec-a801-4f38-b3ae-ed8fa021dbae&u_sclid=f4f518d8-bc2c-4177-b3bd-1d8b6961b7fd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=bf4e3eec-a801-4f38-b3ae-ed8fa021dbae&u_sclid=f4f518d8-bc2c-4177-b3bd-1d8b6961b7fd HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:16 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:16 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 649
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ3AMAgDsIuQQlVCc07HxhUcP7tZXjdkvQTb4Z9dIu3UQ0jr3egZZ8ZRhnPwA5VJqd8yAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 6
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb00c4c9b909c8c1c1ea869dfaf58e81
e5511a9c2f4e06104375bd05bbe7b70fabb40557
dc196f334372b5466f66d92fc7a4b2df48c49947ae344e8b347203b696753e7e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 467
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Wed, 08 Feb 2023 22:57:29 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 299 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (600), with no line terminators
Hash cce57c047e7f75fd554166059e96616f
a9efe86b1c06d9c976d5874c22e668dfc02246be
a85276e714ad66cfe59844a1b667e0204824c5c5402c3ab6ecd819836c47f313
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:05:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 299
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
200 OK 1.7 kB URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 66a6cf567484e86b56079f766d67118c
2dda878fdea3fd71582934977847d26b3cced979
ce5e4070762955597bf40b6bdd7444eff6f51517b8c68629dbd0f99193ec9806
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
200 OK 645 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b8f3342ef1ebe6f5c64bafff3131548
99b5ac271a65175ff24696d9a24c9ebda02b71fc
fc1f1deaf7d4759c0a6e573a65f7961733cbf05f66f93c44511881dd0b471596
GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7hrLTF189oZ983sS07xC8htEwbBqVSDXTKf5wRGZFZvZNMsvN9scmh2RnqfmsRWHkwVB7oQmJnw=
x-amz-request-id: 9VRZRH3QEAAJV71M
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
200 OK 377 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5c4699717e2af42d1674a9008ffbfe85
cf2ee13be98793210c3b2c8eec66ac830510ebe1
d608b0e2406e7ee895c50292d358d848267796d637eaa16a6a6144dc14ed7bd8
GET /web-client/et/img/registration/i_fb.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: wJ59IKBWiDMMj1rsDpfd852rUGtzZfdKU9zirzUs9UXZ1KrIaHHAztq3+qRIPPWFLRiSsP9xdWk=
x-amz-request-id: 6RXYNJ643R78SNA5
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
200 OK 37 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1079, components 3\012- data
Hash 2f6d6f1e997f3a2a15888feb99459bb0
ce895db684c81debb871f8d59c45e8451a53809f
8a697f855d5b794eb68aa944977572f87334126a4b717952f61d6e48acc7edc1
GET /web-client/et/img/registration/discover_01.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: yrvYOXwrqsGtjgtnB3d0Pc2eH0wQZXQbStmnMARCd/pMpbiy2TJtFteu6Qx7Qr0TjU1aQQ+8o7c=
x-amz-request-id: NN55C79JR6MNSD5C
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Jul 2022 14:52:13 GMT
etag: "2f6d6f1e997f3a2a15888feb99459bb0"
x-amz-meta-origin-date-iso8601: 2022-07-07T14:50:14.504Z
x-amz-version-id: QF_QgkRGCy62K6vDY_bK8WU3cAQLR7db
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 36791
cache-control: max-age=300
expires: Wed, 08 Feb 2023 23:10:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
200 OK 61 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Hash 96f3835aa784a280a0e1e7fa64b97b60
1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Gw7K/z+rgE3lm94JaU9fY51MKxB1UhoCoa14rrSc0mf8h6uk7TvG8doh2uvZxQ39dSlEjZiVHyY=
x-amz-request-id: DPFNYW2P9N2GKZM2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61036
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 10 Mar 2023 23:05:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
200 OK 62 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Hash e9681ca3d29d814a5621d4764dd1a11e
bbda68459fc0531b915bdf9e524ecc8f782db0aa
51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1QogDNt4Ym96Vu2S0DSGDvNU/xL9xL282y/IbSw4e5JO86fAj3PhPy9W6Nf05vDrisrWElU1wtk=
x-amz-request-id: 5DYMW9M2QQPFK36S
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "e9681ca3d29d814a5621d4764dd1a11e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: HgUsNFmOXgC1eDiETddzJSTtCGDefKwY
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61548
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 10 Mar 2023 23:05:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.9 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (17769), with no line terminators
Hash 939f95ffc91ae8a9eacb6998ec5a635f
e122fe07195821f6abf871cc65f315c6b9e27f4a
49462b3c223095ac3fc223f11a29e4bceed96feba62e167d444e9a082626fc17
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "b07048fb19f7c325242e254218118e14:1675339769.124179"
Last-Modified: Thu, 02 Feb 2023 09:48:30 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Wed, 08 Feb 2023 23:25:16 GMT
Date: Wed, 08 Feb 2023 23:05:16 GMT
Content-Length: 5911
Connection: keep-alive
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 60472, version 1.0\012- data
Hash 691f774319fda1ccf9ea172ffaee815e
100f7c4b9a1a070f683e579e51a27ad848e89858
ef1afe72be678d91398fc959d6920d4e8e0df4ddc00af772f5174340a60391d2
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 8gXhOYnXQfCvxQh0AsyWhWSRGvYtb/6TnrZUxLx+Yus9yOaswvUOKe9ec4GnL7aMBc+KXi4na6g=
x-amz-request-id: P3PEE8NZ92NF1X21
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:53 GMT
etag: "691f774319fda1ccf9ea172ffaee815e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: BdK.NAI.RcrH6e.JJwXTdFJi3m9OJbQ_
accept-ranges: bytes
content-type: application/octet-stream
content-length: 60472
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 10 Mar 2023 23:05:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6937D2E2E40142A09705F6BF20012DC5 Ref B: OSL30EDGE0312 Ref C: 2023-02-08T23:05:16Z
date: Wed, 08 Feb 2023 23:05:16 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4700
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Wed, 08 Feb 2023 21:46:56 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
200 OK 30 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, general \012- data
Hash eb628962945195053f9882538308e68d
5ed47d9fb1edead143384b64e85a3f2b35d66443
94650c8a7a751eb548355905a6b5464d1528f2b722616d3e6d69ddf6fe7f7535
GET /web-client/et/fonts/icomoon/general/general.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: w5/ofec4rcC4U3RBAFCpRkP1Ij18jh2Do4eUOEJrnf6BugT5VqPCYKPD9looUSN2XQx+/fsHMbU=
x-amz-request-id: 78C513DFTXNS0BWJ
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 31 Jan 2023 14:02:38 GMT
etag: "3f8a7babbf9014bdc38e4d293dbfdc1c"
x-amz-meta-sha256: 662b8ebfb6fe1b256fdf727237638b4a03fd060d989e85327c242c286abf9ae2
x-amz-meta-s3b-last-modified: 20230131T135604Z
x-amz-version-id: CP0h_W7tEkojUr0Q2j9OUuOkhz6Lobtw
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2592000
expires: Fri, 10 Mar 2023 23:05:16 GMT
date: Wed, 08 Feb 2023 23:05:16 GMT
content-length: 29795
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=28137
date: Wed, 08 Feb 2023 23:05:16 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 08 Feb 2023 21:44:05 GMT
expires: Wed, 08 Feb 2023 23:44:05 GMT
cache-control: public, max-age=7200
age: 4871
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:05:16 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (59748)
Hash a95cc9220801404bf4466f2b6c584c19
35c3ecc73803c900839cf2035df18db67b8c965d
e4735534dc10e8e758034a93652bf0c7c0added1a685f7f6a5280137bad46786
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8T5auxI1DDAjvvxfwjS7Q2cICJn9QvMm/KSZ+nss3rmLV98+uF/0jYKemGu//J33bWgd9Ie5YnM=
x-amz-request-id: HPEKGQNK7SQ8P7CV
x-amz-replication-status: COMPLETED
last-modified: Sun, 05 Feb 2023 11:31:16 GMT
etag: "fc56fb8f66bd1a17d92b953a788b9cae"
x-amz-version-id: txyMIeNtA7ovWGZV66czkKCx5bR6VAPG
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:05:16 GMT
via: 1.1 varnish
age: 19
x-served-by: cache-bma1636-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675897517.683442,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 55
content-length: 18369
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy-report-only: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: chrome-extension: 'unsafe-inline' 'unsafe-eval';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: m2tY9hEzJwIFpWYh6dEPkBfAPBilEge5X75HZjHBoAsIOqgEhMQJmdrTRJ70A05jYVmRZusGDxc7lgYCgzYLbA==
content-length: 27843
x-fb-trip-id: 1904183273
date: Wed, 08 Feb 2023 23:05:16 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=399123189.1675897573>m=45je3260&aip=1&z=1599663448
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=399123189.1675897573>m=45je3260&aip=1&z=1599663448
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=399123189.1675897573>m=45je3260&aip=1&z=1599663448 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:05:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 39f72ee961e1afed82fed52212ec6b65
557eae661c60433cfbbe14dbca5df31259e0c59b
b527888545839ca25e30f2fe8d409f3de6ab08d98a974dd14626b728e5ead13c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4700
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Last-Modified: Wed, 08 Feb 2023 21:46:56 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/tracking/track/v3/p?stm=1675897573212&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1675897573210%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292614%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2202f8e367-466f-424f-8c6b-f9c596e4cf6f%22%2C%22duid%22%3A%228d864199-37ff-402c-aedc-b52e195e2b9b%22%2C%22cw%22%3A1675897573210%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1675897573212&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1675897573210%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292614%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2202f8e367-466f-424f-8c6b-f9c596e4cf6f%22%2C%22duid%22%3A%228d864199-37ff-402c-aedc-b52e195e2b9b%22%2C%22cw%22%3A1675897573210%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1675897573212&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1675897573210%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4292614%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2202f8e367-466f-424f-8c6b-f9c596e4cf6f%22%2C%22duid%22%3A%228d864199-37ff-402c-aedc-b52e195e2b9b%22%2C%22cw%22%3A1675897573210%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:16 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675897572760&hl=4&op=0&ag=1317291471&rand=237518587099851505821259501902688211728512215526599612888626857216626289206&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=Gb83heXl2X&pto=5898&ver=50&gac=-&mei=&ap=&duid=1.1675897572.GBv6Fi80CWxUhtKi&suid=1.1675897572.phnt7U55BfR4pGcI&tuid=1.1675897572.AEZd1TYtqECT2XEV&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayJd&it=78%2C5680%2C76&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.1 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675897572760&hl=4&op=0&ag=1317291471&rand=237518587099851505821259501902688211728512215526599612888626857216626289206&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDE4OTJdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDIsMCwwLDAsMSwzLDMsMCwyLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDQsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwyLDAsNCJdLFstMSwiTGludXggeDg2XzY0Il0sWy0yLCItIl0sWy0zLCJbXSJdLFstNCwiLSJdLFstNSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcInJlcXVpcmVTdHVic1wiLFwiVEVUT1JPXCIsXCJTQ1JJUFRfVElNRU9VVFwiLFwiYXBwbG9hZGVkXCIsXCJ0aW1lTGFiZWxcIixcInN0cmluZ2lmeVwiLFwib25Nb2R1bGVFcnJvclwiLFwiZVRvcm9TZXNzaW9uR3VpZFwiLFwic2luZ2xlTG9nXCIsXCJib290c3RyYXBUaW1lclwiLFwiYWNjZWxlcmF0b3JEaWN0XCIsXCJlVG9yb0xvYWRQZXJmb3JtYW5jZVwiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwid2VicGFja0NodW5rZXRvcm9cIixcIl9fY29yZS1qc19zaGFyZWRfX1wiLFwiX196b25lX3N5bWJvbF9fVU5QQVRDSEVEX0VWRU5UU1wiLFwiWm9uZVwiLFwiX196b25lX3N5bWJvbF9fUHJvbWlzZVwiLFwiX196b25lX3N5bWJvbF9fZmV0Y2hcIixcIl9fem9uZV9zeW1ib2xfX0JMQUNLX0xJU1RFRF9FVkVOVFNcIixcIl9fem9uZV9zeW1ib2xfX2xlZ2FjeVBhdGNoXCIsXCJfX3pvbmVfc3ltYm9sX19xdWV1ZU1pY3JvdGFza1wiLFwiX196b25lX3N5bWJvbF9fc2V0VGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJUaW1lb3V0XCIsXCJfX3pvbmVfc3ltYm9sX19zZXRJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fcmVxdWVzdEFuaW1hdGlvbkZyYW1lXCIsXCJfX3pvbmVfc3ltYm9sX19jYW5jZWxBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fYWxlcnRcIixcIl9fem9uZV9zeW1ib2xfX3Byb21wdFwiLFwiX196b25lX3N5bWJvbF9fY29uZmlybVwiLFwiX196b25lX3N5bWJvbF9fTXV0YXRpb25PYnNlcnZlclwiLFwiX196b25lX3N5bWJvbF9fSW50ZXJzZWN0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ZpbGVSZWFkZXJcIixcIl9fem9uZV9zeW1ib2xfX29ub25kZXZpY2Vtb3Rpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGV2aWNlb3JpZW50YXRpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYWJzb2x1dGVkZXZpY2VvcmllbnRhdGlvbnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub252cmRpc3BsYXljb25uZWN0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbnZyZGlzcGxheWRpc2Nvbm5lY3RwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9udnJkaXNwbGF5YWN0aXZhdGVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9udnJkaXNwbGF5ZGVhY3RpdmF0ZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub252cmRpc3BsYXlwcmVzZW50Y2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFib3J0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmJsdXJwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZm9jdXNwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYXV4Y2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYmVmb3JlaW5wdXRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2FucGxheXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jYW5wbGF5dGhyb3VnaHBhdGNoZWRcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy03LCItIl0sWy04LCItIl0sWy05LCIrIl0sWy0xMCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMTIsIlwidW5zcGVjaWZpZWRcIiJdLFstMTMsIi0iXSxbLTE0LCItIl0sWy0xNSwiLSJdLFstMTYsIjAiXSxbLTE3LCIxNiJdLFstMTgsIlsxLDAsMCwwXSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAwMiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsOTM5LDAsMCwwLDAsXCItXCIsXCItXCJdIl0sWy0yMCwiLSJdLFstMjEsIi0iXSxbLTIyLCJbXCItXCIsXCJuXCJdIl0sWy0yMywiKyJdLFstMjQsIltdIl0sWy0yNSwiW1wiWzQzNjg3NTEyNSxmdW5jdGlvbigpe3JldHVybiBNKHRoaXMsYXJndW1lbnRzKX1dXCIsXCJcIixcIlszNjAzNzU2Nzg1LGZ1bmN0aW9uIHRvU3RyaW5nKCkge1xcbiAgICBbbmF0aXZlIGNvZGVdXFxufV1cIl0iXSxbLTI2LCItIl0sWy0yNywiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0yOSwiLSJdLFstMzAsIltcInZcIiwwXSJdLFstMzEsImZhbHNlIl0sWy0zMiwiMCJdLFstMzMsIltcIls0MzY4NzUxMjUsZnVuY3Rpb24oKXtyZXR1cm4gTSh0aGlzLGFyZ3VtZW50cyl9XVwiLFwiXCIsXCJbMzYwMzc1Njc4NSxmdW5jdGlvbiB0b1N0cmluZygpIHtcXG4gICAgW25hdGl2ZSBjb2RlXVxcbn1dXCJdIl0sWy0zNCwiW1wiWzQzNjg3NTEyNSxmdW5jdGlvbigpe3JldHVybiBNKHRoaXMsYXJndW1lbnRzKX1dXCIsXCJcIixcIlszNjAzNzU2Nzg1LGZ1bmN0aW9uIHRvU3RyaW5nKCkge1xcbiAgICBbbmF0aXZlIGNvZGVdXFxufV1cIl0iXSxbLTM1LCJbMTY3NTg5NzU3MjcyNiwwXSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy0zNywiLSJdLFstMzgsImksLTEsLTEsNDQ4LDAsMywwLDk2LDEwMCw4MywtMSwwLCw3ODMsNTg2Niw1ODY2Il0sWy0zOSwiW1wiMjAxMDAxMDFcIiwwLFwiR2Vja29cIixcIk5ldHNjYXBlXCIsXCJNb3ppbGxhXCIsXCIyMDE4MTAwMTAwMDAwMFwiLG51bGwsZmFsc2UsbnVsbCxmYWxzZSxudWxsLDBdIl0sWy00MCwiMzciXSxbLTQxLCItIl0sWy00MiwiMTc3MDA1MDA4MSJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMTExMTAwMTAwIl0sWy00NCwiMCw1LDAsNSJdLFstNDUsIi0iXSxbLTQ2LCIwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNDgsIjAsMCJdLFstNDksIi0iXSxbLTUwLCItIl0sWy01MSwiLSJdLFstNTIsIi0iXSxbLTUzLCIwMTAiXSxbLTU0LCJ7XCJoXCI6W10sXCJkXCI6W1wiXzFcIixcIjQyNzYyMzQzOFwiXSxcImJcIjpbXCJfMVwiLFwiMzgzNzg5NzkwNFwiXSxcInNcIjoxfSJdLFstNTUsIjEiXSxbImRkYiIsIjAsMCwwLDEsMSw0LDAsMCwwLDAsMSwwLDAsMCwxLDAsMiwwLDAsMSwwLDAsMSwwLDAsMCwwLDEsMCwwLDAsMiwxLDAsMCwzLDAsMCwwLDAsMCwxLDEsMiwwLDAsMjMsMCwyLDAsMCwwLDAsMCwwIl0sWyJibmNoIiw3Nl0sWyJhYm5jaCIsNzZdXQ%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=Gb83heXl2X&pto=5898&ver=50&gac=-&mei=&ap=&duid=1.1675897572.GBv6Fi80CWxUhtKi&suid=1.1675897572.phnt7U55BfR4pGcI&tuid=1.1675897572.AEZd1TYtqECT2XEV&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayJd&it=78%2C5680%2C76&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3234), with no line terminators
Hash 60d159ee0185e83a423ea5217924c37d
7b2e4928c90136e8ad814c64d88a1c9659a06905
03a2629912431ba87248ae8a8aa8b28b5c6b32e2e006b09d6f78a6cbc4bec5cf
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675897572760&hl=4&op=0&ag=1317291471&rand=237518587099851505821259501902688211728512215526599612888626857216626289206&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=Gb83heXl2X&pto=5898&ver=50&gac=-&mei=&ap=&duid=1.1675897572.GBv6Fi80CWxUhtKi&suid=1.1675897572.phnt7U55BfR4pGcI&tuid=1.1675897572.AEZd1TYtqECT2XEV&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayJd&it=78%2C5680%2C76&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Wed, 08 Feb 2023 23:05:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=763a5edd6ec576303bfe2942db018a28; Max-Age=29030400; Path=/; Expires=Wed, 10 Jan 2024 23:05:16 GMT; HttpOnly; Secure; SameSite=None
content-length: 1086
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 95f22cea28b365d065146cada7997b79
f4c88642b87a9eef941557c8f26b5164d53b1ded
6b05e7263cc7464c01fcd999ba3a3ba8af2578330a00ef0371a64689be836054
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 901
Cache-Control: max-age=136690
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:16 GMT
Etag: "63e39a19-1d7"
Expires: Fri, 10 Feb 2023 13:03:26 GMT
Last-Modified: Wed, 08 Feb 2023 12:48:25 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 201ye9wctMVw8+etSvMkmyBsa9NyKKJnuzfIBc0iCvGvdyTvvpieV5n0LtqV3kuX+mRN0t8dZTc=
x-amz-request-id: WQ2DYF9Y1BKGX7NA
date: Wed, 08 Feb 2023 23:03:58 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 80
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=Gb83heXl2X&ts=571&cb=1675897573332
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=Gb83heXl2X&ts=571&cb=1675897573332
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=Gb83heXl2X&ts=571&cb=1675897573332 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=763a5edd6ec576303bfe2942db018a28
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Wed, 08 Feb 2023 23:05:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=45je3260&_p=226378914&_gaz=1&ul=NA&cid=399123189.1675897573&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&sid=1675897572&sct=1&seg=0&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=45je3260&_p=226378914&_gaz=1&ul=NA&cid=399123189.1675897573&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&sid=1675897572&sct=1&seg=0&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=45je3260&_p=226378914&_gaz=1&ul=NA&cid=399123189.1675897573&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&sid=1675897572&sct=1&seg=0&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 08 Feb 2023 23:05:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 6b34f0a4ade92182d7bb3e8397747c6a
c73cd9e5b215e71377c82b699daeac0ca616a466
5213a839c4f855fa269ad2a699a463c59b54483628f92604b35b51d3d7985fe5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 23:05:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 Feb 2023 21:06:33 GMT
Expires: Thu, 09 Feb 2023 21:06:33 GMT
ETag: "c73cd9e5b215e71377c82b699daeac0ca616a466"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?onload=onload
200 OK 565 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onload
IP
File type ASCII text, with very long lines (899), with no line terminators
Hash 52d3d4bbedf1505d4797cd4c4a1c7dd9
6f5ff4dc1098062aa14e62b8ba80620d9b8bbc6b
e9bde7e7abc4095996ce081a788eaae3d86ffa0c0a83ea6eacb06d0f8fb7efd0
GET /recaptcha/api.js?onload=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 08 Feb 2023 23:05:17 GMT
date: Wed, 08 Feb 2023 23:05:17 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 565
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;u14='etoro-gtm-memory-cleanup';dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:05:17 GMT
expires: Wed, 08 Feb 2023 23:05:17 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=399123189.1675897573>m=45je3260&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=399123189.1675897573>m=45je3260&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=399123189.1675897573>m=45je3260&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 08 Feb 2023 23:05:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash 06919c87d5757fdd2cf9c0b763275d8f
16d2e149643b7ba18adece05ba1995689d84248c
2664901b9643b2dd5a1b42a7458ef7a4c491ad17e8e1a873f09f56233764cf81
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lRbKgb39n5uuxsI0QGa3wnTI0H/tQhXCfmtuPdZ6nFNqcGTRnrUriNxYUU53i8P+p4PTiXmhTvU=
x-amz-request-id: SC6BMN0629890WX3
date: Wed, 08 Feb 2023 23:04:09 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 68
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a746d459d4fbc7da99072462ed09b456
6ca7c899101b7ddcc1228f148cdcf16113a805f7
cbed8854f94d225ec82298e5039b9c163f58f9fede0db72510d22867003cb4a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js
200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js
IP
File type ASCII text, with very long lines (633)
Size 164 kB (163841 bytes)
Hash fe98364486b3206867b17008f995646f
35a5e9aa210970f7abd718d99e629c6982a3cc02
1fd703cb16e3f6f3f7192109d19c69d6e5ac1cfa0feb5b105a86564b7970d28a
GET /recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 08:53:11 GMT
expires: Wed, 07 Feb 2024 08:53:11 GMT
cache-control: public, max-age=31536000
age: 137526
last-modified: Tue, 31 Jan 2023 02:51:47 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cb=88349545310216240term=value
200 OK 4.6 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cb=88349545310216240term=value
IP
File type ASCII text, with very long lines (1892)
Hash a1f9f68bd31957c4dc6f3e7af847521f
646636949d800ef3854d03b89882de64c8a70d33
a0e3acb312d89ca655ac5d61b8c57e4c92b1509ba251391906f9d08c830819ea
GET /spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cb=88349545310216240term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Wed, 08 Feb 2023 23:05:17 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=f971c924-321d-43c6-85b8-f4377ee0a0f7&sid=2f00a8e0a80511ed93ae5b621b99fe1c&vid=2f00d440a80511eda44b970fd6e0aee0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&r=<=3391&evt=pageLoad&sv=1&rn=430136
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=f971c924-321d-43c6-85b8-f4377ee0a0f7&sid=2f00a8e0a80511ed93ae5b621b99fe1c&vid=2f00d440a80511eda44b970fd6e0aee0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&r=<=3391&evt=pageLoad&sv=1&rn=430136
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=f971c924-321d-43c6-85b8-f4377ee0a0f7&sid=2f00a8e0a80511ed93ae5b621b99fe1c&vid=2f00d440a80511eda44b970fd6e0aee0&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&r=<=3391&evt=pageLoad&sv=1&rn=430136 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=22394B5B2AA569813FDB59E92BF26857; domain=.bing.com; expires=Mon, 04-Mar-2024 23:05:17 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E331E30F33DA48728255E0CF330CDAD9 Ref B: OSL30EDGE0312 Ref C: 2023-02-08T23:05:17Z
date: Wed, 08 Feb 2023 23:05:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6250bcba58c2659a296fe4f3151b1e16
307b32afca5148b6faef5b40284906b649f6d963
d6e8d31cae981d39085629a8bd20894b1612fa2b638a6adef331b34c7e912dac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 08A6BD4456E64D59AA3D59D89AFBF7DB Ref B: OSL30EDGE0312 Ref C: 2023-02-08T23:05:17Z
date: Wed, 08 Feb 2023 23:05:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Wed, 08 Feb 2023 23:05:17 GMT
expires: Wed, 08 Feb 2023 23:05:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 697f282d6c04c590f2e61b17e4399b2d
f05454ed45cc26d8d0e255d0ec9b89ba2a648ad3
1101372271b8b5f67e26e5d152cd097c98f6c5476389817d5f40166b7cd73909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5699
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Last-Modified: Wed, 08 Feb 2023 21:30:18 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675897573502&cv=11&fst=1675897573502&fmt=3&bg=ffffff&guid=ON&async=1>m=45be3260&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=1539186057.1675897573&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675897573502&cv=11&fst=1675897573502&fmt=3&bg=ffffff&guid=ON&async=1>m=45be3260&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=1539186057.1675897573&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1675897573502&cv=11&fst=1675897573502&fmt=3&bg=ffffff&guid=ON&async=1>m=45be3260&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=1539186057.1675897573&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:05:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 23:20:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675897573496&cv=11&fst=1675897573496&bg=ffffff&guid=ON&async=1>m=45be3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=1539186057.1675897573&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1675897573496&cv=11&fst=1675897573496&bg=ffffff&guid=ON&async=1>m=45be3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=1539186057.1675897573&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2485), with no line terminators
Hash 67043d48d5a75452959ae1e60ce69c11
c5066c5ee8b6fd9a050af59edb5f0df25f43d15c
6c5da21bd40b2ee9e3be76825909a49d01aabe70fff72eddce0bef4084d708fb
GET /pagead/viewthroughconversion/745546367/?random=1675897573496&cv=11&fst=1675897573496&bg=ffffff&guid=ON&async=1>m=45be3260&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=1539186057.1675897573&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:05:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1056
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 23:20:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 365e4c73a4876ffd7f5980516925e17c
149890b4229707564a0bf8bd0814d496c8e36c68
efd737a944071ddd150f1281f8c35f1a7039385d7bb031318b23c5f3ba32430f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5500
Cache-Control: max-age=155385
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Etag: "63e3d12b-1d7"
Expires: Fri, 10 Feb 2023 18:15:02 GMT
Last-Modified: Wed, 08 Feb 2023 16:43:23 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675897573215%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292614%2526utm_campaign%253DPRP_DJULBREG_4292614%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJ_8lRnKb8DRQAAAYYzRrU-6ortCvdhWpy_-IRs0ODj0SK8vU2hzPs8STr5a4ustjHUhFlfMh6qtw; Max-Age=2592000; Expires=Fri, 10 Mar 2023 23:05:17 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQI_XUGlFvYrcgAAAYYzRrU-JaSFImCEniG0KOEwfVVjw4FfQPtr4Y17Q4dD-dJ9ej9poOp8PFKQkZWJRs2T0A; Max-Age=2592000; Expires=Fri, 10 Mar 2023 23:05:17 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&4fe57690-34df-44fe-871e-520f3244119f"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 08-Feb-2024 23:05:17 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675897517:t=1675983917:v=2:sig=AQF4WVGnvENjGVUevcDomv1O51O1zFvG"; Expires=Thu, 09 Feb 2023 23:05:17 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0OEwz2XDxEZQXeVAx9g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CD6FF1C16AE647E1AF871A19BBD8568C Ref B: OSL30EDGE0311 Ref C: 2023-02-08T23:05:17Z
date: Wed, 08 Feb 2023 23:05:17 GMT
content-length: 0
X-Firefox-Spdy: h2
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
200 OK 17 kB URL HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
File type Unicode text, UTF-8 text, with very long lines (39267)
Hash 12a5f480c5a23efc80304d3bbc35d746
4043357825f2e91df5c4f339a9bc95f8e5b48fa1
b7be9b25bef3ce5c830263ba56bc3235a6683a9950115e4d4368144de3bbd2ec
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1675705620724"
Last-Modified: Mon, 06 Feb 2023 17:47:00 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Wed, 08 Feb 2023 23:05:17 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=85717b87-6734-4b50-9176-510d58f25575&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ab838aec-68a4-4bee-a269-84edade79e54&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=85717b87-6734-4b50-9176-510d58f25575&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ab838aec-68a4-4bee-a269-84edade79e54&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=85717b87-6734-4b50-9176-510d58f25575&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ab838aec-68a4-4bee-a269-84edade79e54&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&txn_id=nyxtd&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:16 GMT
perf: 7626143928
server: tsa_f
set-cookie: guest_id_marketing=v1%3A167589751745139504; Max-Age=63072000; Expires=Fri, 07 Feb 2025 23:05:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167589751745139504; Max-Age=63072000; Expires=Fri, 07 Feb 2025 23:05:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_yqvao/Sywy5nUKRmzS/eEg=="; Max-Age=63072000; Expires=Fri, 07 Feb 2025 23:05:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167589751745139504; Max-Age=63072000; Expires=Fri, 07 Feb 2025 23:05:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: af6e0ced34c62193
strict-transport-security: max-age=631138519
x-response-time: 103
x-connection-hash: b0fc82d0314fb47efbb3bb182cc77df7e8f4c7e6b138288b4c99c43b05a1a40a
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:05:17 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: a211d87fb136294cf9bb68c5fdaa4854
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&g=1&optOut=false&bust=0030732289576778538&referrer=
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&g=1&optOut=false&bust=0030732289576778538&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&g=1&optOut=false&bust=0030732289576778538&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:05:17 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 369f458fca75ccc48bbcb142df757409
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83f94acf9db53e3f3efda637f69f85da
ef5e23703c13a1bf43524c23d33b5be1a3b21feb
53707cd0cafea206bc3b66ef2959f58c957c2a8003cbab039361df4fbcb28b0d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:05:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:54:22 GMT
Expires: Wed, 15 Feb 2023 02:54:21 GMT
Etag: "ef5e23703c13a1bf43524c23d33b5be1a3b21feb"
Cache-Control: max-age=531543,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7968025d7cb3b515-OSL
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675897573215%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292614%2526utm_campaign%253DPRP_DJULBREG_4292614%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675897573215%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292614%2526utm_campaign%253DPRP_DJULBREG_4292614%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1675897573215%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4292614%2526utm_campaign%253DPRP_DJULBREG_4292614%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&liSync=true
set-cookie: bcookie="v=2&18df3597-6abe-4256-8442-fa5b327254b7"; Domain=.linkedin.com; Expires=Thu, 08-Feb-2024 23:05:17 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&2023020823051729616af1-8b1e-4048-8a2e-53eef1bfad1fAQHaPZNkv-RNHY6jJUpiEddLzMISorZn"; Domain=.www.linkedin.com; Expires=Thu, 08-Feb-2024 23:05:17 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzU4OTc1MTc7MjswMjFuTzIVmbGaJouCObMeUIExGo20tp2iCE8oF9aGxytVOA==; Domain=.linkedin.com; Expires=Mon, 07 Aug 2023 23:05:17 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675897517:t=1675983917:v=2:sig=AQF4WVGnvENjGVUevcDomv1O51O1zFvG"; Expires=Thu, 09 Feb 2023 23:05:17 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0OEw6T9kfPR1IfgA9Aw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C00EE3B19175437481B142E42D26AB73 Ref B: OSL30EDGE0311 Ref C: 2023-02-08T23:05:17Z
date: Wed, 08 Feb 2023 23:05:17 GMT
content-length: 0
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2008%20Feb%202023%2023%3A06%3A13%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2008%20Feb%202023%2023%3A06%3A13%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Wed%2C%2008%20Feb%202023%2023%3A06%3A13%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:17 GMT
expires: Wed, 08 Feb 2023 23:05:17 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBK0q5GMCEPe-Md3rWvwT0PAP7G0fJtUFEgEBAQF85WPuYwAAAAAA_eMAAA&S=AQAAAp--qunJIDcoEggw0wmJa5A; Expires=Fri, 9 Feb 2024 05:05:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:17 GMT
expires: Wed, 08 Feb 2023 23:05:17 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBK0q5GMCEKsN_OKYkrkTZnCOs7oz-kcFEgEBAQF85WPuYwAAAAAA_eMAAA&S=AQAAAmk0ciI7omR9FGoTkvMphic; Expires=Fri, 9 Feb 2024 05:05:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f16eecdd472f99af839e8e6dfc101bc0
33e345a8e9f776920b90dc78acefc457e15da35c
9a819ca8ca6890f29a418e976b224ae9095b72538324800f38eefc4d95050448
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:05:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
44.238.122.172/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash f53561c7ff8f0c0cd067d112063aa09a
ecf68c3af609e0a5db496d853bcf452241c5e45e
450bdb7162e702c72de9645959789f2265cbb1a9c28426e3d13da27472b1a5af
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 44.238.122.172
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Wed, 08 Feb 2023 23:05:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1675897574322&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1675897574321.114170755&it=1675897573282&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1675897574322&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1675897574321.114170755&it=1675897573282&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1675897574322&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&cs_est=true&fbp=fb.1.1675897574321.114170755&it=1675897573282&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 08 Feb 2023 23:05:18 GMT
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1747
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=763a5edd6ec576303bfe2942db018a28
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 08 Feb 2023 23:05:18 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1752
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=763a5edd6ec576303bfe2942db018a28
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 08 Feb 2023 23:05:18 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1675897573215&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&dd4d02f4-83bc-482e-8e01-d225c9388ca0"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 08-Feb-2024 23:05:18 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2454:u=1:x=1:i=1675897518:t=1675983918:v=2:sig=AQEm-zcrKxJLAMk9CRRPjdKFVuFijnsr"; Expires=Thu, 09 Feb 2023 23:05:18 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAX0OEw/FDs9WDJ0tsqupA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F36CBF8CFADF49E1884E160A526585A6 Ref B: OSL30EDGE0311 Ref C: 2023-02-08T23:05:18Z
date: Wed, 08 Feb 2023 23:05:17 GMT
content-length: 0
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1818&scd=0&ssd=1&est=1675897573222&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1675897575040&vi=1675897573220&ri=7037625bf7a4e6db181734cf0125a2e1&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1818&scd=0&ssd=1&est=1675897573222&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1675897575040&vi=1675897573220&ri=7037625bf7a4e6db181734cf0125a2e1&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1818&scd=0&ssd=1&est=1675897573222&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1675897575040&vi=1675897573220&ri=7037625bf7a4e6db181734cf0125a2e1&ref=null&cv=20230205-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 08 Feb 2023 23:05:18 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=399123189.1675897573&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22399123189.1675897573%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%22399123189.1675897573%22%2C%22dcm_gid%22%3A%22513102783.1675897573%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292614%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=399123189.1675897573&dcm_gid=513102783.1675897573&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cb=88349545310216240term%3Dvalue
200 OK 1.3 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=399123189.1675897573&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22399123189.1675897573%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%22399123189.1675897573%22%2C%22dcm_gid%22%3A%22513102783.1675897573%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292614%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=399123189.1675897573&dcm_gid=513102783.1675897573&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cb=88349545310216240term%3Dvalue
IP
File type ASCII text, with very long lines (2704)
Hash 5029857db4c88e5f2817a1294134b4c9
83aba0c5eeed1a7609218df0ec6cc879befbd718
251017af929f0a0acf0eb500254c3f0e5e818f34267a3d2cba3683e2f2cedefe
GET /st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=399123189.1675897573&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%22399123189.1675897573%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%22399123189.1675897573%22%2C%22dcm_gid%22%3A%22513102783.1675897573%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4292614%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=399123189.1675897573&dcm_gid=513102783.1675897573&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1&cb=88349545310216240term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Wed, 08 Feb 2023 23:05:19 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=0e8cbaee-a805-11ed-8598-5d037cfcf262;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 274
server: istio-envoy
connection: close
transfer-encoding: chunked
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=ReToro HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13105
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:19 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://www.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292614&utm_campaign=PRP_DJULBREG_4292614&utm_term=&rdk=rk1
200 OK 0 B URL HTTP/2 www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292614&utm_campaign=PRP_DJULBREG_4292614&utm_term=&rdk=rk1
IP
GET /nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4292614&utm_campaign=PRP_DJULBREG_4292614&utm_term=&rdk=rk1 HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4292614&Custom=&ClickDateTime=2023-02-08T23:05:10.8716221Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4292614&rdk=rk1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:05:11 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
expires: Tue, 31 Mar 1981 05:00:00 GMT
content-security-policy: frame-ancestors 'self' file://*
x-frame-options: allow-fromfile://*
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: eToroLocale=nb-no; Path=/
TS01047baf=01d53e58182f2449be5984359cc37b1465b7b82587372428c078b8f88e8715deb2a95aea7146a7c9ec879ebaa55e659ae9d2cc99f6; Path=/
__cf_bm=2OFDXtTIr7PYrWo24OnlkbySp8_VvjCS.ikdyKFJfFI-1675897511-0-AXbBhYI+7EzIpYCEdlf5buAJyXxnZH458ncPXvYc/dLrVuzfZxMzw/ZVAiVtalc6zNU3ACerpQ2Jd4NUgB0dPMWFdZftobI40ouFKy8WkLeU; path=/; expires=Wed, 08-Feb-23 23:35:11 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgwA15kg8J27p6noE; SameSite=None; Secure; path=/; expires=Thu, 09-Feb-23 22:05:11 GMT; HttpOnly
__cfruid=a4aee6c47409ee66dcb352b6af28b3461ef49198-1675897511; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 796802346e720b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1675897573230&data=%7B%22id%22%3A211%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675897573220%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675897573229%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1675897573230&data=%7B%22id%22%3A211%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675897573220%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675897573229%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1675897573230&data=%7B%22id%22%3A211%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675897573220%2C%22cv%22%3A%2220230205-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675897573229%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4292614%26utm_campaign%3DPRP_DJULBREG_4292614%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A8%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:05:17 GMT
via: 1.1 varnish
x-served-by: cache-bma1636-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675897517.276096,VS0,VE97
vary: Accept-Encoding
x-vcl-time-ms: 97
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
GET /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 08 Feb 2023 22:07:08 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sLCw_iVO0lmmKruqH1bHFif1pfQ5BMZh3UmCF64yuCO8VoeJPYoffA==
age: 3488
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/iframe
200 OK 0 B URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 Feb 2023 23:05:18 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin; report-to="IdpIFrameHttp"
report-to: {"group":"IdpIFrameHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdpIFrameHttp/external"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-embedder-policy: require-corp
content-security-policy: script-src 'nonce-xPlFSbuSmpF9Cn9lgkqFbw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
139.45.197.238
2.18.173.108
64.233.162.156
212.82.100.181
20.54.209.212
31.13.72.12
151.101.244.157
0.0.0.0