onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2
301 Moved Permanently 0 B URL HTTP/1.1 onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2 HTTP/1.1
Host: onlinetopchoice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Dec 2022 09:46:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 24 Dec 2022 10:46:00 GMT
Location: https://onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n%2B4Tn5xFf2ycCpLHUH9NMcUIQHC%2F%2FiD53QbW%2F5q1qi8vqtNNlEX6rKPkPI%2BLD%2B6J%2F%2FS8GVJxrpY7pYLhKpA7%2BLb0TcEgCVsJzc0bJI3CkyG7oQacPFpfKuXIvCRBnLNkTai5W1kP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77e868475ad21c0e-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4267
Expires: Sat, 24 Dec 2022 10:57:07 GMT
Date: Sat, 24 Dec 2022 09:46:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d6a971d765338f107fe9d2c67fa4bbdf
a72bdf191446a37fa0420cc9d7c087aaff757cd6
dc5291c136b0b81621a02679a31f6b7c852e2803429d54c2a9afcc8edf031328
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC5291C136B0B81621A02679A31F6B7C852E2803429D54C2A9AFCC8EDF031328"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15198
Expires: Sat, 24 Dec 2022 13:59:18 GMT
Date: Sat, 24 Dec 2022 09:46:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7f0ad5c2841a345f98197c2f1e86f4d
84cbfd91934a8715baba4a2da46451f35597c99c
be30540f2e06a3565c9b38bdbb9691f707d692b196bdcef5d671708aa9609795
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE30540F2E06A3565C9B38BDBB9691F707D692B196BDCEF5D671708AA9609795"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7201
Expires: Sat, 24 Dec 2022 11:46:01 GMT
Date: Sat, 24 Dec 2022 09:46:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 24 Dec 2022 08:46:14 GMT
content-type: application/json
age: 3586
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8FuzVqLtxpMg5eVIhFg0PbshFz8qsKXUAR54YJ4+PyN9LCMnbO3uEprve5Svw1JD8ANtEZ6dgJU=
x-amz-request-id: WTDSM6PR40VJ65P6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 24 Dec 2022 08:54:24 GMT
age: 3096
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 26e1f46e0fe4155337c999db42dbd19d
8c6165bbc558bcdc4dd85ecdbc5c8944938cb4c2
31f1991b856acbad430fc2b6565ac2b0d9be84878339b60461a74a1a2157a1e0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=106727
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:00 GMT
Etag: "63a5c83f-117"
Expires: Sun, 25 Dec 2022 15:24:47 GMT
Last-Modified: Fri, 23 Dec 2022 15:24:47 GMT
Server: nginx
Content-Length: 279
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Dec 2022 09:46:00 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 26e1f46e0fe4155337c999db42dbd19d
8c6165bbc558bcdc4dd85ecdbc5c8944938cb4c2
31f1991b856acbad430fc2b6565ac2b0d9be84878339b60461a74a1a2157a1e0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=106727
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:00 GMT
Etag: "63a5c83f-117"
Expires: Sun, 25 Dec 2022 15:24:47 GMT
Last-Modified: Fri, 23 Dec 2022 15:24:47 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 24 Dec 2022 09:08:04 GMT
age: 2276
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
med.etoro.com/B13050_A99511_TClick_SMFTN.aspx
301 Moved Permanently 210 B URL HTTP/1.1 med.etoro.com/B13050_A99511_TClick_SMFTN.aspx
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 0f5f41f9da019531095d7c26547a47aa
e24d70ba406c6a425d481016ef0e3116370fd13c
086395d427ebbb11033e36e5da017e27cae92989a2a156be197be0463e677e88
GET /B13050_A99511_TClick_SMFTN.aspx HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 210
Location: http://med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
X-Robots-Tag: noindex
Expires: Sat, 24 Dec 2022 09:46:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 24 Dec 2022 09:46:00 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
Expires: Sat, 24 Dec 2022 09:46:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 24 Dec 2022 09:46:01 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash d7938ab2263405a708c44813f3e16cb8
3ba9f4363ecc2834ea1211f761ce2d04e0077ab3
8a8ef4218bcd8ecb1f12ecdb74f3f453a7093be8dd3c233615577dcc9b40fa92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 769
Cache-Control: max-age=171217
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:01 GMT
Etag: "63a6c129-1d7"
Expires: Mon, 26 Dec 2022 09:19:38 GMT
Last-Modified: Sat, 24 Dec 2022 09:06:49 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=13050&A=99511&Task=Click&SubAffiliateID=MFTN HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com/lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term=
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Sat, 24 Dec 2022 09:46:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 24 Dec 2022 09:46:01 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=wi05qupbieze1zztooak5csp; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Wed, 22-Feb-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=13050&a=99511&task=click&subaffiliateid=mftn; domain=.etoro.com; expires=Mon, 23-Jan-2023 00:00:00 GMT; path=/
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TxTWivc0vKqKMlEgMTNiAg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fu2pAZ1NNg/5uV5D0SQVrHhGQs4=
ocsp.digicert.com/
200 OK 727 B IP
Hash b6fa47411ce59b88e34859b40d9af002
e20ab8a479b2174ec3f25a1316877f4c138942ba
4943162f8efdde73799192e20654064f17b13796db9b2531be5ae152290d6b17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=118588
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:01 GMT
Etag: "63a5f695-2d7"
Expires: Sun, 25 Dec 2022 18:42:29 GMT
Last-Modified: Fri, 23 Dec 2022 18:42:29 GMT
Server: nginx
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash b6fa47411ce59b88e34859b40d9af002
e20ab8a479b2174ec3f25a1316877f4c138942ba
4943162f8efdde73799192e20654064f17b13796db9b2531be5ae152290d6b17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=118588
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:01 GMT
Etag: "63a5f695-2d7"
Expires: Sun, 25 Dec 2022 18:42:29 GMT
Last-Modified: Fri, 23 Dec 2022 18:42:29 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 727
marketing.etorostatic.com/lp/signup2017/v2/images/logo_g.png
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/lp/signup2017/v2/images/logo_g.png
IP
File type PNG image data, 111 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f2b33a199e335acfabfb40a77635b81
717b1dd9ebf751004a96e61e61f3e15d72073da0
974be4e3d18b0e19d5901e639b9b9ab9b7411fe896898a64a1a94e978904c58b
GET /lp/signup2017/v2/images/logo_g.png HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xpro9OOan2tRA9pMlIdqvT11vRdnSh5x7h2pZNMVyqaCpiobXhl+LE7w0dS1WS2RUP++B4ICJ9M=
x-amz-request-id: YCPETDGRJQNWF3NH
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Feb 2017 10:06:17 GMT
etag: "6f2b33a199e335acfabfb40a77635b81"
x-amz-meta-s3b-last-modified: 20161207T175255Z
x-amz-version-id: p_uN7jIMXFRGmQvxtHYrB6VuP70Y1U8C
accept-ranges: bytes
content-type: image/png
content-length: 2165
server: AmazonS3
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:01 GMT
date: Sat, 24 Dec 2022 09:46:01 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/lp/signup2017/v2/images/flags.jpg
200 OK 5.6 kB URL HTTP/2 marketing.etorostatic.com/lp/signup2017/v2/images/flags.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 180x13, components 3\012- data
Hash 9eac13118e7c1f46fef6251732cae4bd
a27d2fc14ba890ba7362185cf329a1ab672f36f8
5dc573078db86035bda8e87a9deefa593766b377787e004e11a68b49f85a0891
GET /lp/signup2017/v2/images/flags.jpg HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TCsbdH87NsAd2MAhxbd06L/aR1tlGWgXIPvtvGj2tUYyZK7UN0Zqy56bps1KnP+eHabqn7nuTKk=
x-amz-request-id: HSB540855CXB28DG
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Feb 2017 10:06:16 GMT
etag: "9eac13118e7c1f46fef6251732cae4bd"
x-amz-meta-s3b-last-modified: 20170126T143245Z
x-amz-version-id: _ZVfN_9X5YjXvEbf13I.YKwJfQaMSTjU
accept-ranges: bytes
content-type: image/jpeg
content-length: 5561
server: AmazonS3
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:01 GMT
date: Sat, 24 Dec 2022 09:46:01 GMT
X-Firefox-Spdy: h2
cdn.etorostatic.com/latest/js/embed/sign-up.js
302 Found 94 B URL HTTP/2 cdn.etorostatic.com/latest/js/embed/sign-up.js
IP
File type HTML document, ASCII text, with no line terminators
Hash 6ba0726e4e19bc6cec5cc9cf28b3fa8d
9ae0e7b02eaf99fac43e78774b5a0d07a383dcaf
a54c850477fbf9b90afcc757bd38aabf72b1c0edbd6844a891ed02d729773693
GET /latest/js/embed/sign-up.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
location: /481.0.5/js/embed/sign-up.js
content-encoding: gzip
content-length: 94
date: Sat, 24 Dec 2022 09:46:02 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/481.0.5/js/embed/sign-up.js
200 OK 2.1 kB URL HTTP/2 cdn.etorostatic.com/481.0.5/js/embed/sign-up.js
IP
File type ASCII text, with very long lines (4715), with no line terminators
Hash 5ee1eba2a7cba4fa755b392ae33e732c
3ba3e6014b0d4d3798824f59328042fd072c77e3
f6d1559d2fe1845839fb4764cc57bdbc0d75f70deeffa695ad0d5ff0e7fc5c9a
GET /481.0.5/js/embed/sign-up.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "Yv88pf8Zo0uJADySfztXLQ=="
content-encoding: gzip
content-length: 2071
cache-control: public, max-age=26446552
date: Sat, 24 Dec 2022 09:46:02 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/504.0.3/js/integrations/embed/registration/registration.js
200 OK 432 kB URL HTTP/2 cdn.etorostatic.com/504.0.3/js/integrations/embed/registration/registration.js
IP
Size 432 kB (431681 bytes)
Hash 0d80e47e20303de8ba5c53ebdb6fa5a3
864f5fe60d0c40d9e4e067b97f614c8129f84381
5df4183e44b8f4cb9d42419bb9f7e14d1ec86ec07b1d348de84dd00ff03990ee
GET /504.0.3/js/integrations/embed/registration/registration.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "BZkGYsyP6RyR7dnxj9dOIA=="
content-encoding: gzip
content-length: 404348
cache-control: public, max-age=31269756
date: Sat, 24 Dec 2022 09:46:02 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 305e61785b6a439d62cc6d1eb782acf0
51c1e3e213b20326f9b0a6089a07d64559945d85
b04548c1d4e00ddc872aad4bd3b532cade0bf423138620e351a6d58a2e8f19fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 104 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35498)
Size 104 kB (104260 bytes)
Hash f3c085ef81fc56b55791a29df8f23100
74b6f121c3ad3db15e6e27d3e2aa8ea1fae09cbb
6e499adc42554313c3654b1ae02e150106d9c35e0bded5013d4d960cf6112187
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 24 Dec 2022 09:46:02 GMT
expires: Sat, 24 Dec 2022 09:46:02 GMT
cache-control: private, max-age=900
last-modified: Sat, 24 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104260
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 305e61785b6a439d62cc6d1eb782acf0
51c1e3e213b20326f9b0a6089a07d64559945d85
b04548c1d4e00ddc872aad4bd3b532cade0bf423138620e351a6d58a2e8f19fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.etorostatic.com/504.0.3/css_files/?p[]=styles/style.css
200 OK 298 kB URL HTTP/2 cdn.etorostatic.com/504.0.3/css_files/?p[]=styles/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 298 kB (297633 bytes)
Hash 37250506ab84bbe214a5ea2aa35e1b52
0dc8b86eb99428d86d6db0cd85d54912476fe873
157dc232e1abf8eddc477886d11d177e485eab03138ecf9eab1f7c6e93df8f4e
GET /504.0.3/css_files/?p[]=styles/style.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "1WHZuEtMK9t3RxRB6sGXSQ=="
content-encoding: gzip
content-length: 297633
cache-control: public, max-age=31269457
date: Sat, 24 Dec 2022 09:46:02 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/504.0.3/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
200 OK 405 kB URL HTTP/2 cdn.etorostatic.com/504.0.3/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
IP
File type ASCII text, with very long lines (33263)
Size 405 kB (404559 bytes)
Hash eb62b89976c269445e3affefca341286
4bcbf846560e849ffab75047a5926a5b0f31a7e7
62362bf636610e3aa8c619c99c28129a0cc1a5da65e596eb643ce3a89129052e
GET /504.0.3/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "5o9RekvY2rBWoUpRK+PuNA=="
content-encoding: gzip
content-length: 404559
cache-control: public, max-age=31269514
date: Sat, 24 Dec 2022 09:46:02 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
200 OK 377 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5c4699717e2af42d1674a9008ffbfe85
cf2ee13be98793210c3b2c8eec66ac830510ebe1
d608b0e2406e7ee895c50292d358d848267796d637eaa16a6a6144dc14ed7bd8
GET /web-client/et/img/registration/i_fb.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Q8CEaY6a3UJ8HgVnKvuo+Cq1jtPaLboCQgJPgg/5Oqztjxd7Doc2/AnaD4IYgi+cGt2LYXKJRVY=
x-amz-request-id: T4H199ND35XVJCF2
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
200 OK 3.4 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
IP
Hash 508499fb7464a6e203957467f42db9c6
26fc6b21f499d733c79c84614083c7164e139d05
e1a3387ac1cb102884150ea831abddc5f8e8b53a7a0179a596a415c97c8ad618
GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rpPTwOu0pDtkTZdoPd7yU4ncwWLLg0TCgE5/bjZsIn5WGw732imkFJu+NhymSUY9gZyKA7zbcys=
x-amz-request-id: 8VEADDHMEWHAZMD5
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=82c3e4f3-ac19-46b2-a899-df3ba4e95a51
200 OK 15 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=82c3e4f3-ac19-46b2-a899-df3ba4e95a51
IP
Hash e7e048953a90b372fe58ff687d077317
1646a97b843343014db467b8a0a692a5bafdf5ae
1fd46de82495c322f3695d2afaa1b0cb5dbc1e708cb45206ca455affd5947296
GET /web-client/recaptcha/index.html?guid=82c3e4f3-ac19-46b2-a899-df3ba4e95a51 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: FxBWOR/fjuKc+liaCjNbANgnRvdCXzJ4TggjaK9J8Iolg23MIdp7PKnUBUaOEnWwsj2KPVMXluU=
x-amz-request-id: 2SPZ1CQKHNKS1JZN
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Oct 2020 10:42:40 GMT
etag: "ef2039619799b54abf85f25976ff7199"
x-amz-meta-sha256: 349fb58237f7f8abb11e68632be1859f31c19fa4fa6a64d143ec18f7f6d59cf3
x-amz-meta-s3b-last-modified: 20201004T104155Z
x-amz-version-id: 9jyXMd7S_i_.xXnWVDXRZHjUkqd_s38N
accept-ranges: bytes
content-type: text/html
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
content-length: 1547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Hash e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jhOnM69WpoiV8oSTTNXetipBb7pUc9tS6FuF/XnPxNUwhBi6Q+ANBt25PNF2dXvmEtDCkoFPZ5g=
x-amz-request-id: F37B07A5E1D6416F
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-type: application/octet-stream
content-length: 59600
server: AmazonS3
cache-control: max-age=2592000
expires: Mon, 23 Jan 2023 09:46:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 60472, version 1.0\012- data
Hash 691f774319fda1ccf9ea172ffaee815e
100f7c4b9a1a070f683e579e51a27ad848e89858
ef1afe72be678d91398fc959d6920d4e8e0df4ddc00af772f5174340a60391d2
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-300.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YKIAALFc0WNEBidKUCNNf+A3srMno4SQkNcHOKzYCtgOlPfzhr8SgoYc56Fchh3Jf/T99FvzsTo=
x-amz-request-id: PFSS466SY76ANJJ4
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:53 GMT
etag: "691f774319fda1ccf9ea172ffaee815e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: BdK.NAI.RcrH6e.JJwXTdFJi3m9OJbQ_
accept-ranges: bytes
content-type: application/octet-stream
content-length: 60472
server: AmazonS3
cache-control: max-age=2592000
expires: Mon, 23 Jan 2023 09:46:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
200 OK 28 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, general \012- data
Hash 6302252a22f24df6b9f82359bdbf95b8
d994191775cd0d394744c43f42450d06d1001ac9
ce6a86e972f103d7af7372a0369449425b06e2ad502235c45b467711ea0448ac
GET /web-client/et/fonts/icomoon/general/general.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PGfpKLOr3k8k11LuZedc6YiGMAFvg+i0CVg3C95sfr1Ehb/Xd37GzEW/zp97VZyj1/N1v6bQ3L4=
x-amz-request-id: TMBV9R8CJWXP49G1
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 06 Dec 2022 09:06:44 GMT
etag: "fc0843956f5efe76e8e210c6af3bfd04"
x-amz-meta-sha256: 1e524fdfb4ce99c40c57512c57fe30d94690d34c181175bddc52b420b71ba4b3
x-amz-meta-s3b-last-modified: 20221206T090225Z
x-amz-version-id: e7owzkasDmhpzzLjcjzhs10jUamEk1k1
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2592000
expires: Mon, 23 Jan 2023 09:46:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
content-length: 27825
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
200 OK 61 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Hash 96f3835aa784a280a0e1e7fa64b97b60
1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MiVZL/kbY13iBYmpteEVq6ia/0McBnVUjv9Gv+aG6n8LoAYr3bu/dyvs1kxqWcreHhbAxj7nY7w=
x-amz-request-id: P84TFZ8HCEYTJMA2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61036
server: AmazonS3
cache-control: max-age=2592000
expires: Mon, 23 Jan 2023 09:46:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client-locales/en-gb.js?cv=f465e8a7eb63b947896773b6011b660e_919233f5700589422027761006058c1e
200 OK 384 kB URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client-locales/en-gb.js?cv=f465e8a7eb63b947896773b6011b660e_919233f5700589422027761006058c1e
IP
File type Unicode text, UTF-8 text, with very long lines (65423), with no line terminators
Size 384 kB (384224 bytes)
Hash 65eee37428113a18cc52dc8e9dcb8c54
222f50818978ad33e50dc7e75cda06980ed5a26b
e908e4bbccc7ef1ce50d7d42b4bb33a64e586bcbfd67aa1bf818ccfb96e30c04
GET /sapi/app-data/web-client-locales/en-gb.js?cv=f465e8a7eb63b947896773b6011b660e_919233f5700589422027761006058c1e HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VEIKM92HWNoZ9F5W/uzmKwxyUJst5MIUMrqZyHQr2/qcJ2LqQNpnCav40vsoWMscbDi0pbMrE3o=
x-amz-request-id: FF8TKCHKAMTMJEB5
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Dec 2022 12:41:42 GMT
etag: W/"cc45cc5c81e183cadb5177211165c88e"
x-amz-version-id: UHRa6zzidkkLE6TT3YvSkuUNAew_G9tx
accept-ranges: bytes
content-type: application/octet-stream
content-encoding: gzip
x-robots-tag: noindex
content-length: 384224
cache-control: public, max-age=1209600
expires: Sat, 07 Jan 2023 09:46:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IbCrnl2jHtt3ARkbdDtJdY1t/iT+eA6L1pkPIeISKQrHurrfYzN0CE54ZOlbBo/E9qrm76WQ/M0=
x-amz-request-id: 69QVGW75ZMC6VK3N
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
content-length: 2209
X-Firefox-Spdy: h2
maintenance.etoro.com/maintenance.json?client_request_id=87153621-aa89-42fc-ab57-14f2dc343a49
403 Forbidden 338 B URL HTTP/1.1 maintenance.etoro.com/maintenance.json?client_request_id=87153621-aa89-42fc-ab57-14f2dc343a49
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash c6eebd95e6163e42c79210ae72d66d7c
b912494016bbcf66842318ad81f000c7aae2b2b9
4e210b808e866f3c63f7dd7d56c07d198031060f2251cbb1a1cc3104fdbdf0c9
OPTIONS /maintenance.json?client_request_id=87153621-aa89-42fc-ab57-14f2dc343a49 HTTP/1.1
Host: maintenance.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accounttype,applicationidentifier,applicationversion,x-sts-deviceid
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 403 Forbidden
x-amz-request-id: VDY6A8KMHH6DNGKT
x-amz-id-2: 7sANr6YFOW/AatXB6k95pFQjlz6scd8Ykkzs3OVIYXUVgn7XXr5Vdq8zqleJexbqqznOmSMxjSM=
Server: AmazonS3
Content-Length: 338
Cache-Control: max-age=300
Expires: Sat, 24 Dec 2022 09:51:02 GMT
Date: Sat, 24 Dec 2022 09:46:02 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Type: application/json
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
200 OK 62 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Hash e9681ca3d29d814a5621d4764dd1a11e
bbda68459fc0531b915bdf9e524ecc8f782db0aa
51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: X1QIfIKr9mBBwVT8s2yKOj0YVt7edPyypgNUpe2lA082Np/m8G5zgD443xVHa4cb8Ba2zhuP4eg=
x-amz-request-id: PN7QTASNM9B7CB7N
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "e9681ca3d29d814a5621d4764dd1a11e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: HgUsNFmOXgC1eDiETddzJSTtCGDefKwY
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61548
server: AmazonS3
cache-control: max-age=2592000
expires: Mon, 23 Jan 2023 09:46:02 GMT
date: Sat, 24 Dec 2022 09:46:02 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9891
Expires: Sat, 24 Dec 2022 12:30:53 GMT
Date: Sat, 24 Dec 2022 09:46:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9891
Expires: Sat, 24 Dec 2022 12:30:53 GMT
Date: Sat, 24 Dec 2022 09:46:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ea23fe-7e38-4bc2-9a3c-0348db307737.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ea23fe-7e38-4bc2-9a3c-0348db307737.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7514aea8a6ecc6d2c4c4362719ec1f71
cb1cbae883c69fba75b584248c2ba79663175e66
0233fca45e85ea0fcd83083ce1c32084411067d01df99eb67ce15d00c361a16e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ea23fe-7e38-4bc2-9a3c-0348db307737.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6663
x-amzn-requestid: 7a457075-fb06-4be7-be96-c9d5e176e39a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnPzGukIAMF1OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f31-59b7441372a27f0f793c73e7;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 77BRdhrG6j7XXr_v3GUHnpjCn9xtlkKavKu1dpn7NZQe7KU3z370eA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:42:36 GMT
etag: "cb1cbae883c69fba75b584248c2ba79663175e66"
content-type: image/jpeg
age: 43406
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9891
Expires: Sat, 24 Dec 2022 12:30:53 GMT
Date: Sat, 24 Dec 2022 09:46:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F521ed1a6-b90d-4f16-ac47-f5778ba57056.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F521ed1a6-b90d-4f16-ac47-f5778ba57056.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7ff51ff86770154a8b01b98e6302efa
fdfeff41daa3872042615af9faaea28416d05ee5
d016ff5427d4ec9a0da5858c1c0b2f29f9c10f872d0c90dcd216e99ec8089bb8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F521ed1a6-b90d-4f16-ac47-f5778ba57056.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5370
x-amzn-requestid: bec8ffc7-e6e9-4b4e-aa6c-273e08c7b641
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dlnDjE1rIAMF5Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a55216-2e477e1c3a56014b2d137ef7;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 07:00:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FhSeyX6on27s8f1GJFcdm1HYKLp1HPiR_gXAbjFTDYpW4D1c4HG9Jw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 07:17:07 GMT
age: 8935
etag: "fdfeff41daa3872042615af9faaea28416d05ee5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3071a834e874a992c3b14f7a3f91b30f
559014c7e6e5019097b7da8b3a820a80a1f55b6c
4f8e29303936b4168f0ad765d8a2773a7247f249396147f68f6f9639b1ad1208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10356
x-amzn-requestid: 32dbf731-a18f-4150-b3cd-f30d2ab3c6a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoi1GY2oAMFesg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a62145-55a5f14a6ea6e7dc3754a8be;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:44:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DC1Eu98-ihibH4I6ZY03Af2PxBrywSyjnoJRR2N453KiYvsa6hGefw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:49:04 GMT
age: 43018
etag: "559014c7e6e5019097b7da8b3a820a80a1f55b6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9891
Expires: Sat, 24 Dec 2022 12:30:53 GMT
Date: Sat, 24 Dec 2022 09:46:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9891
Expires: Sat, 24 Dec 2022 12:30:53 GMT
Date: Sat, 24 Dec 2022 09:46:02 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 8433e0a2ff8f902d8296a09923a91f60
f7f676d3a3f4853ad31444ea331180d761d7bf14
a95d843400178cd4c615e85d4d49d78adda8f6055285349ff8f861c4374fbb1f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2871
Cache-Control: max-age=114316
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:02 GMT
Etag: "63a5daaf-1d7"
Expires: Sun, 25 Dec 2022 17:31:18 GMT
Last-Modified: Fri, 23 Dec 2022 16:43:27 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47ee94a5-9c56-4939-b124-56487f665b25.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47ee94a5-9c56-4939-b124-56487f665b25.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 187fd7f19c2b5452c58da85ac9010790
ae6a889ca7a320d976dd68c00cfe9fbd9e4b20be
a4baaa24e3ec3d41805bf1fe31f7d8c8572f7339950f65f356d9bdd8b101fa80
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47ee94a5-9c56-4939-b124-56487f665b25.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11460
x-amzn-requestid: 655d7775-5baf-4679-859a-cc52a2275355
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkU9yFERoAMFzwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4cebe-116cdec64328a27c23a25a40;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:40:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8Y3SIle1NAMCi1zOItthzXegoECQW0nC6YSIGL2IZzh_Dam2922nrw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 22:42:20 GMT
age: 39822
etag: "ae6a889ca7a320d976dd68c00cfe9fbd9e4b20be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (30920), with no line terminators
Hash 5c1e6ef321052f9ef17baa3b17775b15
dc24d4674334a60c2b9d1cd9aae0b6ed1bbb09ea
12a2c25fdde940fdbf0dcf5f2743c615bf8acac3ce6d19bf8b55102526bf763f
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13268
server: CloudFront
date: Sat, 24 Dec 2022 09:46:02 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Sun, 25 Dec 2022 07:59:28 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jko2P_Y-VOFiqh8C0xVTjJrUMGfYX-2HR18gluyUkaKjE6EFCy8qGA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3f349d1d8399a24315e98fc54179857
cdab7a12ec47358b257ba217173e088323aadc1f
f6262476101b554129fcbf637f6ae7658311cf11e63dc942639ea04fc86b8ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d90b80ebad103c48c3043c8d5e4c3ca
ab36c9309ce13b2a3d075461c2445f76bfc582aa
2287a6db0a6a58c570930c1f94c3b36d7acf383b26cdfa42261eb254598fa7c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7669
x-amzn-requestid: 4b35e79d-21c8-48d7-b11b-44bd820e29d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnROG4UoAMFZdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f3a-765739ad7e9063781ccb12b2;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lhQA2yVBNtJ04goTms0KXhX6Q4v86TEe4EUioQs3eJzzMsCxbVmykw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:39:58 GMT
age: 43565
etag: "ab36c9309ce13b2a3d075461c2445f76bfc582aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
200 OK 17 kB URL HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
File type Unicode text, UTF-8 text, with very long lines (39267)
Hash 12a5f480c5a23efc80304d3bbc35d746
4043357825f2e91df5c4f339a9bc95f8e5b48fa1
b7be9b25bef3ce5c830263ba56bc3235a6683a9950115e4d4368144de3bbd2ec
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1671224586565"
Last-Modified: Fri, 16 Dec 2022 21:03:06 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Sat, 24 Dec 2022 09:46:03 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b92387330acabeb3e5475a52f789314e
c27aa6c638e130063905e556d5d2213dcadb690f
b67e7688d3ed7d4a7aaa9bae8c083f296ed9f52986e8bddbcc93ac13ae02a6af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4576
x-amzn-requestid: 81468234-ef31-40ad-b003-2d22e8fd2ef8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnpAGi8oAMFXBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fd3-0ddf619f2677a5a134334202;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:38:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IxJvwJFHYzKzXY7mfM3nIRaRoDVu3auCR-dYq-zI_v77uau1cRT1LA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:49:04 GMT
age: 43019
etag: "c27aa6c638e130063905e556d5d2213dcadb690f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Fri, 23 Dec 2022 15:54:34 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: L4fAlm4sNYIVnVfMSVkZIdxiadhQDAF2O0KbbZeCp9zvH7llY-V_Ag==
Age: 64290
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3f349d1d8399a24315e98fc54179857
cdab7a12ec47358b257ba217173e088323aadc1f
f6262476101b554129fcbf637f6ae7658311cf11e63dc942639ea04fc86b8ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
200 OK 275 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (562), with no line terminators
Hash 1ab2a97338ed3a74084554ba95e3c920
9607de2f32b9ca12b92257f1469eaf7e688b6f80
1f91225ca593af121d56d4553e90970bb0eb6b267a9de6ed812906ed9c7efe0d
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:03 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 24-Dec-2022 10:01:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
9944765.fls.doubleclick.net/activityi;src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49?
200 OK 441 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1014), with no line terminators
Hash cddef740a7db519cae9181c05ceada37
8bf793d5b555b1764ffa3b2d7a1ad19005bde0b1
0c7321921909e37b46990805a3d1612412a2f5c156beb5ca9928d2252eebcd48
GET /activityi;src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49? HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:03 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 441
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 24-Dec-2022 10:01:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash f3bfe17754ed68bc13ffd246faab6a24
4bc2b361181959dc69eae5b3354c1b2c7b030e77
c4b5d23294d574a92cd4466a7bd6f8204b30adb95c293e9cd5808c4bd4acf0f3
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4812
Cache-Control: max-age=104678
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a5ad75-1d7"
Expires: Sun, 25 Dec 2022 14:50:41 GMT
Last-Modified: Fri, 23 Dec 2022 13:30:29 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3f349d1d8399a24315e98fc54179857
cdab7a12ec47358b257ba217173e088323aadc1f
f6262476101b554129fcbf637f6ae7658311cf11e63dc942639ea04fc86b8ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c22ac6457cd8e457ba752d8bc4c5057
268aa6617f058063688dc42953b2fabfed4cb6c6
7c55b76ebcb53dd06460b43b110e60f74cb92f87abe16e7d3d5358b1719eb575
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133126
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a62252-1d7"
Expires: Sun, 25 Dec 2022 22:44:49 GMT
Last-Modified: Fri, 23 Dec 2022 21:49:06 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LYPt90KJXMKMTX-Eao12FMRt9NelB1od4zZKWpL-Ob_Rzgdl1XequA==
Age: 3344
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 30 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash bbf12f5d9b89f3c0c8b3d7bd445cfcbb
c3979a6e1c61a65f017279d12fa1926bd1eca260
2aa420f8725b71fcf2877ba23310d35279fc81bff5be050edc49fdeecbcf3411
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 30231
content-encoding: gzip
server: Caddy
date: Sat, 24 Dec 2022 08:41:33 GMT
cache-control: max-age=43200
expires: Sat, 24 Dec 2022 20:41:16 GMT
etag: "14351-RIWjsv313PWYI4RyEPNyETuIUAc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GAUZD114k5Rqes3qiSRfxO7Q5fCyi2utAkpv_IKGOvV1cOI4JrRyZg==
age: 3887
X-Firefox-Spdy: h2
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sat, 24 Dec 2022 10:06:03 GMT
Date: Sat, 24 Dec 2022 09:46:03 GMT
Content-Length: 5269
Connection: keep-alive
ocsp.digicert.com/
200 OK 727 B IP
Hash 7addb607b3c77988d3d7a6d40a40f06e
66dc72e34af6c7063c85ba667a05e0567b3f500a
cf3ecd32d9d69a280d21034efabb180b59b2b5165dc0b94b0a68604f703b8726
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5394
Cache-Control: max-age=138405
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a62eee-2d7"
Expires: Mon, 26 Dec 2022 00:12:48 GMT
Last-Modified: Fri, 23 Dec 2022 22:42:54 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 727
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 24 Dec 2022 08:41:11 GMT
expires: Sat, 24 Dec 2022 10:41:11 GMT
cache-control: public, max-age=7200
age: 3892
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.7 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash bf269a225d9de1d11c6e2747d12ffbfb
f3edd2899cced3e0ae6107c6837e954d8b4f1d86
38bcbdd59ce5cac7da632ad8788f5c520aa88d30a53af4cedeb9a989af4d0986
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 18:31:06 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=40504
date: Sat, 24 Dec 2022 09:46:03 GMT
content-length: 4654
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1dff53e8811ed358c6312229839778e0
79b4bb8a649b28725355d550dcddedab8ce3b29c
8aa0e7c04e39ac810428a9cace465fc9d7fe99b0224443cdf2eed12b148260cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5966
Cache-Control: max-age=135388
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a620e9-1d7"
Expires: Sun, 25 Dec 2022 23:22:31 GMT
Last-Modified: Fri, 23 Dec 2022 21:43:05 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76d5cc6d4b48e04cf451b197f17f49f7
7689488740a4382ed6314a06e021e8099f58dd8b
b62cbcd7cc59b65e3b76b546d418d6351e252671f151197a0dfbb138215226a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 1dff53e8811ed358c6312229839778e0
79b4bb8a649b28725355d550dcddedab8ce3b29c
8aa0e7c04e39ac810428a9cace465fc9d7fe99b0224443cdf2eed12b148260cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1778
Cache-Control: max-age=131200
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a620e9-1d7"
Expires: Sun, 25 Dec 2022 22:12:43 GMT
Last-Modified: Fri, 23 Dec 2022 21:43:05 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP
File type ASCII text, with very long lines (755)
Hash bea784dce86d30e1f2e59387f85cccb6
90665d4cc2e3f1e8c6da1247096c0af28b70ae04
b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtwVGbCBJP6sCnC_1eAlq585SIGB9p3Pt5i5rmKhVXHosHEdOD6ereIal_02Ys85QDB0eXISwiNL1xPEjYHWJk0Fg
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Sat, 24 Dec 2022 09:37:19 GMT
expires: Sat, 24 Dec 2022 09:47:19 GMT
cache-control: public,max-age=600
age: 524
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (58959)
Hash 9d4ad21a2a9768492730b386329f567b
76102d04f28182faa8c60db24bb24c34d81efa27
7f54f5bbfd3a07c318fdab6f2741fbb3dfdc4d996a4a35035c8c0598b43ab749
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SbG4/JzEdVoUCOHPmIJGL7ZBO4onlEBKwx9tmTTx+oRf6Kn2tguVVkvjbYiDqXJSGvnCpyYmP1M=
x-amz-request-id: R2HZJV4QH13P6ZZD
x-amz-replication-status: PENDING
last-modified: Sun, 18 Dec 2022 11:07:33 GMT
etag: "21530c31dddfceede2fb3bc7abf20d99"
x-amz-version-id: QXqn33YIuF6VCLrvOPAfnJ5OAt7Gsy3v
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 24 Dec 2022 09:46:03 GMT
via: 1.1 varnish
age: 1
x-served-by: cache-bma1625-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1671875163.246575,VS0,VE3
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 17
content-length: 18111
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash d925a898de26295fdebfc90203ef46fa
77dd3f5893b76530e08058d50e8f9aef017e80c7
8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11460
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=207EA1F98C1C640C37EAB37D8D4B65E6; domain=.bing.com; expires=Thu, 18-Jan-2024 09:46:03 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 84D4B29099E7401DA994B20211A47AD9 Ref B: OSL30EDGE0407 Ref C: 2022-12-24T09:46:03Z
date: Sat, 24 Dec 2022 09:46:02 GMT
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 1cc36f699291ba29dab9ec0f885b281b
d536f8bda7d333c21eae8e3d816d690402adb90c
6b20ce0ec6b6c57b33e8118f8d5d3c501ede61b8589ebab71d411b81d0fae994
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20933
date: Sat, 24 Dec 2022 09:46:03 GMT
expires: Sat, 24 Dec 2022 09:46:03 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4fcbc207c89b8c6c"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: DL0gPFRVveqqoJte83vRvL1x6x2NFkVPFH1/RTg+KFJZWf8ULgjFI1q2bpQ+qk4EntetW3zBN1ekN38YItXH6A==
content-length: 27298
x-fb-trip-id: 1904183273
date: Sat, 24 Dec 2022 09:46:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Sat, 24 Dec 2022 09:46:03 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 910ee3ead832135a6222dcfdef7d7f37
e0101340a0cf84025594420046e7ad5b4b843105
e3e2a4f8fa594df4176df077498da1bc849d729f78f9c73baac799720ad28cd6
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 9ec7f023fcad6136c031edff0e244228
etag: "82823bf7c6a8a628e42e965463d40eb6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 24 Dec 2022 09:48:04 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: kQ7j6tgyE1piItz9731/Nw==
x-fb-debug: dqTB763mq0SZ9sISBPjcfyvB5//JyCUeL+nm5NF8Y5rK6TxwVU2nlFf3xBdyoUaEoRmDiFQjMZ9B0dPLH3l6RQ==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1904183273
date: Sat, 24 Dec 2022 09:46:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 7addb607b3c77988d3d7a6d40a40f06e
66dc72e34af6c7063c85ba667a05e0567b3f500a
cf3ecd32d9d69a280d21034efabb180b59b2b5165dc0b94b0a68604f703b8726
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5394
Cache-Control: max-age=138405
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a62eee-2d7"
Expires: Mon, 26 Dec 2022 00:12:48 GMT
Last-Modified: Fri, 23 Dec 2022 22:42:54 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 471 B IP
Hash 1dff53e8811ed358c6312229839778e0
79b4bb8a649b28725355d550dcddedab8ce3b29c
8aa0e7c04e39ac810428a9cace465fc9d7fe99b0224443cdf2eed12b148260cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1778
Cache-Control: max-age=131200
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a620e9-1d7"
Expires: Sun, 25 Dec 2022 22:12:43 GMT
Last-Modified: Fri, 23 Dec 2022 21:43:05 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f37c9faffd8b6d93a4994c02ff1d3d21
b41b823e9b33d7fff8c1670cf510edda28f7082b
7494a95cab50f2a0409796d95e999fc5add96030fba70be912c1c80124169bc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ca9512237f87f9b258f470a0569c483e
81d7f7b1e8ab5657d33944a55a07ac22af57f473
faf3fce2abb109bb79e5e808a7de6ae04ba070a115b6ac6c8dbb393d3bd0069b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js?hash=25c7c170d7465e0720c1fdd0d8784172
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=25c7c170d7465e0720c1fdd0d8784172
IP
File type ASCII text, with very long lines (13192)
Hash e8102b06ffc844a356e26bb8babc9937
2b40dc003675d5e930a7a9935e6d48ec642f5fef
066391e19772963a025bcc2bf449a68ccbbae30cdff5752752f22247aa9dd5e6
GET /en_US/sdk.js?hash=25c7c170d7465e0720c1fdd0d8784172 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 11e09c0a611a7df4c7dd370e5b76e167
etag: "249ab509174c7c722913e5b0f40bc3f4"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 24 Dec 2023 08:04:21 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 6BArBv/IRKNW4mu4uryZNw==
x-fb-debug: +0Urs7QXnc5gchP38FZMkFtK+/2cqB3Zt/5rkSs1hY95BRSm4H7gThRrRge5NAf67NrOLOum2cT8YzByNxWNHg==
content-length: 87017
x-fb-trip-id: 1904183273
date: Sat, 24 Dec 2022 09:46:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?onload=onload
200 OK 565 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onload
IP
File type ASCII text, with very long lines (899), with no line terminators
Hash 67ce60ced28e723468d090aecd09dbff
df51de6fa059ac5ed9edb751c78f321c2b17449c
282afac752c8cc4474045cc35d713c4580ba3dcdde73bdfaf471704369e39828
GET /recaptcha/api.js?onload=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 24 Dec 2022 09:46:03 GMT
date: Sat, 24 Dec 2022 09:46:03 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 565
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.adalyser.com/tracking/track/v3/p?stm=1671875161639&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&refr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cid=etoro&p=%7B%22et%22%3A1671875161636%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2299511%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22MFTN%22%2C%22co%22%3A%2213050%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%220f516106-d910-47d5-9eba-74ab19c0ec55%22%2C%22duid%22%3A%22b089ce1b-7b7f-43ba-8301-ff6b490a1184%22%2C%22cw%22%3A1671875161636%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1671875161639&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&refr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cid=etoro&p=%7B%22et%22%3A1671875161636%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2299511%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22MFTN%22%2C%22co%22%3A%2213050%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%220f516106-d910-47d5-9eba-74ab19c0ec55%22%2C%22duid%22%3A%22b089ce1b-7b7f-43ba-8301-ff6b490a1184%22%2C%22cw%22%3A1671875161636%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1671875161639&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&refr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cid=etoro&p=%7B%22et%22%3A1671875161636%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%2299511%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22MFTN%22%2C%22co%22%3A%2213050%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%220f516106-d910-47d5-9eba-74ab19c0ec55%22%2C%22duid%22%3A%22b089ce1b-7b7f-43ba-8301-ff6b490a1184%22%2C%22cw%22%3A1671875161636%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1654
Cache-Control: max-age=163836
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 07:16:39 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1740
Cache-Control: max-age=163922
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 07:18:05 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5849
Cache-Control: max-age=168031
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 08:26:34 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=cd58a77b-5543-4eab-b87c-17bc8d7485e9&u_sclid=336a9745-8375-49d6-98ad-6f301e407500
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=cd58a77b-5543-4eab-b87c-17bc8d7485e9&u_sclid=336a9745-8375-49d6-98ad-6f301e407500
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=2b300842-74be-4e72-8ed5-3bab9449a996&u_scsid=cd58a77b-5543-4eab-b87c-17bc8d7485e9&u_sclid=336a9745-8375-49d6-98ad-6f301e407500 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 759
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBBxEAMAgEMEXc8YUy5NClAvFNZHHYPEKedUkBpnIt2g9jQ1gzqhvmCJ8waf7b5EBeMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 8
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3aba8a02ecf3c4bd811013ba6f657955
8ee641f20a32212bf50901af80f0fdfd341215f6
6522b73a67514fb2772432e973d922c108a320593839b4f2c3eb78a8cd5a102c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1654
Cache-Control: max-age=163836
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a6a0e1-1d7"
Expires: Mon, 26 Dec 2022 07:16:39 GMT
Last-Modified: Sat, 24 Dec 2022 06:49:05 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash bf06e9a7757a3645d55487973d6d4ef0
1c3c71cfd1a225932ae6110e138283f7efbcddc0
826baa01b10c31f646e2a46c062ed3723cacbb7a420911817a0637e33a3c7787
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 24 Dec 2022 09:46:03 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 23 Dec 2022 20:26:10 GMT
Expires: Sat, 24 Dec 2022 20:26:10 GMT
ETag: "1c3c71cfd1a225932ae6110e138283f7efbcddc0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Sat, 24 Dec 2022 03:58:26 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RizfmRqOJpSWAorzqVMVa-wY2T7SnCHi-D0GWM2ZoTnDzjOfwZVG_g==
age: 20857
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash cbf15cd3866193472d4ae1d9186d96f3
7c5fc30076b7f3bbfb80170e1590a09f262001c8
796089bf86f95237688bde4db0c73de4d0d5a74c29bcc1878cf8c23d46ec287c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2800
Cache-Control: max-age=96917
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a59700-13a"
Expires: Sun, 25 Dec 2022 12:41:20 GMT
Last-Modified: Fri, 23 Dec 2022 11:54:40 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash cbf15cd3866193472d4ae1d9186d96f3
7c5fc30076b7f3bbfb80170e1590a09f262001c8
796089bf86f95237688bde4db0c73de4d0d5a74c29bcc1878cf8c23d46ec287c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1736
Cache-Control: max-age=95853
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Etag: "63a59700-13a"
Expires: Sun, 25 Dec 2022 12:23:36 GMT
Last-Modified: Fri, 23 Dec 2022 11:54:40 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 314
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=1660701445238110term=value
200 OK 4.5 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=1660701445238110term=value
IP
File type ASCII text, with very long lines (1838)
Hash ce3b1d9e3ac35fed145d499b9e9cef07
b4138b0778815f56eebc63f9c9a625aa969fae04
1a7eb0e1f854c5de7dfabfba0d74e7f2647eec3be24246a529ccaf95bdb200fc
GET /spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&cb=1660701445238110term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sat, 24 Dec 2022 09:46:03 GMT
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
www.gstatic.com/recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js
200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js
IP
File type ASCII text, with very long lines (658)
Size 165 kB (164706 bytes)
Hash 0b7fccb24ee065a01fdde10928c03c3f
9b198014f81844820588c202cc24bf5e03bf3dd7
68756de8f0d6742525ddaca56ab350e34d822777e86939fea27eb704ae013280
GET /recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164706
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 08:42:55 GMT
expires: Sat, 23 Dec 2023 08:42:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 15 Dec 2022 05:24:10 GMT
content-type: text/javascript
age: 90188
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OP3E+suMuwT4UiGJeRhXb5w7WnaYuHvZTAqA0QmmrUu1tgU5gYvQWmXAE2tt3eWnTW+diZfehAM=
x-amz-request-id: F0VNSRNMKVY0B1QD
date: Sat, 24 Dec 2022 09:42:42 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 202
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/i/adsct?bci=3&eci=2&event_id=210d35f2-12af-431e-b083-a3c6efd19e88&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=210d35f2-12af-431e-b083-a3c6efd19e88&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=210d35f2-12af-431e-b083-a3c6efd19e88&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=7644e8df-e99c-49c8-b235-463bdc8788bc; Max-Age=63072000; Expires=Mon, 23 Dec 2024 09:46:03 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 6b9f6cc267a9b0e7
strict-transport-security: max-age=0
x-response-time: 107
x-connection-hash: ef5f494aaa81a7e98b1bd95a386422e70d66edee92664215757f29d44c3a5279
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=aa1ba87f-971e-4fb4-8523-abfe67f3062d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=aa1ba87f-971e-4fb4-8523-abfe67f3062d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=aa1ba87f-971e-4fb4-8523-abfe67f3062d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=cbf9d81a-aac6-456c-9d13-e1ff93d96bc1; Max-Age=63072000; Expires=Mon, 23 Dec 2024 09:46:03 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: d975636a7c894340
strict-transport-security: max-age=0
x-response-time: 112
x-connection-hash: ef5f494aaa81a7e98b1bd95a386422e70d66edee92664215757f29d44c3a5279
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=4c0ace56-123c-4bd0-aada-68432dcc1edc&sid=c6dc0be0836f11ed9f195922f52dc1ee&vid=c6dc4d00836f11ed9d7bb74f21728845&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&r=<=176&evt=pageLoad&ifm=1&sv=1&rn=282714
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=4c0ace56-123c-4bd0-aada-68432dcc1edc&sid=c6dc0be0836f11ed9f195922f52dc1ee&vid=c6dc4d00836f11ed9d7bb74f21728845&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&r=<=176&evt=pageLoad&ifm=1&sv=1&rn=282714
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=4c0ace56-123c-4bd0-aada-68432dcc1edc&sid=c6dc0be0836f11ed9f195922f52dc1ee&vid=c6dc4d00836f11ed9d7bb74f21728845&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&p=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&r=<=176&evt=pageLoad&ifm=1&sv=1&rn=282714 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=159736C225966F6E301F244624C16EB6; domain=.bing.com; expires=Thu, 18-Jan-2024 09:46:04 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F38B8396B9E3488F898DCBF0A2426BD7 Ref B: OSL30EDGE0407 Ref C: 2022-12-24T09:46:04Z
date: Sat, 24 Dec 2022 09:46:03 GMT
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671875161792&hl=1&op=0&ag=1317291471&rand=130611902076158962852501798952151111917168252211610961172227626101880226768&fs=1268x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=1&pre=0&sdd=%7B%7D&cri=QyjSK9h4QH&pto=1555&ver=48&gac=1709723592.1671875162&mei=&ap=&duid=1.1671875161.hdbNltlY54IRBFqS&suid=1.1671875161.ok3D7ef1jiwzTV01&tuid=1.1671875161.lJFfnrekn23qao5V&fbc=->m=WyJHVE0gZXZlbnQgdG8gR0EiXQ%3D%3D&it=77%2C739%2C328&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.0 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671875161792&hl=1&op=0&ag=1317291471&rand=130611902076158962852501798952151111917168252211610961172227626101880226768&fs=1268x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=1&pre=0&sdd=%7B%7D&cri=QyjSK9h4QH&pto=1555&ver=48&gac=1709723592.1671875162&mei=&ap=&duid=1.1671875161.hdbNltlY54IRBFqS&suid=1.1671875161.ok3D7ef1jiwzTV01&tuid=1.1671875161.lJFfnrekn23qao5V&fbc=->m=WyJHVE0gZXZlbnQgdG8gR0EiXQ%3D%3D&it=77%2C739%2C328&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3002), with no line terminators
Hash 62dfc5fa06b3f5257f8e83ecf4547c27
6e087b1578eefcfdeab0b02ebb3989f622c7eb61
1ceb875dec7ff30cfad140280d8dc614d1d4c5ff21e777f270b0e6148b04882b
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1671875161792&hl=1&op=0&ag=1317291471&rand=130611902076158962852501798952151111917168252211610961172227626101880226768&fs=1268x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=1&pre=0&sdd=%7B%7D&cri=QyjSK9h4QH&pto=1555&ver=48&gac=1709723592.1671875162&mei=&ap=&duid=1.1671875161.hdbNltlY54IRBFqS&suid=1.1671875161.ok3D7ef1jiwzTV01&tuid=1.1671875161.lJFfnrekn23qao5V&fbc=->m=WyJHVE0gZXZlbnQgdG8gR0EiXQ%3D%3D&it=77%2C739%2C328&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sat, 24 Dec 2022 09:46:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=c7e5971255638f0bf45a150b5b4e8c61; Max-Age=29030400; Path=/; Expires=Sat, 25 Nov 2023 09:46:04 GMT; HttpOnly; Secure; SameSite=None
content-length: 1018
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9e17fae8e9b08b0f8b1424a9a62a36f
4c8cbf014cf2c86b62782d7722339e0a56fa64ba
974089d8226c3e6858a54fa7b4dae361662c86462864e8500250bd8660ac6bba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=10A579BE25BC68053F3F6B3A24EB69F7; domain=.bing.com; expires=Thu, 18-Jan-2024 09:46:04 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0BE573A0C9B14B22A4BCE6FC79C54389 Ref B: OSL30EDGE0407 Ref C: 2022-12-24T09:46:04Z
date: Sat, 24 Dec 2022 09:46:03 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 718e954e66406be71f9d9b5e1acd4ca9
585f4a24cafa38389b8d54bf46b6883d31ba7702
f5d7f8da1280669e8025b1338950f24c57614aad30abbcd72181bedd6d038f9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3397
Cache-Control: max-age=138546
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Etag: "63a63749-139"
Expires: Mon, 26 Dec 2022 00:15:10 GMT
Last-Modified: Fri, 23 Dec 2022 23:18:33 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 718e954e66406be71f9d9b5e1acd4ca9
585f4a24cafa38389b8d54bf46b6883d31ba7702
f5d7f8da1280669e8025b1338950f24c57614aad30abbcd72181bedd6d038f9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3015
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Last-Modified: Sat, 24 Dec 2022 08:55:49 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 313
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1754418347&_gaz=1&ul=NA&cid=1709723592.1671875162&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&sid=1671875161&sct=1&seg=0&dr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&dt=
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1754418347&_gaz=1&ul=NA&cid=1709723592.1671875162&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&sid=1671875161&sct=1&seg=0&dr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&dt=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=1754418347&_gaz=1&ul=NA&cid=1709723592.1671875162&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&sid=1671875161&sct=1&seg=0&dr=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&dt= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1175
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Sat, 24 Dec 2022 09:46:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1709723592.1671875162>m=2oebu0&aip=1&z=1852147751
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1709723592.1671875162>m=2oebu0&aip=1&z=1852147751
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1709723592.1671875162>m=2oebu0&aip=1&z=1852147751 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e2b94572412cbd6dec9120f26fbd8edd
4ded5a76d85e2c35e8d3b1c5c196fa58159ba2a5
1371df100af0981a2cc1a7d9796c06dd16b71bd3e94f3439d7f789281853bb82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=1709723592.1671875162>m=2oebu0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-B0NS054E7V&cid=1709723592.1671875162>m=2oebu0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V&cid=1709723592.1671875162>m=2oebu0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Sat, 24 Dec 2022 09:46:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9e17fae8e9b08b0f8b1424a9a62a36f
4c8cbf014cf2c86b62782d7722339e0a56fa64ba
974089d8226c3e6858a54fa7b4dae361662c86462864e8500250bd8660ac6bba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671875161703&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671875161703&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1671875161703&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1671875161703%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJOgVV1ZGmhtgAAAYVDhngmDJHclhEaShM4CvJk_GhMJDkUcOUjShR4sOupWytEIqQqIPO3c1PZbg; Max-Age=2592000; Expires=Mon, 23 Jan 2023 09:46:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJJMDRvS9weOgAAAYVDhngmvZtA1a8Hm3jU304IAkcFbW7VO-viDFZz3AqiEIXKBTjT_lW_jD0bhc6zwSciEQ; Max-Age=2592000; Expires=Mon, 23 Jan 2023 09:46:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&42abe1da-82a5-4afd-8b11-2ec5a4365cef"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 24-Dec-2023 09:46:04 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2438:u=1:x=1:i=1671875164:t=1671961564:v=2:sig=AQGZAP3QwWXz2x9EWIBKliZZbQ3Krwy4"; Expires=Sun, 25 Dec 2022 09:46:04 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXwj8VFMuVH2L8fZ8urMg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1D6517BC595043A085C1E15F4F9AE110 Ref B: OSL30EDGE0111 Ref C: 2022-12-24T09:46:04Z
date: Sat, 24 Dec 2022 09:46:03 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e2b94572412cbd6dec9120f26fbd8edd
4ded5a76d85e2c35e8d3b1c5c196fa58159ba2a5
1371df100af0981a2cc1a7d9796c06dd16b71bd3e94f3439d7f789281853bb82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash a9b578c773102c4ed89e2a6c983b329c
91573b90c8d0137ccfe267c74d2926bb62c4d069
2d206c2773201f9e7ae917775370dcfb604e1012ac040df6c901eaff16c5c28a
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6503
Cache-Control: max-age=134132
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Etag: "63a619e9-1d7"
Expires: Sun, 25 Dec 2022 23:01:36 GMT
Last-Modified: Fri, 23 Dec 2022 21:13:13 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=aa1ba87f-971e-4fb4-8523-abfe67f3062d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=aa1ba87f-971e-4fb4-8523-abfe67f3062d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=aa1ba87f-971e-4fb4-8523-abfe67f3062d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_skO9dm0usH5EMYKGfaHpSw=="; Max-Age=63072000; Expires=Mon, 23 Dec 2024 09:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 28470198e63d457f
strict-transport-security: max-age=631138519
x-response-time: 107
x-connection-hash: 641cd7a9ff917302758ca225014cb0e52a011c5d9df49e0c235a72567801acfb
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash a9b578c773102c4ed89e2a6c983b329c
91573b90c8d0137ccfe267c74d2926bb62c4d069
2d206c2773201f9e7ae917775370dcfb604e1012ac040df6c901eaff16c5c28a
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6503
Cache-Control: max-age=134132
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Etag: "63a619e9-1d7"
Expires: Sun, 25 Dec 2022 23:01:36 GMT
Last-Modified: Fri, 23 Dec 2022 21:13:13 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=210d35f2-12af-431e-b083-a3c6efd19e88&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=210d35f2-12af-431e-b083-a3c6efd19e88&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=210d35f2-12af-431e-b083-a3c6efd19e88&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fff544cf-8466-4346-a7b9-20d2a4e825ad&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&tw_document_referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:04 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_QgQWThdcUs095VYKfV7qtA=="; Max-Age=63072000; Expires=Mon, 23 Dec 2024 09:46:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 0940fff9eb60a8f8
strict-transport-security: max-age=631138519
x-response-time: 109
x-connection-hash: 641cd7a9ff917302758ca225014cb0e52a011c5d9df49e0c235a72567801acfb
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f37c9faffd8b6d93a4994c02ff1d3d21
b41b823e9b33d7fff8c1670cf510edda28f7082b
7494a95cab50f2a0409796d95e999fc5add96030fba70be912c1c80124169bc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f37c9faffd8b6d93a4994c02ff1d3d21
b41b823e9b33d7fff8c1670cf510edda28f7082b
7494a95cab50f2a0409796d95e999fc5add96030fba70be912c1c80124169bc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 275 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (561), with no line terminators
Hash 2888301990c4b794774d7d3454f5ef45
9a0cf2d83268e6dc1097bcbf7607a2728e8ef514
3be969207e485fb819f87c8bf994dcfafac7d29c32750eeac9d8454ac8d25c18
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
200 OK 440 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1013), with no line terminators
Hash 88b3fa88b79b572f4b883d3a9953f90b
a4955cddac79eaa71f30b236e7d3093c583584e1
b88f803598f39cd5fdf1277081124b39aaaa9961d9feb920ef43e939618e5836
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 440
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 034f06ffe21c09bc64e487db781efa0f
6b40ce36cb3ab0ff1244af32e6b4f61781c59289
32da0a27097271991f020b761224104e2de198ebb37beda659761e5a0afd40a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=QyjSK9h4QH&ts=685&cb=1671875162477
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=QyjSK9h4QH&ts=685&cb=1671875162477
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=37dfbd8ee84e00136defcf32ef468c999225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f671a85d68c0e2b3e19fb7d71078f6ddf3091003554229652525a67000aceed6d4e77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c2343765558a08b2b347e01f5af49798ca8a77c91e25e771c7fa9f5f0c7c924b8cfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6335f51b07f3aeccf563bf08ba429905abf59f1dd4f9c0a8bd070817c68f9c4728c3cd58fe58ddaaba44668ad6ca0febe743e77e39621c3e14fba4c4300d64b1fc18dbec9ccf09337c43c8fcde4da2fbc386c228b453a93849a4d298fc7579d2da3845b994aae7e4d5957c733b352f3e39853fc902ec821f188ccd438ce17046bfa1e4c0030096ec0af72b9499494d677f4d025fcd0749aaec4be33cfb0a7073630c8fe5d0483e1471a12f3e8e524e66fd8f856fdf232a02ff8239f41c608c5f66d814370b5eacb39612d6a1174194005fdb0ff308b57e90137173bf2a64ed898110bfcbbdab3be72c3ebe3fd8effaaf04d4d2ee755d0e42a32da163b5fae374f7b7eeb69b3645b9ef9cb088961d43996ad2ccda4109a7d0b4c3c102856c594f6d12e7a4b9b1e4294dbdebeb1cc521bc6e4ef03ca8b2f12ddd66b5e1b8fd0ba443da564c006cb08e92d9a0cdace14f9b235e79a8ed3861839ec943c36d477fcd4f7e172fa6c350419862c0609e5b1559ded0acb9f9cc95cca8286350f291bc44bfd5be800e9df6b9573127e445c6f63f318ced7215fd202dcb5b77180dd478c6861f652056cedb48e5901b72fa29c1a8c566d431ff1&cri=QyjSK9h4QH&ts=685&cb=1671875162477 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=c7e5971255638f0bf45a150b5b4e8c61
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 24 Dec 2022 09:46:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 09:46:04 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 86894982a3c42808cd4af3152b9fcc58
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&optOut=false&bust=022069427572865485&referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&optOut=false&bust=022069427572865485&referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&optOut=false&bust=022069427572865485&referrer=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 09:46:04 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 383f13bb346708d3d12dbab20b1212b7
content-encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash 6916b24643384f583740f074875f82e6
af4cdd514c93268e7a3d4a387fba6dfde27c4375
7335ff379e2786f0347dcd69612e390a580e97a8500e3ae32942288d065def0c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5101
Cache-Control: max-age=94930
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:04 GMT
Etag: "63a58642-116"
Expires: Sun, 25 Dec 2022 12:08:14 GMT
Last-Modified: Fri, 23 Dec 2022 10:43:14 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
etoro-cdn.etorostatic.com/web-client/et/img/registration/bg_side_general.jpg
200 OK 42 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/bg_side_general.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x723, components 3\012- data
Hash e5b7e0d6023367cf4eeed5931b12ece9
3a81a4ef3c8cfcf486ec3b491a89ba3e946efbe8
1e8a630ed3961332c19d46dc5ae5b8308d7a175d73a36217ca3b3be24c4d3f2f
GET /web-client/et/img/registration/bg_side_general.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GHG8+ZVcwsnZ/tUt9lfFAUocJRqapVaDpeAphTbzXkjTzpWVv6Rwy5bfFivpRfeRXtv7DC7kRck=
x-amz-request-id: SD34QBXJ0GG4Y1H4
x-amz-replication-status: COMPLETED
last-modified: Tue, 08 Nov 2022 09:47:41 GMT
etag: "e5b7e0d6023367cf4eeed5931b12ece9"
x-amz-meta-origin-date-iso8601: 2022-11-08T09:46:03.944Z
x-amz-version-id: WYU18jrp.MNokEwk08YayaObYNo_pVFg
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 41692
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:04 GMT
date: Sat, 24 Dec 2022 09:46:04 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=1834588419879;gtm=2wgbu0;auiddc=994461620.1671875161;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:04 GMT
expires: Sat, 24 Dec 2022 09:46:04 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/iframe
200 OK 320 B URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP
Hash 3bb5eee59459b8b52e9fd4b14eb2532d
628288240309dfc9d2362be3335770bb6f07968a
04ecf0e6fa598e536e082bc784adcd8b1df7d34f8e720bd158ddf55982d8928e
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 24 Dec 2022 09:46:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport, script-src 'nonce-l4L-5mGp4sXVgj3eSZ-HZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&rl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&if=true&ts=1671875162510&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671875162508.218658181&it=1671875161944&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&rl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&if=true&ts=1671875162510&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671875162508.218658181&it=1671875161944&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&rl=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&if=true&ts=1671875162510&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671875162508.218658181&it=1671875161944&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 24 Dec 2022 09:46:04 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671875162699&cv=11&fst=1671875162699&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=1&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&auid=994461620.1671875161&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 938 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671875162699&cv=11&fst=1671875162699&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=1&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&auid=994461620.1671875161&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2401), with no line terminators
Hash 78cce776636708f690077dc787007cc1
f56abe051da4c6202a1e9c8ae7dbe8cbd098f3b0
a5d7ecf6f5522f36a1cf097ba3badbe9954c455e48aebfe8f3fc66f61d75992c
GET /pagead/viewthroughconversion/745546367/?random=1671875162699&cv=11&fst=1671875162699&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=1&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&auid=994461620.1671875161&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 938
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 24-Dec-2022 10:01:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671875162706&cv=11&fst=1671875162706&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=1&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D>m_ee=1&auid=994461620.1671875161&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1671875162706&cv=11&fst=1671875162706&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=1&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D>m_ee=1&auid=994461620.1671875161&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1671875162706&cv=11&fst=1671875162706&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=1&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D>m_ee=1&auid=994461620.1671875161&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Dec 2022 09:46:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 24-Dec-2022 10:01:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 090e04f0899309926c1483230310d6b4
ae235fcfe37e8f57765b69320f15c63e3ec40cd4
9eef4f78f0791d3fef1b4db8c08291a7d2ee9028756edae029fb5fcaedf86891
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 09:46:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 02:54:23 GMT
Expires: Wed, 28 Dec 2022 02:54:22 GMT
Etag: "ae235fcfe37e8f57765b69320f15c63e3ec40cd4"
Cache-Control: max-age=320297,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77e868638ac31c0e-OSL
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 62 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d39abb34da93ec5faa48669ac4788977
cc2627a86b99e91540251b6fb7e17a9b1faa1ee7
b329d16bd7e06de93beac4a9e4d67b8be6d1c944b7b8e398b929460f73b7c4ce
GET /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Sat, 24 Dec 2022 09:07:11 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wObLVs8_E99WgGzSfiTuF9QtJ0S1Fbp-KtFPLHjw5w27FoOs_Ne9WQ==
age: 2332
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671875161703&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1671875161703&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1671875161703&url=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&166e8a27-f2d4-4fcb-830b-46b001b95ab9"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 24-Dec-2023 09:46:05 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1671875165:t=1671961565:v=2:sig=AQGjy6MFYYpAthhs0MoCK2HsbfjT4NWu"; Expires=Sun, 25 Dec 2022 09:46:05 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXwj8VSylt5+C03+qQGwQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9749F686AA7147759270D4FE0D3CFED6 Ref B: OSL30EDGE0111 Ref C: 2022-12-24T09:46:04Z
date: Sat, 24 Dec 2022 09:46:04 GMT
content-length: 0
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Sat%2C%2024%20Dec%202022%2009%3A46%3A03%20GMT&n=0&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Sat%2C%2024%20Dec%202022%2009%3A46%3A03%20GMT&n=0&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Sat%2C%2024%20Dec%202022%2009%3A46%3A03%20GMT&n=0&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:05 GMT
expires: Sat, 24 Dec 2022 09:46:05 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBF3KpmMCED1rBQUi4qAoiVGRTw53HA0FEgEBAQEbqGOwYwAAAAAA_eMAAA&S=AQAAAmzul81Rug0PBPBH-BZdMC8; Expires=Sun, 24 Dec 2023 15:46:05 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
200 OK 114 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
Hash 0cf48b24106d24e30a04f7f71f9cd733
3fe9d03bfd8c0b17f176dbdd13b1589a787bf358
8922def4b946dfe4164494972c35a7aa49b35bd24f6373c13edea7e5a5ff0c01
GET /sp.pl?a=10000&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&e=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&enc=UTF-8&yv=1.13.0&isIframe=1&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:05 GMT
expires: Sat, 24 Dec 2022 09:46:05 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBF3KpmMCEOE5Moe8gXlK0DVzcQXQVWoFEgEBAQEbqGOwYwAAAAAA_eMAAA&S=AQAAAl1ZlNTwvNzHMkBg3I8bbxc; Expires=Sun, 24 Dec 2023 15:46:05 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1607
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=c7e5971255638f0bf45a150b5b4e8c61
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Sat, 24 Dec 2022 09:46:05 GMT
content-length: 0
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1735&scd=100&ssd=1&est=1671875161798&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671875163533&vi=1671875161796&ri=8012c6642a2d106b4f3fcbd629186a2b&ref=null&cv=20221215-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1735&scd=100&ssd=1&est=1671875161798&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671875163533&vi=1671875161796&ri=8012c6642a2d106b4f3fcbd629186a2b&ref=null&cv=20221215-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1735&scd=100&ssd=1&est=1671875161798&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671875163533&vi=1671875161796&ri=8012c6642a2d106b4f3fcbd629186a2b&ref=null&cv=20221215-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Dec 2022 09:46:05 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 971ff5be074f6916827448bb9ea03ca3
e6a5a7b2e5863e2452311986c21f71d3402c34c3
5a77d32c34199575deccc30abdb59cb8bc090731c1a16866f104bb94f148fd46
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5A77D32C34199575DECCC30ABDB59CB8BC090731C1A16866F104BB94F148FD46"
Last-Modified: Thu, 22 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10520
Expires: Sat, 24 Dec 2022 12:41:26 GMT
Date: Sat, 24 Dec 2022 09:46:06 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 971ff5be074f6916827448bb9ea03ca3
e6a5a7b2e5863e2452311986c21f71d3402c34c3
5a77d32c34199575deccc30abdb59cb8bc090731c1a16866f104bb94f148fd46
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5A77D32C34199575DECCC30ABDB59CB8BC090731C1A16866F104BB94F148FD46"
Last-Modified: Thu, 22 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10520
Expires: Sat, 24 Dec 2022 12:41:26 GMT
Date: Sat, 24 Dec 2022 09:46:06 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 971ff5be074f6916827448bb9ea03ca3
e6a5a7b2e5863e2452311986c21f71d3402c34c3
5a77d32c34199575deccc30abdb59cb8bc090731c1a16866f104bb94f148fd46
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5A77D32C34199575DECCC30ABDB59CB8BC090731C1A16866F104BB94F148FD46"
Last-Modified: Thu, 22 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10520
Expires: Sat, 24 Dec 2022 12:41:26 GMT
Date: Sat, 24 Dec 2022 09:46:06 GMT
Connection: keep-alive
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1602
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=c7e5971255638f0bf45a150b5b4e8c61
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Sat, 24 Dec 2022 09:46:06 GMT
content-length: 0
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
200 OK 119 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
IP
Size 119 kB (119406 bytes)
Hash 33a14e71b6f09a019287c48092bb8561
62ce1f7f1ae6ca891ba2afce4cc1ab715499048a
1b83831ed872d6a9a7f12fef43f8b24fdb2a147c8a14c1bacf608bac0efe17f9
GET /captcha/v1/ccb766f/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:06 GMT
content-type: text/html
cf-ray: 77e868703ea10b45-OSL
access-control-allow-origin: *
age: 6415
cache-control: max-age=1209600
last-modified: Fri, 23 Dec 2022 15:33:05 GMT
strict-transport-security: max-age=0
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: qLeERM881YorJ2jMOuBNr9SmWcki_5dzVm5NmXjyKXnr0OHUPGJJrQ==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=KgRqUcMNGHhWlgOqz0xkqGVSPC5MnbROz2gLl04H.DI-1671875166-0-AXFAodcWuA7GBG6tt8Yf5gFdV7mzDDsGILAoCd4KGYgtvY64Dxpep+9L1K/YZl9bNPoG8QFH8JCXsVplRdbn+4A=; path=/; expires=Sat, 24-Dec-22 10:16:06 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
200 OK 449 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55445)
Size 449 kB (449142 bytes)
Hash ebb25ea458dee6c2fd6961d39aa492c9
7f83b7edb6c3a45a21cd6f7d23417191a8922606
e9f05e4ff61bd2bd64bda0fb9f665e51bd7ebc6fa3ab16c0d8b3f76fc21723be
GET /captcha/v1/ccb766f/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:06 GMT
content-type: text/html
cf-ray: 77e868702e870b45-OSL
access-control-allow-origin: *
age: 6415
cache-control: max-age=1209600
last-modified: Fri, 23 Dec 2022 15:33:05 GMT
strict-transport-security: max-age=0
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: qLeERM881YorJ2jMOuBNr9SmWcki_5dzVm5NmXjyKXnr0OHUPGJJrQ==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=4Bichl.DqTTQLHA3D4C4JmuYWZFnWB4mAbXBUHsSra4-1671875166-0-AXWIQPNvgus2jXhfr6okX3Qjg+DXEZowX5C6ybYP1FaXUm5tx5vD0i0uiz4qMku9C860Mjea7RVF4UAPquT0w4s=; path=/; expires=Sat, 24-Dec-22 10:16:06 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
200 OK 1.3 kB URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
IP
Hash 000a51f168c3daa9bea44bca0aadc28b
dc4c21b427f0f39c00dd6bfe9e72661ce19b097f
a5e86c8f19b36237d1d4b035d3c42f494a7aa1a09231e4f2ae917a98ff7b6b68
GET /captcha/v1/ccb766f/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:06 GMT
content-type: text/html
cf-ray: 77e868703ea00b45-OSL
access-control-allow-origin: *
age: 6415
cache-control: max-age=1209600
last-modified: Fri, 23 Dec 2022 15:33:05 GMT
strict-transport-security: max-age=0
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: qLeERM881YorJ2jMOuBNr9SmWcki_5dzVm5NmXjyKXnr0OHUPGJJrQ==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=oNfrBLsvjCcMFJtVgel1tTsx5WEDasvhr4VmgPGiP9M-1671875166-0-ATWrHYZKm7Hd2HLiSv37Rmq7ayStWeWkP96NZQX02k9yiKEP+Mq79Vb34xqHOo0eB3vQiVsTHvd52yP3rs00xXM=; path=/; expires=Sat, 24-Dec-22 10:16:06 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=4736&scd=100&ssd=1&est=1671875161798&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1671875166534&vi=1671875161796&ri=8012c6642a2d106b4f3fcbd629186a2b&ref=null&cv=20221215-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=4736&scd=100&ssd=1&est=1671875161798&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1671875166534&vi=1671875161796&ri=8012c6642a2d106b4f3fcbd629186a2b&ref=null&cv=20221215-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=4736&scd=100&ssd=1&est=1671875161798&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1671875166534&vi=1671875161796&ri=8012c6642a2d106b4f3fcbd629186a2b&ref=null&cv=20221215-12-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 24 Dec 2022 09:46:08 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1355b1f2c1fee89b35991739b4b19ae2
70afe935bc9d7c32df12cce061b261e4734c1f94
50a14257e862bec4c993bc9b33896a762863f8d7db8b85ad9e2724324e916a44
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5331
Cache-Control: max-age=91199
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 09:46:08 GMT
Etag: "63a576cc-1d7"
Expires: Sun, 25 Dec 2022 11:06:07 GMT
Last-Modified: Fri, 23 Dec 2022 09:37:16 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
api-js.mixpanel.com/track/?verbose=1&ip=1&_=1671875166811
200 OK 25 B URL HTTP/2 api-js.mixpanel.com/track/?verbose=1&ip=1&_=1671875166811
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fa4859df2aaba80141861afa205fe74e
d486b5a249527d022cc009bdc9c197efb66f23a2
e39a8118ec6cdf6ac33e6961518e9fe6ba3f6caf099aeeaec1389c2108ba90ba
POST /track/?verbose=1&ip=1&_=1671875166811 HTTP/1.1
Host: api-js.mixpanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3436
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://www.etoro.com
access-control-expose-headers: X-MP-CE-Backoff
access-control-max-age: 1728000
cache-control: no-cache, no-store
content-type: application/json
strict-transport-security: max-age=604800; includeSubDomains
date: Sat, 24 Dec 2022 09:46:08 GMT
content-length: 25
x-envoy-upstream-service-time: 17
server: envoy
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/sandbox/sandbox.js
200 OK 600 B URL HTTP/2 marketing.etorostatic.com/others/sandbox/sandbox.js
IP
File type ASCII text, with very long lines (600), with no line terminators
Hash 7b744648213936d48bbbd2d5fa7fc5c9
ead526303ab8e115be2bc53daf66746fc76ef20c
c76629e6ffd00086f4bd43b7ae8be034295f921572adf73aef179792f7388899
GET /others/sandbox/sandbox.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: hq6MiANjab/PUlN6qLHIB1Nc14Qwx2Ec5nR9E4q3fv10zmdTjxDYdkjM29I62OTcmjWOomaN8go=
x-amz-request-id: QPWMFA4XA64XDCPF
x-amz-replication-status: COMPLETED
last-modified: Thu, 18 Jun 2020 11:23:35 GMT
etag: "65b9bdf3d4c592d54c642537e1bcd08e"
x-amz-meta-sha256: 577908df069de972e3a4849f587b8c0468fdf57593817bf401d867a6d0c2cf63
x-amz-meta-s3b-last-modified: 20200618T105901Z
x-amz-version-id: 4Czv95J2vuarxmudWSYaGwxpLBDDhdRW
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
content-length: 599
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:09 GMT
date: Sat, 24 Dec 2022 09:46:09 GMT
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/logger/logger.js
200 OK 2.3 kB URL HTTP/2 marketing.etorostatic.com/others/logger/logger.js
IP
File type ASCII text, with very long lines (5055), with no line terminators
Hash f620bec033fe844135374191b331937d
ef75dd9e7bddaaa53d9171c7b6869f5d72553f51
c61b3f992c23497120340e96694c29b94ca8b2576820677e0432031b636eee87
GET /others/logger/logger.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rFRtyRRvy8awZWbEw8KKBuYcsMr0FOn3VrHsw7WXTDWRDWcW8NmTXAtMX967njSth5isxYRudTE=
x-amz-request-id: 114803B553D57FD9
x-amz-replication-status: COMPLETED
last-modified: Wed, 15 Jan 2020 16:04:01 GMT
etag: "3a046ce8f3379b2e5a5fa5ee3ed02808"
x-amz-meta-s3b-last-modified: 20200115T160219Z
x-amz-version-id: RlsNx2j0zjqTyHD11R2PocORgBI_87x2
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Sat, 24 Dec 2022 09:51:09 GMT
date: Sat, 24 Dec 2022 09:46:09 GMT
content-length: 2285
X-Firefox-Spdy: h2
www.etoro.com/lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term=
200 OK 0 B URL HTTP/2 www.etoro.com/lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term=
IP
GET /lp/signup/?utm_medium=Networks&utm_source=99511&utm_content=13050&utm_serial=MFTN&utm_campaign=MFTN&utm_term= HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=99511&ClickBannerID=13050&SubAffiliateID=MFTN&Custom=&ClickDateTime=2022-12-24T09:46:01.1629010Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=13050&a=99511&task=click&subaffiliateid=mftn
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:01 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
set-cookie: TS01047baf=01d53e5818ded93e03a7c9050c5cd1fad6fb016ffb00f1e02d8da46a4516389c1bd78c7e30013a3c5a1f63996c4a195deac10bf805; Path=/
__cf_bm=E5LnEsOwkQqbHm3RZRs65YcoGceLAwYT1zaHYOH699k-1671875161-0-AQNXHhfU2JMznRFIqFMQY+/2Es8VeM3kOzGbbOJBcXFIhhjXNwcE0TE9p6ztqBIx1a3yEXmi6jXP1nK2SVxL6pVv3+jzzGPrsycOa+KBcRjf; path=/; expires=Sat, 24-Dec-22 10:16:01 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgwA1iUmzhYtnUYXv; SameSite=None; Secure; path=/; expires=Sun, 25-Dec-22 08:46:01 GMT; HttpOnly
__cfruid=b172dcd611d8ea0f148259152576660b86b68315-1671875161; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 77e868502f23b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xL35q3x3YyTYu5Myp2LYF9rJxMUVrM9Ow/zKXzQiM4srepVTm4ZEPd/YT+8SiaEpJP8vWBD6bXc=
x-amz-request-id: 3FGEZWX7RXJ9F6GQ
date: Sat, 24 Dec 2022 09:45:56 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 8
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
200 OK 0 B URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:03 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
IP
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 24 Dec 2022 09:46:05 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Flp%2Fsignup%2F%3Futm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=61b925fa-f1b2-4710-a481-8b8633216f79; domain=.adsrvr.org; expires=Sun, 24-Dec-2023 09:46:05 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
200 OK 0 B URL HTTP/2 cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
IP
GET /1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:04 GMT
content-type: application/javascript
cf-ray: 77e868632c30fac8-OSL
access-control-allow-origin: *
age: 0
cache-control: max-age=120
etag: W/"b10b0e2728ef939c89f41c72c35baac1"
last-modified: Fri, 23 Dec 2022 15:33:05 GMT
strict-transport-security: max-age=0
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: EWc8mpvI3hUMRgcqlTSZYxfRriwvcSllsoPozkGMuFZwxARIMDXmcg==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2
302 Found 0 B URL HTTP/2 onlinetopchoice.com/go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2
IP
GET /go/jump.php?id=mtd0013&MTDRef=visors-airminal.com&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=warep4nls63bo9dl2rereua6&pl=2 HTTP/1.1
Host: onlinetopchoice.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Sat, 24 Dec 2022 09:46:00 GMT
content-type: text/html; charset=UTF-8
location: https://med.etoro.com/B13050_A99511_TClick_SMFTN.aspx
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: no-cache, no-store, must-revalidate, max-age=0
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AGYRAyTsgUBU04YSN4B6NdRu6UX%2F76cwZ38EaxpiTT41ROPSVKQAMd4%2BN6seGPwss5H%2FxzPUNRX8kksoC9cz6h0RQTXke2h8sN9C15SWeOhRyfPjUhXgw84lZTgzZMGQZ4qXX4Qc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e86849b8d1b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
200 OK 0 B URL HTTP/2 cf-assets.hcaptcha.com/captcha/v1/ccb766f/static/hcaptcha.html
IP
GET /captcha/v1/ccb766f/static/hcaptcha.html HTTP/1.1
Host: cf-assets.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:06 GMT
content-type: text/html
cf-ray: 77e868703ea30b45-OSL
access-control-allow-origin: *
age: 6415
cache-control: max-age=1209600
last-modified: Fri, 23 Dec 2022 15:33:05 GMT
strict-transport-security: max-age=0
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: qLeERM881YorJ2jMOuBNr9SmWcki_5dzVm5NmXjyKXnr0OHUPGJJrQ==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
set-cookie: __cf_bm=PBI4g4v3ankGffO5q9r4lJ6MnTSGwi.w5wSbyuSivdM-1671875166-0-AZyFlKd4UPukpljNFchnjLw9UNONKptb59jxwDwKNI4DJef8kH0ZotuT46kFMFPQ1fRdIzAmf9a2/MTkqXF4LBQ=; path=/; expires=Sat, 24-Dec-22 10:16:06 GMT; domain=.cf-assets.hcaptcha.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1671875161801&data=%7B%22id%22%3A49%2C%22ii%22%3A%22%2Fen%2Fembed%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671875161796%2C%22cv%22%3A%2220221215-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671875161801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1671875161801&data=%7B%22id%22%3A49%2C%22ii%22%3A%22%2Fen%2Fembed%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671875161796%2C%22cv%22%3A%2220221215-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671875161801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1671875161801&data=%7B%22id%22%3A49%2C%22ii%22%3A%22%2Fen%2Fembed%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671875161796%2C%22cv%22%3A%2220221215-12-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671875161801%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fen%2Fembed%2Fsign-up%3Fhostedby%3Dhttps%253A%252F%252Fwww.etoro.com%252Flp%252Fsignup%252F%253Futm_medium%253DNetworks%2526utm_source%253D99511%2526utm_content%253D13050%2526utm_serial%253DMFTN%2526utm_campaign%253DMFTN%2526utm_term%253D%26hideSocialToa%3Dfalse%26hideSocialWechat%3Dfalse%26hideSocialFacebook%3Dfalse%26hideSocialGoogle%3Dfalse%26hideSocialApple%3Dfalse%26hideSocialConnect%3Dfalse%26utm_medium%3DNetworks%26utm_source%3D99511%26utm_content%3D13050%26utm_serial%3DMFTN%26utm_campaign%3DMFTN%26utm_term%3D%26funnelId%3D36%26FunnelFromId%3D49%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 24 Dec 2022 09:46:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1625-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671875164.079812,VS0,VE176
vary: Accept-Encoding
x-vcl-time-ms: 176
X-Firefox-Spdy: h2
cloudflare.hcaptcha.com/checksiteconfig?v=ccb766f&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1
200 OK 0 B URL HTTP/2 cloudflare.hcaptcha.com/checksiteconfig?v=ccb766f&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1
IP
POST /checksiteconfig?v=ccb766f&host=www.etoro.com&sitekey=33f96e6a-38cd-421b-bb68-7806e1764460&sc=1&swa=1 HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://cf-assets.hcaptcha.com
Connection: keep-alive
Referer: https://cf-assets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 09:46:07 GMT
content-type: application/json
access-control-allow-origin: https://cf-assets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent, challenge-bypass-token, cf-chl-bypass, challenge-bypass-token, challenge-bypass-host, challenge-bypass-path
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 77e86872db96fac8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.152.191
23.36.76.121
87.248.119.251
151.101.244.157
104.18.22.122
212.82.100.181
31.13.72.36
141.226.228.48