k.sulseerg.com/4/4470223/
301 Moved Permanently 162 B URL HTTP/1.1 k.sulseerg.com/4/4470223/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert quad9 Sinkholed
GET /4/4470223/ HTTP/1.1
Host: k.sulseerg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 28 Dec 2022 07:45:18 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://k.sulseerg.com/4/4470223/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd2bda30513692aa11a672c6a599935d
a944c3aa26b461063194a4bb95ce427d23a32d03
d975d1eab40c9fe4986ae0675d79e4f982eb9c0e2f503ca72b3bdf0ec9e7dfdc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D975D1EAB40C9FE4986AE0675D79E4F982EB9C0E2F503CA72B3BDF0EC9E7DFDC"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2614
Expires: Wed, 28 Dec 2022 08:28:52 GMT
Date: Wed, 28 Dec 2022 07:45:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 78f1f94544ef06b96bb43283f59d100f
fa2f1a3730a98c6fa5ebf976143fb6093a7298be
889af22ee304adea2e23491acbc89ebdcaf322e8c45af2bebf7520e3e9b0a6a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "889AF22EE304ADEA2E23491ACBC89EBDCAF322E8C45AF2BEBF7520E3E9B0A6A9"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5003
Expires: Wed, 28 Dec 2022 09:08:42 GMT
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 28 Dec 2022 06:46:45 GMT
content-type: application/json
age: 3514
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b2d59bdbb1ca6324590988ec031cf1fc
bfd4e25af37dcde4bac38d9b178c5ac8e50f8834
cef2180120ef42ff09d54577229c058d41d2c569d485f5a6dcfadc74bf8aa647
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEF2180120EF42FF09D54577229C058D41D2C569D485F5A6DCFADC74BF8AA647"
Last-Modified: Mon, 26 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3191
Expires: Wed, 28 Dec 2022 08:38:30 GMT
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IBi1kvylNnPHHAIl88MNoarK9vEe4TMgxRlbIPsnB6IteC0NpH/zkBW8wXF/DOzArjt4J0iXJvU=
x-amz-request-id: SY7WEHAG9BGSGX9M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 28 Dec 2022 06:58:12 GMT
age: 2827
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Dec 2022 07:45:19 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f126c9b66766b9b0fcf4426482d04732
d837f0da908a50b961f4ff59f6b64879e243b2fb
95ef2f635e170d0668198400624d4cd7486fce3d9d939620693e619a31397155
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "95EF2F635E170D0668198400624D4CD7486FCE3D9D939620693E619A31397155"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4405
Expires: Wed, 28 Dec 2022 08:58:44 GMT
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a8eeb119d5241f64b04c1a14f21b89
d1a1206a03398e86e91bd239e192012c1936ffa1
40fe1908ebb71f90b83ca88e3d94b1531653c144bf1e74ffc7036f1fc73f66b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40FE1908EBB71F90B83CA88E3D94B1531653C144BF1E74FFC7036F1FC73F66B8"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2049
Expires: Wed, 28 Dec 2022 08:19:28 GMT
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
k.sulseerg.com/favicon.ico
204 No Content 0 B URL HTTP/2 k.sulseerg.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: k.sulseerg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: OAID=029edc916f1747f99089cd7ff6e358ac; oaidts=1672213519
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Dec 2022 07:45:19 GMT
strict-transport-security: max-age=60
x-content-type-options: nosniff
X-Firefox-Spdy: h2
med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_4470223.aspx?rdk=rk1
301 Moved Permanently 239 B URL HTTP/1.1 med.etoro.com/B15349_A115832_TClick_SPRP_DJULBREG_4470223.aspx?rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 148827d03c8074d1a3cd94924fb1847b
2f12f54fe8b5754e26ea17e4cea055a868d0cda8
c2624db2feda7624fb3abc6c0d021e887fa809b7de7884a0e35fed82d9bd2759
GET /B15349_A115832_TClick_SPRP_DJULBREG_4470223.aspx?rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 239
Location: http://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1
X-Robots-Tag: noindex
Expires: Wed, 28 Dec 2022 07:45:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=029edc916f1747f99089cd7ff6e358ac
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=029edc916f1747f99089cd7ff6e358ac
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=029edc916f1747f99089cd7ff6e358ac HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 28 Dec 2022 07:45:19 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=029edc916f1747f99089cd7ff6e358ac; expires=Thu, 28 Dec 2023 07:45:19 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1
Expires: Wed, 28 Dec 2022 07:45:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1
301 Moved Permanently 0 B URL HTTP/1.1 med.etoro.com/aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aw.aspx?B=15349&A=115832&Task=Click&SubAffiliateID=PRP_DJULBREG_4470223&rdk=rk1 HTTP/1.1
Host: med.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: https://www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4470223&utm_campaign=PRP_DJULBREG_4470223&utm_term=&rdk=rk1
P3P: CP=`NOI DSP COR NID ADMa OPTa OUR NOR`
X-Robots-Tag: noindex
Expires: Wed, 28 Dec 2022 07:45:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 28 Dec 2022 07:45:19 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=1wm5zrawoslqovfqzzlb4a4g; path=/; HttpOnly; SameSite=Lax
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoro.com; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoro.com.cn; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etorocn.com.cn; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoroasia-securities.com; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoroasia.cn; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoroasia.com; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoroasia.com.cn; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; domain=.etoroasia-Investing.com; expires=Sun, 26-Feb-2023 00:00:00 GMT; path=/
RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4470223&rdk=rk1; domain=.etoro.com; expires=Fri, 27-Jan-2023 00:00:00 GMT; path=/
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 28 Dec 2022 07:33:30 GMT
age: 709
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 60b8396db0bbfa5f2ae7e34c9d04ebcc
50b6c68aa2b2a459315a9989f5d3e326e8ad5539
c10a1e0f984b121958a5cfa3b45b746db85d33c9073fcacb019d9bb27ef3b073
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2514
Cache-Control: max-age=93809
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:19 GMT
Etag: "63aab5ae-1d7"
Expires: Thu, 29 Dec 2022 09:48:48 GMT
Last-Modified: Tue, 27 Dec 2022 09:06:54 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 727 B IP
Hash 3533b3ba7813131981bbb656dd26f144
9204bf49bedc1504188f15f8a14319e58882dbb5
cdc085698c666da7ac22b5cb5f0c7af831c757280f6997e20e501afa0c9ea86c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2298
Cache-Control: max-age=128138
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:19 GMT
Etag: "63ab3c9f-2d7"
Expires: Thu, 29 Dec 2022 19:20:57 GMT
Last-Modified: Tue, 27 Dec 2022 18:42:39 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 727
www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4470223&utm_campaign=PRP_DJULBREG_4470223&utm_term=&rdk=rk1
200 OK 38 kB URL HTTP/2 www.etoro.com/nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4470223&utm_campaign=PRP_DJULBREG_4470223&utm_term=&rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58147)
Hash 3443fd9eeb7a627734e523ab17fb34ce
ce2685a20ecf7b5cafc69753a175e291b7f70964
092cf87992d938de573a990d98977c4a780947867ddf26ae29680c6e6ab080ef
GET /nb-no/accounts/sign-up?utm_medium=Networks&utm_source=115832&utm_content=15349&utm_serial=PRP_DJULBREG_4470223&utm_campaign=PRP_DJULBREG_4470223&utm_term=&rdk=rk1 HTTP/1.1
Host: www.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AffiliateWizAffiliateID=AffiliateID=115832&ClickBannerID=15349&SubAffiliateID=PRP_DJULBREG_4470223&Custom=&ClickDateTime=2022-12-28T07:45:19.6735117Z&UserUniqueIdentifier=; RequestURL=URL=http://med.etoro.com/aw.aspx?b=15349&a=115832&task=click&subaffiliateid=prp_djulbreg_4470223&rdk=rk1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:20 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
expires: Tue, 31 Mar 1981 05:00:00 GMT
content-security-policy: frame-ancestors 'self' file://*
x-frame-options: allow-fromfile://*
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: eToroLocale=nb-no; Path=/
TS01047baf=01d53e58183eb6503b090dd0031544f0d2d9015c3e760777e056ef1f96416471f6c0ddece3b96409fcf9775d9c02b4363205b187b3; Path=/
__cf_bm=EYKv_fzqzJJ0rBhzvKYnyG3YoY0HCPbOjOlaSvNuXxI-1672213520-0-AQhB4dGWwmZ4BLVq/2Egz3x7Qyjg22PGHaCwIq1FIwiP76vbZy+YnLnGMjROojorESSULBrsEEMmKadc+Yq+SXjzFseSb4TaJiMkBeEyLXRS; path=/; expires=Wed, 28-Dec-22 08:15:20 GMT; domain=.etoro.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuEAg8LPSYevHEYkaxA3gcDJTcgwA2Qav5FiL7XBG8; SameSite=None; Secure; path=/; expires=Thu, 29-Dec-22 06:45:20 GMT; HttpOnly
__cfruid=1d13aeb52e276bfedb52356d2ab6d9d1188617e5-1672213520; path=/; domain=.etoro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7808ad039e9c0b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kqxxXYqK6SoqmV7XLT6jiA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jQEuQ+9eO7wZe79yejei97ZLOC0=
maintenance.etoro.com/maintenance.json
200 OK 309 B URL HTTP/1.1 maintenance.etoro.com/maintenance.json
IP
File type JSON data\012- , ASCII text, with very long lines (308)
Hash c47549fa5fc30f994fcac453124a8e7b
0f412a6d214bb46455c050727fea088988675055
0c24a034718dc60de1753b99f17a8446ca525807a6a35899a3dcb9fd4f68eb6b
GET /maintenance.json HTTP/1.1
Host: maintenance.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
x-amz-id-2: gNu0WSmUfT2FLlh8vPBJeVDx6BvYbT5/KnaOuNRSsgoLkACOzaFWMyPWfEd/brTgh2neShPvu6Y=
x-amz-request-id: 5NB3CPPGA9XQDW40
Last-Modified: Sun, 23 Oct 2022 04:14:24 GMT
ETag: "c47549fa5fc30f994fcac453124a8e7b"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 309
Cache-Control: max-age=300
Expires: Wed, 28 Dec 2022 07:50:20 GMT
Date: Wed, 28 Dec 2022 07:45:20 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Type: application/json
cdn.etorostatic.com/506.0.1/js_files/?m[]=tools/browser-support
200 OK 5.7 kB URL HTTP/2 cdn.etorostatic.com/506.0.1/js_files/?m[]=tools/browser-support
IP
File type ASCII text, with very long lines (13040), with no line terminators
Hash 84d9108ee90e04d7860ee20f03a5feeb
ea75f1dd35d9c1ed7040ece9460f720c074b8582
ad7f1078a00642267c040ecdde52ede1964d57daa201d0190eb21ec36765ec32
GET /506.0.1/js_files/?m[]=tools/browser-support HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "oyuiKdLPH+lz9HfIPCPG1g=="
content-encoding: gzip
content-length: 5720
cache-control: public, max-age=31465637
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
200 OK 989 B URL HTTP/2 cdn.etorostatic.com/506.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js
IP
File type ASCII text, with very long lines (1834), with no line terminators
Hash b812ce2c9a9459dbacd0b93a3b2cff54
0be647987d5befbcf2e4412e6a7edc0a70f7952e
2a0cb36357059f192cd794e4dfb1d2ef5e41dd6df5754c37896d644b619bb529
GET /506.0.1/sem-etoro-ng/runtime.40c2b91dac13fc98.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Tue, 27 Dec 2022 12:08:17 GMT
etag: W/"1tDSEI7nO8o5+U5xmoJnXg=="
content-encoding: gzip
content-length: 989
cache-control: public, max-age=31465535
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/sem-etoro-ng/styles.aff9745083e191ff.css
200 OK 25 kB URL HTTP/2 cdn.etorostatic.com/506.0.1/sem-etoro-ng/styles.aff9745083e191ff.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8c30e5bc917462f3a06aa7a6fd0971ff
71007777437102ce5f7394f7c290fff851640aa9
6e563ba44ba71cedcf90ee70d30dc5d34a3822a6e85658d0bbe902615f0926bd
GET /506.0.1/sem-etoro-ng/styles.aff9745083e191ff.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Tue, 27 Dec 2022 12:08:07 GMT
etag: W/"e2h0j+9DynlwXvOfFpLv9Q=="
content-encoding: gzip
content-length: 25170
cache-control: public, max-age=31465599
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
200 OK 27 kB URL HTTP/2 cdn.etorostatic.com/506.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cff377b0f027f4cf2efba0f1827a6ac1
0f86e6e39b9d7c0d4aa84caac0aad079ba5ccae3
75baeb162272bc3a969e44d930ee73803411ad3b9299cc27dade9ba3bf38934d
GET /506.0.1/sem-etoro-ng/polyfills.eb307975f8172949.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Tue, 27 Dec 2022 12:08:17 GMT
etag: W/"5Vks47M2KYkJ7xWhdfAQKg=="
content-encoding: gzip
content-length: 27123
cache-control: public, max-age=31465628
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/css_files/?p[]=styles/style.css
200 OK 298 kB URL HTTP/2 cdn.etorostatic.com/506.0.1/css_files/?p[]=styles/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 298 kB (297631 bytes)
Hash 98563c9edf4f365b8e1831a534f6305f
c35f826f9f4dd06f5e5d844ed0002d614cb2ce44
3a572e04cff1f1a327616ab90b58a465b787104a1d00abc62eeb10e387a80324
GET /506.0.1/css_files/?p[]=styles/style.css HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "v/QQMmtYlg9SHcl1lkhslg=="
content-encoding: gzip
content-length: 297631
cache-control: public, max-age=31465564
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_0d97ae0e4e78eba615a8d104a13fd31d
200 OK 6.8 kB URL HTTP/2 api.etorostatic.com/api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_0d97ae0e4e78eba615a8d104a13fd31d
IP
File type JSON data\012- , ASCII text, with very long lines (33443), with no line terminators
Hash 35d014379815a5bb2f5ff0b8938c9492
0aee500702a37f44d9f1faafcf74d77e461a6825
fade78f2e8499731627cf94c9b078bdb0a1354d548da7da6783e5f6bee8a39fb
GET /api/account/v1/user/geolocation/countries?cv=db03440a22be2f22e368511a7f0cf29f_0d97ae0e4e78eba615a8d104a13fd31d HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:14591840-b1dd-4126-9a8e-18803188a73d
content-encoding: gzip
x-robots-tag: noindex
content-length: 6826
cache-control: max-age=1209600
expires: Wed, 11 Jan 2023 07:45:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
200 OK 392 kB URL HTTP/2 cdn.etorostatic.com/506.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp
IP
File type ASCII text, with very long lines (35588)
Size 392 kB (392322 bytes)
Hash a8eb13c7b31f66e966f68c15ccd92b19
54be86518c0eb2cfec25499067c9ef4e1402fc8e
2089e33cccd26a6c22c1fb4b2ee8f20e9d9cde1a4f58ad2f3d7691a64498a45e
GET /506.0.1/js_require/?r[]=infrastruct/libs/requirejs/etoro-require&r[]=amd-config&r[]=apps/etoroApp HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "cTz57ODvwEGU7GPKMZeg7A=="
content-encoding: gzip
content-length: 392322
cache-control: public, max-age=31465588
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_892bef7de0b568c707463e0944fb1027
200 OK 788 B URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_892bef7de0b568c707463e0944fb1027
IP
File type JSON data\012- , ASCII text, with very long lines (3081), with no line terminators
Hash 18afcb9729a9802cc68f6ffd543d1784
4569392aa9271a43a2780790d20124c53d073940
3f3373c5f225713cb5262813c0966d4e7f38ca0806b4e54f12ea166b2e54e77b
GET /sapi/app-data/web-client/app-data/instruments-groups.json?cv=16c81beb818ecd15f024ae9606a53f74_892bef7de0b568c707463e0944fb1027 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-max-age: 3000
content-type: application/octet-stream
etag: W/"16c81beb818ecd15f024ae9606a53f74"
last-modified: Sun, 01 Dec 2019 10:07:21 GMT
x-amz-id-2: geIT5b61XUO9VvPwEBQvISbbJSRcEXdiK8q4RheeLPnCMxM/bZAy3qXlmFPYymYiWDwHTBYYgyQ=
x-amz-meta-s3b-last-modified: 20191201T100206Z
x-amz-replication-status: COMPLETED
x-amz-request-id: GJ9VWHBS1W1JWACV
x-amz-version-id: YJZIwhKbLzAkKfpv9wKr1PH76VdQu2_5
content-encoding: gzip
x-robots-tag: noindex
content-length: 788
cache-control: public, max-age=1209600
expires: Wed, 11 Jan 2023 07:45:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/preloader.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/preloader.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash b0f268da8d890fc3afc15e32480e866e
1465c0de6f4871bbe22dc940cf2530a7a516568f
90c5b9934bc4952a0bec1284d8e63468b0cf8eb1af23cdfd56b735e83691b79f
GET /web-client/img/preloader.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UH+ATK60E6ROQ9TsYcHeU/RFVBFFMGrtaqw+V0IEC6jHrEpED4Gz4DQgWTnwRsH/A//TuZKINag=
x-amz-request-id: F84TVQCQWZSV9QG2
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Jan 2017 07:40:21 GMT
etag: "b0f268da8d890fc3afc15e32480e866e"
x-amz-meta-cb-modifiedtime: Tue, 03 Jan 2017 07:39:12 GMT
x-amz-version-id: ypOW0sjHuKqXDROJg6L6MTOp1Z0lHcDD
accept-ranges: bytes
content-type: image/png
content-length: 1206
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sprite.png
200 OK 71 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sprite.png
IP
File type PNG image data, 170 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Hash e1e136d8c9c87238c1faecbe30de864a
4dd3ff46c7a92fb59e0b4e86f0ad408c67867f66
1f97ddc0a725e59b6f4f9e1cd03eeff0399145b5f9074e9dde10f04856541c9f
GET /web-client/img/sprite.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GXJ09iezztMOcZchZuKrqftesXrKIPosJAKn3IvPIFIQmJ/DbareBjGNIiZtD3vKtcF+XAfwc3Q=
x-amz-request-id: SDAVMPKYSN6R3RRA
x-amz-replication-status: COMPLETED
last-modified: Tue, 15 Jan 2019 08:39:49 GMT
etag: "e1e136d8c9c87238c1faecbe30de864a"
x-amz-version-id: c7040_.mWfwV0MHOIOsnAOoCalddmt_9
accept-ranges: bytes
content-type: image/png
content-length: 71400
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/sem-etoro-ng/main.884961cf8a21719a.js
200 OK 2.8 MB URL HTTP/2 cdn.etorostatic.com/506.0.1/sem-etoro-ng/main.884961cf8a21719a.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 2.8 MB (2831089 bytes)
Hash 3f6369bb1a8de5630465a1384615a3ab
bc3cbc0cbd0721ca193c18bbba81b13e9b55d524
255c273a2ad29d011b14e37b2cd275b5fdd15bb3fd66e0ba108cf091210933db
GET /506.0.1/sem-etoro-ng/main.884961cf8a21719a.js HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
accept-ranges: bytes
last-modified: Tue, 27 Dec 2022 12:08:17 GMT
etag: W/"o59XWtz+h4ZK03yBnQK+OQ=="
content-encoding: gzip
content-length: 2831089
cache-control: public, max-age=31465545
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/eToro.png
200 OK 2.7 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/eToro.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 26762307f35f8ad6510ac9ae15a9286e
f152e82f3fabc6f5809a064ae9985e00ddbe6d6a
3e23034db4d4d5dd806dbdd52587cfccddec21a47ec146406db1f1bd59bafb6e
GET /web-client/img/eToro.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UlOxm6ovhflHdpMltwaEHi/HC60B+6k6wEjEklKC/DQWXKaUBPanXrwEcTCQ2Fn1u7at0AVATEA=
x-amz-request-id: SPR4SKCW6QD53NRW
x-amz-replication-status: COMPLETED
last-modified: Wed, 26 Aug 2015 13:53:21 GMT
etag: "26762307f35f8ad6510ac9ae15a9286e"
x-amz-version-id: C4K7m5KD911B831tKwc9dRE4hGW8f4G_
accept-ranges: bytes
content-type: image/png
content-length: 2729
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/avatar.png
200 OK 4.1 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/avatar.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 299143d79774a5a4581a0e3a7f0a0038
971f38ccaf41dab068a4f9eb5c4d6d7a25bb67bb
94e3a489999508f5d2367de8ef15434d1f41afc24b2c94b08976d96438ec5530
GET /web-client/img/avatar.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: u96jcsZKc51k0MOcOc90z9Wg1gT6oHC6j5+T11FGXJLNoSqzBPZBHlmlfJwXGXk2k+9wD8/9pgE=
x-amz-request-id: JPMGDCN49JDFCKD1
x-amz-replication-status: COMPLETED
last-modified: Tue, 08 Sep 2015 10:58:53 GMT
etag: "299143d79774a5a4581a0e3a7f0a0038"
x-amz-version-id: TJHv2UgTAtmK_z5ntjVcX71guH3fsI7I
accept-ranges: bytes
content-type: image/png
content-length: 4095
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/candles/closingprices.json?cv=e055ed22efc8a9a2d37bb470795571e3_5406ae60c8efe3e50bd0f800f4ed1d66
200 OK 147 kB URL HTTP/2 api.etorostatic.com/sapi/candles/closingprices.json?cv=e055ed22efc8a9a2d37bb470795571e3_5406ae60c8efe3e50bd0f800f4ed1d66
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 147 kB (146672 bytes)
Hash 98cda63c318085391b4ff4377a750f05
ad2daa9a8d793676ac828ae4fd3fc1eebd5c5c2c
8ab45026385368fc10ee8fe3d9831e64326b5809c5da7d8463ff26ee4d4b6bf9
GET /sapi/candles/closingprices.json?cv=e055ed22efc8a9a2d37bb470795571e3_5406ae60c8efe3e50bd0f800f4ed1d66 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
x-robots-tag: noindex
cache-control: public, max-age=1209600
expires: Wed, 11 Jan 2023 07:45:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
content-length: 146672
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=976a28488cbd5626798f60a17d2723bc_77d64298841f1e20f37767d096609258&totalBulks=1
200 OK 316 kB URL HTTP/2 api.etorostatic.com/sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=976a28488cbd5626798f60a17d2723bc_77d64298841f1e20f37767d096609258&totalBulks=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 316 kB (315972 bytes)
Hash 6b8e962eaec29be6c4810fe6d8704f54
973f0efdaf9ad74ed90ad5087f980ef1e368c81e
e8679e7e990b613ed8f7d5fdf0dc350da37633b91968d266856f785d788fb5d8
GET /sapi/trade-real/instruments/bulk-slim?InstrumentDataFilters=TradingData&bulkNumber=1&cv=976a28488cbd5626798f60a17d2723bc_77d64298841f1e20f37767d096609258&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
request-context: appId=cid-v1:486a9dd7-b5cc-49fa-ae5e-a2ea9ee3e36e
content-encoding: gzip
x-robots-tag: noindex
content-length: 315972
cache-control: public, max-age=1209600
expires: Wed, 11 Jan 2023 07:45:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=134e4b1ba6520f54a3722a7756801ef2_a7b4cb90ccb4ae642f699202d17068ed&totalBulks=1
200 OK 352 kB URL HTTP/2 api.etorostatic.com/sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=134e4b1ba6520f54a3722a7756801ef2_a7b4cb90ccb4ae642f699202d17068ed&totalBulks=1
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 352 kB (351948 bytes)
Hash 572fc3a41a398ef1c0c03f63f6b28da6
ce01ae9dea43eb9511f37bba36e3303484c5e344
cf416eb039db7b0026911d404dbf2057b7e1ee6afc00958aba4ddb7b169830e3
GET /sapi/instrumentsmetadata/V1.1/instruments/bulk?bulkNumber=1&cv=134e4b1ba6520f54a3722a7756801ef2_a7b4cb90ccb4ae642f699202d17068ed&totalBulks=1 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
request-context: appId=cid-v1:da6cfa5a-5dde-4d38-9665-5bd2b94cd342
accept: application/json
content-encoding: gzip
x-robots-tag: noindex
content-length: 351948
cache-control: public, max-age=1209600
expires: Wed, 11 Jan 2023 07:45:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2624
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 07:45:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2624
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 07:45:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2624
Expires: Wed, 28 Dec 2022 08:29:05 GMT
Date: Wed, 28 Dec 2022 07:45:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd238a41-5dd3-4a9e-80cd-17fdf75ee403.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd238a41-5dd3-4a9e-80cd-17fdf75ee403.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50a3433c386a2d8435a10b572d986161
a97620796ae1a146e719f4a46e98c57a4af472ed
b4954da0a678a4df8c3dd7df0376c04c446fad03b94f6363938b29b0b58b782a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd238a41-5dd3-4a9e-80cd-17fdf75ee403.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5577
x-amzn-requestid: b9f47205-66da-4ef7-bf83-f237bd4dd9e7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0ys9FYKoAMFwWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64b9-5bcf6f3b23d1f2b1206c91cc;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BynwJdv-JV-UFO98M3C5ZZIJqbx7wVQkR6aJAgJHAzuDGih4D-Izug==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:42:19 GMT
age: 36182
etag: "a97620796ae1a146e719f4a46e98c57a4af472ed"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ab36b0d168174ef2d960be9810fdb2d
7c8a7415cab3ef88b5d1204af214a687b1676dda
a1d842fd02273603db0090d34c317d7a3ce3e5f00f29271d45fc4ed6d09ee21e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7817
x-amzn-requestid: 21a68509-6fec-48b3-8bce-fb2ebfab3289
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0yuCEVwIAMFUrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64c0-5e23ceec731631d93e01e2c8;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1F1os87usGl0yMWsHxFZsVnrbmjJKydPf4ZXL4xsXjHau3fAS9Nf1Q==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:44:42 GMT
age: 36039
etag: "7c8a7415cab3ef88b5d1204af214a687b1676dda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2802b3e9-0a7b-4384-abe0-5d84d1cde92f.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2802b3e9-0a7b-4384-abe0-5d84d1cde92f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b5bce6cae03ce2c843809467165891e
71a8a2440c66ae80bf577c4d7f32525b6597ed8f
59b0c452ef6bb9a68f7fb7ee2caca66d66d137f7cd498d1fd88bb5f2f4d90ace
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2802b3e9-0a7b-4384-abe0-5d84d1cde92f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8057
x-amzn-requestid: 3e067f3c-c98a-4aa5-88f0-7ec61df01ea5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dxfXYF20IAMFU5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa1295-0dfe81b80a016e59489b2980;Sampled=0
x-amzn-remapped-date: Mon, 26 Dec 2022 21:31:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Thnu8K9Xq4Y23F7vbJ1kHjGljIwfOnN5Y_1xpvnHsfYebLDezA0A-g==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:53:54 GMT
age: 35487
etag: "71a8a2440c66ae80bf577c4d7f32525b6597ed8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f83de5-47cd-4586-9dca-ab7c314cbd0e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f83de5-47cd-4586-9dca-ab7c314cbd0e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9dcccae2018607dee1459081249c91e
2ecfa42f64013afc536c16fcd2250d8229f81654
41839d89192ec4771a6cd5a431617c0b7855701f93c722d025d3f056f109b552
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f83de5-47cd-4586-9dca-ab7c314cbd0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10839
x-amzn-requestid: 70cc8d68-0917-472f-9d64-1d4f708791e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0yuVGkHoAMFskg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64c1-2aba103f6a75466c19ddbbd6;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lScTBikZKapio1FOewnfcSCiGyEpXxtMQztgLj-GROHqQ01VEgAnjw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:51:12 GMT
age: 35649
etag: "2ecfa42f64013afc536c16fcd2250d8229f81654"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe69c29db-caec-401a-8056-6c2c58e33dfd.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe69c29db-caec-401a-8056-6c2c58e33dfd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 369bb708ac21a9219cae15dbf33fd225
64885e8ead4ee24b43274ada628ab47cba6c6703
04ba2c600a01344d2cb3fbd2fb5e1dc17d12d018e685f55870da70cd5a85b1ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe69c29db-caec-401a-8056-6c2c58e33dfd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10914
x-amzn-requestid: 86f79e43-1faa-431d-b88a-6e1baaabb1cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0z9YF1AIAMFyKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab66bb-6b418d8b0ceb68a92ec5cbd9;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:42:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: U_JJ9v1Rh7VMWqzK6YtQvYy48CXwwv3x7CA_kuqpZdxSnc3VscWIiw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:42:20 GMT
etag: "64885e8ead4ee24b43274ada628ab47cba6c6703"
content-type: image/jpeg
age: 36181
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd91057dd-978b-4fb5-b0a3-5ed8624f726a.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd91057dd-978b-4fb5-b0a3-5ed8624f726a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f810df3c7a9cc088b68a912023460d35
76c0e59325b5c046cf68c0268374df317b81be97
a46f2bc69415ce3b749a2765e98e0c2aad012050fa784d7326a0142a6a41a4dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd91057dd-978b-4fb5-b0a3-5ed8624f726a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6009
x-amzn-requestid: 25333cb9-5ba3-44d1-8862-2cc2658b64fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0z_MGbeoAMFrSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab66c7-23af33ff50839c6834137df3;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:42:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: zrKFx2R1kV0xsxMyBEjpW3uSid0Kt6HLP92p7WhRcAQLUTq9mTuTmA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:42:31 GMT
etag: "76c0e59325b5c046cf68c0268374df317b81be97"
content-type: image/jpeg
age: 36170
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/Splash/touch-icon-ipad-144.png
200 OK 5.7 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/Splash/touch-icon-ipad-144.png
IP
File type PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Hash f092565f3aad3709b6078be9d3d7c6de
84b518cacb1f0c6ebaa58a7a81c3d5e376405d43
ffae9c7e791049222450c9ca98e57830313b8e918a8e825944a1b6376f5397ac
GET /web-client/img/Splash/touch-icon-ipad-144.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7aWLyhPxDLZBj09mHeVuVsARmx0NSXFIokqSeF3TdWKs357vou4ygYSObnjhqM2nxZgbFJIEqvg=
x-amz-request-id: KD3XD49D5QQKYHYE
x-amz-replication-status: COMPLETED
last-modified: Sun, 27 Dec 2015 14:45:23 GMT
etag: "f092565f3aad3709b6078be9d3d7c6de"
x-amz-version-id: rmovFrrcZBM1dXrI_13uWeeISqQczKQq
accept-ranges: bytes
content-type: image/png
content-length: 5740
server: AmazonS3
unused62: 8096267
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:21 GMT
date: Wed, 28 Dec 2022 07:45:21 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b679e7c79765f76fd0c1c33a9233ee85
6542d96f6027699e6e380572c78f6b8dacc80155
3cc09b13f4ed9fc5a713b0f2f1e4b7d00259319c62189b885329afcad5bebf0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
200 OK 104 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N7SQ5DP
IP
File type ASCII text, with very long lines (35498)
Size 104 kB (104375 bytes)
Hash 43d7392bfa0949309ae138bd7a63aa09
995d2e3bfe7b0fa464a72d07fa70f56f396b7145
407ac71d9efea1dfab344a3e79fd2fa0dff5f1559aa867016a05291002d7a8bc
GET /gtm.js?id=GTM-N7SQ5DP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 28 Dec 2022 07:45:23 GMT
expires: Wed, 28 Dec 2022 07:45:23 GMT
cache-control: private, max-age=900
last-modified: Wed, 28 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104375
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 0ec4e48f15817d222d54221431a78e51
f456e1309d701576a5500a35bfacbee2e98e2f43
27a2e0cb6b06ee89142c56fb7f2030343768fd0876f8ebc0375a7ff232deafd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6543
Cache-Control: max-age=146793
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:23 GMT
Etag: "63ab74ed-2d7"
Expires: Fri, 30 Dec 2022 00:31:56 GMT
Last-Modified: Tue, 27 Dec 2022 22:42:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b679e7c79765f76fd0c1c33a9233ee85
6542d96f6027699e6e380572c78f6b8dacc80155
3cc09b13f4ed9fc5a713b0f2f1e4b7d00259319c62189b885329afcad5bebf0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mxpnl.com/libs/mixpanel-2.2.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2.2.min.js
IP
File type ASCII text, with very long lines (755)
Hash bea784dce86d30e1f2e59387f85cccb6
90665d4cc2e3f1e8c6da1247096c0af28b70ae04
b2cd7990f63541592edc32f6499848c857e53b931f51f0ce877de53e3402405b
GET /libs/mixpanel-2.2.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycds-ZT070i4uFvO1hVF7PFCVEilxJo2hJ3PFzWrdIP7_dsxI54_nXCtqhzXNnBcJoq129GXMg5nr8X8YfoHOye4nxg
x-goog-generation: 1645129320773308
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=OghQVA==, md5=vqeE3OhtMOHy5ZOH+FzMtg==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Wed, 28 Dec 2022 07:39:39 GMT
expires: Wed, 28 Dec 2022 07:49:39 GMT
cache-control: public,max-age=600
age: 344
last-modified: Thu, 17 Feb 2022 20:22:00 GMT
etag: "bea784dce86d30e1f2e59387f85cccb6"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 0ec4e48f15817d222d54221431a78e51
f456e1309d701576a5500a35bfacbee2e98e2f43
27a2e0cb6b06ee89142c56fb7f2030343768fd0876f8ebc0375a7ff232deafd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6543
Cache-Control: max-age=146793
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:23 GMT
Etag: "63ab74ed-2d7"
Expires: Fri, 30 Dec 2022 00:31:56 GMT
Last-Modified: Tue, 27 Dec 2022 22:42:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 727
etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
200 OK 1.2 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/login-logo-hd.png
IP
File type PNG image data, 198 x 64, 8-bit colormap, non-interlaced\012- data
Hash b41babf405ad72c9fa6455dccd372380
83841f3d6f390fddbf774b397daf051c890a8c32
ac2ec5d1e65ba32849742fe3ed0899214ba9e063ebf31b7549175f2b66394b08
GET /web-client/img/login-logo-hd.png HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: PorXpYuLeZEJR1S1l7x0MZpKfNRfvTY0z05AtH5eA1Vw0sqGFAMterLhA4YyQO4zAeoCB9EZhZc=
x-amz-request-id: C0ZAWA85CAYQMY45
x-amz-replication-status: COMPLETED
last-modified: Thu, 29 Sep 2022 12:49:46 GMT
etag: "b41babf405ad72c9fa6455dccd372380"
x-amz-meta-s3b-last-modified: 20220929T094658Z
x-amz-version-id: 078Rkok.ZhnHyEE5EUR82hq7nZDNmuJ3
accept-ranges: bytes
content-type: image/png
server: AmazonS3
content-length: 1171
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:23 GMT
date: Wed, 28 Dec 2022 07:45:23 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
200 OK 60 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Hash e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-regular.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: VoVKI/9JsMea6fWtxtt8R9nFaRKJz8kqToFlDmyON1so/a+S+9AJkyqDiPwJwuZmDmDPXEOkJjQ=
x-amz-request-id: 5E70NEWKDZYYA9YJ
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:56 GMT
etag: "e78dce533ecee30c5efd812bb23c248d"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: zBOkeJMwt9zfD.RxR98btYwc8ArviOb4
accept-ranges: bytes
content-type: application/octet-stream
content-length: 59600
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 27 Jan 2023 07:45:23 GMT
date: Wed, 28 Dec 2022 07:45:23 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
200 OK 909 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/settings/general/flags/norway-flag.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6d8d67e95d438776e32632b4f8e8c4e2
6b5eac8fc9722e1d12f05e6e3dae6748215e0238
2bf43a304aa34d530722842db131841969dffb18d2625b58851926d5fc011e26
GET /web-client/et/img/settings/general/flags/norway-flag.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QQKUB08k08I6uUSVyVG8KLeUZwn33TUAsq/ELlQd7LRUUFjhtauF/j7U9n46fcbMos85056HhOg=
x-amz-request-id: G7YRDT0XZ95CY7S7
x-amz-replication-status: COMPLETED
last-modified: Wed, 19 Feb 2020 12:32:58 GMT
etag: "7ee02734ec1f49f74d970aea31b057e0"
x-amz-meta-sha256: e143bb1d025c5ab640ec3df3c8b80829a62eff2d46e654618f865479aa3d7374
x-amz-meta-s3b-last-modified: 20200219T114039Z
x-amz-version-id: d0T8a9zUHLaL3Zp1SI66mmUeybQ6zeZH
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:23 GMT
date: Wed, 28 Dec 2022 07:45:23 GMT
content-length: 909
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b48cab10138cd32eb9535c28f5e2bccd
d48263abf505db06347d1f7efb7dfa8abc5da903
4757c746e67a39b2172b269296e984650477f1650d49277af4f523e7f8a62d17
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=92619
Date: Wed, 28 Dec 2022 07:45:23 GMT
Etag: "63aab2d1-1d7"
Expires: Thu, 29 Dec 2022 09:29:02 GMT
Last-Modified: Tue, 27 Dec 2022 08:54:41 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0-5LyF51UpAIhZJjqcpAaYg_9EuZH8_aUY6DEr_qgLHdpPGZdleUVw==
Age: 2061
etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=6b62e81e-3a45-4ca9-aaea-1d35bbe33b14&referrer=
200 OK 5.7 kB URL HTTP/1.1 etoro-px.s3-eu-west-1.amazonaws.com/loaders/history-changes-r.html?target=historyChange&guid=6b62e81e-3a45-4ca9-aaea-1d35bbe33b14&referrer=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6dfc495da4241bd88a002aa677dd2778
8e6bb2aa50cc0bfea4942b1e3c9945d920894080
0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
GET /loaders/history-changes-r.html?target=historyChange&guid=6b62e81e-3a45-4ca9-aaea-1d35bbe33b14&referrer= HTTP/1.1
Host: etoro-px.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: XZdupnCtze5edlGN9SfaVpAhXEBQsiVVxCujzX0UaTIGU8XcgFOH8IUuOsI1QY8nvgut8bcazLA=
x-amz-request-id: E16F60B07QF2AY0P
Date: Wed, 28 Dec 2022 07:45:25 GMT
Last-Modified: Tue, 07 Jul 2020 12:01:19 GMT
ETag: "6dfc495da4241bd88a002aa677dd2778"
x-amz-meta-sha256: 0cd75790cab149a76203a6c5ae7e3956ea75d1070e19275c56fce91934d6147a
x-amz-meta-s3b-last-modified: 20200707T114930Z
x-amz-version-id: 2.0Pc3hXrEIlcYYVezOUu66Og0lWOrsY
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 5667
etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=4d0b53f1-8aa6-4d35-b001-fc539b516300
200 OK 1.5 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/recaptcha/index.html?guid=4d0b53f1-8aa6-4d35-b001-fc539b516300
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 63cef4e6cfa61992fc2ef740353a6215
62181e33a58d5d220a1346974145dcce39b423ea
0d00919723aa25df1d7ef980698c420e706488ceb8f8098033e2b2d268da35b4
GET /web-client/recaptcha/index.html?guid=4d0b53f1-8aa6-4d35-b001-fc539b516300 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 5jmDPX7s/2/H9fqL+1lG9WpvJlmKRQ4VXpd8OZUCR7tC638Md3VbzOhZgzLssABsIKpx5JqcPZo=
x-amz-request-id: YF39Y851FN0F3PS3
x-amz-replication-status: COMPLETED
last-modified: Sun, 04 Oct 2020 10:42:40 GMT
etag: "ef2039619799b54abf85f25976ff7199"
x-amz-meta-sha256: 349fb58237f7f8abb11e68632be1859f31c19fa4fa6a64d143ec18f7f6d59cf3
x-amz-meta-s3b-last-modified: 20201004T104155Z
x-amz-version-id: 9jyXMd7S_i_.xXnWVDXRZHjUkqd_s38N
accept-ranges: bytes
content-type: text/html
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
content-length: 1547
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
200 OK 377 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/i_fb.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5c4699717e2af42d1674a9008ffbfe85
cf2ee13be98793210c3b2c8eec66ac830510ebe1
d608b0e2406e7ee895c50292d358d848267796d637eaa16a6a6144dc14ed7bd8
GET /web-client/et/img/registration/i_fb.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: wJ59IKBWiDMMj1rsDpfd852rUGtzZfdKU9zirzUs9UXZ1KrIaHHAztq3+qRIPPWFLRiSsP9xdWk=
x-amz-request-id: 6RXYNJ643R78SNA5
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2022 11:12:31 GMT
etag: "5c4699717e2af42d1674a9008ffbfe85"
x-amz-meta-origin-date-iso8601: 2022-07-19T11:11:54.023Z
x-amz-version-id: 2.kBMarl4.gSX4k.XS8lj6LS5PKo_WKl
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
content-length: 377
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
200 OK 645 B URL HTTP/2 etoro-cdn.etorostatic.com/web-client/img/sharing/google-full-icon.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b8f3342ef1ebe6f5c64bafff3131548
99b5ac271a65175ff24696d9a24c9ebda02b71fc
fc1f1deaf7d4759c0a6e573a65f7961733cbf05f66f93c44511881dd0b471596
GET /web-client/img/sharing/google-full-icon.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7hrLTF189oZ983sS07xC8htEwbBqVSDXTKf5wRGZFZvZNMsvN9scmh2RnqfmsRWHkwVB7oQmJnw=
x-amz-request-id: 9VRZRH3QEAAJV71M
x-amz-replication-status: COMPLETED
last-modified: Thu, 17 Jan 2019 09:25:50 GMT
etag: "095d5424da4d7763d0ddcc4edec34bdc"
x-amz-version-id: D.gzlY.Deo58VDzXcGawuUYL3aWsGavd
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
content-length: 645
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
200 OK 37 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/discover_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1079, components 3\012- data
Hash 2f6d6f1e997f3a2a15888feb99459bb0
ce895db684c81debb871f8d59c45e8451a53809f
8a697f855d5b794eb68aa944977572f87334126a4b717952f61d6e48acc7edc1
GET /web-client/et/img/registration/discover_01.jpg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: yrvYOXwrqsGtjgtnB3d0Pc2eH0wQZXQbStmnMARCd/pMpbiy2TJtFteu6Qx7Qr0TjU1aQQ+8o7c=
x-amz-request-id: NN55C79JR6MNSD5C
x-amz-replication-status: COMPLETED
last-modified: Thu, 07 Jul 2022 14:52:13 GMT
etag: "2f6d6f1e997f3a2a15888feb99459bb0"
x-amz-meta-origin-date-iso8601: 2022-07-07T14:50:14.504Z
x-amz-version-id: QF_QgkRGCy62K6vDY_bK8WU3cAQLR7db
accept-ranges: bytes
content-type: image/jpeg
server: AmazonS3
content-length: 36791
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
200 OK 61 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61036, version 1.0\012- data
Hash 96f3835aa784a280a0e1e7fa64b97b60
1f247cefc5246c6dec5fafa6a2b3f22cf78cc02e
78d358ba019a1cd3b28a8917560a433fc03f52c2ec058a85bd00f2236cded66e
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-700.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Gw7K/z+rgE3lm94JaU9fY51MKxB1UhoCoa14rrSc0mf8h6uk7TvG8doh2uvZxQ39dSlEjZiVHyY=
x-amz-request-id: DPFNYW2P9N2GKZM2
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "96f3835aa784a280a0e1e7fa64b97b60"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: R4RqVI.V_2.gXICodItUtKqtll4hJqR1
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61036
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 27 Jan 2023 07:45:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
200 OK 62 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Hash e9681ca3d29d814a5621d4764dd1a11e
bbda68459fc0531b915bdf9e524ecc8f782db0aa
51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456
GET /web-client/fonts/opensans/open-sans-v15-cyrillic-ext_cyrillic_greek_greek-ext_latin_latin-ext_vietnamese-600.woff2 HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1QogDNt4Ym96Vu2S0DSGDvNU/xL9xL282y/IbSw4e5JO86fAj3PhPy9W6Nf05vDrisrWElU1wtk=
x-amz-request-id: 5DYMW9M2QQPFK36S
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 30 Aug 2018 08:22:54 GMT
etag: "e9681ca3d29d814a5621d4764dd1a11e"
x-amz-meta-s3b-last-modified: 20180830T082243Z
x-amz-version-id: HgUsNFmOXgC1eDiETddzJSTtCGDefKwY
accept-ranges: bytes
content-type: application/octet-stream
content-length: 61548
server: AmazonS3
unused62: 8096267
cache-control: max-age=2592000
expires: Fri, 27 Jan 2023 07:45:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
200 OK 28 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/fonts/icomoon/general/general.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, general \012- data
Hash 6302252a22f24df6b9f82359bdbf95b8
d994191775cd0d394744c43f42450d06d1001ac9
ce6a86e972f103d7af7372a0369449425b06e2ad502235c45b467711ea0448ac
GET /web-client/et/fonts/icomoon/general/general.ttf HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://cdn.etorostatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DgMVbDSPWpHWBW9PMsatiVeF+LQE78OlMvlb8G8edf5PbAOcjQSon31asaO/tU1DBG9yizsAWmg=
x-amz-request-id: VFMXQ6RBMHWD80MJ
x-amz-replication-status: COMPLETED
last-modified: Tue, 06 Dec 2022 09:06:44 GMT
etag: "fc0843956f5efe76e8e210c6af3bfd04"
x-amz-meta-sha256: 1e524fdfb4ce99c40c57512c57fe30d94690d34c181175bddc52b420b71ba4b3
x-amz-meta-s3b-last-modified: 20221206T090225Z
x-amz-version-id: e7owzkasDmhpzzLjcjzhs10jUamEk1k1
accept-ranges: bytes
content-type: application/x-font-ttf
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2592000
expires: Fri, 27 Jan 2023 07:45:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
content-length: 27825
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0050029cd95c89afcefa13544ed2370d
92127d7e78d16a6cc8d660f03f8359cf205893a7
236b21306ce2ef6eb433e635da642608ed153c4f18df361546434f5a9f471cec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2920
Cache-Control: max-age=114359
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:24 GMT
Etag: "63ab0463-1d7"
Expires: Thu, 29 Dec 2022 15:31:23 GMT
Last-Modified: Tue, 27 Dec 2022 14:42:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b87a5442ae7b284807495b6a8f92caaf
33f69899b8fb961ef2625f929ce276f5047c7a7e
daa46fe994a0aadb3ab4cfccd1c2b6a3212a8bc0fd8e3fc90fddce014b25e2d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 7576504f79b1eed249f2db3b509bcbe5
23e9286cc7bda55acfea33ca9154e8103779c014
43eb06ff0397726dea26cc38a03e4ec516246728e475d3c9adffbae254aac2dd
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 9ebc7da0c4cc6fd1f5f2f6def7d17608
etag: "05552afa044c03c27f3447e54328ba20"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 28 Dec 2022 07:52:46 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: dXZQT3mx7tJJ8ts7UJvL5Q==
x-fb-debug: UqfKcF9Sbgfj0hAPN6o/uM0HtDmtH28B3t5FjmpkS/8pOmT+of5nvYtms9j/JAHU0PC/4aGnRsgZJfVqBVn/oA==
priority: u=3,i
content-length: 1685
x-fb-trip-id: 1904183273
date: Wed, 28 Dec 2022 07:45:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 1cc36f699291ba29dab9ec0f885b281b
d536f8bda7d333c21eae8e3d816d690402adb90c
6b20ce0ec6b6c57b33e8118f8d5d3c501ede61b8589ebab71d411b81d0fae994
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20933
date: Wed, 28 Dec 2022 07:45:24 GMT
expires: Wed, 28 Dec 2022 07:45:24 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4fcbc207c89b8c6c"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0050029cd95c89afcefa13544ed2370d
92127d7e78d16a6cc8d660f03f8359cf205893a7
236b21306ce2ef6eb433e635da642608ed153c4f18df361546434f5a9f471cec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2920
Cache-Control: max-age=114359
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:24 GMT
Etag: "63ab0463-1d7"
Expires: Thu, 29 Dec 2022 15:31:23 GMT
Last-Modified: Tue, 27 Dec 2022 14:42:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
etoro-cdn.etorostatic.com/web-client/et/img/registration/ab-light.svg
200 OK 25 kB URL HTTP/2 etoro-cdn.etorostatic.com/web-client/et/img/registration/ab-light.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (18508)
Hash fa1407309ed4a6d07e94dddac9bbe837
f2b7d95d9e3f5a0da2d750bf0d56da76519ba6ca
5db4191b1d87670c4de3d3bdab00eb1c4eb42a97ce8d347b78022f08439c1776
GET /web-client/et/img/registration/ab-light.svg HTTP/1.1
Host: etoro-cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: AQ4x7ASL4In2z5ZZSbOVWnNw4UqWxXD8lRtp8nRTpNsfCwSC2pE4zuwO1eXTf94kjApcJw3SVHY=
x-amz-request-id: 8B786JE7JA6KRRC3
x-amz-replication-status: COMPLETED
last-modified: Tue, 20 Sep 2022 09:31:03 GMT
etag: "c197f3c533b1fd3cf5924eb2f30239c9"
x-amz-meta-origin-date-iso8601: 2022-06-16T08:36:18.000Z
x-amz-version-id: nooP56Rwm1oOt60h99pUHxP6xvOxopAy
accept-ranges: bytes
content-type: image/svg+xml
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
content-length: 24989
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.etorostatic.com/506.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
200 OK 814 B URL HTTP/2 cdn.etorostatic.com/506.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html
IP
File type HTML document, ASCII text, with very long lines (2600), with no line terminators
Hash 9fb4e76e84c051366edefd126d73358d
b5258607a0001e51df1dd8a72e51b0061cf3a00c
df95ea3e29ac53a69ec60818d29e6d8406f0d82c02839d1e14c5222f7709e1f3
GET /506.0.1/js_files/?p[]=apps/components/metaTags/templates/sign-up/sign-up.view.html HTTP/1.1
Host: cdn.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: "WM91upZzxqcGhUsvXTONjw=="
content-encoding: gzip
content-length: 814
cache-control: public, max-age=31465607
date: Wed, 28 Dec 2022 07:45:24 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 52ca073ad56859a4aa27c7711a0280e0
0f9481ab1d4503f6768b94aca521a8e6a1cacc16
3be123f7c76a1cb88f5f06d8359ee810eb5aa11540c89bc747318101e3585145
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?onload=onload
200 OK 565 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onload
IP
File type ASCII text, with very long lines (899), with no line terminators
Hash 67ce60ced28e723468d090aecd09dbff
df51de6fa059ac5ed9edb751c78f321c2b17449c
282afac752c8cc4474045cc35d713c4580ba3dcdde73bdfaf471704369e39828
GET /recaptcha/api.js?onload=onload HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 28 Dec 2022 07:45:24 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 565
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d739c783ef8e3f6b39bbf2b549ab516
b5b9c1de4e7ea462989e02190a4b642cde5e0d9a
ef88850c1c1854bc04372def58a18797a99156833826e1fde527a79603676b67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
200 OK 30 kB URL HTTP/2 zero.pointlessplay.com/i/3c2d8da22b7aa416fab4696fbd547cc9.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash b102dd9f87fd356c564121d3166f0f1d
67c40d930bc97a50e8daf7c779f22763fe0a6cea
740933e065b0f28896dea761a16353ef3f961dd80b4bd819450fb2f1f8278c91
GET /i/3c2d8da22b7aa416fab4696fbd547cc9.js HTTP/1.1
Host: zero.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 30253
cache-control: max-age=43200
content-encoding: gzip
date: Tue, 27 Dec 2022 20:41:16 GMT
etag: "1435d-wnrztyVLm+WC7wCEmV53NbTx5U4"
expires: Wed, 28 Dec 2022 08:41:16 GMT
server: Caddy
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H45C13vm6teOpfIxSNNl5hkOJyfWwTZKX41vZdVpJRr_3gYK7l_IDQ==
age: 39848
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ddbd76fc01e73761900b84e5777d2447
ca6a9d74115f2917c18498726bb68d7f503fbad2
63799c9e0c5daf42b0d02504619558474302cfd680069e16994164a23de2b0b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6175
Cache-Control: max-age=124864
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63ab20b6-1d7"
Expires: Thu, 29 Dec 2022 18:26:29 GMT
Last-Modified: Tue, 27 Dec 2022 16:43:34 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
200 OK 17 kB URL HTTP/1.1 appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
File type Unicode text, UTF-8 text, with very long lines (39267)
Hash 12a5f480c5a23efc80304d3bbc35d746
4043357825f2e91df5c4f339a9bc95f8e5b48fa1
b7be9b25bef3ce5c830263ba56bc3235a6683a9950115e4d4368144de3bbd2ec
GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1671224586565"
Last-Modified: Fri, 16 Dec 2022 21:03:06 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Wed, 28 Dec 2022 07:45:25 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9050ee54dae26344646b208a231fc770
a19ae5a4a8f9c28bca52aa8ea55c7313f99e0936
8ab388c1272cd2c6c2137a27f8e021744126f6fc7df5043756a04dac50857436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8014ea74946aee77ef2f3b9a264be553
fda85fc27ac2f811e543c11436cf5623cbd46bb2
271b1db0f8cff912a931b78cedb32fd59adeb60025dbcbd7cc5add7d03c82f7c
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 27 Dec 2022 11:01:06 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1CQ102mnLE8sGFpLN081f1KNeak7HVEQLy9sHg-OpuQnaoeRrF7Ztg==
Age: 74660
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a84c5800dc422d0e8f5b6f714f27f58
71f8dd517c11240420450cc8bc5c8ecfd34581e1
30a115340968baa0bf63fd4e2a161528cf30bce4b47a7710a144dab2ae2bf7c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (30920), with no line terminators
Hash 5c1e6ef321052f9ef17baa3b17775b15
dc24d4674334a60c2b9d1cd9aae0b6ed1bbb09ea
12a2c25fdde940fdbf0dcf5f2743c615bf8acac3ce6d19bf8b55102526bf763f
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13268
server: CloudFront
date: Wed, 28 Dec 2022 07:45:25 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 29 Dec 2022 05:59:42 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b4H-d17CXSzLwJht_fhEUcwl7VhAVPZ0a1aKFMcdmcsYs79bFrtFRw==
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js
200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js
IP
File type ASCII text, with very long lines (658)
Size 165 kB (164706 bytes)
Hash 0b7fccb24ee065a01fdde10928c03c3f
9b198014f81844820588c202cc24bf5e03bf3dd7
68756de8f0d6742525ddaca56ab350e34d822777e86939fea27eb704ae013280
GET /recaptcha/releases/5qcenVbrhOy8zihcc2aHOWD4/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://etoro-cdn.etorostatic.com
Connection: keep-alive
Referer: https://etoro-cdn.etorostatic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164706
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 08:42:55 GMT
expires: Sat, 23 Dec 2023 08:42:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 15 Dec 2022 05:24:10 GMT
content-type: text/javascript
age: 428550
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
marketing.etorostatic.com/others/general/js/seo.js
200 OK 2.2 kB URL HTTP/2 marketing.etorostatic.com/others/general/js/seo.js
IP
File type C source, ASCII text, with very long lines (366), with CRLF line terminators
Hash f22c155ea9a463fee325cc2f52cb2c5b
67913d0b1cdaa875752a36f5c22fc21884cd6b22
115d84510217e73948fabbc05aa6041071564a86dee31d7abb282d764ff4f7a7
GET /others/general/js/seo.js HTTP/1.1
Host: marketing.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: IRCfMyEJ6XLVHS/waVgNagZe5cBkkf5SsjeMeX2BsaGV0iLq5UuJYwCvgNj2V5su0u0580EuP1A=
x-amz-request-id: X57JYQH54681RNKS
x-amz-replication-status: COMPLETED
last-modified: Tue, 10 Jan 2017 14:31:16 GMT
etag: "bb01557076c5f1cc6976325a60a0be7c"
x-amz-meta-s3b-last-modified: 20170110T142820Z
x-amz-version-id: SSqunX8tv_w4z_1vK9cbzCWNqGZTmd8y
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 28 Dec 2022 07:50:25 GMT
date: Wed, 28 Dec 2022 07:45:25 GMT
content-length: 2209
X-Firefox-Spdy: h2
9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
200 OK 275 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (562), with no line terminators
Hash 1ab2a97338ed3a74084554ba95e3c920
9607de2f32b9ca12b92257f1469eaf7e688b6f80
1f91225ca593af121d56d4553e90970bb0eb6b267a9de6ed812906ed9c7efe0d
GET /activityi;src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Dec-2022 08:00:25 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
9944765.fls.doubleclick.net/activityi;src=9944765;type=regis0;cat=regload;ord=5540743343555;gtm=2wgbu0;auiddc=1674379334.1672213520;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1?
200 OK 349 B URL HTTP/2 9944765.fls.doubleclick.net/activityi;src=9944765;type=regis0;cat=regload;ord=5540743343555;gtm=2wgbu0;auiddc=1674379334.1672213520;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (652), with no line terminators
Hash 143581e5dcabf05881cb852624b838ab
0925482ca8f3c76cbdd5ace0446d5026ba78cda4
c1544160b446cd956d7f405dce2a4fbcdbfd182152c6dbca6e82c646fd1e1198
GET /activityi;src=9944765;type=regis0;cat=regload;ord=5540743343555;gtm=2wgbu0;auiddc=1674379334.1672213520;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1? HTTP/1.1
Host: 9944765.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 349
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Dec-2022 08:00:25 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9050ee54dae26344646b208a231fc770
a19ae5a4a8f9c28bca52aa8ea55c7313f99e0936
8ab388c1272cd2c6c2137a27f8e021744126f6fc7df5043756a04dac50857436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash 3528eb0dceb194934c2589992a1eb1e9
2393189ce14a62650aafcdbf4198e84e5d4673b3
d1fdba80066f99801255d8c2619c23de0cea0d7cd2b4d17cca4f8da205d6c816
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5042
Cache-Control: max-age=112147
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63aaf376-1d7"
Expires: Thu, 29 Dec 2022 14:54:32 GMT
Last-Modified: Tue, 27 Dec 2022 13:30:30 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a84c5800dc422d0e8f5b6f714f27f58
71f8dd517c11240420450cc8bc5c8ecfd34581e1
30a115340968baa0bf63fd4e2a161528cf30bce4b47a7710a144dab2ae2bf7c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c0.adalyser.com/adalyser.js?cid=etoro
200 OK 12 kB URL HTTP/2 c0.adalyser.com/adalyser.js?cid=etoro
IP
File type ASCII text, with very long lines (31834)
Hash 5301983312500f1fa818e866832a8ede
96c054b07049abe3b764dbcf0f8189055de98e78
24f6c7d7b8467781e61deda43741ad359abebb7efd8b41add68e4bb359cc0867
GET /adalyser.js?cid=etoro HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
content-type: application/javascript
content-length: 12183
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
etag: "60b9cf4ef4ac6dab5294025f3c443ba3cca92451"
cache-control: public, max-age=21600
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2ec2a833ac423d14fb70030308eacb4b
b874dc2bfa662f773cea65dc0736d1defb756ec4
1c1223f292d49ae1f1c0f800e079223c23a66fb23aad436a6b6d0680abd20849
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2068
Cache-Control: max-age=171491
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63abe6e4-1d7"
Expires: Fri, 30 Dec 2022 07:23:36 GMT
Last-Modified: Wed, 28 Dec 2022 06:49:08 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 2ec2a833ac423d14fb70030308eacb4b
b874dc2bfa662f773cea65dc0736d1defb756ec4
1c1223f292d49ae1f1c0f800e079223c23a66fb23aad436a6b6d0680abd20849
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2068
Cache-Control: max-age=171491
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63abe6e4-1d7"
Expires: Fri, 30 Dec 2022 07:23:36 GMT
Last-Modified: Wed, 28 Dec 2022 06:49:08 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 97efae50df577ae7eb7a528816cf2272
aacfafe1b41c751c404f2b5a81ec54298112afa2
c32020e2fb78492475549f4aaf9554e53c809bfed426f1a9b6ef16471f706eb6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4770
Cache-Control: max-age=87793
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63aa9564-1d7"
Expires: Thu, 29 Dec 2022 08:08:38 GMT
Last-Modified: Tue, 27 Dec 2022 06:49:08 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
accounts.google.com/o/oauth2/iframe
200 OK 234 B URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP
File type HTML document, ASCII text, with no line terminators
Hash 4ea8727104ad65af091e3137b0e2aac3
f4b5845a10c81ee1b2e93b327861d78d2627b78e
75ce17173a49d9c73d86d1713640f1ff0b69d5cccf2641db23d44db9bdc66d4a
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Dec 2022 07:45:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport, script-src 'nonce-fZNBfAlpglfFuPaOYraF3Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
report-to: {"group":"IdpIFrameHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdpIFrameHttp/external"}]}
cross-origin-opener-policy: same-origin; report-to="IdpIFrameHttp"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-embedder-policy: require-corp
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 652
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
access-control-allow-origin: https://www.etoro.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgQ0AIAgDsItIdAOUc1T4guNtI8H7inJSQ/Sx5LAg6jswMoxA9/QFTBqsxwcNxkDrMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 5
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.adalyser.com/tracking/track/v3/p?stm=1672213520761&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1672213520760%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4470223%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2277effb09-eb1a-47d2-a102-7b07a96cdf07%22%2C%22duid%22%3A%225e057f06-f4ad-4f7c-8df2-a11bf1610e27%22%2C%22cw%22%3A1672213520760%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
200 OK 43 B URL HTTP/2 c0.adalyser.com/tracking/track/v3/p?stm=1672213520761&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1672213520760%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4470223%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2277effb09-eb1a-47d2-a102-7b07a96cdf07%22%2C%22duid%22%3A%225e057f06-f4ad-4f7c-8df2-a11bf1610e27%22%2C%22cw%22%3A1672213520760%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tracking/track/v3/p?stm=1672213520761&e=lce1&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cid=etoro&p=%7B%22et%22%3A1672213520760%2C%22nr%22%3A%22New%22%2C%22cg%22%3A%22Unknown%22%2C%22dt%22%3A%22desktop%22%2C%22so%22%3A%22115832%22%2C%22me%22%3A%22Networks%22%2C%22ca%22%3A%22PRP_DJULBREG_4470223%22%2C%22co%22%3A%2215349%22%2C%22ke%22%3A%22(not%20set)%22%2C%22vid%22%3A2%2C%22sid%22%3A%2277effb09-eb1a-47d2-a102-7b07a96cdf07%22%2C%22duid%22%3A%225e057f06-f4ad-4f7c-8df2-a11bf1610e27%22%2C%22cw%22%3A1672213520760%7D&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&domain=www.etoro.com HTTP/1.1
Host: c0.adalyser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
content-type: image/gif
content-length: 43
x-powered-by: Express
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="ADMa OUR IND DSP NON COR"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"2b-B//0C13UlayirE4cP7xgqg"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2ec2a833ac423d14fb70030308eacb4b
b874dc2bfa662f773cea65dc0736d1defb756ec4
1c1223f292d49ae1f1c0f800e079223c23a66fb23aad436a6b6d0680abd20849
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2068
Cache-Control: max-age=171491
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63abe6e4-1d7"
Expires: Fri, 30 Dec 2022 07:23:36 GMT
Last-Modified: Wed, 28 Dec 2022 06:49:08 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ae0707aeabde36523941c20a68b5254
f882332bd8b3c0147af8ca8788be4a290d155766
537eefee073333371ff318be540498d3923603b79e282d6dd706cea5670caa8c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
200 OK 275 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (561), with no line terminators
Hash 2888301990c4b794774d7d3454f5ef45
9a0cf2d83268e6dc1097bcbf7607a2728e8ef514
3be969207e485fb819f87c8bf994dcfafac7d29c32750eeac9d8454ac8d25c18
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=undefined;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=undefinedundefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 275
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.1689494555.1672213521;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.1689494555.1672213521undefined;~oref=https://www.etoro.com/
200 OK 298 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.1689494555.1672213521;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.1689494555.1672213521undefined;~oref=https://www.etoro.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (597), with no line terminators
Hash 0f49552cd22134aae29bc7031c904e55
8bab3a1de90813807fbc62b9f717c285c85e41ad
fc024070aa0acfb0950bb526589e3e3a320bfa7a1b4af4257c18daf8cc795cad
GET /ddm/fls/i/src=9944765;type=visit0;cat=pagev0;match_id=undefined;u1=undefined;u8=GA1.1.1689494555.1672213521;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=GA1.1.1689494555.1672213521undefined;~oref=https://www.etoro.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 298
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=5540743343555;gtm=2wgbu0;auiddc=1674379334.1672213520;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1
200 OK 349 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=5540743343555;gtm=2wgbu0;auiddc=1674379334.1672213520;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (651), with no line terminators
Hash 2396c73c83a13e384d49172edc5176bb
2ff1f2ee4165ba2fe038c73df1ed5d2183c7ec9b
c2e22b42600dde614c56deb06ecf9e93f7ad263b8d0cd9f621f3750eb37db892
GET /ddm/fls/i/src=9944765;type=regis0;cat=regload;ord=5540743343555;gtm=2wgbu0;auiddc=1674379334.1672213520;u8=undefined;~oref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9944765.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 349
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.7 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash bf269a225d9de1d11c6e2747d12ffbfb
f3edd2899cced3e0ae6107c6837e954d8b4f1d86
38bcbdd59ce5cac7da632ad8788f5c520aa88d30a53af4cedeb9a989af4d0986
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 18:31:06 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=13565
date: Wed, 28 Dec 2022 07:45:25 GMT
content-length: 4654
x-cdn: AKAM
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Wed, 28 Dec 2022 08:05:25 GMT
Date: Wed, 28 Dec 2022 07:45:25 GMT
Content-Length: 5269
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 66bebe7c4a03fcf72b3378dbb0a68518
4027df6b9ff491fa10741749325ad76ac5b974a7
1d8637f2196b92f26c00837d00e3ecaf7fecff7e0a4ff027885f0b6128dcbb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1005612/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1005612/tfa.js
IP
File type ASCII text, with very long lines (59106)
Hash 81ea50f8738091b964c29daf733150f7
83eeefd7a6127002dc895f7296df0fa9cb8a6861
b25483b4b758014234c457188ea43a461c2c90c2e386b4e65fa894d63b302329
GET /libtrc/unip/1005612/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3A1BBRFa1eyVVSgTQvVrFQ3BZ6da4fH8zSHh8eBK+wAr5KJ9INiu7icgqJr58x+xF/iya0rjSek=
x-amz-request-id: 02JK22JM8YE318E0
x-amz-replication-status: PENDING
last-modified: Tue, 27 Dec 2022 15:11:54 GMT
etag: "1142a9ae7b79577a0252540b9b5596fb"
x-amz-version-id: dChtUacAuNkgTg3KvBFPrB_3ZI0le4Yb
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 28 Dec 2022 07:45:25 GMT
via: 1.1 varnish
age: 64
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1672213526.552720,VS0,VE7
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 55
content-length: 18203
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash d925a898de26295fdebfc90203ef46fa
77dd3f5893b76530e08058d50e8f9aef017e80c7
8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11460
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=23FABA2660C16A4B2B5AA8AE61966B25; domain=.bing.com; expires=Mon, 22-Jan-2024 07:45:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: AE9F362AF4CC46139B198BB4969529FB Ref B: OSL30EDGE0311 Ref C: 2022-12-28T07:45:25Z
date: Wed, 28 Dec 2022 07:45:25 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1689494555.1672213521>m=2oebu0&aip=1&z=545858026
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1689494555.1672213521>m=2oebu0&aip=1&z=545858026
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-B0NS054E7V&cid=1689494555.1672213521>m=2oebu0&aip=1&z=545858026 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 28 Dec 2022 07:45:25 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410031-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
302 Found 754 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
IP
Hash 1b92b4ecca85e096a23e631d179bb0f2
8fc584a5a11db5061594295967427ed5d87265d3
ec3c8a2840d31bf121eb36de53806ead9aff9979bbe29e7b116a0219f4239b10
GET /track/up?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 28 Dec 2022 07:45:25 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=ucnwrwt&ref=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&upid=jxpewqr&upv=1.1.0&td1=visit
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=2bd6a566-4ec1-48a8-86e4-28c9920cc7c5; domain=.adsrvr.org; expires=Thu, 28-Dec-2023 07:45:25 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 66bebe7c4a03fcf72b3378dbb0a68518
4027df6b9ff491fa10741749325ad76ac5b974a7
1d8637f2196b92f26c00837d00e3ecaf7fecff7e0a4ff027885f0b6128dcbb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c40d80fc68e11fd09a9a5b2a1d31a99c
9b5570c09f3a847e6bf91cb91638c7c806e079b3
6de9c5d54998c01fdedde58137519c2e1032ff13d4053495479a335ee1c32f60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c40d80fc68e11fd09a9a5b2a1d31a99c
9b5570c09f3a847e6bf91cb91638c7c806e079b3
6de9c5d54998c01fdedde58137519c2e1032ff13d4053495479a335ee1c32f60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=1689494555.1672213521&jid=130679360&gjid=463908126&_gid=689439747.1672213521&_u=IADAAEAAQAAAACAAI~&z=1924797516
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=1689494555.1672213521&jid=130679360&gjid=463908126&_gid=689439747.1672213521&_u=IADAAEAAQAAAACAAI~&z=1924797516
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-1&cid=1689494555.1672213521&jid=130679360&gjid=463908126&_gid=689439747.1672213521&_u=IADAAEAAQAAAACAAI~&z=1924797516 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 28 Dec 2022 07:45:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=1689494555.1672213521&jid=472508587&gjid=395755466&_gid=689439747.1672213521&_u=YADAAEABQAAAACAEK~&z=1354474429
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=1689494555.1672213521&jid=472508587&gjid=395755466&_gid=689439747.1672213521&_u=YADAAEABQAAAACAEK~&z=1354474429
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-2056847-65&cid=1689494555.1672213521&jid=472508587&gjid=395755466&_gid=689439747.1672213521&_u=YADAAEABQAAAACAEK~&z=1354474429 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.etoro.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 28 Dec 2022 07:45:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.etoro.com/
Origin: https://www.etoro.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Wed, 28 Dec 2022 03:58:48 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N6XvMLGSLD9nkYJRLl5vZ9uAOW0oXAqd5y7YeYpu8sC1cQ_q3ODRgQ==
age: 13596
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c40d80fc68e11fd09a9a5b2a1d31a99c
9b5570c09f3a847e6bf91cb91638c7c806e079b3
6de9c5d54998c01fdedde58137519c2e1032ff13d4053495479a335ee1c32f60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=2029066290&_gaz=1&ul=NA&cid=1689494555.1672213521&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sid=1672213520&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=2029066290&_gaz=1&ul=NA&cid=1689494555.1672213521&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sid=1672213520&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=2029066290&_gaz=1&ul=NA&cid=1689494555.1672213521&sr=1280x1024&_s=1&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sid=1672213520&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=page_view&_fv=1&_nsi=1&_ss=1&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&up.affwizz_medium=Networks&up.affwizz_source=115832&up.session_referer= HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 28 Dec 2022 07:45:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 2862ee2feff85b9e7a309ca3e1fe674e
ca6da1ceb6cae4c9d7988c8754f75bb9c9f1bd3e
d8a1a3c4f9321afecf61b4fafd9faf096d1841ed5b6730f84602cc8ce43442e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5641
Cache-Control: max-age=106994
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63aadcfe-139"
Expires: Thu, 29 Dec 2022 13:28:39 GMT
Last-Modified: Tue, 27 Dec 2022 11:54:38 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 313
s.yimg.com/wi/config/10118123.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10118123.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 21e2ae430121102daa2c1810b5cf910b
ffef080cc2eacc942a9bcb67561f790c34ed3fb0
a44e6042de416123c90209eb39d7fdbe79665819ffbb07646cc939bb2dfa84e0
GET /wi/config/10118123.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uaxhRtELg7ler7Bbo/VwaeSMPQk93h8PQCXw1/n2W6Xz229nb4jzzQNeD1t8eMKH5PZGL+bJNNg=
x-amz-request-id: SG2T2G8SGYR2KCJ1
date: Wed, 28 Dec 2022 07:42:29 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Oct 2022 22:00:29 GMT
x-amz-expiration: expiry-date="Sat, 18 Nov 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "21e2ae430121102daa2c1810b5cf910b"
x-amz-server-side-encryption: AES256
x-amz-version-id: PPtAZrGHQpA8i..pPqBYS_TW.49B0pC2
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 177
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 2862ee2feff85b9e7a309ca3e1fe674e
ca6da1ceb6cae4c9d7988c8754f75bb9c9f1bd3e
d8a1a3c4f9321afecf61b4fafd9faf096d1841ed5b6730f84602cc8ce43442e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 919
Cache-Control: max-age=102272
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:25 GMT
Etag: "63aadcfe-139"
Expires: Thu, 29 Dec 2022 12:09:57 GMT
Last-Modified: Tue, 27 Dec 2022 11:54:38 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
ocsp.godaddy.com/
200 OK 1.8 kB IP
File type gzip compressed data, max compression\012- data
Hash e0c212056ea5026f8ded152185c64b30
19b79e501ed3aabb0f4363f7ddeeab802538e116
e7603352e77603ca9e1b99b15402e88923f5047ad746c395a299f7e4c82aa37d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 28 Dec 2022 07:45:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 27 Dec 2022 20:34:19 GMT
Expires: Wed, 28 Dec 2022 20:34:19 GMT
ETag: "38e84d3b51406f0415a40aba0827dca9d2144297"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=2029066290&ul=NA&cid=1689494555.1672213521&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sid=1672213520&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=2029066290&ul=NA&cid=1689494555.1672213521&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sid=1672213520&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-B0NS054E7V>m=2oebu0&_p=2029066290&ul=NA&cid=1689494555.1672213521&sr=1280x1024&_s=2&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sid=1672213520&sct=1&seg=0&dt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&en=Registration%20-%20Form%20Loaded&ep.funnel_page_category=General&ep.real_URL=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ep.is_logged_in=No&ep.event_trigger=gtm.js&ep.hit_referrer=&ep.platform=Web&ep.full_URL_dl=NA&_et=4 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.etoro.com
date: Wed, 28 Dec 2022 07:45:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
200 OK 105 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2929684/domain/etoro.com/token
IP
Hash 652467d0c0b43fa63d7297155963306f
bd6ed21f6e0d23085610e625dc156e35a3ced373
b47554f0973792766bcbe57e9acd0f8f4544dd0b0098cf6ded3d478e5b11ecfb
GET /partner/2929684/domain/etoro.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 28 Dec 2022 07:07:09 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4xC8vhtvtmC-ogqMs2zUTflFYAnvV5jTGcvqhgdIjvw0VMyfHgRvOA==
age: 2296
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=cf3962c2-f4c0-49f3-95d0-58acf01464af&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=cf3962c2-f4c0-49f3-95d0-58acf01464af&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=cf3962c2-f4c0-49f3-95d0-58acf01464af&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=177743ff-ae87-4ee8-b028-d1dbed233981; Max-Age=63072000; Expires=Fri, 27 Dec 2024 07:45:25 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: d6bd7e9ffcac4c3e
strict-transport-security: max-age=0
x-response-time: 104
x-connection-hash: 8b04e44b176a45ce5efe02210c4b0a752031c71e6d7546530c79b062a14411fc
X-Firefox-Spdy: h2
one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1672213520610&hl=4&op=0&ag=1317291471&rand=842618196878602221177250522269191601017202162610917691610992120550056912161&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDg0NzVdLFsxMiwie1wiZVwiOjAsXCJ3Z2xcIjoxfSJdLFsiY2IiLCIwLDAsMCwwLDAsMCwwLDAsMSwyLDMsMSwxLDEsMCwxLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMyJdLFstMSwiTGludXggeDg2XzY0Il0sWy0yLCItIl0sWy0zLCJbXSJdLFstNCwiLSJdLFstNSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcInJlcXVpcmVTdHVic1wiLFwiVEVUT1JPXCIsXCJTQ1JJUFRfVElNRU9VVFwiLFwiYXBwbG9hZGVkXCIsXCJ0aW1lTGFiZWxcIixcInN0cmluZ2lmeVwiLFwib25Nb2R1bGVFcnJvclwiLFwiZVRvcm9TZXNzaW9uR3VpZFwiLFwic2luZ2xlTG9nXCIsXCJib290c3RyYXBUaW1lclwiLFwiYWNjZWxlcmF0b3JEaWN0XCIsXCJlVG9yb0xvYWRQZXJmb3JtYW5jZVwiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwid2VicGFja0NodW5rZXRvcm9cIixcIl9fY29yZS1qc19zaGFyZWRfX1wiLFwiX196b25lX3N5bWJvbF9fVU5QQVRDSEVEX0VWRU5UU1wiLFwiWm9uZVwiLFwiX196b25lX3N5bWJvbF9fUHJvbWlzZVwiLFwiX196b25lX3N5bWJvbF9fZmV0Y2hcIixcIl9fem9uZV9zeW1ib2xfX0JMQUNLX0xJU1RFRF9FVkVOVFNcIixcIl9fem9uZV9zeW1ib2xfX2xlZ2FjeVBhdGNoXCIsXCJfX3pvbmVfc3ltYm9sX19xdWV1ZU1pY3JvdGFza1wiLFwiX196b25lX3N5bWJvbF9fc2V0VGltZW91dFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJUaW1lb3V0XCIsXCJfX3pvbmVfc3ltYm9sX19zZXRJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fY2xlYXJJbnRlcnZhbFwiLFwiX196b25lX3N5bWJvbF9fcmVxdWVzdEFuaW1hdGlvbkZyYW1lXCIsXCJfX3pvbmVfc3ltYm9sX19jYW5jZWxBbmltYXRpb25GcmFtZVwiLFwiX196b25lX3N5bWJvbF9fYWxlcnRcIixcIl9fem9uZV9zeW1ib2xfX3Byb21wdFwiLFwiX196b25lX3N5bWJvbF9fY29uZmlybVwiLFwiX196b25lX3N5bWJvbF9fTXV0YXRpb25PYnNlcnZlclwiLFwiX196b25lX3N5bWJvbF9fSW50ZXJzZWN0aW9uT2JzZXJ2ZXJcIixcIl9fem9uZV9zeW1ib2xfX0ZpbGVSZWFkZXJcIixcIl9fem9uZV9zeW1ib2xfX29ub25kZXZpY2Vtb3Rpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZGV2aWNlb3JpZW50YXRpb25wYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYWJzb2x1dGVkZXZpY2VvcmllbnRhdGlvbnBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub252cmRpc3BsYXljb25uZWN0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbnZyZGlzcGxheWRpc2Nvbm5lY3RwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9udnJkaXNwbGF5YWN0aXZhdGVwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9udnJkaXNwbGF5ZGVhY3RpdmF0ZXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub252cmRpc3BsYXlwcmVzZW50Y2hhbmdlcGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmFib3J0cGF0Y2hlZFwiLFwiX196b25lX3N5bWJvbF9fb25vbmJsdXJwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uZm9jdXNwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYXV4Y2xpY2twYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uYmVmb3JlaW5wdXRwYXRjaGVkXCIsXCJfX3pvbmVfc3ltYm9sX19vbm9uY2FucGxheXBhdGNoZWRcIixcIl9fem9uZV9zeW1ib2xfX29ub25jYW5wbGF5dGhyb3VnaHBhdGNoZWRcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy03LCItIl0sWy04LCItIl0sWy05LCIrIl0sWy0xMCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltcImRlc2NyaXB0aW9uXCIsXCJvZzp0aXRsZVwiLFwib2c6ZGVzY3JpcHRpb25cIixcInR3aXR0ZXI6dGl0bGVcIixcInR3aXR0ZXI6ZGVzY3JpcHRpb25cIl19Il0sWy0xMiwiXCJ1bnNwZWNpZmllZFwiIl0sWy0xMywiLSJdLFstMTQsIi0iXSxbLTE1LCItIl0sWy0xNiwiMCJdLFstMTcsIjE2Il0sWy0xOCwiWzEsMCwwLDBdIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDAyLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCw5MzksMCwwLDAsMCxcIi1cIixcIi1cIl0iXSxbLTIwLCItIl0sWy0yMSwiLSJdLFstMjIsIltcIi1cIixcIm5cIl0iXSxbLTIzLCIrIl0sWy0yNCwiW10iXSxbLTI1LCJbXCJbNDM2ODc1MTI1LGZ1bmN0aW9uKCl7cmV0dXJuIE0odGhpcyxhcmd1bWVudHMpfV1cIixcIlwiLFwiWzM2MDM3NTY3ODUsZnVuY3Rpb24gdG9TdHJpbmcoKSB7XFxuICAgIFtuYXRpdmUgY29kZV1cXG59XVwiXSJdLFstMjYsIi0iXSxbLTI3LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTI5LCItIl0sWy0zMCwiW1widlwiLDBdIl0sWy0zMSwiZmFsc2UiXSxbLTMyLCIwIl0sWy0zMywiW1wiWzQzNjg3NTEyNSxmdW5jdGlvbigpe3JldHVybiBNKHRoaXMsYXJndW1lbnRzKX1dXCIsXCJcIixcIlszNjAzNzU2Nzg1LGZ1bmN0aW9uIHRvU3RyaW5nKCkge1xcbiAgICBbbmF0aXZlIGNvZGVdXFxufV1cIl0iXSxbLTM0LCJbXCJbNDM2ODc1MTI1LGZ1bmN0aW9uKCl7cmV0dXJuIE0odGhpcyxhcmd1bWVudHMpfV1cIixcIlwiLFwiWzM2MDM3NTY3ODUsZnVuY3Rpb24gdG9TdHJpbmcoKSB7XFxuICAgIFtuYXRpdmUgY29kZV1cXG59XVwiXSJdLFstMzUsIlsxNjcyMjEzNTIwNTg2LDBdIl0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTM3LCItIl0sWy0zOCwiYywtMSwtMSw0NDQsMCw0LDAsMTc3LDIyLDkwLC0xLDAsLDgzNyw1ODE5LDU4MTkiXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDAsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsMF0iXSxbLTQwLCIzNyJdLFstNDEsIi0iXSxbLTQyLCIxNzcwMDUwMDgxIl0sWy00MywiMDAwMDAwMDEwMDAwMDAwMDAxMTExMDAxMDAiXSxbLTQ0LCIwLDUsMCw1Il0sWy00NSwiLSJdLFstNDYsIjAiXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy00OCwiMCwwIl0sWy00OSwiLSJdLFstNTAsIi0iXSxbLTUxLCItIl0sWy01MiwiLSJdLFstNTMsIjAxMCJdLFstNTQsIntcImhcIjpbXSxcImRcIjpbXCJfMVwiLFwiNDI3NjIzNDM4XCJdLFwiYlwiOltcIl8xXCIsXCIzODM3ODk3OTA0XCJdLFwic1wiOjF9Il0sWy01NSwiMSJdLFsiZGRiIiwiMCwwLDAsMSwxLDIsMCwxLDAsMCwwLDAsMCwwLDIsMCwxLDAsMCwwLDAsMSwwLDAsMSwwLDAsMCwwLDAsMCw0LDAsMCwwLDIsMCwwLDAsMCwwLDAsMSwxLDAsMCwxNSwwLDEsMCwwLDAsMSwwLDAiXSxbImJuY2giLDU3XSxbImFibmNoIiw1N11d&dep=0&pre=0&sdd=%7B%7D&cri=yGytfHQ9DW&pto=5842&ver=49&gac=-&mei=&ap=&duid=1.1672213520.YLx5TeVL0W1TaWIH&suid=1.1672213520.cRHDQvxDxlZRtFuo&tuid=1.1672213520.VuxdLWbs2nh870mP&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=91%2C5619%2C79&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.1 kB URL HTTP/2 one.pointlessplay.com/ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1672213520610&hl=4&op=0&ag=1317291471&rand=842618196878602221177250522269191601017202162610917691610992120550056912161&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=yGytfHQ9DW&pto=5842&ver=49&gac=-&mei=&ap=&duid=1.1672213520.YLx5TeVL0W1TaWIH&suid=1.1672213520.cRHDQvxDxlZRtFuo&tuid=1.1672213520.VuxdLWbs2nh870mP&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=91%2C5619%2C79&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (3134), with no line terminators
Hash 11dcbfe667b6746d84073d71976f1dbb
d92cc8bb14fdd75b86f9f1ce7209fe70d4a54c54
9d8042e03daa2edd5e012d7b1f11650c986b7552d9caa0741e7b2f5cd5dc2cd3
GET /ct?id=10929&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1672213520610&hl=4&op=0&ag=1317291471&rand=842618196878602221177250522269191601017202162610917691610992120550056912161&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=yGytfHQ9DW&pto=5842&ver=49&gac=-&mei=&ap=&duid=1.1672213520.YLx5TeVL0W1TaWIH&suid=1.1672213520.cRHDQvxDxlZRtFuo&tuid=1.1672213520.VuxdLWbs2nh870mP&fbc=->m=WyJvcHRpbWl6ZS5jYWxsYmFjayIsIkdUTSBldmVudCB0byBHQSJd&it=91%2C5619%2C79&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Wed, 28 Dec 2022 07:45:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=b6acfd1f807717603605966d6b84fe75; Max-Age=29030400; Path=/; Expires=Wed, 29 Nov 2023 07:45:25 GMT; HttpOnly; Secure; SameSite=None
content-length: 1058
X-Firefox-Spdy: h2
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cb=17067123434374842term=value
200 OK 4.6 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cb=17067123434374842term=value
IP
File type ASCII text, with very long lines (1892)
Hash abbbd7d18b89d5e6588f1b2ace030e52
6e44643736c37424be25fc8485b38e42e7a0dd55
f730dfcc14cb83bb5e2a4dccb48627cfbb5ddebc1973a44976e03f22221f513f
GET /spx?dxver=4.0.0&shaid=31950&tdr=&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cb=17067123434374842term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Wed, 28 Dec 2022 07:45:25 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=ef6ac2d4-9a8b-44d9-aa4b-45316c027075&sid=94bab1c0868311ed9e189909428e139a&vid=94badde0868311ed9a91a9681bef159a&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&r=<=2875&evt=pageLoad&sv=1&rn=258965
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=19002254&tm=gtm002&Ver=2&mid=ef6ac2d4-9a8b-44d9-aa4b-45316c027075&sid=94bab1c0868311ed9e189909428e139a&vid=94badde0868311ed9a91a9681bef159a&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&r=<=2875&evt=pageLoad&sv=1&rn=258965
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=19002254&tm=gtm002&Ver=2&mid=ef6ac2d4-9a8b-44d9-aa4b-45316c027075&sid=94bab1c0868311ed9e189909428e139a&vid=94badde0868311ed9a91a9681bef159a&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&p=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&r=<=2875&evt=pageLoad&sv=1&rn=258965 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=07433308595B6FCE1BC42180580C6EC2; domain=.bing.com; expires=Mon, 22-Jan-2024 07:45:26 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 15CB6BEC75084DAA8169FACA2280A8E6 Ref B: OSL30EDGE0311 Ref C: 2022-12-28T07:45:26Z
date: Wed, 28 Dec 2022 07:45:25 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/19002254.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/19002254.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/19002254.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=121D719EE25E68BD0E836316E30969ED; domain=.bing.com; expires=Mon, 22-Jan-2024 07:45:26 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E315866EB3E84F5383F6364DCAEB8884 Ref B: OSL30EDGE0311 Ref C: 2022-12-28T07:45:26Z
date: Wed, 28 Dec 2022 07:45:25 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash f47a29158451d8c0150e4bc0606c9dc2
23a9e96f3c19bfc16e82340f1e8b1e1dd854a89b
a3f01dbe775eaf5d4fc5035faee7395ec0f22e41544167c4e38682d73a918503
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5422
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:26 GMT
Last-Modified: Wed, 28 Dec 2022 06:15:04 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash f47a29158451d8c0150e4bc0606c9dc2
23a9e96f3c19bfc16e82340f1e8b1e1dd854a89b
a3f01dbe775eaf5d4fc5035faee7395ec0f22e41544167c4e38682d73a918503
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5786
Cache-Control: max-age=148173
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:26 GMT
Etag: "63ab7d49-139"
Expires: Fri, 30 Dec 2022 00:54:59 GMT
Last-Modified: Tue, 27 Dec 2022 23:18:33 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1665
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=b6acfd1f807717603605966d6b84fe75
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 28 Dec 2022 07:45:26 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=yGytfHQ9DW&ts=954&cb=1672213521564
200 OK 43 B URL HTTP/2 one.pointlessplay.com/tracker/tc_imp.gif?e=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&cri=yGytfHQ9DW&ts=954&cb=1672213521564
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=37dfbd8ee84e00136decc534e94288989225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f11846f2e17071a10acf9f29f671b84d2da51783e4df6787003863cd962c40230002a95545459670c5b90eb6c4a77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c781279010eafdf2c657807f1ab4c2b84a9f77dc6b152761b2df8f7a6c59170bccfc248b5038e523961caf488f0b46882d6f033d3774e92f3d6335f51b07f3aeccf563bf08ba4299058ad5becdb07931c98903a9a7c7689da7e8f3b8d97a8fccaabbe7677a37beffea7242f61f8943cd2ef01a500025cb81e05c09282cf9eafd667927b80daa29e77d37d7638927f2782cbc2197686b337bc17e8ae5c9167a47e4c1466fc04822bf4f0805f88a01dfa4ab1da8e8b37df1d537bf2631550715b7dcca96feb77e4feba028da94bdda00bffbfbfa828dde0b70e22699ee66352dca7060546e4eaeb6be6619bf840fdb47ba076a12d8711814594f762d51024e5ad8e746c2d6a1154744e0bb8b39e66d01ea5001f5123fca85d9dcd4e59bcfa8af8ae66d0fff8eed5a0bdfb595d20e919d7f00039d2073c448971576332e467bd2148b1b79836d424ae7199a13ed0aa118b2d5d527c5b294dd8b9b0c9366948880457d78fcbb1dbc9520682adbb7d96d36e78ded67f207badd4800233bd3584419e1ce43d9913d8cd11f8a45b9ed38db6cd211eef873a07d311dff5a2b704df296d42179e7a424eb0a5588dee15c99c99c84a9ee5ff476f710fca75f76fc811c4c436842e51650463296deb488f9f3253be6dc2a6f630dbcf53ea313bfb6d1b7edcea8f5252e971a8ee02c61573401cae3147efb3c52a8f0e2c90850fb3869e86c030860206794cac203758cac1501fef71&cri=yGytfHQ9DW&ts=954&cb=1672213521564 HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=b6acfd1f807717603605966d6b84fe75
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Wed, 28 Dec 2022 07:45:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash c1dfd2e9495c69a55c9d0914a11263c0
82b08e9ef23ebf8f1378825c3892b5ea80a1117a
827328d17260f2e0a3047a7e7560b642a543c760d2e62db57f5b3206ab742269
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6308
Cache-Control: max-age=141172
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:26 GMT
Etag: "63ab5fe6-1d7"
Expires: Thu, 29 Dec 2022 22:58:18 GMT
Last-Modified: Tue, 27 Dec 2022 21:13:10 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1672213521154%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4470223%2526utm_campaign%253DPRP_DJULBREG_4470223%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQI556iFU5WjQAAAAYVXsXau8VK_6rwFEV-yTZnMkslx0RkvGCgmoDI2ToDIFNuLfIhzZhNvDoiPnw; Max-Age=2592000; Expires=Fri, 27 Jan 2023 07:45:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIji2U3L-hxZAAAAYVXsXaud3-Op3yQ44kgHWv4Ph8NnmV4IpenwcPZdHN0tcIwU4In408YY0Yn8hzyu8FXAg; Max-Age=2592000; Expires=Fri, 27 Jan 2023 07:45:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0f37bc99-9726-4669-8925-d363de86cda9"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 28-Dec-2023 07:45:26 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1672213526:t=1672299926:v=2:sig=AQGunvKho-vuU95bt7dmfielNUVAWHBm"; Expires=Thu, 29 Dec 2022 07:45:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXw3o03eELwy6QoR4/WPQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 999FAE3F2F814359B4EC9B1114E70763 Ref B: OSL30EDGE0417 Ref C: 2022-12-28T07:45:26Z
date: Wed, 28 Dec 2022 07:45:26 GMT
content-length: 0
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash c1dfd2e9495c69a55c9d0914a11263c0
82b08e9ef23ebf8f1378825c3892b5ea80a1117a
827328d17260f2e0a3047a7e7560b642a543c760d2e62db57f5b3206ab742269
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3319
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 07:45:26 GMT
Last-Modified: Wed, 28 Dec 2022 06:50:07 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
sp.analytics.yahoo.com/sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:26 GMT
expires: Wed, 28 Dec 2022 07:45:26 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBb0q2MCEMnzeqJX4F86liBmuGmS3lAFEgEBAQFFrWO1YwAAAAAA_eMAAA&S=AQAAAj6f-isOg3oSqRrEm489zME; Expires=Thu, 28 Dec 2023 13:45:26 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2028%20Dec%202022%2007%3A45%3A21%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2028%20Dec%202022%2007%3A45%3A21%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Wed%2C%2028%20Dec%202022%2007%3A45%3A21%20GMT&n=0&b=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&.yp=10118123&f=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:26 GMT
expires: Wed, 28 Dec 2022 07:45:26 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBb0q2MCEGrDsy3bnpxY53oI6a63YNgFEgEBAQFFrWO1YwAAAAAA_eMAAA&S=AQAAAv8jlEC0X-Bp8AYIb6mUqGk; Expires=Thu, 28 Dec 2023 13:45:26 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=cf3962c2-f4c0-49f3-95d0-58acf01464af&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=cf3962c2-f4c0-49f3-95d0-58acf01464af&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=cf3962c2-f4c0-49f3-95d0-58acf01464af&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o52r0&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_RpFFs1LADMBlC7YaV772hg=="; Max-Age=63072000; Expires=Fri, 27 Dec 2024 07:45:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 760f481d0ce4752d
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: 84821aefd645644be1afdd210e9259bdc2a600c8df0c6c8956913fb0290b47d0
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=7da8f9cc-6c4b-44f7-9b28-1e2a25deee0e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=7da8f9cc-6c4b-44f7-9b28-1e2a25deee0e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=7da8f9cc-6c4b-44f7-9b28-1e2a25deee0e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f94025ee-d96c-445b-8295-575f9e24a6f1&tw_document_href=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1dlu&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_0c+KBkDS8IKbhYMjOA2zAA=="; Max-Age=63072000; Expires=Fri, 27 Dec 2024 07:45:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 89920a216d894005
strict-transport-security: max-age=631138519
x-response-time: 106
x-connection-hash: 84821aefd645644be1afdd210e9259bdc2a600c8df0c6c8956913fb0290b47d0
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 07:45:26 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: ac77687a345fb3880d13bf194e524358
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&optOut=false&bust=023489264858634384&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&optOut=false&bust=023489264858634384&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00995ec51eb23fc05a0627b93976ed9179,00444d53aaa69516fdd4f38cb01a408ffb,007bfa109c755ce2abc89bcca6ab1ec76b,00e5c90732d6db4c996b8e51ecf69f2be4,009db2f50602ec66a785ccba2f2190d042,0035680ae49e7216a26be3859972ee9575&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&optOut=false&bust=023489264858634384&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 07:45:26 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 4947cb17a494998b987420b69faf2e49
content-encoding: gzip
www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1672213521579&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1672213521577.1836435983&it=1672213520992&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1672213521579&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1672213521577.1836435983&it=1672213520992&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=432617183539790&ev=PageView&dl=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&rl=&if=false&ts=1672213521579&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1672213521577.1836435983&it=1672213520992&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 28 Dec 2022 07:45:26 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1672213521753&cv=11&fst=1672213521753&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=1674379334.1672213520&data=event%3Dconversion&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1672213521753&cv=11&fst=1672213521753&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=1674379334.1672213520&data=event%3Dconversion&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/745546367/?random=1672213521753&cv=11&fst=1672213521753&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=216GCPHp8MUDEP_EwOMC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter>m_ee=1&auid=1674379334.1672213520&data=event%3Dconversion&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Dec-2022 08:00:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1672213521746&cv=11&fst=1672213521746&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=1674379334.1672213520&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/745546367/?random=1672213521746&cv=11&fst=1672213521746&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=1674379334.1672213520&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2481), with no line terminators
Hash e5e4a22661437575652b72b89051f738
12ae8d34b4ce129b7bb38bc73bdd80aa115a316b
b338fe3552fc0300cdf3e4f4740465cbe6bb00cbae29ab33e430963c5fd9ea46
GET /pagead/viewthroughconversion/745546367/?random=1672213521746&cv=11&fst=1672213521746&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&tiba=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&auid=1674379334.1672213520&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Dec 2022 07:45:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1058
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Dec-2022 08:00:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 42ae5afc8f3ebe00086901e0d54fbfd7
602ffcbd0de4494c2a260e233d235a2bc34a9735
64f3d01025209c31bd1adbcbe5665683f54aa74c876feeb622a84b2f1ec21202
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 07:45:26 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 28 Dec 2022 02:54:23 GMT
Expires: Wed, 04 Jan 2023 02:54:22 GMT
Etag: "602ffcbd0de4494c2a260e233d235a2bc34a9735"
Cache-Control: max-age=586735,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7808ad2ca94bb524-OSL
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1672213521154%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4470223%2526utm_campaign%253DPRP_DJULBREG_4470223%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1672213521154%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4470223%2526utm_campaign%253DPRP_DJULBREG_4470223%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2929684%26time%3D1672213521154%26url%3Dhttps%253A%252F%252Fwww.etoro.com%252Fnb-no%252Faccounts%252Fsign-up%253Futm_medium%253DNetworks%2526utm_source%253D115832%2526utm_content%253D15349%2526utm_serial%253DPRP_DJULBREG_4470223%2526utm_campaign%253DPRP_DJULBREG_4470223%2526utm_term%253D%2526rdk%253Drk1%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&c1f7843b-1bc8-432a-8f39-4bcb9d7850c9"; Domain=.linkedin.com; Expires=Thu, 28-Dec-2023 07:45:26 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202212280745266328fac7-8b86-4ffc-8747-febb358f79f6AQGeu1PaiR_Zl1yy0l-KuwX1sRl0HsGk"; Domain=.www.linkedin.com; Expires=Thu, 28-Dec-2023 07:45:26 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzIyMTM1MjY7MjswMjHPDz7d4kkXs6XFUQreOMtz+pzD1zF5na3ZzpvhU/k/nw==; Domain=.linkedin.com; Expires=Mon, 26 Jun 2023 07:45:26 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2438:u=1:x=1:i=1672213526:t=1672299926:v=2:sig=AQGzWGLTgQLbDo7jXDE-EPFVAzsenCIH"; Expires=Thu, 29 Dec 2022 07:45:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXw3o08wqk871G5gqF6jA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 71D54ED358D44330BA2FFEFDF9CC857C Ref B: OSL30EDGE0417 Ref C: 2022-12-28T07:45:26Z
date: Wed, 28 Dec 2022 07:45:26 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2929684&time=1672213521154&url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.etoro.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&d20eb6a5-264d-4a54-8342-c25a5b5e3420"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 28-Dec-2023 07:45:26 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1672213526:t=1672299926:v=2:sig=AQGunvKho-vuU95bt7dmfielNUVAWHBm"; Expires=Thu, 29 Dec 2022 07:45:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXw3o0/nFFZzEFfvW0fbA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 115613C772DB4FD68C7B169E9A24711B Ref B: OSL30EDGE0417 Ref C: 2022-12-28T07:45:26Z
date: Wed, 28 Dec 2022 07:45:26 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1716
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=b6acfd1f807717603605966d6b84fe75
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 28 Dec 2022 07:45:27 GMT
content-length: 0
X-Firefox-Spdy: h2
one.pointlessplay.com/mon
200 OK 0 B URL HTTP/2 one.pointlessplay.com/mon
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: one.pointlessplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1711
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Cookie: cg_uuid=b6acfd1f807717603605966d6b84fe75
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.etoro.com
content-type: application/json
date: Wed, 28 Dec 2022 07:45:27 GMT
content-length: 0
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=1689494555.1672213521&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%221689494555.1672213521%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221672213520.1%22%2C%22dcm_gid%22%3A%22689439747.1672213521%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4470223%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1672213520.1&dcm_gid=689439747.1672213521&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cb=17067123434374842term%3Dvalue
200 OK 1.3 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=1689494555.1672213521&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%221689494555.1672213521%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221672213520.1%22%2C%22dcm_gid%22%3A%22689439747.1672213521%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4470223%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1672213520.1&dcm_gid=689439747.1672213521&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cb=17067123434374842term%3Dvalue
IP
File type ASCII text, with very long lines (2690)
Hash 141384bf42534c0b24c530c64939ba8c
39ed47fa189f68f335e639cd5cbf5a5b5794d3a8
2f471963611668abf98b89aac5034518b93c6e3787beb55aa8c08a0557407f51
GET /st?ga_tracking_id=UA-2056847-1%3BUA-2056847-65&ga_client_id=1689494555.1672213521&shpt=eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-2056847-1%3BUA-2056847-65%22%2C%22ga_client_id%22%3A%221689494555.1672213521%22%2C%22shpt%22%3A%22eToro%20%E2%80%93%20registrer%20deg%20%E2%80%93%20Opprett%20kontoen%20din%20og%20kom%20i%20gang%20med%20trading%20p%C3%A5%20noen%20f%C3%A5%20minutter%22%2C%22dcm_cid%22%3A%221672213520.1%22%2C%22dcm_gid%22%3A%22689439747.1672213521%22%2C%22ga_utm_campaign%22%3A%22PRP_DJULBREG_4470223%22%2C%22ga_utm_source%22%3A%22115832%22%2C%22ga_utm_medium%22%3A%22Networks%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1672213520.1&dcm_gid=689439747.1672213521&dxver=4.0.0&shaid=31950&plh=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&cb=17067123434374842term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Wed, 28 Dec 2022 07:45:27 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=98515cc5-8683-11ed-97d5-b771142c97bc;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
200 OK 0 B URL HTTP/2 etorologsapi.etoro.com/api/v2/monitoring?applicationIdentifier=ReToro
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/monitoring?applicationIdentifier=ReToro HTTP/1.1
Host: etorologsapi.etoro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 13546
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:27 GMT
content-length: 0
server: Kestrel
access-control-allow-origin: https://www.etoro.com
cache-control: private, max-age=0, must-revalidate=true, noCache=true, noStore=true
vary: Origin, Origin
request-context: appId=cid-v1:fd70748c-8efd-4b7f-a0f0-36ea0c443ced
X-Firefox-Spdy: h2
trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1586&scd=100&ssd=1&est=1672213521172&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1672213522771&vi=1672213521170&ri=2617d96e4b58268374b9ffc3ed35be40&ref=null&cv=20221227-14-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1005612/log/3/unip?en=pre_d_eng_tb&tos=1586&scd=100&ssd=1&est=1672213521172&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1672213522771&vi=1672213521170&ri=2617d96e4b58268374b9ffc3ed35be40&ref=null&cv=20221227-14-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1005612/log/3/unip?en=pre_d_eng_tb&tos=1586&scd=100&ssd=1&est=1672213521172&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1672213522771&vi=1672213521170&ri=2617d96e4b58268374b9ffc3ed35be40&ref=null&cv=20221227-14-RELEASE&item-url=https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Dec 2022 07:45:27 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.etoro.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
k.sulseerg.com/4/4470223/
200 OK 0 B URL HTTP/2 k.sulseerg.com/4/4470223/
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /4/4470223/ HTTP/1.1
Host: k.sulseerg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 28 Dec 2022 07:45:19 GMT
content-type: text/html; charset=utf8
vary: Accept-Encoding
x-trace-id: d76e94ead3e3caf2ba879ca4751e8be7
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://med.etoro.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=029edc916f1747f99089cd7ff6e358ac; expires=Thu, 28 Dec 2023 07:45:19 GMT; path=/; secure; SameSite=None
oaidts=1672213519; expires=Thu, 28 Dec 2023 07:45:19 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=60
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=5e10b48cd72adce2e5f72f98c20060c2_a63fd6407d7d11f4b6e2bf3a7fa2c5a8
200 OK 0 B URL HTTP/2 api.etorostatic.com/sapi/app-data/web-client-locales/nb-no.js?cv=5e10b48cd72adce2e5f72f98c20060c2_a63fd6407d7d11f4b6e2bf3a7fa2c5a8
IP
GET /sapi/app-data/web-client-locales/nb-no.js?cv=5e10b48cd72adce2e5f72f98c20060c2_a63fd6407d7d11f4b6e2bf3a7fa2c5a8 HTTP/1.1
Host: api.etorostatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/octet-stream
etag: W/"310057791baa8aa911b1586c4fee08a4"
last-modified: Tue, 27 Dec 2022 13:34:40 GMT
x-amz-id-2: wLneWfWoRV0g+oWULNdJdq+5/aWVl9fAovXtzozqF0j+yfJBTzq5J+Ea5Octu2lDwxeZdWX7tss=
x-amz-replication-status: COMPLETED
x-amz-request-id: 7FMNJQXCBS5C2W59
x-amz-version-id: OcH4mHxlOmVewkDy.FFPCZR0GCN5D_fI
content-encoding: gzip
x-robots-tag: noindex
cache-control: public, max-age=1209600
expires: Wed, 11 Jan 2023 07:45:20 GMT
date: Wed, 28 Dec 2022 07:45:20 GMT
content-length: 406455
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
200 OK 0 B URL HTTP/2 tr.snapchat.com/config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js
IP
GET /config/com/2b300842-74be-4e72-8ed5-3bab9449a996.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.etoro.com
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Dec 2022 07:45:25 GMT
access-control-allow-origin: https://www.etoro.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8lgXGZsvgW+gaB2Pc4jweFur3rWeQrj/BE3Yd93GOY1KJuVN9EwUcErtNgDaqxF3svqwBBC7L8I=
x-amz-request-id: 1KZ1BTD5TX1J967Y
date: Wed, 28 Dec 2022 07:41:45 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 221
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
trc.taboola.com/1005612/trc/3/json?tim=1672213521187&data=%7B%22id%22%3A104%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1672213521170%2C%22cv%22%3A%2220221227-14-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1672213521186%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1005612/trc/3/json?tim=1672213521187&data=%7B%22id%22%3A104%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1672213521170%2C%22cv%22%3A%2220221227-14-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1672213521186%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1005612/trc/3/json?tim=1672213521187&data=%7B%22id%22%3A104%2C%22ii%22%3A%22%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1672213521170%2C%22cv%22%3A%2220221227-14-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Detoro-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1672213521186%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.etoro.com%2Fnb-no%2Faccounts%2Fsign-up%3Futm_medium%3DNetworks%26utm_source%3D115832%26utm_content%3D15349%26utm_serial%3DPRP_DJULBREG_4470223%26utm_campaign%3DPRP_DJULBREG_4470223%26utm_term%3D%26rdk%3Drk1%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A100%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.etoro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 28 Dec 2022 07:45:26 GMT
via: 1.1 varnish
x-served-by: cache-bma1677-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1672213526.069859,VS0,VE103
vary: Accept-Encoding
x-vcl-time-ms: 103
X-Firefox-Spdy: h2
139.45.197.151
23.60.29.145
143.204.45.46
141.226.228.48
151.101.244.157
23.38.201.81
34.242.63.108
0.0.0.0