register.fxtm.com/gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g
301 Moved Permanently 0 B URL HTTP/1.1 register.fxtm.com/gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g HTTP/1.1
Host: register.fxtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
date: Mon, 30 Jan 2023 06:13:34 GMT
content-length: 0
location: https://register.fxtm.com/gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g
x-proxy-backend: page-server
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4133
Expires: Mon, 30 Jan 2023 07:22:27 GMT
Date: Mon, 30 Jan 2023 06:13:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4741
Expires: Mon, 30 Jan 2023 07:32:35 GMT
Date: Mon, 30 Jan 2023 06:13:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 05:35:41 GMT
content-type: application/json
age: 2273
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7230
Expires: Mon, 30 Jan 2023 08:14:04 GMT
Date: Mon, 30 Jan 2023 06:13:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bpnRFehQWYHmGiYnrAMQ515duYS/6DK27KKSAm8TwHzr17FqmEicPTC3XPgwtRT8k2zpTPykQrU/kNTrAcWmYw==
x-amz-request-id: J3F6A1CHJXDM1419
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 05:21:40 GMT
age: 3114
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 06:13:34 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6f949c3645f187b3b877888d22687e2
f62d5a19c91c9b07f83c2ac1b68f76cda3756eef
bdb81c911998507a306c2459576d766795a399d9271e7c3634e44e93888e01e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDB81C911998507A306C2459576D766795A399D9271E7C3634E44E93888E01E5"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21547
Expires: Mon, 30 Jan 2023 12:12:42 GMT
Date: Mon, 30 Jan 2023 06:13:35 GMT
Connection: keep-alive
register.fxtm.com/gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g
200 OK 17 kB URL HTTP/1.1 register.fxtm.com/gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (24713)
Hash 9923b2820171190cde63db38a33d6197
10fc30e83b4ca34146dae8e5a951717e43f598a8
ffbdaf6608e52a01865f7f6f020517717497fc57998455f2ed553f30ca8ee3fc
GET /gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g HTTP/1.1
Host: register.fxtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
date: Mon, 30 Jan 2023 06:13:35 GMT
content-type: text/html; charset=utf-8
content-length: 17372
set-cookie: ubvs=dcb68fb8-3f34-41b9-87aa-231677589858; Max-Age=15552000; Path=/; SameSite=Lax
ubvt=v2%7Cdcb68fb8-3f34-41b9-87aa-231677589858%7C038ac3a4-f557-41ac-b9b2-7fe8c6e1d529%3Aa%3Asingle; Max-Age=259200; Domain=fxtm.com; Path=/; SameSite=Lax
ubpv=a%2C038ac3a4-f557-41ac-b9b2-7fe8c6e1d529; Max-Age=15897600; Path=/gold-1/; SameSite=Lax
content-location: https://register.fxtm.com/gold-1/
etag: "a:dcb68fb83f3441b987aa231677589858"
link: <https://register.fxtm.com/gold-1/>; rel="canonical"
x-unbounce-pageid: 038ac3a4-f557-41ac-b9b2-7fe8c6e1d529
x-unbounce-variant: a
x-unbounce-visitorid: dcb68fb8-3f34-41b9-87aa-231677589858
content-encoding: gzip
x-proxy-backend: page-server
builder-assets.unbounce.com/published-css/main-7b78720.z.css
200 OK 2.9 kB URL HTTP/2 builder-assets.unbounce.com/published-css/main-7b78720.z.css
IP
File type ASCII text, with very long lines (15017)
Hash 3d27e56a34e34b278ab5e182cbc3b587
b871dae022b6537150e18df2bbf266caaa013fdc
3646920461d3a5dd11dfb46a1d063bee0eaad079e9d3e9341942f24f3688401f
GET /published-css/main-7b78720.z.css HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 2902
date: Mon, 05 Dec 2022 01:58:05 GMT
last-modified: Wed, 23 Nov 2022 23:24:30 GMT
etag: "3d27e56a34e34b278ab5e182cbc3b587"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: F0XZlkUrGu6OlrfKzU_C7UXh1V6i6hug
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JRxIxsRbR2B5Nmg3jD2QC8XL5wGr-qUbxwydTyIXhevYMuIm3aAo2Q==
age: 4853731
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 05:41:41 GMT
age: 1914
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK 25 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash cc24419c482370498f3c227ac73d666b
37fc103ace873f47102e0ca88eb4735bc6806750
152fa070788f0cf29dc062f03860897c39c7ffa13e6eee2dc3e5dc131ecbc7aa
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 15:34:29 GMT
expires: Sun, 28 Jan 2024 15:34:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 139146
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-WNLJ72F
200 OK 44 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-WNLJ72F
IP
File type ASCII text, with very long lines (1759)
Hash b5b0cb93592392221bf00051c17fca98
100ad48292f1e5581d0ce2f97243ee68c2ff3f31
05a6c2f5780c7eb7728c2ae2d91a7cbc0f1aff96c6f0d30ab89500ff782dcfb2
GET /optimize.js?id=OPT-WNLJ72F HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 06:13:35 GMT
expires: Mon, 30 Jan 2023 06:13:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44287
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2536
Expires: Mon, 30 Jan 2023 06:55:51 GMT
Date: Mon, 30 Jan 2023 06:13:35 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5ki70G7TNkmwpLOlX1FjAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Q5vrr9H8PK5LxnZNqoqmUJIjAjo=
my.forextime.com/widget.php?type=new&company=global
200 OK 3.8 kB URL HTTP/2 my.forextime.com/widget.php?type=new&company=global
IP
File type HTML document, ASCII text, with very long lines (10817)
Hash f0c488a64801beda761ce6f8136a256a
dfed777099630aefbf148b186b44d9c6fb38f310
7dbd649e1b0c64bc94c5e7daee6dcc06f1fc29e0c3fb4f9d86b16d1a3a6e6409
GET /widget.php?type=new&company=global HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: application/javascript
content-length: 3804
cache-control: no-cache
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 791810069903b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
register.fxtm.com/track?referer=
404 Not Found 47 B URL HTTP/1.1 register.fxtm.com/track?referer=
IP
File type ASCII text, with no line terminators
Hash f9ae9006943e3a67b95ca4c6c733b6d4
9f9e7a7e2602d29e4df8c38df6277ab37fb1b079
cd8b79123a843eee64985a23257e2fab80ef2c4c08427b688ea979671fc1c457
GET /track?referer= HTTP/1.1
Host: register.fxtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/gold-1/?utm_source=top5forexbrokerz.com&utm_medium=display&utm_campaign=gold-2022&utm_content=1x1&dclid=COm7-9_R7vwCFSCOAAAd-54P1g
Cookie: ubvs=dcb68fb8-3f34-41b9-87aa-231677589858; ubvt=v2%7Cdcb68fb8-3f34-41b9-87aa-231677589858%7C038ac3a4-f557-41ac-b9b2-7fe8c6e1d529%3Aa%3Asingle
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/plain; charset=utf-8
content-length: 47
x-proxy-backend: page-server
builder-assets.unbounce.com/published-js/main.bundle-5dc4c52.z.js
200 OK 34 kB URL HTTP/2 builder-assets.unbounce.com/published-js/main.bundle-5dc4c52.z.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0bf2d86152e7e3622dcf4ab19253e64e
9a015eef382e2480a2c3b73d544c09be863e61f5
b3c5554c340fffc058eed76a88380e202f5ff8389753a180860498f76ab70643
GET /published-js/main.bundle-5dc4c52.z.js HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 33506
date: Tue, 17 Jan 2023 04:58:48 GMT
last-modified: Wed, 23 Nov 2022 23:24:26 GMT
etag: "0bf2d86152e7e3622dcf4ab19253e64e"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: pKHv9xoCp.Oeede.gA0bUZ9Qn6jRS9cc
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4YjDKdw91D2j7KUmPvHltT3xcZW-yjVZriWM2C--DWr6dTGJDhse9A==
age: 1127689
X-Firefox-Spdy: h2
d34qb8suadcc4g.cloudfront.net/ub.js?1673990108
200 OK 1.9 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/ub.js?1673990108
IP
Hash fde4d3457a50df6eb5c2e00c8f2ae5b3
e5cf16a28cc4234d5eaa77b2b0dd53f3522aa135
268ae6468593e886241a5aad414e64f7775e7ac13311ab55e9d35e34a24129ba
GET /ub.js?1673990108 HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 1865
date: Tue, 17 Jan 2023 21:41:41 GMT
last-modified: Tue, 17 Jan 2023 21:14:25 GMT
etag: "fde4d3457a50df6eb5c2e00c8f2ae5b3"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: TrrSG85SsnvjrZ_OWFs2jLqOdvnUHg06
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pj_CesCSU1z2xx01ifOOSWXW5WLXJc1YUXN1VBeh5UxEYdWgapkJuA==
age: 1067516
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/d7a10890-banner-gold.png
200 OK 185 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/d7a10890-banner-gold.png
IP
File type PNG image data, 1920 x 613, 8-bit colormap, non-interlaced\012- data
Size 185 kB (184801 bytes)
Hash 57ab158d5f8730568d0f8c788ef333ff
f0f0affc72ec068e19803e4165986c4edeff025c
b65e67e22d34f4a3ad216f39628f19353e672f2a2e535e1b0a536e1dcf931772
GET /register.fxtm.com/gold-1/d7a10890-banner-gold.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 184801
date: Tue, 24 Jan 2023 14:52:54 GMT
last-modified: Tue, 24 Jan 2023 14:52:31 GMT
etag: "57ab158d5f8730568d0f8c788ef333ff"
cache-control: max-age=31557600
x-amz-version-id: kLVrifNFj.l4Lj0y4aVYHCHGZOLQptCI
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zzFzxiLq_Nsw7C0cZYNa9cbgQMzKP4LObqnSmAD9obiOQvi7Z-ngIA==
age: 487243
X-Firefox-Spdy: h2
d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
200 OK 30 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
IP
File type ASCII text, with very long lines (64903)
Hash 73de733c308b8b5e44d2a6242dc4bd99
2f43a0cd155124d65ab5ce3574abc5f82b45fcf9
cf4ff4a67675a54e9a9469d967c77fba778ccf839a98119d246012447eb44ea3
GET /sp-2.14.0.js HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30399
date: Sun, 11 Dec 2022 09:08:36 GMT
last-modified: Wed, 04 Nov 2020 01:35:32 GMT
etag: "73de733c308b8b5e44d2a6242dc4bd99"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rVTqklA1qqyT_0VdOCY323BKPISR0uej
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c4Fi9N9CdNC9M4tg_R9EtjPBq357a0b7BIAGs4msWWlxoq9hjiErKA==
age: 4309501
X-Firefox-Spdy: h2
jssdkcdns.mparticle.com/js/v2/us1-7e64e961d63ef3498e1ff29e51ea3b54/mparticle.js
200 OK 126 kB URL HTTP/2 jssdkcdns.mparticle.com/js/v2/us1-7e64e961d63ef3498e1ff29e51ea3b54/mparticle.js
IP
File type ASCII text, with very long lines (63954)
Size 126 kB (126534 bytes)
Hash ba07490a3d9e1040eb174a8aa4044ebd
b682b281458f7f15a9dc7901bc8d8bbcd06e572b
1ef044fa5205cec1bb670e85d0fa93b143327332e9fe4af2052776bd854c0d93
GET /js/v2/us1-7e64e961d63ef3498e1ff29e51ea3b54/mparticle.js HTTP/1.1
Host: jssdkcdns.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: Kestrel
cache-control: public, max-age=3600
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
x-origin-name: fastlyshield--shield_ssl_cache_iad_kiad7000041_IAD
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:36 GMT
age: 149
x-served-by: cache-iad-kiad7000041-IAD, cache-bma1648-BMA
x-cache: HIT, MISS
x-cache-hits: 37, 0
x-timer: S1675059217.640372,VS0,VE92
vary: Accept, Accept-Encoding
content-length: 126534
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/fonts/sourcesanspro-regular.woff2
200 OK 27 kB URL HTTP/2 my.forextime.com/en/identity/registration/assets/fonts/sourcesanspro-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27248, version 1.0\012- data
Hash 87a782df623610acdf66fe51b185c95c
57d45105e98c4fb6ae5a3935741f086c7fae7cee
52862c2d13e4544f4ea4eb963543c017ac6cb91a6ee0627caec4a39c45657f73
GET /en/identity/registration/assets/fonts/sourcesanspro-regular.woff2 HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: font/woff2
content-length: 27248
last-modified: Tue, 24 Jan 2023 09:17:31 GMT
etag: "63cfa22b-6a70"
my-country: NO
accept-ranges: bytes
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 79181008baa3b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
301 Moved Permanently 28 kB URL HTTP/2 my.forextime.com/en/identity/registration?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
IP
Hash 9cdaa851c3d2fe2231bd2451f1c790e4
a81b33ef9dcdd41c45465ca86098785ba6916b1b
517e0cd508706bc653018403e57271984b3cc5817b591fe5bda379138778df1b
GET /en/identity/registration?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/html
location: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
my-country: NO
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 79181007b9f0b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash b042b7f57812777b3726c1474f8164a3
d2a0d1213aa7b5c15a9d1d90a16f50567f78877e
175088c024dbc02cc15755733ae5756b0321025d0c1cd93f00bf706e25159f1f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2652
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:36 GMT
Last-Modified: Mon, 30 Jan 2023 05:29:24 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
www.googletagmanager.com/gtag/js?id=AW-768686761
200 OK 69 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-768686761
IP
File type ASCII text, with very long lines (9832)
Hash e0a5ce6cb95079fe3023e0ec40c0853b
79da06f2ec8f9e0325c5bc53c41c6f6953442c91
af488dba982d7309aae02ad03deba8b92f26b604baa30f3830a512fbb08c90c5
GET /gtag/js?id=AW-768686761 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 06:13:36 GMT
expires: Mon, 30 Jan 2023 06:13:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69239
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-8LDLLTEV0V
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-8LDLLTEV0V
IP
File type ASCII text, with very long lines (21849)
Hash a2e9bef38f259defe308cb6e408b0136
be4a31953578c57fbe330bbb3a9578508be14358
ff2c9d5aa69ba4c5c9c2cd1c2e1d7d77d0a30200b314508df03c11fa8947a29c
GET /gtag/js?id=G-8LDLLTEV0V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 06:13:36 GMT
expires: Mon, 30 Jan 2023 06:13:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77791
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PS52867&l=dataLayer
200 OK 100 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PS52867&l=dataLayer
IP
File type ASCII text, with very long lines (43010)
Size 100 kB (100126 bytes)
Hash bc4a21f4b67dd83448652fc9f66f413b
313a9265a8e23de15a29504c9dd3d5ecf945b120
b195a698fc965ae57445f6c58c9f97a8b0ced4b1d93bd3ee897ad4bb464518f1
GET /gtm.js?id=GTM-PS52867&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 06:13:36 GMT
expires: Mon, 30 Jan 2023 06:13:36 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100126
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash b042b7f57812777b3726c1474f8164a3
d2a0d1213aa7b5c15a9d1d90a16f50567f78877e
175088c024dbc02cc15755733ae5756b0321025d0c1cd93f00bf706e25159f1f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2652
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:36 GMT
Last-Modified: Mon, 30 Jan 2023 05:29:24 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash df54df0dc7cc8659a60fded30903f3a0
16782da03e471687a369d3929b565de04557dc23
2b60333ba9715406492bdd30007c4ca3e9334c5e4912e70def43dd18294089ba
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 06:13:36 GMT
Etag: "63d69115-1d7"
Last-Modified: Mon, 30 Jan 2023 04:31:03 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QVwQHMA8MOfl5h3vxv9d1sUvCZYlSPm1EZWefZOlcIk8xxrmW8N9kg==
Age: 6153
fonts.ub-assets.com/css?family=Source+Sans+Pro:600,300,regular
200 OK 670 B URL HTTP/2 fonts.ub-assets.com/css?family=Source+Sans+Pro:600,300,regular
IP
Hash aae59880abeac1a7f52ed564b6d7be35
93732167b6db87addc3f88504ea1c7eddb911626
e087e48c5b8a68c18bd7932ef2b5690d61939dbbebbd791d4094fa64a749b660
GET /css?family=Source+Sans+Pro:600,300,regular HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 670
date: Mon, 30 Jan 2023 06:13:36 GMT
x-amzn-requestid: f304a471-128a-49b7-a527-d55806b33ff8
x-xss-protection: 0
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
timing-allow-origin: *
cross-origin-opener-policy: same-origin-allow-popups
x-amz-apigw-id: fivyrEv6oAMFRgQ=
cache-control: private, max-age=86400
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-63d76010-2b3213e03d4b772c269d2f9e
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CYG6zwSmjLyjDyE218McnZ6LsQ35uf4IwqFMZyr2WKI_xLnz9My_6g==
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css
200 OK 7.3 kB URL HTTP/2 use.fontawesome.com/releases/v4.7.0/css/font-awesome-css.min.css
IP
File type ASCII text, with very long lines (30343)
Hash 99f619a35c9c8eb946d2609cd9f8859b
0906915de4bace6e55e2503104579b8eeb1a1636
9f77a66ac6380a1e9a04a308b5621efebebb5be0cd70dabf01044db8b1bc7e78
GET /releases/v4.7.0/css/font-awesome-css.min.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.fontawesome.com/7f85a56ba4.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/css
x-amz-id-2: 4oaPxNXbZrbMpVXNLSQlBboZPFKL8noMkNUUxaBubvGRsI7RlJJX4pb7Po3Uzl1YzF5h0OrsdiA=
x-amz-request-id: 34H404B15Y6RAWGB
last-modified: Wed, 30 Jun 2021 15:26:48 GMT
etag: W/"36082410df2ef7f83932219089dc1443"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 205349
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ohaffRWE75kVhsrYO2kyFP%2ByCHPiPZAmryaXaD%2FY%2BOFokeYRmIDRmjpmVzEfSI2UVKMu2gsY4MpAFCW5%2F3Ip1%2FYbatZgpkQ431GsjMGTFZk%2FdMR1MMzPp754rPad3dVCdAFqyQQv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79181009f8157717-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7950
Expires: Mon, 30 Jan 2023 08:26:07 GMT
Date: Mon, 30 Jan 2023 06:13:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7950
Expires: Mon, 30 Jan 2023 08:26:07 GMT
Date: Mon, 30 Jan 2023 06:13:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d55e9c-b793-48b6-9641-536d9d4b8a49.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d55e9c-b793-48b6-9641-536d9d4b8a49.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ce4f845d4cdd467b4c82d8fbeb9ae0b
68257cdadb6e13a8f7f5e2354aca225286107a79
243b58df1616fd8b78c11302dbf90c97ecb6a3b289abe5f3439252cdbf304892
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d55e9c-b793-48b6-9641-536d9d4b8a49.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9150
x-amzn-requestid: 2b8949c8-5c97-49f5-8784-85daa42adff1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj4NF1moAMFQ9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e69a-2ab06022306835b013c1e46f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NEYfOHRSbqSqgj9m4A-z6jFKKbaiYC9DKmggHLFvSAK88FMnfXMn1Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:23:20 GMT
age: 28217
etag: "68257cdadb6e13a8f7f5e2354aca225286107a79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 546f1cb9f94ea553ae884a6f50c6bd3d
fd08d9841bcd8864aaf2e5d93ca61b31246b6db5
5aba48ac6c65e371c6c1aeee43f97670f196d3a3933b9f5812a67be90b7dbdfa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5764
x-amzn-requestid: 33ebf979-ba40-451e-bbdb-3ee4a9dc07ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhksyGRVoAMF5UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7eb-55fcbb4d6d88dbf758409801;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X3lzViVGoynSgoeenp6EIU2E3FMSRlKNGOy73pIOAASV11hOk2B4UA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:27 GMT
age: 28930
etag: "fd08d9841bcd8864aaf2e5d93ca61b31246b6db5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UNub7Gd4S0ogn5EJhtJVu8q1qML5_4eL2lIPQXiAuXy_q-XiR4s-5w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:21 GMT
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
age: 29896
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5190c0bdc6abe0ee258e9f8c20ddaf51
d60f280f8a742480527dbc32d08f321f972d4fcf
874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12507
x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFaJoAMFqKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UDJKl99GiUxTW_EgWFDjLaJZbKFhfaJR-XRLsbQphwHuCXczDlxrDA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:54:37 GMT
age: 29940
etag: "d60f280f8a742480527dbc32d08f321f972d4fcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:08 GMT
age: 30029
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 20:46:17 GMT
age: 34040
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
events.ub-analytics.com/i?stm=1675059227446&e=pv&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&page=FXTM%20%7C%20Trade%20Gold&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=6e69e0b8-8490-4e5e-96ba-e65cedbed6e1&dtm=1675059227444&vp=1280x939&ds=1268x4297&vid=1&sid=bd9d58ce-d91b-4731-8f0c-db00a1452061&duid=ffcb08a5-55fb-44c2-bef5-bf909d8ad962&uid=dcb68fb8-3f34-41b9-87aa-231677589858&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiMDM4YWMzYTQtZjU1Ny00MWFjLWI5YjItN2ZlOGM2ZTFkNTI5IiwidmFyaWFudElkIjoiYSIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19
200 OK 43 B URL HTTP/2 events.ub-analytics.com/i?stm=1675059227446&e=pv&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&page=FXTM%20%7C%20Trade%20Gold&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=6e69e0b8-8490-4e5e-96ba-e65cedbed6e1&dtm=1675059227444&vp=1280x939&ds=1268x4297&vid=1&sid=bd9d58ce-d91b-4731-8f0c-db00a1452061&duid=ffcb08a5-55fb-44c2-bef5-bf909d8ad962&uid=dcb68fb8-3f34-41b9-87aa-231677589858&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiMDM4YWMzYTQtZjU1Ny00MWFjLWI5YjItN2ZlOGM2ZTFkNTI5IiwidmFyaWFudElkIjoiYSIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1675059227446&e=pv&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&page=FXTM%20%7C%20Trade%20Gold&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=6e69e0b8-8490-4e5e-96ba-e65cedbed6e1&dtm=1675059227444&vp=1280x939&ds=1268x4297&vid=1&sid=bd9d58ce-d91b-4731-8f0c-db00a1452061&duid=ffcb08a5-55fb-44c2-bef5-bf909d8ad962&uid=dcb68fb8-3f34-41b9-87aa-231677589858&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiMDM4YWMzYTQtZjU1Ny00MWFjLWI5YjItN2ZlOGM2ZTFkNTI5IiwidmFyaWFudElkIjoiYSIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19 HTTP/1.1
Host: events.ub-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
content-type: image/gif
content-length: 43
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: *
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/28709cbc-facebook_1019019000000000000000.png
200 OK 1.3 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/28709cbc-facebook_1019019000000000000000.png
IP
File type PNG image data, 63 x 63, 8-bit colormap, non-interlaced\012- data
Hash aad7bc5836ca5e74b430a04fff4950af
c4cddbfdad32e304cb7fefaf3bca284b5e72f3d0
8d878a91cb9bd80e161cec823d142539ac8acfd94dac7559252fa8817c4ec99e
GET /register.fxtm.com/gold-1/28709cbc-facebook_1019019000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1310
date: Thu, 27 Oct 2022 06:29:49 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "aad7bc5836ca5e74b430a04fff4950af"
cache-control: max-age=31557600
x-amz-version-id: 4hkSY9PCBvyvzGaz5uJFcHoHANxQyiXP
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l6qEyH5wL8pTdr79_858JJuI-4PbdZC2pga8FStrYytNKBt6-PYoHw==
age: 8207029
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/cfeadbb1-twitter_1019019000000000000000.png
200 OK 1.4 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/cfeadbb1-twitter_1019019000000000000000.png
IP
File type PNG image data, 63 x 63, 8-bit colormap, non-interlaced\012- data
Hash 6f99338d237ff0787401a300620cf9e0
5b09f4b8c37f33d699dbc95d109ec7a305aa5560
2261149ea8c2b1a9b17f9c1bdca9373f6b9ee85a9ccb2cf29da9fab8e2845b34
GET /register.fxtm.com/gold-1/cfeadbb1-twitter_1019019000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1434
date: Thu, 10 Nov 2022 04:03:41 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "6f99338d237ff0787401a300620cf9e0"
cache-control: max-age=31557600
x-amz-version-id: yWL45o79p6xOH0NfotlCHXK1NzhKsrBq
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BTfa9QKmcML3u8FCYz3BoApK6RzVLBc1apkwNj3moKs62ohxop_A4g==
age: 7006197
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/82470cde-instagram_1019019000000000000000.png
200 OK 5.1 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/82470cde-instagram_1019019000000000000000.png
IP
File type PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash e863af6521e0e19c10f8f726d1b6841d
286432de1c2f836c8b22658f790c0d5b950d7543
d002599722ac76197f7d2d428cf6cb3e2c9386d22ac1cfcc82c2d7ade5af8dbb
GET /register.fxtm.com/gold-1/82470cde-instagram_1019019000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5138
date: Wed, 09 Nov 2022 01:59:40 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "e863af6521e0e19c10f8f726d1b6841d"
cache-control: max-age=31557600
x-amz-version-id: _HV4Wo4Jbx.ry6i6DP.jVCj1YfVqgVO2
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LMOrE43flrP9JdaG8kahp7fnzzQqbWEl0Agz1vdTASVKO7p8f0f9Jg==
age: 7100038
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/8a313a5c-icons-3x_101u01u000000000000000.png
200 OK 3.2 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/8a313a5c-icons-3x_101u01u000000000000000.png
IP
File type PNG image data, 198 x 197, 8-bit colormap, non-interlaced\012- data
Hash 6d39b0cff5d3266ba7e8fe32c6cdc2a6
c5e2eab6f33abea70e43a348d944edbf7b08f972
bdaf46009ef8a5bb121afe4d116c3191447880f2f1494e2a0d546a1102b7f9f6
GET /register.fxtm.com/gold-1/8a313a5c-icons-3x_101u01u000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3235
date: Fri, 11 Nov 2022 00:08:45 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "6d39b0cff5d3266ba7e8fe32c6cdc2a6"
cache-control: max-age=31557600
x-amz-version-id: l21HxE8QBFZS5i4BIeT0T.NxBoM4zhO9
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PyjSKVhUOAK6jFNGCD2a208HlZt60si7vOWAaBCypLr8QA91rS1cVw==
age: 6933893
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/1e0aeec9-image-42-3x_107d07d000000000000000.png
200 OK 122 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/1e0aeec9-image-42-3x_107d07d000000000000000.png
IP
File type PNG image data, 265 x 265, 8-bit/color RGBA, non-interlaced\012- data
Size 122 kB (122086 bytes)
Hash af1cb6215e7c587c90210ac6ff7f02ff
80c2405d6107ec080b2d5200a9f3d749f14905f7
458f1ef72bb3a89295f14882534e3e149d0610b610954810df116fb5be98bf0d
GET /register.fxtm.com/gold-1/1e0aeec9-image-42-3x_107d07d000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 122086
date: Mon, 31 Oct 2022 03:48:56 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "af1cb6215e7c587c90210ac6ff7f02ff"
cache-control: max-age=31557600
x-amz-version-id: fCSudKXLhQlbNHczD37_.IImzjMamoAA
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _HY4XAFvqOU3oCayJ7vsiOG_7cvu-mvI0m_m4Khj7pmI5_ed42E15w==
age: 7871082
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/4b26f41f-icons-3x_101601n000000000000000.png
200 OK 980 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/4b26f41f-icons-3x_101601n000000000000000.png
IP
File type PNG image data, 124 x 174, 4-bit colormap, non-interlaced\012- data
Hash bed28d8f816da625b9614661ad73fd65
00bfe52d332e4606b8475b1f81f27f616b5ea3df
9a5523d8a27b31427b4ae12007bbe591af985bd8d3eacb5a3d905bbaa1723943
GET /register.fxtm.com/gold-1/4b26f41f-icons-3x_101601n000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 980
date: Sun, 18 Sep 2022 07:18:46 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "bed28d8f816da625b9614661ad73fd65"
cache-control: max-age=31557600
x-amz-version-id: b5QzgLo5RAGpjEMhCSI2ql4bYRtw1Nus
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VTKLOKiHIjBr_BU38B113n6jdbKeVKzZ_uzOzWZwNnJj2SOtUIGRaA==
age: 11573692
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/e5fc8b40-icons-3x_101v01p000000000000000.png
200 OK 2.8 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/e5fc8b40-icons-3x_101v01p000000000000000.png
IP
File type PNG image data, 199 x 181, 8-bit colormap, non-interlaced\012- data
Hash 7afc7c5227f3327e6dc2bb352eb8199f
a04742b99e37dc0d8166823c71e5c43e004d8a04
4b46999d004e6163e00ddbdfd9b9af1ecec3ee8db25b5fd2549170edb70eb018
GET /register.fxtm.com/gold-1/e5fc8b40-icons-3x_101v01p000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2781
date: Sat, 05 Nov 2022 08:11:33 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "7afc7c5227f3327e6dc2bb352eb8199f"
cache-control: max-age=31557600
x-amz-version-id: OPeOZIlPxWI1.5BWZ9n1_pxEhiGjCjFd
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9ZIMKa11bD35nef9jUSIpEzi1aPD0TEF3LV8t4Sj4V8MPBjgYJplVA==
age: 7423325
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/cabb5bbe-become-a-better-trader_102001w000000000000000.png
200 OK 978 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/cabb5bbe-become-a-better-trader_102001w000000000000000.png
IP
File type PNG image data, 215 x 201, 4-bit colormap, non-interlaced\012- data
Hash 97e348ab97dc58de39310c7fb30abf6a
a883a578074a59b158f8994997bec1c7e5538361
bf8156c313fc13259fcb76f3a0bbace48fc6647797964e2fb0d8bc4820033709
GET /register.fxtm.com/gold-1/cabb5bbe-become-a-better-trader_102001w000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 978
date: Fri, 28 Oct 2022 01:43:04 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: "97e348ab97dc58de39310c7fb30abf6a"
cache-control: max-age=31557600
x-amz-version-id: GNtJ5eyCNhf1V9tObOdDkuRv2J9Cyoi2
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nqNuxoR8P4LYKlRZuPA6KCavIq3PJPkW4UZXzNsnU-2-lHbGVd0FKw==
age: 8137834
X-Firefox-Spdy: h2
cdn.amplitude.com/libs/amplitude-7.2.1-min.gz.js
200 OK 19 kB URL HTTP/2 cdn.amplitude.com/libs/amplitude-7.2.1-min.gz.js
IP
File type ASCII text, with very long lines (60877)
Hash e7ee6bc7f428f90fb1b1ed0e94b9f835
12a8cedc4a363af306b438111de73bc4d8b399d7
4bdadec687b990a491b8a797c8fbfbea6e30b2a28bda402760262bbfc982a3af
GET /libs/amplitude-7.2.1-min.gz.js HTTP/1.1
Host: cdn.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 19222
date: Wed, 31 Aug 2022 05:08:18 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Tue, 22 Sep 2020 19:51:25 GMT
etag: "e7ee6bc7f428f90fb1b1ed0e94b9f835"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rtLe8nVXDx8sL7XBGT5sDlFBE.TwGFEn
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s8xKZ8TF4t0MZWV1B1ngVn78v0PHxm-j98MelLqoD3a1pcCc2YuS5w==
age: 13136720
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 30 Jan 2023 05:46:59 GMT
expires: Mon, 30 Jan 2023 07:46:59 GMT
cache-control: public, max-age=7200
age: 1598
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platform.twitter.com/oct.js
301 Moved Permanently 0 B URL HTTP/1.1 platform.twitter.com/oct.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /oct.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Date: Mon, 30 Jan 2023 06:13:37 GMT
Location: https://static.ads-twitter.com/oct.js
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F716)
Server-Timing: x-cache;desc= ,x-tw-cdn;desc=VZ
x-tw-cdn: VZ
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.ub-assets.com/fonts/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.ub-assets.com/fonts/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /fonts/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: font/woff2
content-length: 13036
date: Thu, 24 Nov 2022 08:27:50 GMT
x-amzn-requestid: 67f38248-5b3e-42e2-9bed-5b6e6ecdac2e
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 13036
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: cGOpBG0-IAMFblQ=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-637f2b06-6ea340235b7374631136ccdb
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q8zTvN_RYMpxauxzTS6QL5hIXARQn-9DM5lb6agT9zv25E7SOo_xzA==
age: 5780747
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/2ff3635e-quotation-mark.svg
200 OK 14 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/2ff3635e-quotation-mark.svg
IP
Hash 75b42a14bf11984a9dfd61bdc594affc
ce120fd8894822b2cc1ad86b1342b9ca3fcfde11
418feddf8d200f50cf11a0102713572f38860215accbc474ce6a2a1a3304845e
GET /register.fxtm.com/gold-1/2ff3635e-quotation-mark.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 24 Sep 2022 04:08:59 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: W/"3d459879cef48975e8fbc88fcadb03c8"
cache-control: max-age=31557600
x-amz-version-id: NyTTD9BYkMo5lhmnW_PwsUWiuFQ6dpfr
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1u1iQcFpyt--gpM6JK8_vFKyvKlmbO7bU4dmjbXG3mMewXPZ2o-bEg==
age: 11066679
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/b3153b37-fxtm-logo-gives-you-more.svg
200 OK 16 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/b3153b37-fxtm-logo-gives-you-more.svg
IP
Hash 596ad773aa9b88a54885fc1bbb92468f
e20f2c89d4311ca5087efbf4eaaf724d4e672490
9ac4e3d2101cdb2577bdcc1487ff01b5a7fc65f7a4ccbf3e28ee841203918d9c
GET /register.fxtm.com/gold-1/b3153b37-fxtm-logo-gives-you-more.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 20 Sep 2022 03:08:21 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: W/"21096ad9de50324cc862d3433f6878bb"
cache-control: max-age=31557600
x-amz-version-id: d9nvBTKuxPe55gmWWIA8xFFD8r535opm
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AZM3P-12_oiTevR-j--q0sI8q50Vs6Zo305zP_WcsyQ4NtGGhydSCQ==
age: 11415917
X-Firefox-Spdy: h2
identity.mparticle.com/v1/identify
204 No Content 0 B URL HTTP/2 identity.mparticle.com/v1/identify
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/identify HTTP/1.1
Host: identity.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-mp-key
Referer: https://register.fxtm.com/
Origin: https://register.fxtm.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Kestrel
access-control-allow-headers: content-type,x-mp-key
access-control-allow-methods: POST
access-control-allow-origin: *
x-origin-name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:37 GMT
via: 1.1 varnish
age: 2875
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 328
x-timer: S1675059217.259064,VS0,VE0
strict-transport-security: max-age=900
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/768686761/?random=1675059227850&cv=11&fst=1675059227850&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&auid=377538264.1675059228&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 979 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/768686761/?random=1675059227850&cv=11&fst=1675059227850&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&auid=377538264.1675059228&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2157), with no line terminators
Hash 971af06ddc7df1bca839b6673297bac1
c22774988f775524bc1c19bc866ad925312439ac
8292c4552dbab79a06c68ad0bc4f3e83bf77a7e20b689b80fdba7277023b756d
GET /pagead/viewthroughconversion/768686761/?random=1675059227850&cv=11&fst=1675059227850&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&auid=377538264.1675059228&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 979
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 06:28:37 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.ads-twitter.com/oct.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/oct.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /oct.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:37 GMT
x-served-by: cache-iad-kiad7000092-IAD, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:37 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/98114653-grey-map.svg
200 OK 20 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/98114653-grey-map.svg
IP
Hash d543a7d18d7bcce6e0f170aa9483e08b
8103b359c9d8dac17aa32c013f3dd486f5ae0c45
04c4858670c8d42d066e702556742b01b08167c8b36b7b2e9a30e2cc37df4ce2
GET /register.fxtm.com/gold-1/98114653-grey-map.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 02 Sep 2022 08:49:45 GMT
last-modified: Wed, 31 Aug 2022 07:35:33 GMT
etag: W/"90334e87879828f27aa771aed611fc0d"
cache-control: max-age=31557600
x-amz-version-id: 2.W_KXSq2ivueJYz_v3wT0R7wo3a7y3O
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X-F9fApg53h3f060pAGPDH-F-wKmjKSWHS7mXQ_qmF5UJzCtLPrVJA==
age: 12950633
X-Firefox-Spdy: h2
9234067.fls.doubleclick.net/activityi;src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g?
200 OK 365 B URL HTTP/2 9234067.fls.doubleclick.net/activityi;src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1027), with no line terminators
Hash 1aff76c0d967f3a9f88d39c2e5533012
cc2a5a40070b0050af593782f5ce9d822de36fd3
cf7b8fb810bc7d7bf9494e3ac3e7f8bfdbc5d06e738cf2bdb42aee213d0f8168
GET /activityi;src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g? HTTP/1.1
Host: 9234067.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:37 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 365
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 06:28:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
my.forextime.com/api/js/api/registration/check
200 OK 0 B URL HTTP/2 my.forextime.com/api/js/api/registration/check
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/js/api/registration/check HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 13
Origin: https://my.forextime.com
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.com/; language=en; origin=https://register.fxtm.com; topUrl=https://register.fxtm.com/; redirect=; redirect_auth=; redirect_login=; country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
content-type: application/json
content-length: 0
set-cookie: SESSe3e38161f9885fcea8b5789dd86182fa=bDLkPMCAsfMrVGtAPH-W6aFEG8hEDQ8IWBfJpppfn4M; expires=Wed, 22-Feb-2023 09:46:57 GMT; Max-Age=2000000; path=/; domain=.myapi.forextime.com; HttpOnly
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7918100cadc7b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash d06ae4c607bf5f868f9b300b22384cfb
2629b2e0228105e2c1b21012c8095c041f857f97
65c2fdfa47c0e848e895e365ca185438e33fdae5776f4c430bf235cc24c35077
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5402
Cache-Control: max-age=112276
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Etag: "63d65e8b-138"
Expires: Tue, 31 Jan 2023 13:24:53 GMT
Last-Modified: Sun, 29 Jan 2023 11:54:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 312
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b4f2ac81e8bd34893fc00068bcea2521
4b8be625eae347b5e5ded85a8b9ddb8e111a72d8
371d5afea257de9709c50a881c8df553c710a94fc465900064b4c9373b7bf98d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163233
Date: Mon, 30 Jan 2023 06:13:37 GMT
Etag: "63d732e5-1d7"
Expires: Wed, 01 Feb 2023 03:34:10 GMT
Last-Modified: Mon, 30 Jan 2023 03:00:53 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wAiNpT9_83xLfXTkNe-vCefOpHZCnWMbmHReLJxV9Dc4fN9h0oIycw==
Age: 1997
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ob.cheqzone.com/clicktrue_invocation.js?id=11463
200 OK 32 kB URL HTTP/2 ob.cheqzone.com/clicktrue_invocation.js?id=11463
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 34324a5ec7345151657efc3c850fe2f8
7ab2aa537265ade4d3215264931e67446af2337d
32314fdc58a464d1a13bddd1665181e1a826ec76d480c90b0a4f29f7ff7be9d2
GET /clicktrue_invocation.js?id=11463 HTTP/1.1
Host: ob.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 31876
cache-control: max-age=43200
content-encoding: gzip
date: Sun, 29 Jan 2023 19:58:41 GMT
etag: "1570d-KpPBg68XdWZ8G+p6SoMdcdAxMZo"
expires: Mon, 30 Jan 2023 07:58:41 GMT
server: Caddy
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LoQtDLNtkB_dsXjJ766-pGDSHsIVNlb_zqtNnGChcOlV149cwRDttg==
age: 36896
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDMB9S3C77U15JGRJPGG&lib=ttq
200 OK 1.3 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDMB9S3C77U15JGRJPGG&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2727)
Hash 27907a2114caa53d6d28e57f8efa4eee
0130f8f882afb5cfcd792cfd842c15f169b7bbe8
9fd4e4e1b0afce75b77d251e61c2d8d619f6ec6975e587d7a914732b30d3d7f6
GET /i18n/pixel/events.js?sdkid=CDMB9S3C77U15JGRJPGG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2023013006133796BD087E84DF29DDA9E3
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b59e1fbe534eebc3ac35f9c6e4d9e27ea31802184316e92f01cddb71245fb067af4b090a65705a425f0dbe26e0678ee1277cef0553e1da3c24036dd0873829eb464e3e2f3dca5c171c330f1209b9103c17
content-encoding: gzip
content-length: 1340
x-origin-response-time: 9,23.218.223.22
x-akamai-request-id: eec3bcb.77527016
expires: Mon, 30 Jan 2023 06:13:37 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 30 Jan 2023 06:13:37 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2L2BIZVHDeQdGEyoXYsHWkl38w0; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-218-223-22.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=120, origin; dur=9, inner; dur=3
x-parent-response-time: 128,23.36.79.13
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
200 OK 364 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1026), with no line terminators
Hash 18ccc80626510ff2961190ccf3a6ee91
c15e878c4908f791c85f1445589f04b2f40ce41e
78deebe9a6108f6c7a1c21ddd8b62ff4a68b033775c9bb3d9840513472370ff9
GET /ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9234067.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:37 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 364
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
200 OK 70 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash e470cdee4fb19533b3076cf5e6445ff0
3fa761e875d60e55f5464f0cee6207bca0d2cbed
e7fa855a1d974007175332f96be3ec95d6c6b94f7f4180dac64e4cf7d3d7115a
GET /i18n/pixel/static/main.MWE2YWY2YTgzMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: _ttp=2L2BIZVHDeQdGEyoXYsHWkl38w0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175829D91E25D7003EA9A803DC
x-tt-trace-host: 01f6175df718ab226765794aaab21df67154f0b53b7f693af896ad93db0deb0ef832d63bb31438f0c5e0aa4878e941bb88c0976593910f5ab417b5ca255605e18e5e0fd52686d843afbd593b8bd0d366fe4ffb20082da9c196e6db1f01a9ce8992
content-encoding: gzip
content-length: 70411
date: Mon, 30 Jan 2023 06:13:37 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 775271c3
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=4f5e704d-10a1-4dce-9f1c-4bfe8780a530&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=4f5e704d-10a1-4dce-9f1c-4bfe8780a530&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=4f5e704d-10a1-4dce-9f1c-4bfe8780a530&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=4c02226f-e58a-4b3c-92e4-925effde0ee2; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:37 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 3da2eef111f5429c
strict-transport-security: max-age=0
x-response-time: 103
x-connection-hash: 7fe3481b99b51b7bfbec9dfcc6306544c8466d3222c4268d5e7a17ed544ec6cb
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 471 B IP
Hash 4d2529e0c0c6f7146a3e0b4cf87c3c5b
8b270c03a3644bd040783f2d341c47c6e0fc0ddb
c1c0a900b85b2b671f52cb27ff581e1b60f8ecc87446580d2191f2b39b31ba00
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 06:13:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 15:38:21 GMT
Expires: Sat, 04 Feb 2023 15:38:20 GMT
Etag: "8b270c03a3644bd040783f2d341c47c6e0fc0ddb"
Cache-Control: max-age=602986,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 54
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7918100e59f7b4fd-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my.forextime.com/api/sites/default/files/translations/mobile-reg/en-uk.json
200 OK 35 kB URL HTTP/2 my.forextime.com/api/sites/default/files/translations/mobile-reg/en-uk.json
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f192fa2ec9702e9ac1921c30ad01bded
01cd7cd91372d51df7b5bb7254bdc13599f06645
3e8d1cf596428da358096370476ade8028d1074b9e7f81384c3ddd454faa7834
GET /api/sites/default/files/translations/mobile-reg/en-uk.json HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.com/; language=en; origin=https://register.fxtm.com; topUrl=https://register.fxtm.com/; redirect=; redirect_auth=; redirect_login=; country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
content-type: application/json
last-modified: Thu, 26 Jan 2023 10:46:15 GMT
etag: W/"3ba4-5f32875487925"
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7918100cadc6b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://9234067.fls.doubleclick.net/ddm/fls/r/src=9234067;type=brows0;cat=allpa0;ord=7259083094933;gtm=2wg1p0;gcldc=COm7-9_R7vwCFSCOAAAd-54P1g;auiddc=377538264.1675059228;u10=undefined;u3=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;u11=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g;~oref=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 897
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: _ttp=2L2BIZVHDeQdGEyoXYsHWkl38w0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230130061337CDFF524602CE14E3418A
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b5a8f67d0f8133cc3590f6188a6cacb7d57d27921cc83529c8c1a24696c5408a362489bd63566c93c156db91ff91bf6b465f43699adacccba0ee7301d3ef787660ab6fbcab61b00d984dfe2c981fd8108a
x-origin-response-time: 23,23.218.223.23
x-akamai-request-id: 467d84d.775272a7
expires: Mon, 30 Jan 2023 06:13:37 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 30 Jan 2023 06:13:37 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-218-223-23.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=104, origin; dur=23, inner; dur=20
x-parent-response-time: 124,23.36.79.13
X-Firefox-Spdy: h2
t.co/i/adsct?bci=4&eci=1&event_id=af7c70c2-404c-47db-baa4-4de5040fe6c6&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=4&eci=1&event_id=af7c70c2-404c-47db-baa4-4de5040fe6c6&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=4&eci=1&event_id=af7c70c2-404c-47db-baa4-4de5040fe6c6&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: muc_ads=4c02226f-e58a-4b3c-92e4-925effde0ee2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 04dbac95a9a41e02
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: 7fe3481b99b51b7bfbec9dfcc6306544c8466d3222c4268d5e7a17ed544ec6cb
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 781 B IP
File type gzip compressed data, max speed, from Unix\012- data
Hash fc88fd867aab3d65b3c3abffafe83b2d
eeacba3e7636d7c4c6395bcbb9011ed328f7ecb8
6231a91e60f3e165f41d4b8426ddc656020988f4b48c72c78501cc79bdec6430
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api2.amplitude.com/
200 OK 7 B IP
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api2.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 1424
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-63d76011-205529c00213c99c6f88ac13
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion.js
200 OK 18 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
Hash 36a135ae2dcee7724f325921dfca7255
e7ed24012ecf67f07ffba631f4ec7f07ffa2aad3
e4a21964513bce40def48105ddefcf9ac13eb2a6e98dba461bf18e38ab4dcbb0
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9234067.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 30 Jan 2023 06:13:37 GMT
expires: Mon, 30 Jan 2023 06:13:37 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 9276738928452068410
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16812
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3cdf7a37df5fd660125c11f6c7f44064
929c5ec370ad00ff0508f86174d450407ac680bd
22ffbbc922da324c956478cfd8cb5bcc269831ac5c85e22ef6ecdd69e3512a7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleadservices.com/pagead/conversion/11017218552/?random=1675059228768&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 www.googleadservices.com/pagead/conversion/11017218552/?random=1675059228768&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2350), with no line terminators
Hash 70523e35c8a6df8432d9d29569c90f77
00ebd373e11b8e7413d0e4917534b9a47380e1b2
1307e7f331786ad9e679e978dbb82f403bbb335f2489f0fe72c4871c840c39ee
GET /pagead/conversion/11017218552/?random=1675059228768&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9234067.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t.co/i/adsct?bci=4&eci=1&event_id=09f1928d-8fd3-4853-801e-1bd5bb579d97&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=4&eci=1&event_id=09f1928d-8fd3-4853-801e-1bd5bb579d97&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=4&eci=1&event_id=09f1928d-8fd3-4853-801e-1bd5bb579d97&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: muc_ads=4c02226f-e58a-4b3c-92e4-925effde0ee2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: f0247be2210b4cec
strict-transport-security: max-age=0
x-response-time: 104
x-connection-hash: 7fe3481b99b51b7bfbec9dfcc6306544c8466d3222c4268d5e7a17ed544ec6cb
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-MX7217M0KX>m=2oe1p0&_p=1248742311&_gaz=1&cid=1798627469.1675059228&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675059228&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&dt=FXTM%20%7C%20Trade%20Gold&en=page_view&_fv=1&_ss=2&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-01-30T06%3A13%3A48.53%2B00%3A00&ep.gtm_version=72&ep.domain_region=global
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-MX7217M0KX>m=2oe1p0&_p=1248742311&_gaz=1&cid=1798627469.1675059228&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675059228&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&dt=FXTM%20%7C%20Trade%20Gold&en=page_view&_fv=1&_ss=2&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-01-30T06%3A13%3A48.53%2B00%3A00&ep.gtm_version=72&ep.domain_region=global
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MX7217M0KX>m=2oe1p0&_p=1248742311&_gaz=1&cid=1798627469.1675059228&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675059228&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&dt=FXTM%20%7C%20Trade%20Gold&en=page_view&_fv=1&_ss=2&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-01-30T06%3A13%3A48.53%2B00%3A00&ep.gtm_version=72&ep.domain_region=global HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://register.fxtm.com
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/fxLight.j0vpcszk8pvqtfc8omh59.css
200 OK 16 kB URL HTTP/2 my.forextime.com/en/identity/registration/assets/fxLight.j0vpcszk8pvqtfc8omh59.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 54cbbf7288cd1b34d48151499116b1bb
188174e589ba97cfc49097f11fcf389f6bd5bcfe
a8bafcfd98afd7e395cee769285cdbbbdb3a787735d022b0537e315bfd92094a
GET /en/identity/registration/assets/fxLight.j0vpcszk8pvqtfc8omh59.css HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.com/; language=en; origin=https://register.fxtm.com; topUrl=https://register.fxtm.com/; redirect=; redirect_auth=; redirect_login=; country=NO
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
content-type: text/css
last-modified: Tue, 24 Jan 2023 09:17:31 GMT
etag: W/"63cfa22b-12561"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7918100c9db8b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-MX7217M0KX&cid=1798627469.1675059228>m=2oe1p0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-MX7217M0KX&cid=1798627469.1675059228>m=2oe1p0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MX7217M0KX&cid=1798627469.1675059228>m=2oe1p0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://register.fxtm.com
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410021-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-37460880-11&cid=1798627469.1675059228&jid=2111575053&gjid=1621909043&_gid=61111875.1675059228&_u=aGDAiEABBAAAAEAEK~&z=1512555066
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-37460880-11&cid=1798627469.1675059228&jid=2111575053&gjid=1621909043&_gid=61111875.1675059228&_u=aGDAiEABBAAAAEAEK~&z=1512555066
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-37460880-11&cid=1798627469.1675059228&jid=2111575053&gjid=1621909043&_gid=61111875.1675059228&_u=aGDAiEABBAAAAEAEK~&z=1512555066 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://register.fxtm.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&gjid=1494398764&_gid=61111875.1675059228&_u=aGHAiEABRAAAAEAEK~&z=1007585068
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&gjid=1494398764&_gid=61111875.1675059228&_u=aGHAiEABRAAAAEAEK~&z=1007585068
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&gjid=1494398764&_gid=61111875.1675059228&_u=aGHAiEABRAAAAEAEK~&z=1007585068 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://register.fxtm.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.9 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (17737), with no line terminators
Hash 69ccf6d91702cd65dedfbad36e94c61b
adce8bd55dcc466c709dc96e230cbdd72fb27645
9a5b793c3b453c30229658bebe68719aa0df37a71ef371a6c6117e123b091e64
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "9f0b052ec22f789c3cc95c26dd0da7f4:1674389451.57807"
Last-Modified: Sun, 22 Jan 2023 12:08:14 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Mon, 30 Jan 2023 06:33:38 GMT
Date: Mon, 30 Jan 2023 06:13:38 GMT
Content-Length: 5884
Connection: keep-alive
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=10755
date: Mon, 30 Jan 2023 06:13:38 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MX7217M0KX&cid=1798627469.1675059228>m=2oe1p0&aip=1&z=776287022
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MX7217M0KX&cid=1798627469.1675059228>m=2oe1p0&aip=1&z=776287022
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MX7217M0KX&cid=1798627469.1675059228>m=2oe1p0&aip=1&z=776287022 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b67335a8e235eacf68e4b7f98cc5dc40
887a9b34cf2ba9371bbe8c93e362c174668cf812
1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b67335a8e235eacf68e4b7f98cc5dc40
887a9b34cf2ba9371bbe8c93e362c174668cf812
1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash c239475b53a2314c43c5922ef55e73f8
e30168fe4daa7e6ebe19591863e7175bf9ad784d
2f985a21771f800b54258c8b1e70a38c9249ef7b9bf2ec61e01d5717c2e204d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2816
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Last-Modified: Mon, 30 Jan 2023 05:26:42 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
obs.cheqzone.com/tracker/tc_imp.gif?e=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&cri=5FwuYVxLI4&ts=575&cb=1675059228918
200 OK 43 B URL HTTP/2 obs.cheqzone.com/tracker/tc_imp.gif?e=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&cri=5FwuYVxLI4&ts=575&cb=1675059228918
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=37dfbd8ee84e00136debc730e3458b959225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5f10896b2417071a10acf9f29f674a808bd8047e3a49ab787f52876d8b36cf0539567597015509320359c1ec6c4f77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebcf179ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b127537a30ca946c75ca92560c7f1675020aae8d2d667802a1a84e2cdef9f12ec1e7527a497efef7f3909821b8cfc248b5038e523964c8f488f0b46882d6f033d3774e92f3d6335a43a0382cecc5567ab890bf299155a01badd3479e1bd6ce60cb7d71cbf6648720d281bdfecbb0a31c7ca96de3f3a86b0e6fe991298ee71dee5303458a3207d08488dfcea3833bd938de9daecc6ff8734635877739979f944278d5e57dad4eb7c11dc633b86b4d7655c13aa90ad0d1f12ca2d47cc11de984da8446a3561122a66324066a5c5fe39d429966f7ef816bf2c857ae956c94c2eff93dd7e3a91f76798bf853489bef580953baace374ae28e4954ef3f27ca076a22d87168506ddac20d55872b2fbd0246a7d720938194005f9b99e66c010ab5710126fa1e31e9bc14752ecb2cde4ae70d0bab58fdaa1faaf0f3668e94d94b75e678b45671cd365546f6df07caa761ccbe9c36b987cc573d9d87094ed53dd025b332a10610180d2a6872e713e99044694d0c5a6b6ca531983b3bb79fbd3612f9d8b462e63eb90c75727b022855a9618e1378546ad8d4faed35391da8da1d9462ae797297f9035e3d4e4b91c8e6d2a1703936d4355b8a15d87f2468aedc38b22b787c771685503db74a217b647f6c430c220493340247c79e65f8e843a57bb67deaeac4cdf9a30d40c30a7652458d794ac1846fc33b5d802d06c5c1c58fe7f7590a5d774d90e7de3c561fd808ea4d91c8d4f5f7444ae34701f&cri=5FwuYVxLI4&ts=575&cb=1675059228918 HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: cg_uuid=328a3b5be08f0fdd819cf4cef7767b70
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Mon, 30 Jan 2023 06:13:38 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/768686761/?random=1675059227850&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3059704071&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/768686761/?random=1675059227850&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3059704071&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/768686761/?random=1675059227850&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3059704071&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6d2677a268c46fe7437bc9ba7f1933f0
c4c8338d86338480d15172e8691dc9b25c9c25bf
0709a1fe6bd9156d9e98f2c986bcb486031947ce2412744efd1e0ff52f7929d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5871
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Last-Modified: Mon, 30 Jan 2023 04:35:47 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
www.google.com/pagead/1p-conversion/11017218552/?random=1850588444&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=EmDXY7LLAdeWxdwPua6vyAI&random=2498480967&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/11017218552/?random=1850588444&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=EmDXY7LLAdeWxdwPua6vyAI&random=2498480967&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/11017218552/?random=1850588444&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=EmDXY7LLAdeWxdwPua6vyAI&random=2498480967&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://9234067.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/11017218552/?random=1850588444&cv=9&fst=1675059228768&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D7259083094933%3Bgtm%3D2wg1p0%3Bgcldc%3DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bauiddc%3D377538264.1675059228%3Bu10%3Dundefined%3Bu3%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%3Bu11%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526u&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=EmDXY7LLAdeWxdwPua6vyAI&random=2498480967&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Fcookiesync.mparticle.com%2Fv1%2Fsync%3Fesid%3D59458%26MPID%3D9216574892721515261%26ID%3D%24UID%26Key%3Dus1-7e64e961d63ef3498e1ff29e51ea3b54%26env%3D2
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fcookiesync.mparticle.com%2Fv1%2Fsync%3Fesid%3D59458%26MPID%3D9216574892721515261%26ID%3D%24UID%26Key%3Dus1-7e64e961d63ef3498e1ff29e51ea3b54%26env%3D2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fcookiesync.mparticle.com%2Fv1%2Fsync%3Fesid%3D59458%26MPID%3D9216574892721515261%26ID%3D%24UID%26Key%3Dus1-7e64e961d63ef3498e1ff29e51ea3b54%26env%3D2 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 30 Jan 2023 06:13:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fcookiesync.mparticle.com%252Fv1%252Fsync%253Fesid%253D59458%2526MPID%253D9216574892721515261%2526ID%253D%2524UID%2526Key%253Dus1-7e64e961d63ef3498e1ff29e51ea3b54%2526env%253D2
AN-X-Request-Uuid: 311400d4-91d4-4ce4-a745-37ff47fce6f2
Set-Cookie: uuid2=8605663182495756442; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 30-Apr-2023 06:13:38 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
www.google.com/pagead/1p-user-list/768686761/?random=1675059227850&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3059704071&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/768686761/?random=1675059227850&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3059704071&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/768686761/?random=1675059227850&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3059704071&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6d2677a268c46fe7437bc9ba7f1933f0
c4c8338d86338480d15172e8691dc9b25c9c25bf
0709a1fe6bd9156d9e98f2c986bcb486031947ce2412744efd1e0ff52f7929d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5871
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Last-Modified: Mon, 30 Jan 2023 04:35:47 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 219
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.302464,VS0,VE18
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 220
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.304007,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1675059228212&id=t2_by64jl2d&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&uuid=2dcdc68c-ea7f-4a25-acaf-7d3c544156cf&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1675059228212&id=t2_by64jl2d&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&uuid=2dcdc68c-ea7f-4a25-acaf-7d3c544156cf&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1675059228212&id=t2_by64jl2d&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&uuid=2dcdc68c-ea7f-4a25-acaf-7d3c544156cf&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
api2.amplitude.com/
200 OK 7 B IP
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api2.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2676
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:38 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-63d76012-6e90cff3644d66a020a43b73
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 836420c13935d169faca8b21969a2d0d
4d04977157d4e25291dc60ad730c80bc66596cd2
dce103fedc54ac7e2a9c173cc6400ab1a376b9808e17b3b3b42bed966934d1f1
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 82299d4818709672d788f20bf99f8df1
etag: "03c4139437954c5ab2c0b0178cc93e77"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 30 Jan 2023 06:24:20 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: g2QgwTk10Wn6yoshlpotDQ==
x-fb-debug: B31xGcbAaogaLD8cFzQLIa3l5qELDXIdSR5W9giGw4/N0UiU5ChfFrrSC/ilapNNAWar9qqi7MEDU4uFNxitNQ==
priority: u=3,i
content-length: 1688
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 06:13:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6d2677a268c46fe7437bc9ba7f1933f0
c4c8338d86338480d15172e8691dc9b25c9c25bf
0709a1fe6bd9156d9e98f2c986bcb486031947ce2412744efd1e0ff52f7929d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1846
Cache-Control: max-age=149737
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Etag: "63d6fec5-139"
Expires: Tue, 31 Jan 2023 23:49:15 GMT
Last-Modified: Sun, 29 Jan 2023 23:18:29 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 313
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&_u=aGHAiEABRAAAAEAEK~&z=2090146889
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&_u=aGHAiEABRAAAAEAEK~&z=2090146889
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&_u=aGHAiEABRAAAAEAEK~&z=2090146889 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/768686761/?random=1675059228909&cv=11&fst=1675059228909&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold>m_ee=1&auid=377538264.1675059228&ec_mode=c&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/768686761/?random=1675059228909&cv=11&fst=1675059228909&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold>m_ee=1&auid=377538264.1675059228&ec_mode=c&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/768686761/?random=1675059228909&cv=11&fst=1675059228909&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold>m_ee=1&auid=377538264.1675059228&ec_mode=c&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/768686761/?random=1675059228909&cv=11&fst=1675059228909&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold>m_ee=1&auid=377538264.1675059228&ec_mode=c&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&_u=aGHAiEABRAAAAEAEK~&z=2090146889
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&_u=aGHAiEABRAAAAEAEK~&z=2090146889
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-37460880-2&cid=1798627469.1675059228&jid=2015465636&_u=aGHAiEABRAAAAEAEK~&z=2090146889 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: OGGNVpUY+hM4cvtph412JUUxgW5rRyujjZV+XYmtVLFEbmceAZ6jGesp52ax1x9cHn8tl/qQtrI/otWHPuwurQ==
content-length: 27815
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 06:13:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 219
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.302616,VS0,VE55
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 640
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.345045,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/content_cards/sync
201 Created 94 B URL HTTP/2 sdk.fra-01.braze.eu/api/v3/content_cards/sync
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ff48a5132228d4b2f51a3ab9b3b449f
bfa7141ee3d55a862740251b5e85998813014429
ff296abf4064a6ae5129325b75fc8767ad629905cb67cc9efeba2a24341d26bf
POST /api/v3/content_cards/sync HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
X-Requested-With: XMLHttpRequest
X-Braze-Api-Key: 6fd4f390-31e4-4ddb-b049-e6a615bc5049
X-Braze-DataRequest: true
X-Braze-ContentCardsRequest: true
Content-Length: 475
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
etag: W/"10dd1df49b235845c4ec2ff3f2510a79"
cache-control: max-age=0, private, must-revalidate
x-request-id: ecb9a6e5-e84d-478b-a647-e3046f9cb4c4
x-runtime: 0.019300
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.260319,VS0,VE39
vary: Origin,Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 610
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.311596,VS0,VE80
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 609
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.313267,VS0,VE79
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 609
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.316313,VS0,VE80
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c239475b53a2314c43c5922ef55e73f8
e30168fe4daa7e6ebe19591863e7175bf9ad784d
2f985a21771f800b54258c8b1e70a38c9249ef7b9bf2ec61e01d5717c2e204d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2816
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 06:13:38 GMT
Last-Modified: Mon, 30 Jan 2023 05:26:42 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.google.com/pagead/1p-user-list/768686761/?random=1675059228898&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1210387816&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/768686761/?random=1675059228898&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1210387816&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/768686761/?random=1675059228898&cv=11&fst=1675058400000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tiba=FXTM%20%7C%20Trade%20Gold&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1210387816&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 06:13:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=0f0484f30f56190fbc8ff724a5130482
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=0f0484f30f56190fbc8ff724a5130482
IP
File type ASCII text, with very long lines (13192)
Hash 622303e4179a565b695ce9e385d98dc4
5848a8063f9a362b73b3a6f27d48732d9319dda9
d72384b5035fc6c6d4d28959f6b95e800d276acfe9ffe9d2099edc32552c3b6b
GET /en_US/sdk.js?hash=0f0484f30f56190fbc8ff724a5130482 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: f20f502d6892a90c01d05a1458b4a253
etag: "3b20f974e162486643a10e38392630f8"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 30 Jan 2024 05:53:28 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: YiMD5BeaVltpXOnjhdmNxA==
x-fb-debug: 5rsIY3yCSjvps71u+xA0+isjGoZiz66pzOixFeooj0GwdhAc7iPvH5Es/ycz2ZUyeLOWtdf0zHGa9wGQGwfJLg==
priority: u=3,i
content-length: 86951
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 06:13:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=4&eci=1&event_id=09f1928d-8fd3-4853-801e-1bd5bb579d97&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=4&eci=1&event_id=09f1928d-8fd3-4853-801e-1bd5bb579d97&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=4&eci=1&event_id=09f1928d-8fd3-4853-801e-1bd5bb579d97&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:38 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_BKBl4a1pVQhI+neVBbSvgg=="; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:38 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: a27d9be4a44cb870
strict-transport-security: max-age=631138519
x-response-time: 103
x-connection-hash: 98b0ccec8480bfe8c1c7d2adde31ced2ef595b99d0642ebc94410a3b3411fdda
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1497822/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1497822/tfa.js
IP
File type ASCII text, with very long lines (59652)
Hash a8d37814a6410adacafc6f7fa40632a6
fad8c78aa4d2c88ff9fec6f52e3356eebbf9b03c
8dd4b310ec133f18c97061caf973e4a33e479007dfd56dda3380da430fc2253e
GET /libtrc/unip/1497822/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k+uR+C38STSnQSMwiNEX21lrNGIZtfR7g/f9q2NzPi+VtoQbCEOVA8ewEbqC+lN+OjGHAy01NHI=
x-amz-request-id: 7XT4GXKQRDHDJQZA
x-amz-replication-status: COMPLETED
last-modified: Sun, 29 Jan 2023 11:06:10 GMT
etag: "6a3919fd1af905effba3e09c0e20bffa"
x-amz-version-id: Q4zQU22cmeDFabl2kKNSSCromY_3ts2H
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675059218.275798,VS0,VE201
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 12
content-length: 18343
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=4&eci=1&event_id=af7c70c2-404c-47db-baa4-4de5040fe6c6&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=4&eci=1&event_id=af7c70c2-404c-47db-baa4-4de5040fe6c6&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=4&eci=1&event_id=af7c70c2-404c-47db-baa4-4de5040fe6c6&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_1iPezQlygT9zw0/gFQy6Nw=="; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:38 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 4ab9878c3f01157d
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: 98b0ccec8480bfe8c1c7d2adde31ced2ef595b99d0642ebc94410a3b3411fdda
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675059229004%26url%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJR9ZfV-pX69AAAAYYBT0gYnrq8JykpvEpFs4iqI8ToCMn70mxBjUxP7R_iAVCz7RMqImb5AHe3lg; Max-Age=2592000; Expires=Wed, 01 Mar 2023 06:13:38 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLhgx88pwnDxwAAAYYBT0gYlmvQOTy41kpZfqcJu14T_ksSKGWoHJRYu6Ev7uM6wS8yxytPmUWBrVZh9NXmJQ; Max-Age=2592000; Expires=Wed, 01 Mar 2023 06:13:38 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&f4bcaef1-516f-4e39-84a2-25e77ce5bee7"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 30-Jan-2024 06:13:38 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2478:u=1:x=1:i=1675059218:t=1675145618:v=2:sig=AQHasZ_byMxTbsuKmQIdWvPT-p2OmPIs"; Expires=Tue, 31 Jan 2023 06:13:38 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzdR2xiK1de0qSlkbY8w==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6E3FFEB0B5FF48E3A1CDF686A266A74D Ref B: OSL30EDGE0118 Ref C: 2023-01-30T06:13:38Z
date: Mon, 30 Jan 2023 06:13:37 GMT
content-length: 0
X-Firefox-Spdy: h2
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=4f5e704d-10a1-4dce-9f1c-4bfe8780a530&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=4f5e704d-10a1-4dce-9f1c-4bfe8780a530&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=4f5e704d-10a1-4dce-9f1c-4bfe8780a530&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=7b137898-18bc-46b2-8428-35d28a555354&tw_document_href=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167505921844494632; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:38 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167505921844494632; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:38 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_UDQYB+Qbb0IJvOsHcHXawA=="; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:38 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167505921844494632; Max-Age=63072000; Expires=Wed, 29 Jan 2025 06:13:38 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 9bbd6600ae97bb69
strict-transport-security: max-age=631138519
x-response-time: 103
x-connection-hash: 98b0ccec8480bfe8c1c7d2adde31ced2ef595b99d0642ebc94410a3b3411fdda
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675059229004%26url%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675059229004%26url%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675059229004%26url%3Dhttps%253A%252F%252Fregister.fxtm.com%252Fgold-1%252F%253Futm_source%253Dtop5forexbrokerz.com%2526utm_medium%253Ddisplay%2526utm_campaign%253Dgold-2022%2526utm_content%253D1x1%2526dclid%253DCOm7-9_R7vwCFSCOAAAd-54P1g%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&7b695134-58d1-4a56-83c8-ac83ffe486b2"; Domain=.linkedin.com; Expires=Tue, 30-Jan-2024 06:13:38 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&2023013006133821508c02-47aa-446e-8477-08a33c4f4b56AQFrIiFfd47np0mtN8A1oBYBTj38AN1k"; Domain=.www.linkedin.com; Expires=Tue, 30-Jan-2024 06:13:38 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUwNTkyMTg7MjswMjFs392/IkU7y3uyY/hGswPr/e+1kLefhXZrGpmYsGJXUA==; Domain=.linkedin.com; Expires=Sat, 29 Jul 2023 06:13:38 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2478:u=1:x=1:i=1675059218:t=1675145618:v=2:sig=AQHasZ_byMxTbsuKmQIdWvPT-p2OmPIs"; Expires=Tue, 31 Jan 2023 06:13:38 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzdR2zab2zn2/hLXE3HQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 12C900E996F6425AA42E2EFAFD82376C Ref B: OSL30EDGE0118 Ref C: 2023-01-30T06:13:38Z
date: Mon, 30 Jan 2023 06:13:38 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=549567273353642&ev=CHEQ&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&rl=&if=false&ts=1675059229423&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675059229422.171140214&it=1675059229163&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=549567273353642&ev=CHEQ&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&rl=&if=false&ts=1675059229423&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675059229422.171140214&it=1675059229163&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=549567273353642&ev=CHEQ&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&rl=&if=false&ts=1675059229423&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675059229422.171140214&it=1675059229163&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 30 Jan 2023 06:13:38 GMT
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 06:13:38 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 44c61ffc1b852462a39ddff5b9d04fd0
tr.outbrain.com/unifiedPixel?marketerId=006325f74137452b8eaa8aec2f8576314a&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&optOut=false&bust=03029362980609087&referrer=
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=006325f74137452b8eaa8aec2f8576314a&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&optOut=false&bust=03029362980609087&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=006325f74137452b8eaa8aec2f8576314a&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&optOut=false&bust=03029362980609087&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 06:13:38 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: 9c681956307b5bac7dbb5828d4fab95f
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4439274&time=1675059229004&url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&288fd65d-4f42-4377-8bc5-68400209f102"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 30-Jan-2024 06:13:38 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2450:u=1:x=1:i=1675059218:t=1675145618:v=2:sig=AQFRyWFzLe4V3RLMyzGhy1c-DXJGkFrk"; Expires=Tue, 31 Jan 2023 06:13:38 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzdR22C1wLdtHOPgK+NA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6CCF9EE7695D4B9598F12CDBADF0D066 Ref B: OSL30EDGE0118 Ref C: 2023-01-30T06:13:38Z
date: Mon, 30 Jan 2023 06:13:38 GMT
content-length: 0
X-Firefox-Spdy: h2
cookiesync.mparticle.com/v1/sync?esid=59458&MPID=9216574892721515261&ID=0&Key=us1-7e64e961d63ef3498e1ff29e51ea3b54&env=2
204 No Content 0 B URL HTTP/2 cookiesync.mparticle.com/v1/sync?esid=59458&MPID=9216574892721515261&ID=0&Key=us1-7e64e961d63ef3498e1ff29e51ea3b54&env=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/sync?esid=59458&MPID=9216574892721515261&ID=0&Key=us1-7e64e961d63ef3498e1ff29e51ea3b54&env=2 HTTP/1.1
Host: cookiesync.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Kestrel
x-origin-name: 6pOFtq5qpnIJ0Pt8WbH5c2--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1677-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.472750,VS0,VE368
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/549567273353642?v=2.9.92&r=stable
200 OK 110 kB URL HTTP/2 connect.facebook.net/signals/config/549567273353642?v=2.9.92&r=stable
IP
File type ASCII text, with very long lines (64471)
Size 110 kB (110055 bytes)
Hash 711916dcfdd9cfe36754304f77569057
78c77d4080de0798e57e83fdd413ff38df4d241b
864e787df2b83e92ecea93ceb634502072e5692901ee5049ac3a9b33c5fb46c8
GET /signals/config/549567273353642?v=2.9.92&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 6s6xn/NZpgJnvbZDNPtxzWGpa4fe4UC8A/ivZGJxxHJiA0Gq6hBGndE/rQRR2jc7271FKSsSNMRCuyclGRI62Q==
priority: u=3,i
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 06:13:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1704
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: cg_uuid=328a3b5be08f0fdd819cf4cef7767b70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.com
content-type: application/json
date: Mon, 30 Jan 2023 06:13:39 GMT
content-length: 0
X-Firefox-Spdy: h2
globessl.ocsp.sectigo.com/
200 OK 471 B URL HTTP/1.1 globessl.ocsp.sectigo.com/
IP
Hash 3ffc381e36df429621c7637f3072bebd
31279c1d411e1390b49de0a3f75e122be8af2f93
aff0ffd4bc5e5327161d040ebd5176c81876944d0a9f571363e7a18db0fd5158
POST / HTTP/1.1
Host: globessl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 06:13:39 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 27 Jan 2023 22:18:47 GMT
Expires: Fri, 03 Feb 2023 22:18:46 GMT
Etag: "31279c1d411e1390b49de0a3f75e122be8af2f93"
Cache-Control: max-age=402906,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7918100728a3b4ed-OSL
globessl.ocsp.sectigo.com/
200 OK 471 B URL HTTP/1.1 globessl.ocsp.sectigo.com/
IP
Hash 3ffc381e36df429621c7637f3072bebd
31279c1d411e1390b49de0a3f75e122be8af2f93
aff0ffd4bc5e5327161d040ebd5176c81876944d0a9f571363e7a18db0fd5158
POST / HTTP/1.1
Host: globessl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 06:13:39 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 27 Jan 2023 22:18:47 GMT
Expires: Fri, 03 Feb 2023 22:18:46 GMT
Etag: "31279c1d411e1390b49de0a3f75e122be8af2f93"
Cache-Control: max-age=402906,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7918100849e61bfa-OSL
trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=1559&scd=0&ssd=1&est=1675059229275&ver=36&isls=true&src=i&invt=1500&msa=3309&rv=1&tim=1675059230835&vi=1675059229274&ri=b043f6fa42d061ef9c37e96ebb80b364&ref=null&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=1559&scd=0&ssd=1&est=1675059229275&ver=36&isls=true&src=i&invt=1500&msa=3309&rv=1&tim=1675059230835&vi=1675059229274&ri=b043f6fa42d061ef9c37e96ebb80b364&ref=null&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1497822/log/3/unip?en=pre_d_eng_tb&tos=1559&scd=0&ssd=1&est=1675059229275&ver=36&isls=true&src=i&invt=1500&msa=3309&rv=1&tim=1675059230835&vi=1675059229274&ri=b043f6fa42d061ef9c37e96ebb80b364&ref=null&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 30 Jan 2023 06:13:40 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://register.fxtm.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F8C29F40635C423C9BE9F59596357F96 Ref B: OSL30EDGE0207 Ref C: 2023-01-30T06:13:40Z
date: Mon, 30 Jan 2023 06:13:40 GMT
X-Firefox-Spdy: h2
cdn.shareaholic.net/assets/pub/shareaholic.js
200 OK 4.3 kB URL HTTP/2 cdn.shareaholic.net/assets/pub/shareaholic.js
IP
File type ASCII text, with very long lines (10540), with no line terminators
Hash e33511561808ca812c76b301b406d103
94e974603a6d772f66614045d19f0e3e18ccae6e
a61f812802a68805c57d74929ca078ac0ce1e6cec9685d5280a9f3d02d27050e
GET /assets/pub/shareaholic.js HTTP/1.1
Host: cdn.shareaholic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:40 GMT
content-encoding: gzip
content-length: 4285
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 19 Dec 2022 20:20:18 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: eqRoj7HtU5fIvOeBL4yckGJKQ0wPVNmM+YAogC+KBsxLnjc/57mhG85LjvlusEvZFL1Nt9g6gKA=
x-amz-request-id: THAYRRM45PG4C2SY
etag: "e33511561808ca812c76b301b406d103"
cache-control: max-age=1200, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1675059220.cds251.sk1.hn,1675059220.cds201.sk1.c
X-Firefox-Spdy: h2
i5rwkk4h.micpn.com/p/js/1.js
200 OK 18 kB URL HTTP/2 i5rwkk4h.micpn.com/p/js/1.js
IP
File type Unicode text, UTF-8 text, with very long lines (33831)
Hash 364d6effa34ba083f6835e492e8c7879
31605b6654757a01d7ce40605442da30e96f82ee
0641c7ac77b42f4d0acc5746fa6f7c7f3f4c09f71a9628ba3e2a92b6bd23396d
GET /p/js/1.js HTTP/1.1
Host: i5rwkk4h.micpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
x-uuid: d8247ce5-fb65-4fa7-ae8e-4e0a96fd6d1f
cache-control: no-cache max-age=0
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
p3p: policyref="https://movableink.com/w3c/p3p.xml", CP="DEVa PSAa PSDa IVAa IVDa OUR IND DSP NON COR NAV UNI"
timing-allow-origin: https://register.fxtm.com
date: Mon, 30 Jan 2023 06:08:22 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WyVKyPtMkub-EYYbPuf8-8x6BJ5ABnmclClOiagozxXVFH1r7UIvYg==
age: 318
X-Firefox-Spdy: h2
bat.bing.com/p/action/5152714.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5152714.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5152714.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B090A09638404E88BC39762413059507 Ref B: OSL30EDGE0207 Ref C: 2023-01-30T06:13:40Z
date: Mon, 30 Jan 2023 06:13:40 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5152714&tm=gtm002&Ver=2&mid=8ba3fc90-7bb6-46b1-8e08-aa95eabacb96&sid=445d7df0a06511ed8db1877c59d24fd8&vid=445d8a40a06511ed95945f1976eb3802&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=FXTM%20%7C%20Trade%20Gold&p=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&r=<=4257&evt=pageLoad&sv=1&rn=387262
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5152714&tm=gtm002&Ver=2&mid=8ba3fc90-7bb6-46b1-8e08-aa95eabacb96&sid=445d7df0a06511ed8db1877c59d24fd8&vid=445d8a40a06511ed95945f1976eb3802&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=FXTM%20%7C%20Trade%20Gold&p=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&r=<=4257&evt=pageLoad&sv=1&rn=387262
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5152714&tm=gtm002&Ver=2&mid=8ba3fc90-7bb6-46b1-8e08-aa95eabacb96&sid=445d7df0a06511ed8db1877c59d24fd8&vid=445d8a40a06511ed95945f1976eb3802&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=FXTM%20%7C%20Trade%20Gold&p=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&r=<=4257&evt=pageLoad&sv=1&rn=387262 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=17E31EAE431269652E480C0742E7681A; domain=.bing.com; expires=Sat, 24-Feb-2024 06:13:41 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FFABE47959F94ED58182EA87766941BF Ref B: OSL30EDGE0207 Ref C: 2023-01-30T06:13:40Z
date: Mon, 30 Jan 2023 06:13:40 GMT
X-Firefox-Spdy: h2
m9m6e2w5.stackpathcdn.com/v2/bec87dbf/main.js
200 OK 42 kB URL HTTP/2 m9m6e2w5.stackpathcdn.com/v2/bec87dbf/main.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash bfbe20460e43896d158d4b21e5c02ca8
12ec31148e52a5a0861d63e98344f45bba7523dc
bc9563b66fafb04f290b402270af0cf8ac5349619ccdf556103024652198f87a
GET /v2/bec87dbf/main.js HTTP/1.1
Host: m9m6e2w5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:41 GMT
content-encoding: gzip
content-length: 41854
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 19 Dec 2022 20:19:59 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: UfjmZKB7E9YUrY0vXGV2Q4QFmkUFf7Rkudm6LThhwpl7+eRxcirLt8dDB2kADGk4IpJE000Z+08=
x-amz-request-id: PAKD9GVGPTREG1NW
etag: "bfbe20460e43896d158d4b21e5c02ca8"
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1675059221.cds251.sk1.hn,1675059221.cds230.sk1.c
X-Firefox-Spdy: h2
i5rwkk4h.micpn.com/p/cp/-1/track.gif?t=1675059231767&mi_u=anon-1675059231767-4432779304&mi_cid=9101&page_title=FXTM%20%7C%20Trade%20Gold&event_type=pageview&cdate=1675059231767&ck=false&anon=true
200 OK 42 B URL HTTP/2 i5rwkk4h.micpn.com/p/cp/-1/track.gif?t=1675059231767&mi_u=anon-1675059231767-4432779304&mi_cid=9101&page_title=FXTM%20%7C%20Trade%20Gold&event_type=pageview&cdate=1675059231767&ck=false&anon=true
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /p/cp/-1/track.gif?t=1675059231767&mi_u=anon-1675059231767-4432779304&mi_cid=9101&page_title=FXTM%20%7C%20Trade%20Gold&event_type=pageview&cdate=1675059231767&ck=false&anon=true HTTP/1.1
Host: i5rwkk4h.micpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 42
x-uuid: e7d5fa13-c24a-43ec-9b7b-a2a4fdbe7148
pragma: no-cache
access-control-expose-headers: X-Error
access-control-allow-origin: https://app.movableink.com
cache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
set-cookie: _mibhv=anon-1675059231767-4432779304_9101; Expires=Tue, 30 Jan 2024 06:13:41 GMT; Path=/; HttpOnly; Secure; SameSite=None;
_midat=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; HttpOnly; Secure; SameSite=None;
date: Mon, 30 Jan 2023 06:13:41 GMT
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vM0JByiYKiVIwRyTm8CYlS3hVL-yK5v0GfLX0owVbRgsC5QHMEuRgw==
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash 85391bfbe0eedab3790684c20d31304d
062865d2a71a4f3fc8257395dceb6d6e086db0e4
ec542fe46c47c27de66b5c63613347222f7dd9cd1b9083b55ac36b7a1df34a6a
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zl6fC/vbtaE0MOCDst1VMpjvLM53rc2uSKTJS0I8uxek39IRi7xkTsG54K5r9KK/Jhwlbb2U5Vwh5kaODxghow==
x-amz-request-id: S0WWZWZZW6RZNYJN
date: Mon, 30 Jan 2023 06:13:29 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 13
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1728
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: cg_uuid=328a3b5be08f0fdd819cf4cef7767b70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.com
content-type: application/json
date: Mon, 30 Jan 2023 06:13:41 GMT
content-length: 0
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10133581.json
200 OK 2 B URL HTTP/2 s.yimg.com/wi/config/10133581.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10133581.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: TN6FCSPTSHEJZNEY
x-amz-id-2: mnfUim/d9aAmYzb9dk/EQOWWFp8FryF21IMmM3A9TrIPk4LsnqvUAwE1hpgY+U4gUZ2ltzr4mT8=
content-type: application/json
date: Mon, 30 Jan 2023 06:13:15 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 26
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1723
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Cookie: cg_uuid=328a3b5be08f0fdd819cf4cef7767b70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.com
content-type: application/json
date: Mon, 30 Jan 2023 06:13:41 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 492ff8489b691cb1bce800a56ecbe286
902a7abe425c040dd753f48068705e5c229e9e14
956b0cf0adede8be0b985b610751076a78f1057651a2b9f23fff4ad7d0702dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "956B0CF0ADEDE8BE0B985B610751076A78F1057651A2B9F23FFF4AD7D0702DAC"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9562
Expires: Mon, 30 Jan 2023 08:53:03 GMT
Date: Mon, 30 Jan 2023 06:13:41 GMT
Connection: keep-alive
s.yimg.com/wi/config/10097064.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10097064.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 2818f7c1d0a6c6df2bab1d3d6344fd8a
a33691eb219b8913737e56120be7e29101ff63e1
81a55d12e0229dbfaad3014d29723654a7f35079d81b89757ed29859f980c9a3
GET /wi/config/10097064.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: leZfmie0/zgqBQaK58430xyyhZHSKsQzefnig6X52kF+7rHuJ5JS6kACzqseKrY3u2FYj3bQm8wWlKMe5tr22Q==
x-amz-request-id: 3Y3K1TF93EAEJMGP
date: Mon, 30 Jan 2023 06:13:42 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 25 May 2022 20:57:37 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "2818f7c1d0a6c6df2bab1d3d6344fd8a"
x-amz-server-side-encryption: AES256
x-amz-version-id: KQKpbIpBo_BF8DsjNEnFDLJ8ZF_P6J47
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 0
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.shareaholic.net/config/7bb553f715a185b64e387629db153b8a.json
200 OK 831 B URL HTTP/2 www.shareaholic.net/config/7bb553f715a185b64e387629db153b8a.json
IP
File type JSON data\012- , ASCII text, with very long lines (2287), with no line terminators
Hash e94f2b40db6152553cc9f5726cfb48db
608b296295f32b083c228cf6f46e1036fce9a329
5e10e1b4a74db23863ddb0a359b37987c510a4611b7fc3850339a205552def9e
GET /config/7bb553f715a185b64e387629db153b8a.json HTTP/1.1
Host: www.shareaholic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 07:20:19 GMT
etag: W/"98f36442d7b084f203822a30b3660b6f"
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json
cache-control: max-age=3, public, must-revalidate
x-varnish: 573849214 554615774
via: 1.1 varnish (Varnish/6.0)
access-control-allow-methods: GET, HEAD
access-control-allow-headers: *
access-control-allow-origin: *
access-control-expose-headers: Etag, Access-Control-Allow-Origin, x-client-geo-latlong, x-client-geo-country, x-client-geo-city, x-client-geo-zip, x-client-geo-region, x-client-geo-metrocode
access-control-max-age: 2000
x-client-geo-latlong: 59.945200,10.755900
x-client-geo-country: NO,Norway
x-client-geo-city:
x-client-geo-region:
x-client-geo-metrocode:
x-client-geo-zip:
accept-ranges: bytes
content-length: 831
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2030%20Jan%202023%2006%3A13%3A52%20GMT&n=0&b=FXTM%20%7C%20Trade%20Gold&.yp=10133581&f=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2030%20Jan%202023%2006%3A13%3A52%20GMT&n=0&b=FXTM%20%7C%20Trade%20Gold&.yp=10133581&f=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2030%20Jan%202023%2006%3A13%3A52%20GMT&n=0&b=FXTM%20%7C%20Trade%20Gold&.yp=10133581&f=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:41 GMT
expires: Mon, 30 Jan 2023 06:13:41 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBVg12MCECN1O-JGxeYCrFG4Z5xOWV0FEgEBAQGx2GPhYwAAAAAA_eMAAA&S=AQAAAnR93JwnSqlR0aseR-deQO0; Expires=Tue, 30 Jan 2024 12:13:41 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=FXTM%20%7C%20Trade%20Gold&.yp=10097064&f=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=FXTM%20%7C%20Trade%20Gold&.yp=10097064&f=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=FXTM%20%7C%20Trade%20Gold&.yp=10097064&f=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:41 GMT
expires: Mon, 30 Jan 2023 06:13:41 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBBVg12MCEIFIIo4xiKRcHdiRBDqsliUFEgEBAQGx2GPhYwAAAAAA_eMAAA&S=AQAAAubqYWgQtvgEeY-29G6s-rQ; Expires=Tue, 30 Jan 2024 12:13:41 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ace895d3f0898b29ce4a91ed65cad72
02436d2208b821c4702ad080c52bea7f386fb037
89c3591b9f47e18488280ff5ab0ad14f867aa440b5afa256f82b8673e66e8e01
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C3591B9F47E18488280FF5AB0AD14F867AA440B5AFA256F82B8673E66E8E01"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8103
Expires: Mon, 30 Jan 2023 08:28:44 GMT
Date: Mon, 30 Jan 2023 06:13:41 GMT
Connection: keep-alive
partner.shareaholic.com/partners.js?location=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&canonical=http%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F&id_sync=06047da0-9ffc-4112-8369-d89222c7e2d3&pvs=1&site=7bb553f715a185b64e387629db153b8a
200 OK 0 B URL HTTP/2 partner.shareaholic.com/partners.js?location=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&canonical=http%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F&id_sync=06047da0-9ffc-4112-8369-d89222c7e2d3&pvs=1&site=7bb553f715a185b64e387629db153b8a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partners.js?location=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&canonical=http%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F&id_sync=06047da0-9ffc-4112-8369-d89222c7e2d3&pvs=1&site=7bb553f715a185b64e387629db153b8a HTTP/1.1
Host: partner.shareaholic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:41 GMT
content-type: application/javascript;charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Accept-Encoding, User-Agent
content-length: 0
p3p: CP='OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC'
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e2f4f95b80f0c2fc5b2ca67d4f8f8c2e
997063b7c35a518ceb3ac7c5239bb486bfbed455
8ba0cac5458b3f1b794b01645faf4c21f218ab45807d144a4c904cd80fd85f2d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114376
Date: Mon, 30 Jan 2023 06:13:42 GMT
Etag: "63d66f55-1d7"
Expires: Tue, 31 Jan 2023 13:59:58 GMT
Last-Modified: Sun, 29 Jan 2023 13:06:29 GMT
Server: ECS (dcb/7EA7)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9skGh8M_tDiKSmdrNX3Z-EVmVJ654xGRLZrAT7haizJVLbX3DKVIag==
Age: 3209
analytics.shareaholic.com/e
200 OK 43 B URL HTTP/2 analytics.shareaholic.com/e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
POST /e HTTP/1.1
Host: analytics.shareaholic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 156
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:42 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: https://register.fxtm.com
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
p3p: CP="OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC"
expires: Thu, 01 Jan 1970 00:00:00 GMT
referer-policy: unsafe-url
content-security-policy: referrer always
X-Firefox-Spdy: h2
trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=4561&scd=0&ssd=1&est=1675059229275&ver=36&isls=true&src=i&invt=3000&msa=3309&rv=1&tim=1675059233836&vi=1675059229274&ri=b043f6fa42d061ef9c37e96ebb80b364&ref=null&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=4561&scd=0&ssd=1&est=1675059229275&ver=36&isls=true&src=i&invt=3000&msa=3309&rv=1&tim=1675059233836&vi=1675059229274&ri=b043f6fa42d061ef9c37e96ebb80b364&ref=null&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1497822/log/3/unip?en=pre_d_eng_tb&tos=4561&scd=0&ssd=1&est=1675059229275&ver=36&isls=true&src=i&invt=3000&msa=3309&rv=1&tim=1675059233836&vi=1675059229274&ri=b043f6fa42d061ef9c37e96ebb80b364&ref=null&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fregister.fxtm.com%2Fgold-1%2F%3Futm_source%3Dtop5forexbrokerz.com%26utm_medium%3Ddisplay%26utm_campaign%3Dgold-2022%26utm_content%3D1x1%26dclid%3DCOm7-9_R7vwCFSCOAAAd-54P1g&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 30 Jan 2023 06:13:43 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://register.fxtm.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
jssdks.mparticle.com/v3/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/events
202 Accepted 61 B URL HTTP/2 jssdks.mparticle.com/v3/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/events
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5a43b5cef058330ffe4219660317da30
1e95f8681a580f639b94de8af91de0ab7f800b1d
5e7568219ceb41ad03d616f5f820d5a701949de43773855b35fbbe0df729005e
POST /v3/JS/us1-7e64e961d63ef3498e1ff29e51ea3b54/events HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain;charset=UTF-8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://register.fxtm.com
Content-Length: 2500
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
content-type: application/json
server: Kestrel
access-control-allow-origin: *
content-encoding: gzip
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:42 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059223.726398,VS0,VE20
vary: Accept-Encoding
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/css/loader.css
200 OK 0 B URL HTTP/2 my.forextime.com/en/identity/registration/assets/css/loader.css
IP
GET /en/identity/registration/assets/css/loader.css HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/css
last-modified: Tue, 24 Jan 2023 09:17:31 GMT
etag: W/"63cfa22b-2f5"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 79181008baa4b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/3cb2ed38-quotation-mark-close.svg
200 OK 0 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.com/gold-1/3cb2ed38-quotation-mark-close.svg
IP
GET /register.fxtm.com/gold-1/3cb2ed38-quotation-mark-close.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 27 Oct 2022 06:29:49 GMT
last-modified: Fri, 16 Sep 2022 13:07:50 GMT
etag: W/"34d7e436457b0d5e51713747afbccd4f"
cache-control: max-age=31557600
x-amz-version-id: 5JHvcfaH5m6QhQcG1Junvdh6z_GCzKsp
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Twl8d7Mm7d_4xbpR3JJpgp-xPangtGm5vEp6NejpJ0ak_eS33bsJWA==
age: 8207029
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/data/
200 OK 0 B URL HTTP/2 sdk.fra-01.braze.eu/api/v3/data/
IP
OPTIONS /api/v3/data/ HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-braze-api-key,x-braze-datarequest,x-braze-triggersrequest,x-requested-with
Referer: https://register.fxtm.com/
Origin: https://register.fxtm.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
access-control-allow-headers: content-type,x-braze-api-key,x-braze-datarequest,x-braze-triggersrequest,x-requested-with
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059217.256321,VS0,VE74
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/config.json?r=md395
200 OK 0 B URL HTTP/2 my.forextime.com/en/identity/registration/assets/config.json?r=md395
IP
GET /en/identity/registration/assets/config.json?r=md395 HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:37 GMT
content-type: application/json
last-modified: Tue, 24 Jan 2023 09:20:26 GMT
etag: W/"63cfa2da-1a14"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7918100a4c0bb4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
identity.mparticle.com/v1/identify
200 OK 0 B URL HTTP/2 identity.mparticle.com/v1/identify
IP
POST /v1/identify HTTP/1.1
Host: identity.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-mp-key: us1-7e64e961d63ef3498e1ff29e51ea3b54
Content-Length: 320
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: Kestrel
access-control-allow-origin: *
content-encoding: gzip
x-origin-name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059217.268976,VS0,VE106
vary: Accept-Encoding
strict-transport-security: max-age=900
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/content_cards/sync
200 OK 0 B URL HTTP/2 sdk.fra-01.braze.eu/api/v3/content_cards/sync
IP
OPTIONS /api/v3/content_cards/sync HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-braze-api-key,x-braze-contentcardsrequest,x-braze-datarequest,x-requested-with
Referer: https://register.fxtm.com/
Origin: https://register.fxtm.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
access-control-allow-headers: content-type,x-braze-api-key,x-braze-contentcardsrequest,x-braze-datarequest,x-requested-with
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:38 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059218.191208,VS0,VE20
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/data/
201 Created 0 B URL HTTP/2 sdk.fra-01.braze.eu/api/v3/data/
IP
POST /api/v3/data/ HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
X-Requested-With: XMLHttpRequest
X-Braze-Api-Key: 6fd4f390-31e4-4ddb-b049-e6a615bc5049
X-Braze-TriggersRequest: true
X-Braze-DataRequest: true
Content-Length: 595
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
etag: W/"3225beca8b6354491c666d16711a41f4"
cache-control: max-age=0, private, must-revalidate
x-request-id: 7dbda90b-088d-4248-b191-ddaccddbf707
x-runtime: 0.167733
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 06:13:37 GMT
via: 1.1 varnish
x-served-by: cache-bma1656-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675059217.346464,VS0,VE189
vary: Origin,Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4439274/domain/register.fxtm.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4439274/domain/register.fxtm.com/token
IP
GET /partner/4439274/domain/register.fxtm.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.com
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Mon, 30 Jan 2023 05:18:47 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b6HUpfawMrgKIue36jANYT1H7wuNAbwleGaAUJRn1NA4Za5rv-6lRA==
age: 3291
X-Firefox-Spdy: h2
use.fontawesome.com/7f85a56ba4.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/7f85a56ba4.css
IP
GET /7f85a56ba4.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/css
x-amz-id-2: N4cDmRY6CdcvCjbVUKT1S/iWGCYXV7zfeqi0Tx71DTBvwnz4QE+/Myz8i1ypriXa7PK/aMtWbz8=
x-amz-request-id: YVS4TKRFXS645SKK
last-modified: Wed, 30 Jun 2021 21:14:33 GMT
etag: W/"8360eb270b919a1fb4776bc448d9ed14"
cache-control: max-age=1800
cf-cache-status: HIT
age: 3910
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8PyNGqvcqESvXTnh3sL8TmWnT2f%2FVkHISfhUn6iyq5%2FehCZAusz6CxosGzani2D4giMuWRHW9Fz%2BXmnVwyMKIRrRVjHGU5%2BMIpOwpzewxMk5FpcnVvSGWXdmpnsdmDFUeb8BV5zI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79181009cff87717-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.forextime.com/icons/favicon-32x32.png
404 Not Found 0 B URL HTTP/2 www.forextime.com/icons/favicon-32x32.png
IP
GET /icons/favicon-32x32.png HTTP/1.1
Host: www.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.fxtm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: HIT
expires: Mon, 30 Jan 2023 07:13:36 GMT
cache-control: public, max-age=3600
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 79181007ea0eb4ee-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/fonts/sourceSansPro.css
200 OK 0 B URL HTTP/2 my.forextime.com/en/identity/registration/assets/fonts/sourceSansPro.css
IP
GET /en/identity/registration/assets/fonts/sourceSansPro.css HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: text/css
last-modified: Tue, 24 Jan 2023 09:17:31 GMT
etag: W/"63cfa22b-311"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 79181008baa5b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/main.0f710332acc911b5d62f.js?0f710332acc911b5d62f
200 OK 0 B URL HTTP/2 my.forextime.com/en/identity/registration/assets/main.0f710332acc911b5d62f.js?0f710332acc911b5d62f
IP
GET /en/identity/registration/assets/main.0f710332acc911b5d62f.js?0f710332acc911b5d62f HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=&origin=https%3A%2F%2Fregister.fxtm.com¤t_url=https://register.fxtm.com/&company=global&version=27520&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 06:13:36 GMT
content-type: application/javascript
last-modified: Tue, 24 Jan 2023 09:17:31 GMT
etag: W/"63cfa22b-9657e"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 79181008baa7b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3.126.202.50
173.194.221.155
93.184.220.66
157.240.205.11
23.36.76.210
104.17.161.73
185.83.142.19
212.82.100.181