Overview

URL go.bvmcdn.org/request/69629e3a-a67b-4c24-b391-87063939b213/
IP172.67.188.200
ASNCLOUDFLARENET
Location United States
Report completed2022-09-28 12:57:52 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-28 2 gtoonfd.com Sinkholed
2022-09-28 2 gtoonfd.com Sinkholed
2022-09-28 2 unphionetor.com Sinkholed
2022-09-28 2 ptauxofi.net Sinkholed
2022-09-28 2 unphionetor.com Sinkholed


Files

No files detected



Passive DNS (38)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS toapodazoay.com (3) 624090 2017-11-17 09:59:00 UTC 2022-09-28 04:57:05 UTC 139.45.197.152
mnemonic passive DNS widgetdata.tradingview.com (5) 22043 2017-01-29 09:29:02 UTC 2022-09-28 12:05:25 UTC 209.58.153.114
mnemonic passive DNS d.adroll.com (1) 1530 2015-03-06 22:06:59 UTC 2022-09-28 08:44:56 UTC 52.214.200.155
mnemonic passive DNS ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-09-28 04:39:17 UTC 104.18.20.226
mnemonic passive DNS fonts.gstatic.com (1) 0 2014-08-29 13:43:22 UTC 2022-09-28 04:36:33 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-28 05:05:05 UTC 216.239.32.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS s3.tradingview.com (4) 18525 2018-12-09 17:38:16 UTC 2022-09-28 12:05:24 UTC 54.230.111.32
mnemonic passive DNS s.tradingview.com (5) 22849 2018-12-05 09:16:50 UTC 2022-09-28 07:21:40 UTC 54.230.111.73
mnemonic passive DNS s.adroll.com (4) 2553 2012-06-27 18:27:26 UTC 2022-09-28 08:44:55 UTC 143.204.55.75
mnemonic passive DNS r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2022-09-28 04:36:09 UTC 23.36.76.226
mnemonic passive DNS e1.o.lencr.org (4) 6159 2021-08-20 07:36:30 UTC 2022-09-28 05:22:53 UTC 23.36.77.32
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-28 05:02:28 UTC 44.242.41.15
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-09-28 07:07:41 UTC 104.18.32.68
mnemonic passive DNS s3-symbol-logo.tradingview.com (23) 20447 2020-11-23 08:22:37 UTC 2022-09-28 08:05:36 UTC 143.204.55.35
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-28 04:36:06 UTC 34.117.237.239
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-28 08:06:38 UTC 34.120.237.76
mnemonic passive DNS go.deliverymodo.com (2) 672700 2016-07-21 09:52:46 UTC 2022-09-28 04:57:07 UTC 139.45.197.236
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-09-28 06:28:23 UTC 142.250.74.10
mnemonic passive DNS ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-09-28 04:36:20 UTC 142.250.74.3
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-28 04:42:17 UTC 142.250.74.72
mnemonic passive DNS static.tradingview.com (25) 0 2022-07-30 10:38:04 UTC 2022-09-28 08:05:35 UTC 143.204.55.107 Domain (tradingview.com) ranked at: 4416
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-28 07:47:41 UTC 142.250.74.174
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-28 05:13:47 UTC 143.204.55.35
mnemonic passive DNS engingrepare.com (2) 0 2022-09-23 16:46:03 UTC 2022-09-28 06:09:04 UTC 3.123.187.149 Unknown ranking
mnemonic passive DNS widget.trustpilot.com (4) 6018 2017-09-05 07:45:53 UTC 2022-09-28 04:45:43 UTC 143.204.55.110
mnemonic passive DNS flagicons.lipis.dev (1) 527996 2020-02-27 09:46:04 UTC 2022-09-27 19:18:17 UTC 185.199.108.153
mnemonic passive DNS embed.tawk.to (5) 8650 2014-03-19 21:03:49 UTC 2022-09-28 05:53:27 UTC 104.22.25.131
mnemonic passive DNS cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2022-09-28 04:37:53 UTC 151.101.85.229
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-28 11:00:28 UTC 143.204.55.36
mnemonic passive DNS gtoonfd.com (2) 0 2022-07-25 06:24:53 UTC 2022-09-28 09:58:30 UTC 139.45.197.239 Unknown ranking
mnemonic passive DNS my.rtmark.net (1) 9054 2017-08-22 14:11:49 UTC 2022-09-28 07:04:52 UTC 139.45.195.8
mnemonic passive DNS ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-09-28 08:57:43 UTC 93.184.220.29
mnemonic passive DNS ptauxofi.net (1) 35628 2021-03-31 05:35:12 UTC 2022-09-28 10:26:21 UTC 139.45.197.250
mnemonic passive DNS ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.88
mnemonic passive DNS www.roifxtrader.com (1) 0 2022-03-14 22:13:40 UTC 2022-09-28 10:30:42 UTC 172.67.163.98 Unknown ranking
mnemonic passive DNS go.bvmcdn.org (3) 0 2022-07-08 17:56:30 UTC 2022-09-28 09:58:26 UTC 104.21.49.22 Unknown ranking
mnemonic passive DNS unphionetor.com (2) 54035 2022-02-11 12:53:49 UTC 2022-09-28 04:48:25 UTC 139.45.197.236
mnemonic passive DNS go.ad2upapp.com (1) 566190 2016-06-11 11:42:08 UTC 2022-09-28 04:57:07 UTC 139.45.197.237


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.188.200

Date UQ / IDS / BL URL IP
2022-10-11 08:41:56 +0000
0 - 0 - 2 go.bvmcdn.org/request/8b72acf3-0180-452d-a648 (...) 172.67.188.200
2022-10-08 13:54:26 +0000
0 - 0 - 6 go.bvmcdn.org/request/8b72acf3-0180-452d-a648 (...) 172.67.188.200
2022-09-28 12:57:52 +0000
0 - 0 - 5 go.bvmcdn.org/request/69629e3a-a67b-4c24-b391 (...) 172.67.188.200
2022-09-22 11:12:21 +0000
0 - 0 - 7 go.bvmcdn.org/request/69629e3a-a67b-4c24-b391 (...) 172.67.188.200
2022-09-21 14:45:10 +0000
0 - 0 - 8 go.bvmcdn.org/request/8b72acf3-0180-452d-a648 (...) 172.67.188.200

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-12-08 03:05:57 +0000
0 - 0 - 1 sognisogni.net/nowyou5c1x0685/ 188.114.96.1
2022-12-08 03:03:59 +0000
0 - 0 - 1 motos.espirituracer.com/ 188.114.96.1
2022-12-08 03:03:39 +0000
0 - 0 - 32 kozbanov-lawyer.ru/primer-rascheta-kadastrovo (...) 188.114.97.1
2022-12-08 03:01:38 +0000
0 - 0 - 2 promoclk.com/cl/c6213466a9b95e65 104.21.33.241
2022-12-08 03:00:08 +0000
0 - 0 - 1 tuvas.ru/cl/c014643026a139c9 172.67.191.93

Last 5 reports on domain: bvmcdn.org

Date UQ / IDS / BL URL IP
2022-10-16 06:52:17 +0000
0 - 0 - 2 go.bvmcdn.org/request/8b72acf3-0180-452d-a648 (...) 104.21.49.22
2022-10-11 08:41:56 +0000
0 - 0 - 2 go.bvmcdn.org/request/8b72acf3-0180-452d-a648 (...) 172.67.188.200
2022-10-09 03:59:42 +0000
0 - 0 - 7 go.bvmcdn.org/request/69629e3a-a67b-4c24-b391 (...) 104.21.49.22
2022-10-08 13:54:26 +0000
0 - 0 - 6 go.bvmcdn.org/request/8b72acf3-0180-452d-a648 (...) 172.67.188.200
2022-10-01 05:17:33 +0000
0 - 0 - 5 go.bvmcdn.org/request/69629e3a-a67b-4c24-b391 (...) 104.21.49.22

Last 1 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-09-28 13:55:50 +0000
0 - 0 - 3 thetchaixoo.com/4/5110666/ 139.45.197.153


JavaScript

Executed Scripts (95)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (140)


Request Response
                                        
                                            GET /request/69629e3a-a67b-4c24-b391-87063939b213/ HTTP/1.1 
Host: go.bvmcdn.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.21.49.22
HTTP/1.1 301 Moved Permanently
                                        
Date: Wed, 28 Sep 2022 12:57:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 28 Sep 2022 13:57:40 GMT
Location: https://go.bvmcdn.org/request/69629e3a-a67b-4c24-b391-87063939b213/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2FTbuzpWXUFvfTT3Mdb%2BhhgC%2B9IBBWhQn3oucy50aP6SRGfrytnA4zlKHsk%2B8Wtz%2FgGsVZKLGrf3F58KjEYF2rfyYFzsyamsPGlXT5Ap2dNF2Qh9v8GwuqtHVkXo%2Bi%2FI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751ca56c6d051c02-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 12:05:41 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dUJMbKzsPklGRAoMaD_0SbW3KEnaWKvCMT-PI_XYxl7nSPNp3BblCw==
Age: 3119


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9250
Expires: Wed, 28 Sep 2022 15:31:50 GMT
Date: Wed, 28 Sep 2022 12:57:40 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xVrCOAXIHSKMgIOFk79C3AaoXosysjyfAc3N-ynl5_V8Bdek-pJB1A==
age: 26954
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "8EF5E95A0496D25EE19DBBD0ED6336A95A49559771590537CBD505FCB3543D47"
Last-Modified: Wed, 28 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8714
Expires: Wed, 28 Sep 2022 15:22:55 GMT
Date: Wed, 28 Sep 2022 12:57:41 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:40 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 28 Sep 2022 12:29:33 GMT
Expires: Wed, 28 Sep 2022 13:04:06 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -CCSCo_hGAL1KprH-881OU-Re86wwFWy-E-FyWX8sGgWbtbZtNW-vg==
Age: 1688


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "8EF5E95A0496D25EE19DBBD0ED6336A95A49559771590537CBD505FCB3543D47"
Last-Modified: Wed, 28 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8714
Expires: Wed, 28 Sep 2022 15:22:55 GMT
Date: Wed, 28 Sep 2022 12:57:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2446403013841E09C0571F69A95B50DD7A2A1EA6F7EBF0E9EDA3F73E3EA1ECA5"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4079
Expires: Wed, 28 Sep 2022 14:05:40 GMT
Date: Wed, 28 Sep 2022 12:57:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2947
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 12:57:41 GMT
Last-Modified: Wed, 28 Sep 2022 12:08:34 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "79EA5BE7A17D935C382010064E7599A269DBBA9E2C6CF98742BF3D3242C29D42"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7765
Expires: Wed, 28 Sep 2022 15:07:06 GMT
Date: Wed, 28 Sep 2022 12:57:41 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1KsloWe1Zh9zru+MViMq+A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.242.41.15
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: z31vr7EyDdu/m/4FQ1MN2ujKIEw=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: gtoonfd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: OAID=5d9fdf4b9a5d47c28813578d6f58d097; oaidts=1664369861; allcnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         139.45.197.239
HTTP/2 204 No Content
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:41 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:42 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:25:19 GMT
Expires: Mon, 03 Oct 2022 06:25:18 GMT
Etag: "f2ec69fdaca2a0327cd3599ac05d0051df3dee41"
Cache-Control: max-age=407855,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751ca574db72b518-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C11DD55C8CC42A1ACA5544DEE40EF46BCD6EF20162CFDF41BCDCDC90C7FBAEAA"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17018
Expires: Wed, 28 Sep 2022 17:41:20 GMT
Date: Wed, 28 Sep 2022 12:57:42 GMT
Connection: keep-alive

                                        
                                            GET /link?z=4574935&var=b2ab689a-b0a0-4fbd-9ad4-e600fcb634cb&ymid=ccq49hdip8jkggntqdn0 HTTP/1.1 
Host: gtoonfd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         139.45.197.239
HTTP/2 200 OK
content-type: text/html; charset=utf8
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:41 GMT
x-trace-id: 5d6549ff0c83f0dfbc089efafb1e49ae
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://toapodazoay.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=5d9fdf4b9a5d47c28813578d6f58d097; expires=Thu, 28 Sep 2023 12:57:41 GMT; path=/; secure; SameSite=None oaidts=1664369861; expires=Thu, 28 Sep 2023 12:57:41 GMT; path=/; secure; SameSite=None syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT allcnt=1; expires=Thu, 28 Sep 2023 12:57:41 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   842
Md5:    df0b7447e3adbc798bbc4b34d091fc26
Sha1:   798f7b7f10fc9c9206f9d2cfea7dbd61657d4005
Sha256: 2179674a5ae4aaf05f382d69ebd3fb585178aa0101a70d3f1a3bac98c831ec33

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /?l=qCqekRDLtEBTXwP&s=598973214290612433&z=4574936&g=NO&svar=1664369861&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1664369861&ssk=c118ac1b944b4a2142737c1ac10fa5a3&svarok=1&b=79056&oaid=5d9fdf4b9a5d47c28813578d6f58d097&rdk=rk1 HTTP/1.1 
Host: toapodazoay.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         139.45.197.152
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:41 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.24
set-cookie: reverse=7MZ6qdfGrkifMf4vf-v_QRWF5VkqT5sWmCbpyVzvAK0; expires=Wed, 28-Sep-2022 13:57:41 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4357
Md5:    102bd402700f56b152e122c620e0bbf0
Sha1:   315456d4545ce92c7bd9be7e288aed983dacd361
Sha256: fc553f18ea8765c7d514138bd0c9760ff1fae6a110432712509a828c0e22ebd0
                                        
                                            GET /fv.js?t=56193&cb=369541594 HTTP/1.1 
Host: unphionetor.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.197.236
HTTP/2 200 OK
content-type: text/javascript; charset=utf8
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:42 GMT
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 7f03fb4a0295812565befae4cca9ede2
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2225
Md5:    89483813db6b799332f3200182397166
Sha1:   2d554e9a9f813b88637947595dd2b142b4d25f8d
Sha256: d47c9c80104f26de3c3ca4eb9f42c4a60108bc0db0abae77a6763203e8218a28

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: toapodazoay.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/?rzi=4574936&rsz=4574936&rid=
Cookie: reverse=7MZ6qdfGrkifMf4vf-v_QRWF5VkqT5sWmCbpyVzvAK0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         139.45.197.152
HTTP/2 204 No Content
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:42 GMT
strict-transport-security: max-age=60
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=qCqekRDLtEBTXwP&z=3683319 HTTP/1.1 
Host: ptauxofi.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:42 GMT
last-modified: Tue, 27 Sep 2022 13:19:37 GMT
etag: W/"6332f869-1a5ed"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   40057
Md5:    f180b770897d6441bb79cb05ef5655b6
Sha1:   0a1ecab3bd50af2c0930f1ebadeb5ae449b52489
Sha256: 35ca5d4fa63b7895631bbe796dc91e83e0a76ba1a6d6b04c4c2962b7c1fb5a4e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8638
Expires: Wed, 28 Sep 2022 15:21:41 GMT
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8638
Expires: Wed, 28 Sep 2022 15:21:41 GMT
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8638
Expires: Wed, 28 Sep 2022 15:21:41 GMT
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8638
Expires: Wed, 28 Sep 2022 15:21:41 GMT
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8638
Expires: Wed, 28 Sep 2022 15:21:41 GMT
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13299
x-amzn-requestid: 926df8b6-beec-470d-b0b3-33be326cd379
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UPF8YIAMF3Nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-343e91e735af43d01fc83ddd;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: fcxclGRP3zfWwb6opjYU2bL9VAq_mCSNjFtfp9iMLq6tbZu57EDqpQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:50:04 GMT
etag: "651600f2ef18cecc2e38370069bbb5e1d86f68e0"
age: 54459
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13299
Md5:    ad84ed0c5b2090df7996007514cf1984
Sha1:   651600f2ef18cecc2e38370069bbb5e1d86f68e0
Sha256: a3d0729e1d43afeadd2dd8273c858b8839d9e476f773c8ec9d96b5969a9e0b4a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7445e03-094d-46db-8826-9dd6e4d86694.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5196
x-amzn-requestid: 85a783fa-ca3b-4ff9-a5fd-82acfce1c33a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xUFenoAMFSxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd5-3a67e7e55d700dc0245bb2fc;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:21 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0rABUqFd2EJ4USfCkPlkPGvzUtqllgEXckXBCXbwmk_8aAjP3DxN6A==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:57:21 GMT
age: 54022
etag: "d08e24264a8860483e76e761d8a7f4e969eda046"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5196
Md5:    c21ecdb581352e1d308477130b4c8504
Sha1:   d08e24264a8860483e76e761d8a7f4e969eda046
Sha256: 2cf56469cf3aaad83ddb52d270658b9fc59ef5dbe99f710bcbf58992abed1fe7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13213
x-amzn-requestid: 09f8fee2-6830-4bec-af40-f2fb6547bc63
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreH5poAMFdxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-0afbf5e01a013e6f0db53da1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CwkfEPDseHez7mArqwz8tmC3WHFwXAZF1OSColucaQ5vG2hvBIDWOg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:39:01 GMT
age: 55122
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13213
Md5:    62e68c3cd08dd94d910507512a67e85f
Sha1:   3d4fa8701f17e8818c25584ef5f04bfbee8440cd
Sha256: 058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14464
x-amzn-requestid: 5cbbafdb-3f69-4ee2-9e46-c1ff0ed4ef14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UPFiooAMFulA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-633a649700e040b91deadb64;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cNryG5vkxZuFATZfcNW9Z1-0teUBWLRyWslX1onwYlDCQBUjU2xVdA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:03 GMT
age: 54700
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14464
Md5:    aa5cad224dbddd71881bd07255beb4da
Sha1:   bc214d60be395d4cf753216ff8f9691c33d25e75
Sha256: 82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12016
x-amzn-requestid: ec1b3715-5d0f-4045-aa5b-b70a55c81d72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3EtyIAMFdZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-201dd1ef1426a09965c68dab;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pR4b1-lZZRMnWf-PdXFGXaHBCGAfOyp3AjeuCvtu5imWmf9N9l2wKQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:48:38 GMT
age: 54545
etag: "a54803cca7d3c509c195f65961e1110c8ec56f55"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12016
Md5:    4b794c6812cb546de0295e087ebe66a7
Sha1:   a54803cca7d3c509c195f65961e1110c8ec56f55
Sha256: 6a207f75eb3951f3dea5252bc8d185cd604d3d657f15b838774e8087e91f37f5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8500
x-amzn-requestid: 626c21ec-f29b-4b69-b275-c22c864c2409
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3VmENnIAMFeTQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c23-75eccc381fbd6e5d4ff59c06;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Eyy8qoYVCJbt6b6hTGJ-rOrYex9RuX1InyZbpHkeu9yQqPUEvowKcw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:48:58 GMT
etag: "9c4692ea64832895fbd107d91f879728b6a440c7"
age: 54525
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8500
Md5:    6139c878a7d2bd32c61fc8287996eb5b
Sha1:   9c4692ea64832895fbd107d91f879728b6a440c7
Sha256: 3839df92f0a10c1433d5b576df50c9f7953912ae4f425012262f08ee8a59ce2e
                                        
                                            GET /afu.php?id=792658&rt=1 HTTP/1.1 
Host: go.ad2upapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         139.45.197.237
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Wed, 28 Sep 2022 12:57:43 GMT
Content-Length: 138
Connection: keep-alive
Location: http://go.deliverymodo.com/afu.php?id=792658&rt=1
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   138
Md5:    aff950cab4c0265e21d401db15f1026d
Sha1:   f03e18461817f7a6546c8bf8fa8d686d7e30aca0
Sha256: 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
                                        
                                            GET /afu.php?id=792658&rt=1 HTTP/1.1 
Host: go.deliverymodo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         139.45.197.236
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf8
                                        
Server: nginx
Date: Wed, 28 Sep 2022 12:57:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 09f55cd90b35260e8b08612b78a62fe6
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://engingrepare.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=740bc2a2f0214afa8ad139b50171a73a; expires=Thu, 28 Sep 2023 12:57:43 GMT; path=/ oaidts=1664369863; expires=Thu, 28 Sep 2023 12:57:43 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (488)
Size:   944
Md5:    2f368c019ee5cc6e4b340d1ae27163b1
Sha1:   cdd6d6fb0b8cb78bf95ebaacca51c00a82c9d122
Sha256: 5f39b9d0ba026c60b9276e895b1b3c21a090b21dae84b7999b43b08437796f64
                                        
                                            POST /vb?t=56193&bid=79056&aid=598973214290612433&tp=1968 HTTP/1.1 
Host: unphionetor.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                         
                                         139.45.197.236
HTTP/2 204 No Content
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:43 GMT
access-control-allow-origin: https://toapodazoay.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: c1a26b9dbf226814f110e32ccf1607fa
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /b68fbfec-7b24-433b-9c67-97b9b84e7421?zoneid=792658&bannerid=14993069&browser=firefox&os=linux&device=desktop&region=03&isp=blix%20group%20as&useragent=Mozilla/5.0%20(X11;%20Linux%20x86_64;%20rv:96.0)%20Gecko/20100101%20Firefox/96.0&language=en&connectiontype=broadband&cost=0.000185&visitor_id=598973220238140173&country=NO&zone_type={zone_type}&rdk=rk1 HTTP/1.1 
Host: engingrepare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         3.123.187.149
HTTP/2 302 Found
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:43 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://www.roifxtrader.com/
pragma: no-cache
set-cookie: b68fbfec-7b24-433b-9c67-97b9b84e7421-v4=1rYpkXsy_Ka-sqzWI4lVeTOvueoKXny3O_0OuKjmcHc; Max-Age=86400; Expires=Thu, 29-Sep-2022 12:57:43 GMT; Domain=engingrepare.com; Path=/; Secure; HttpOnly;SameSite=None cc-v4=IZFQb0Galp6DVoZCvHSeakw8qtQEgUocYsau3Fzt1YrdcjbaNLhGYlHUN6IPE%2BXnUUBMAuYepmRG0247SMnGQ21Qk%2BIaTBiuPyEZ1hriuKkkIk%2BgSzoYS2GLDIok3htDq8m14od6jQqyz%2BvbaetHpQ%3D%3D; Max-Age=31536000; Expires=Thu, 28-Sep-2023 12:57:43 GMT; Domain=engingrepare.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "C6FC6E7B958FDEEDC023D6598098AB514DF823876BB65B75AC9440C68C83A2D9"
Last-Modified: Mon, 26 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1943
Expires: Wed, 28 Sep 2022 13:30:06 GMT
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:43 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:25:19 GMT
Expires: Mon, 03 Oct 2022 06:25:18 GMT
Etag: "f2ec69fdaca2a0327cd3599ac05d0051df3dee41"
Cache-Control: max-age=407854,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751ca580dcabb518-OSL

                                        
                                            POST /img.gif?f=merge&userId=740bc2a2f0214afa8ad139b50171a73a HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         139.45.195.8
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:43 GMT
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=740bc2a2f0214afa8ad139b50171a73a; expires=Thu, 28 Sep 2023 12:57:43 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: go.deliverymodo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=740bc2a2f0214afa8ad139b50171a73a; oaidts=1664369863

                                         
                                         139.45.197.236
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Wed, 28 Sep 2022 12:57:43 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "14E7C7E810F32810605E55572E44332ECA26850EEE1885A552B39FDEEE7815C2"
Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4797
Expires: Wed, 28 Sep 2022 14:17:41 GMT
Date: Wed, 28 Sep 2022 12:57:44 GMT
Connection: keep-alive

                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 28 Sep 2022 05:35:18 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NLNmn_-GYaOTz_hfPVkI58rhXmwuwZDrFMeaGoddMZowuTrlnJ2Evw==
age: 26546
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            GET /external-embedding/embed-widget-ticker-tape.js HTTP/1.1 
Host: s3.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.32
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 10745
date: Wed, 28 Sep 2022 10:15:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 28 Sep 2022 10:14:56 GMT
etag: "ec810cf189244421fbba88a8fb7661b4"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NK-4xcwgPUtfwyrxZKLO7YK-0cyid_mOeZDB2r_B2TGddPEuHbl5PQ==
age: 9763
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3066)
Size:   10745
Md5:    ec810cf189244421fbba88a8fb7661b4
Sha1:   71ddd06a5ea0b748663403dbb2ef53e553b0297c
Sha256: bb51d1e5236e0daeb078e0df8e945e5a0afc06e83e0ed54281d9af4877f58df0
                                        
                                            GET /flags/4x3/it.svg HTTP/1.1 
Host: flagicons.lipis.dev
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         185.199.108.153
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: GitHub.com
x-origin-cache: HIT
last-modified: Sun, 11 Sep 2022 10:36:31 GMT
access-control-allow-origin: *
etag: W/"631dba2f-121"
expires: Tue, 27 Sep 2022 03:37:51 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: A78A:111B:6A732E:6DCA27:63326E03
accept-ranges: bytes
date: Wed, 28 Sep 2022 12:57:44 GMT
via: 1.1 varnish
age: 488
x-served-by: cache-bma1668-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1664369864.172724,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 04d9dc4932f4395b1a8b31513a6d9096921a5040
content-length: 208
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text
Size:   208
Md5:    c08a2da07f2c5a52da29268db93d165b
Sha1:   f87a1da0d5fe1524463fb90a7dafd2588bb75043
Sha256: d012f6255909efae4049381abf5aea7890f8c5f3f9d12cc4a8bb41ce67309997
                                        
                                            GET /external-embedding/embed-widget-market-quotes.js HTTP/1.1 
Host: s3.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.32
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 10057
date: Wed, 28 Sep 2022 10:15:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 28 Sep 2022 10:14:53 GMT
etag: "3da96dfe346bd193547af675cb8b60ca"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UYXBYnqZu80kk3634DCKbIwtdrgKPU_1YwctgZGrkLr-rzXlQ-7MQw==
age: 9762
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3066)
Size:   10057
Md5:    3da96dfe346bd193547af675cb8b60ca
Sha1:   cbc8dd58b58e3f636bddb08f37e29a1f973697d0
Sha256: 77e23a8619b5ba9fb57c11cc6b5460b80760e5664ed380403b6a283828187cd8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=G-1CZCP7MM89 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 28 Sep 2022 12:57:44 GMT
expires: Wed, 28 Sep 2022 12:57:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75358
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20189)
Size:   75358
Md5:    8cb1d6048db54cb3ab35b0854aafddde
Sha1:   5f1005d9f12371ddd6027caf62084e2423aeebb3
Sha256: bf48de19db262746d88f733eece49da8b277b1b186a57e8d7303185ef0be8f07
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   1695
Md5:    32ddd12434c2b0d13171b1221c7de9c8
Sha1:   c2e58e19915cc45a6c3cc37c7919a10076ef191d
Sha256: e049e168e0d859ee2de400eb9249f70ba9a1dbba759f4a448e902cf95880a973
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   16670
Md5:    439558a8f31850d6420fcdf8bf13da81
Sha1:   0b8ff307baa389fa141d97796f2ae3b2e82781c0
Sha256: 209335e1d638b850effbb10c7c43dc19ed70e32234f59645f65a9e020054cf67
                                        
                                            GET /external-embedding/embed-widget-market-quotes.js HTTP/1.1 
Host: s3.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Wed, 28 Sep 2022 10:14:53 GMT
If-None-Match: "3da96dfe346bd193547af675cb8b60ca"
TE: trailers

                                         
                                         54.230.111.32
HTTP/2 304 Not Modified
                                        
date: Wed, 28 Sep 2022 10:15:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 28 Sep 2022 10:14:53 GMT
etag: "3da96dfe346bd193547af675cb8b60ca"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M-hcxo_Su4bdO7eIlu8AoHPBIlYDHg8v0yFLW0Oq7-i9tSixetW3Mg==
age: 9762
X-Firefox-Spdy: h2

                                        
                                            GET /external-embedding/embed-widget-market-quotes.js HTTP/1.1 
Host: s3.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Wed, 28 Sep 2022 10:14:53 GMT
If-None-Match: "3da96dfe346bd193547af675cb8b60ca"
TE: trailers

                                         
                                         54.230.111.32
HTTP/2 304 Not Modified
                                        
date: Wed, 28 Sep 2022 10:15:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 28 Sep 2022 10:14:53 GMT
etag: "3da96dfe346bd193547af675cb8b60ca"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 97I_oJqsDYzluDF3xBFihF4LSvCHTdFRgMp6PxuobdRlc20TtdCudA==
age: 9762
X-Firefox-Spdy: h2

                                        
                                            GET /css?family=Jost%3A600%2C400%2C700&display=swap&ver=6.0.2 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 12:57:44 GMT
date: Wed, 28 Sep 2022 12:57:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   414
Md5:    f29a1960671fc952d242935d39d495a3
Sha1:   e6b3d47c2eb12181add5f36d96da33351f48b28b
Sha256: b9ef1d2cd5fb8e2454f25f61bc5219d6f5bd6a181dfa179efdb61df4ae317eb2
                                        
                                            GET /d/.js?oref=&ourl=https%3A%2F%2Fwww.roifxtrader.com%2F&opt=ROIFX%20Trader%20%E2%80%93%20Trading%20in%20Forex%2C%20Cryptocurrencies%20and%20Stocks&vtm=1664369861855 HTTP/1.1 
Host: engingrepare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         3.123.187.149
HTTP/2 400 Bad Request
content-type: text/html
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:44 GMT
content-length: 152
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size:   152
Md5:    d9bacc468aa23334526933389545e120
Sha1:   e26288b4bada404ce340ca72989f9f1193dc649c
Sha256: 0605685efb44dd3decd77517436c575731b61f807247587de67080c579ffa2d4
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/jost/v14/92zatBhPNqw73oTd4g.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26304
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 02:52:26 GMT
expires: Tue, 26 Sep 2023 02:52:26 GMT
cache-control: public, max-age=31536000
age: 209118
last-modified: Mon, 11 Jul 2022 20:29:30 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26304, version 1.0\012- data
Size:   26304
Md5:    29404b5009a74d47f2a7923da5741fd5
Sha1:   c8c7a68af3f7e4f92d932203efda0c38e4d170ab
Sha256: 0b7e3af1cb23f3b1cc2c3418f3c31ab3bbadeaa2ba5e72f3cb818e4b44c420f4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6431
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 12:57:44 GMT
Last-Modified: Wed, 28 Sep 2022 11:10:33 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6431
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 12:57:44 GMT
Last-Modified: Wed, 28 Sep 2022 11:10:33 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /static/localization/translations/en.911e74c668275df6.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 69540
date: Wed, 28 Sep 2022 10:16:07 GMT
last-modified: Wed, 28 Sep 2022 09:05:49 GMT
etag: "63340e6d-10fa4"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ac7ird7bPt_uNqEvQuMVqDfF6KjRYzh2r009FazUMsJ3UmiGDrH_sw==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Size:   69540
Md5:    e4f34ac25ea8bd0dee9c59f19fc9d4b4
Sha1:   eacfa8eabe4931dcd2b83ad2bf40cddda4d27bc8
Sha256: efdd661c4d82c676085fa1eb61b0fde53fc7ffc876cf30f657c77650da8c74ea
                                        
                                            GET /static/bundles/embed/3086.0d1fcc5f4fdd633672c7.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 356
date: Sun, 25 Sep 2022 04:58:21 GMT
last-modified: Fri, 23 Sep 2022 08:31:47 GMT
etag: "632d6ef3-164"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kth_KsirzABMHLnC3KZvlxLGMOHJ9xTK_CukOHxk9x_YbS0G5nEbmg==
age: 287963
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (948), with no line terminators
Size:   356
Md5:    16fe29eaf41b2fde6e77d4ef09450181
Sha1:   54ae65606614243586fc111e4e4ee914400a0479
Sha256: 7bb5ad11b56a0c857b732ededfb65aa75f55a780839d227672589455ca60c2d2
                                        
                                            GET /static/bundles/embed/75932.cd4f83e4607134502a66.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 13130
date: Tue, 06 Sep 2022 17:11:17 GMT
last-modified: Tue, 06 Sep 2022 09:02:09 GMT
etag: "63170c91-334a"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WThQvKmqV5PgzqN4_3qAF_OXQkfp5dweGj3RoqzBjsoMqVfyKMjOnA==
age: 1885587
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3072)
Size:   13130
Md5:    5a0c7bc6d1f0fd7cebe9ba858efc5632
Sha1:   44b60c160837ec19c9a62a8418856a4215ac3c5c
Sha256: ca71d4a2482d29154397437b9293a74beaa2344b04ebc1d6ac77723de1f213b4
                                        
                                            GET /static/bundles/embed/72369.9291747e1fab1074d523.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 34533
date: Tue, 30 Aug 2022 10:48:07 GMT
last-modified: Tue, 30 Aug 2022 10:04:53 GMT
etag: "630de0c5-86e5"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qidfC9DiD1HCMOWzMCy7mAUY7eUi_Tm18YTcdXYQLxWKyJRGjHgUwg==
age: 2513377
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3072)
Size:   34533
Md5:    137f32f31f363a0f5c5ef9edf02ea5fe
Sha1:   ec4f7cabe9b427c61998e7bb2322446dd3bcfb5b
Sha256: f0ce8027e74c6b87d61b18d7fda040c6a232d26dbac924324032597552d6f6eb
                                        
                                            GET /static/bundles/embed/69952.06b0e333ddc07ff1bde0.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 4128
date: Wed, 21 Sep 2022 10:20:06 GMT
last-modified: Wed, 21 Sep 2022 08:40:50 GMT
etag: "632ace12-1020"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OlW4t-jazDQjVqrD0PfCjio8rRJWJdyssLnNb3vBCS7XAbeBBw3_xA==
age: 614257
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11868)
Size:   4128
Md5:    82c0166d07dafbc60c0256135ff70c1d
Sha1:   2640a815ffbed854738cf29d2ab876d55f8c60dc
Sha256: 5a880fd727f2a0141993963276994f900261db54dc1e62577c23d0f1dc03192a
                                        
                                            GET /static/bundles/embed/95170.8c229ea611144b3d939d.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 8938
date: Sun, 28 Aug 2022 00:45:02 GMT
last-modified: Fri, 26 Aug 2022 08:29:14 GMT
etag: "6308845a-22ea"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Cerzz-8d3HBZylP3kvYBfs3iKvUtlevdbnl7FQs1DK0VbSxGp96JYQ==
age: 2722361
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3072)
Size:   8938
Md5:    fbdc997c1e2881ef8bb545eb7c1f2bdb
Sha1:   8b4bb8fee879ef2ef0d720d8d3096740bab8a106
Sha256: 0f0fed29649e13d5b891443c4f819050dfb7e42c58d2c0f9170af36e5da7d495
                                        
                                            GET /trustboxes/5419b6a8b0d04a076446a9ad/index.html?templateId=5419b6a8b0d04a076446a9ad&businessunitId=62bc0c115fe9507ba430b5ef HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 2028
last-modified: Tue, 16 Aug 2022 12:42:13 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 28 Sep 2022 03:53:40 GMT
cache-control: max-age=86400
etag: "31a9b5fa35e99cbb958f8facd1967e11"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BzfKKUKjxCeCYoIMZE7qE22gmJ7xzKFEQzTKDiInwLvXA8uvbnJPdQ==
age: 32644
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6390)
Size:   2028
Md5:    31a9b5fa35e99cbb958f8facd1967e11
Sha1:   5885c836b1be01370bed43fbb96278e2fc0e40f9
Sha256: b2a7e35547d699bc046c22f88eadb882a55c67e89408cc7a61cdc0c443384fa4
                                        
                                            GET /static/bundles/embed/59349.06c5af95e99eb360e0d3.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 4693
date: Wed, 07 Sep 2022 10:11:06 GMT
last-modified: Wed, 07 Sep 2022 08:33:52 GMT
etag: "63185770-1255"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MxfNrtOYOndU84KJsP0dD8ZmmSvBYC0u5IdZVsGuTNNSVoCHidn7aQ==
age: 1824398
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3036)
Size:   4693
Md5:    ff47484f62feaf77f161d647657c0881
Sha1:   7de7f3926fda6a3369590e9e41b0a8ddba78124d
Sha256: c9d192847a0783982fd1845ab5bd4715b3ac43afe9ce784b55120c7f5559d80c
                                        
                                            GET /static/bundles/embed/76193.359ba0a2fedec9f67dcd.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 2041
date: Wed, 28 Sep 2022 10:16:09 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-7f9"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xk1IIY_sAgPJBTFuEEoOEkTCRh2Ux1oTIL_nlNjqlvXka5S5potCBQ==
age: 9695
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3067)
Size:   2041
Md5:    5a2429023e3b60dddbcca8ff0cf894bf
Sha1:   5da789bc42db9159c5d1ae8455e2d7185dee168d
Sha256: ed1afabb746b50541593bd90b2cbb5bcdd58c46b0327bbee9b0bac1b49694515
                                        
                                            GET /static/bundles/embed/7627.86d80ac946d46148f36d.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 9302
date: Wed, 28 Sep 2022 10:16:07 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-2456"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kOdRhRdI-dg0HS8R18J_VMH9omjtHHTtQZorfD7FRHkBMATPuwNR5w==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3069)
Size:   9302
Md5:    566934cd4ed4218e06f3848446c61be6
Sha1:   2aae62c73f92444c9f5ba1093003673f3b2d2846
Sha256: 0cab24c0c3b1030824cc1cd0f51761453d25d698b45b7a6218261f2c47e6dcec
                                        
                                            GET /static/bundles/embed/47872.3ffc7a43129670bb4cf1.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 18637
date: Wed, 28 Sep 2022 10:16:07 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-48cd"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bS74mBG2qht8AE0usxGvEAuOf6yUa74LAwEADX-Tg0jve8LUmilfWA==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3071)
Size:   18637
Md5:    9d90fadab51b39d5fd4933a3e68431c7
Sha1:   12da9818dcb8cfd4d9cba769b06f848d4f72d7a4
Sha256: 7132bb42f7ec8de7d0cb85afce0203224ea7a641007305b624545cea06ab7ca4
                                        
                                            GET /static/bundles/embed/73405.42e1022656987a436e9a.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 8877
date: Wed, 28 Sep 2022 10:16:07 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-22ad"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tqF4yINp6yZek6RTA17Y1JApEZbe7pw9ZrrK8V7vMik7mq9ANmiZ8w==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3071)
Size:   8877
Md5:    243b1683c3099e8c544736bf394cd5fa
Sha1:   7c222f3c73dd73eeb16e18e0f7b8296f2104cb13
Sha256: 6d53a4e370c0d38fb21a7123eb205cae5e690299c05bccfc7965ac649c4c5a7d
                                        
                                            GET /static/bundles/embed/61165.669f518fb3ca12a08781.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 9641
date: Tue, 30 Aug 2022 10:48:07 GMT
last-modified: Tue, 30 Aug 2022 10:04:54 GMT
etag: "630de0c6-25a9"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fQ7A9-u8Q_fqgR-OXN4OaxZikDwgTtP4OLQoDiWYGVMlFR09gIkW7w==
age: 2513377
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3071)
Size:   9641
Md5:    5d9570cd52c8c73b9e1a2e9865429c3e
Sha1:   eb47e79aebf1eb741a9018b31d22c7c10de0e7fd
Sha256: 4729a1722a0cc609a32e59ee76174287c4711b72cde258d0441014f43991b4ee
                                        
                                            GET /static/bundles/embed/21629.b234e05fdb27c3a2567f.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 11142
date: Wed, 28 Sep 2022 10:16:07 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-2b86"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xn_WZwijM6100vZrq9N3dK50j0QVpvrb4JBaw1VuOD4U7EBknk_41g==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (15650)
Size:   11142
Md5:    2d8a274bd0b23a58fcd445a32dc089ab
Sha1:   718b0dc56b6f370f0eb4f25567917a5665f47106
Sha256: b713d95de54851e4fcfd02f7873990e7c4b3e4c54101e607e830d4fa69bcdee6
                                        
                                            GET /embed-widget/market-quotes/?locale=en HTTP/1.1 
Host: s.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.73
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:56:03 GMT
expires: Wed, 28 Sep 2022 12:58:03 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-SJz9W3rP4RFCM98UKktMyA=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fSN4B45vySsn3G8GGaoMbGkUDIK3PEhNpSxhxEP7qtmi00b53O7r3g==
age: 101
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   12594
Md5:    a12cca1ecd2f6c61b272b0f61b9ce36f
Sha1:   743c79d62ef866c8fba932ad08161d44fd747303
Sha256: 76242996cca772663d78d694512029b0e3c5dc6b2f4bf137c3463200e9c1fce3
                                        
                                            GET /embed-widget/market-quotes/?locale=en HTTP/1.1 
Host: s.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.73
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:56:03 GMT
expires: Wed, 28 Sep 2022 12:58:03 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-SJz9W3rP4RFCM98UKktMyA=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zg9VQWcitOhTERkdIMVJ8Me869N5vWocoEjewe93fPx5tbf8ewOitw==
age: 101
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3070)
Size:   13915
Md5:    2123244d44767314c024f780b7cd6a5b
Sha1:   eb3c2ea299bcf418f2eb98fbdbafedccb5a0434a
Sha256: 5fec5cf72b9dcf76500e6d61a4a4bb21ece2d7f1ba7749741ee8e712ef9b2498
                                        
                                            GET /embed-widget/market-quotes/?locale=en HTTP/1.1 
Host: s.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.73
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:56:03 GMT
expires: Wed, 28 Sep 2022 12:58:03 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-SJz9W3rP4RFCM98UKktMyA=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xr1wl4zSHE7GNh1tT-i1izCjmkLdli7ZN5M81c0ipirRLYbfkpjDlA==
age: 101
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3065)
Size:   7585
Md5:    e0600ed5e1ac2af1ff71b0962ae8000a
Sha1:   2fc74aeb382a2eaaaa4b805146946bc64ce344cb
Sha256: beb8c91ea5b44198b1fcf425eb8fd5daf006a2420c90f6f4fac0d4c5ca97697b
                                        
                                            GET /static/bundles/embed/runtime.3a29f780727133a37973.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 20677
date: Wed, 28 Sep 2022 10:16:07 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-50c5"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 49jhqorZla48XKjA7KbkE5cOUOkldAqEN5c0V6CZEYWX1CybjXq0yw==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3070)
Size:   20677
Md5:    43b691ba8ae7faa5bb1091c896f46cae
Sha1:   c2cfe9057ae8bf3bc93fc590cdc35bd9c92b95c4
Sha256: 64064f41d1738e41176ca521af5cb9e754d81032a05a983862a2e2a6034d78fb
                                        
                                            GET /static/bundles/embed/72066.f1aaa4b56bfc5daefd58.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 272
date: Tue, 30 Aug 2022 09:48:31 GMT
last-modified: Mon, 29 Aug 2022 11:50:55 GMT
etag: "630ca81f-110"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9qf4oJHB0zSWHznrS3byhP5W-tTsHwHMoC1NehL9vjJPfer_rLWWDw==
age: 2516953
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1187), with no line terminators
Size:   272
Md5:    2c94a40a0cdaab30536f9ff9aac30780
Sha1:   13e3a1701670362dc0356126be21982f8a371247
Sha256: 12b841c633c6498d1604f4d6dc199c8d61b22a45abb7b2d4aacbc364d16c21b6
                                        
                                            GET /static/bundles/embed/93419.83330e98cd0f13f52e0f.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 1402
date: Tue, 06 Sep 2022 10:03:06 GMT
last-modified: Tue, 06 Sep 2022 09:02:07 GMT
etag: "63170c8f-57a"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NXvZtxf9NNh1d1IfP7UZY5-fV_seDfT1UbuuzUux0dUxFQ0eOhEgcg==
age: 1911278
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9662), with no line terminators
Size:   1402
Md5:    88f981d4515d17d18a2edb4fd8942d13
Sha1:   8ff9f61ddd215081c2022095cc92ea4f6392fccd
Sha256: be72f658e95a44000be53a7734d656f75cdb5c90feb7f163d979d4d49588e761
                                        
                                            GET /static/bundles/embed/4704.721cbfb1a5d6784e3109.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 564
date: Tue, 23 Aug 2022 04:02:31 GMT
last-modified: Mon, 22 Aug 2022 08:50:32 GMT
etag: "63034358-234"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ly9pOZF9UKOJMmH3qH-RQHl2v5MjFSELFqyS5HeYU2VKNzVJQ7h7Tg==
age: 3142513
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2185), with no line terminators
Size:   564
Md5:    7ed223837884f5948564fd6dd3c5ff7f
Sha1:   86048f28dd4b3d8fc9f774e1aafe4fd122fe27ed
Sha256: 30ee848d4507d77674f2a72a9e18cba90abc9026beff1b8b8718818c9d05ac7a
                                        
                                            GET /j/ZDOGH3BG7BDBHCL6KDA6CI/roundtrip.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 00:13:22 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: v3RRHacPGSvusAFUR2nRbbaSEXn1Ruba
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 28 Sep 2022 12:32:38 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"b742f25a5997ad917e3750d13c900509"
Vary: Accept-Encoding
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
Age: 1517
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zcnh5s9bd4d2B5MF2r-0IWk9KEWb9MGHVp1USoUzf2BjxbiSFmNddg==


--- Additional Info ---
Magic:  ASCII text, with very long lines (1326)
Size:   18505
Md5:    c33b914661dda2792b117dea59ee7573
Sha1:   c124bf1cd347045674f7b509a0063a6793f26118
Sha256: cf4a8944c15549fb417616ac94fba87da776881da0e1c0bae759be9c4a27d12d
                                        
                                            GET /static/bundles/embed/5735.c773d84ae2dfa00f5f7e.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 458
date: Wed, 07 Sep 2022 04:36:33 GMT
last-modified: Tue, 06 Sep 2022 09:02:06 GMT
etag: "63170c8e-1ca"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LoJnTJrjYqvR77IuTrHL4YeJfpl3yaPQ3WvzG0FQjQddoD8mxKrIgQ==
age: 1844471
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1649), with no line terminators
Size:   458
Md5:    7497343e286bffb0f77343a72c52c807
Sha1:   a0b16b6844fec13e7e4f05c5ec1dff354a843128
Sha256: f775ccacb10b864665283b42df806044d4c07d2b103c4a3d15fc6fa967890a87
                                        
                                            GET /static/bundles/embed/22641.c7183a76dc0599de9f42.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 566
date: Tue, 30 Aug 2022 09:48:31 GMT
last-modified: Mon, 29 Aug 2022 11:50:57 GMT
etag: "630ca821-236"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Pb6dpYeUTVV9v0Oc4GJGIf-6SG3_qlEhuKzB89Mp66eFLUp9iJgV4Q==
age: 2516953
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3872), with no line terminators
Size:   566
Md5:    6e6b52d09836b19a082054796f9fbadf
Sha1:   47f855654aca16bb3d22b0a261028c07bfbf3ac1
Sha256: b66836dc4dcb259fd7f709598dc05417bc69fe1c7f6382e3be864e124f711186
                                        
                                            GET /embed-widget/market-quotes/?locale=en HTTP/1.1 
Host: s.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         54.230.111.73
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:56:03 GMT
expires: Wed, 28 Sep 2022 12:58:03 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-SJz9W3rP4RFCM98UKktMyA=='; default-src 'self' https: data: blob: wss: 'unsafe-inline'; object-src 'none'
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aCcEC1zTlmAi8eAM7N5iEZ9GA1qR_YEwDY3gakJ6VQYkb_ZzcXMXVw==
age: 101
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3065)
Size:   7218
Md5:    e26894b9e8c9c42a7e85f9b6e70b20c6
Sha1:   b3f133c0bdb781ff101b7d8edac7acf9e3c40ea6
Sha256: c1af47d30f91fc9bbe152cf571760f46b88a64fba6023b5bfe737ca1ce21bb83
                                        
                                            GET /static/bundles/embed/9594.68f7335652cbfdf7e67c.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 7439
date: Wed, 21 Sep 2022 10:21:12 GMT
last-modified: Wed, 21 Sep 2022 08:40:49 GMT
etag: "632ace11-1d0f"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vpXo4u3AQdzOhrln3FRablm1aCXleK2BotarR8qO6JtrcYMlQ6-E4w==
age: 614193
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5750)
Size:   7439
Md5:    3b4066a73cebfb7b454eec133389a57b
Sha1:   ed20e19786662b416a82496dcd79c7b8208ff849
Sha256: 9fc16a6e1f29915d3644e44acefcc94cd50f1507e40b7254be42a76540cb0111
                                        
                                            GET /static/bundles/embed/embed_market_quotes_widget.4f44c7733db13c8acb4f.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 11954
date: Wed, 28 Sep 2022 10:16:08 GMT
last-modified: Wed, 28 Sep 2022 09:05:54 GMT
etag: "63340e72-2eb2"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K0s-mvAhOYRmyrrNDIozX_vftDQWnC42i7xS5yS6gB38uTL2JgG7gQ==
age: 9697
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (15650)
Size:   11954
Md5:    c42f7e13d7e375fa438908604c2772c9
Sha1:   4cb17545ab5945aa8b29c03f3d974d726c54295e
Sha256: bd30f8280cb053141599b7de0df67f0058973cacda2c1fe2c78bae5afbf0a097
                                        
                                            GET /static/bundles/embed/97029.aec87eec8d0ca240b268.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 1203
date: Sun, 21 Aug 2022 05:19:43 GMT
last-modified: Fri, 19 Aug 2022 08:04:18 GMT
etag: "62ff4402-4b3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -V-vKfyVEC0Sm8LcEf_mGORMqvJXgsUe140Qdl2bFzqEqmWH7WBKBQ==
age: 3310681
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6181), with no line terminators
Size:   1203
Md5:    1acd9e2f93f1b44ffe18afa2e59c5605
Sha1:   e11276fc18fca3f4322ec55aec2e2646b86160e6
Sha256: a82402c600674227f23aa4509c8331a0470cb3b89721dee3f33358f484d76f68
                                        
                                            GET /j/exp/ZDOGH3BG7BDBHCL6KDA6CI/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
                                        
Content-Length: 0
Connection: keep-alive
Date: Wed, 28 Sep 2022 00:03:42 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
Age: 46442
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4m7lxkBIGJRJKINqy9EVtehL6ujiKHcK3IplXaECxLxshGsbojrn4Q==

                                        
                                            GET /socket.io/websocket?from=embed-widget%2Fticker-tape%2F&date=2022_09_28-11_58 HTTP/1.1 
Host: widgetdata.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2p/Q5yKaEuHAOEY4ZJLVMw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         209.58.153.114
HTTP/1.1 101 Switching Protocols
                                        
Date: Wed, 28 Sep 2022 12:57:45 GMT
Connection: upgrade
sec-websocket-accept: KoP+Ikjho2l1LoIWpDIGt2rFKdI=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv

                                        
                                            POST /g/collect?v=2&tid=G-1CZCP7MM89&gtm=2oe9q0&_p=502750757&cid=1665279514.1664369862&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664369862&sct=1&seg=0&dl=https%3A%2F%2Fwww.roifxtrader.com%2F&dt=ROIFX%20Trader%20%E2%80%93%20Trading%20in%20Forex%2C%20Cryptocurrencies%20and%20Stocks&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.roifxtrader.com
date: Wed, 28 Sep 2022 12:57:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /static/bundles/embed/28903.415109541489380d12f6.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 219
date: Tue, 06 Sep 2022 10:02:46 GMT
last-modified: Tue, 06 Sep 2022 09:02:06 GMT
etag: "63170c8e-db"
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
content-security-policy: default-src 'none'
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RLULRWOeCuTHgoB-O11Rsfz_OVnbhcZvc4LC_4zD8wCb4v1Ohhy2cQ==
age: 1911299
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (801), with no line terminators
Size:   219
Md5:    97f7a20e8f5b5aab89e7323c3f952f93
Sha1:   0a86a43d70147185f1f356ac3061d461f498a0af
Sha256: 51e40ba29ca9c9b7f89f255331a616a93beb9fb033c029e058a6a45483c0209c
                                        
                                            GET /static/bundles/embed/tradingview-copyright-data-impl.8fddca2ccd8456d34a10.js HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 2227
date: Tue, 06 Sep 2022 10:03:15 GMT
last-modified: Tue, 06 Sep 2022 09:02:07 GMT
etag: "63170c8f-8b3"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JhVNmzfR-RA8qM2binJscLSRkDer-jssyNDf7Yy3QchGhzC79pJBMw==
age: 1911270
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3332)
Size:   2227
Md5:    10646734b7317bc4de6c75f1793839a6
Sha1:   371b747cf29562f3afe4ffedb92f75d68fc26bae
Sha256: 186c382fb9c7f0273a2358f8096e1d52915c03127af19ff5363849b8fbc9be1e
                                        
                                            GET /j/exp/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.roifxtrader.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 28
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 17:25:28 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: VS8aSrwndm.MeiNnyJ10ruHH56v74CIF
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 28 Sep 2022 06:14:02 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
Age: 50986
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6dEA5y-LZB-bxpLctZBgEyok_69WxAVlepXRBkkz7jtfucuxp-9sTg==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    5816cced8568d223aa09d889f300692b
Sha1:   95cab5e474d7391762c3da5c7dc50fcf05df529f
Sha256: f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
                                        
                                            GET /socket.io/websocket?from=embed-widget%2Fmarket-quotes%2F&date=2022_09_28-11_58 HTTP/1.1 
Host: widgetdata.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AHF9zBlfw5MRMCC5sxJrPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         209.58.153.114
HTTP/1.1 101 Switching Protocols
                                        
Date: Wed, 28 Sep 2022 12:57:45 GMT
Connection: upgrade
sec-websocket-accept: bRqP8pzz8BwtrZDi5Irdp0FDv4I=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv

                                        
                                            GET /trustboxes/5419b6a8b0d04a076446a9ad/main.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6a8b0d04a076446a9ad/index.html?templateId=5419b6a8b0d04a076446a9ad&businessunitId=62bc0c115fe9507ba430b5ef
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 17866
last-modified: Tue, 16 Aug 2022 12:42:15 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Wed, 28 Sep 2022 02:13:39 GMT
cache-control: max-age=86400
etag: "a935a0a0daf8a792b6f622a79037eb14"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZwwMsdRGcd0eicQs2FeAbcJzTqCPliremtfHxGvt9mx6XToS94BxMg==
age: 38655
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (58329)
Size:   17866
Md5:    a935a0a0daf8a792b6f622a79037eb14
Sha1:   ce630181500fec9f5805e83f6a8ff08bf94d915f
Sha256: 3a4186a7ce71e0e3c50edade71422496a78db2317f107e953c5aa6dee8f683c7
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s.tradingview.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 28 Sep 2022 12:41:09 GMT
expires: Wed, 28 Sep 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 997
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            GET /stats/TrustboxImpression?locale=en-US&styleHeight=24px&styleWidth=100%25&theme=light&minReviewCount=10&withoutReviewsPreferredStringId=1&url=https%3A%2F%2Fwww.roifxtrader.com%2F&referrer=&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=62bc0c115fe9507ba430b5ef&widgetId=5419b6a8b0d04a076446a9ad HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6a8b0d04a076446a9ad/index.html?templateId=5419b6a8b0d04a076446a9ad&businessunitId=62bc0c115fe9507ba430b5ef
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         143.204.55.110
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Wed, 28 Sep 2022 12:57:46 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Vw2XeEnEoi9rYFthlcCNWrDGlvyaSy1Uo9onKr5-UhPz1eXAFkNslw==
X-Firefox-Spdy: h2

                                        
                                            GET /socket.io/websocket?from=embed-widget%2Fmarket-quotes%2F&date=2022_09_28-11_58 HTTP/1.1 
Host: widgetdata.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2Ie9ZKbC6oyDNGXk9meQqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         209.58.153.114
HTTP/1.1 101 Switching Protocols
                                        
Date: Wed, 28 Sep 2022 12:57:46 GMT
Connection: upgrade
sec-websocket-accept: lyE8BsYUWQJSdOgWqspeNyVyFos=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv

                                        
                                            GET /country/EU.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 870
last-modified: Wed, 08 Sep 2021 09:01:40 GMT
x-amz-meta-hash: e9173ef4613c3da43c45885ea39c4b96
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:47:00 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "e9173ef4613c3da43c45885ea39c4b96"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wcqm9sLpYMFcoDuJLAk4lmhTTh7ACtW7k7PwuC41YCCMby7kkSdp4g==
age: 647
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (870), with no line terminators
Size:   870
Md5:    e9173ef4613c3da43c45885ea39c4b96
Sha1:   218b28ec16584e3f2326b778d3cca1d5c6a682d1
Sha256: b47993af3ef9963a193ddc9d0bd10fc8f1f773fe0881ffa3c8d2151498fccf03
                                        
                                            GET /indices/nasdaq-100.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 777
last-modified: Thu, 26 May 2022 07:17:23 GMT
x-amz-meta-hash: fe60c6206a39b7984b1ebb2b8234c5ab
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:32:00 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "fe60c6206a39b7984b1ebb2b8234c5ab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KDJSx2rLJqOMkZS5S5_gsNTMtTUF0dNGUYk1xLLXZnhylUOTM7ocyA==
age: 1562
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (777), with no line terminators
Size:   777
Md5:    fe60c6206a39b7984b1ebb2b8234c5ab
Sha1:   ec9c1ff626f97b55d2196a86ccb44fce9bdadbd2
Sha256: 425b69d42c6b0731fb094a37cbe1600ea1bfd57d2020094ecd0478e4d5720fa4
                                        
                                            GET /country/AU.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 937
last-modified: Wed, 08 Sep 2021 09:02:00 GMT
x-amz-meta-hash: ffaa89557725b51eb58753956db0a148
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:18:39 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "ffaa89557725b51eb58753956db0a148"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gS0K9SlbwFRVe2ok0tiDQSSKe2cXaFo7WNzRrvKN5xuwxmnp387VDw==
age: 2359
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (937), with no line terminators
Size:   937
Md5:    ffaa89557725b51eb58753956db0a148
Sha1:   af4c43200c5a85ad2d525412bf83e55e90138bd3
Sha256: 27c815d48181359be416f858593d35e363b546bf3f237e0458cccf01fefbdf30
                                        
                                            GET /_s/v4/app/63258f417d7/js/twk-chunk-vendors.js HTTP/1.1 
Host: embed.tawk.to
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.22.25.131
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Wed, 28 Sep 2022 12:57:46 GMT
age: 243796
last-modified: Sat, 17 Sep 2022 09:12:03 GMT
etag: W/"81c2642aac0b88b6b237d279f5f8ce67"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 751ca58fbf71b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65464)
Size:   63312
Md5:    ffd5079068462fa0d54f1d08fe908988
Sha1:   ed71c5fc101c142ea1625eb5c01818df4f1edbb1
Sha256: 9b91a37b6d58cce0131fe0d87eb640b22ee2a44df87f6f05c9c7a5aeb8a9754a
                                        
                                            GET /_s/v4/app/63258f417d7/js/twk-vendor.js HTTP/1.1 
Host: embed.tawk.to
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.22.25.131
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Wed, 28 Sep 2022 12:57:46 GMT
age: 243796
last-modified: Sat, 17 Sep 2022 09:12:03 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 751ca58fbf6eb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65472)
Size:   29451
Md5:    481bb912e7ced662dda7935357d97906
Sha1:   e27920c0c968a983ecad8c8fb2bf9a4faf183804
Sha256: b16c92f6bf14320540b97f2240b59df60ae65bf4fe802c8b7bdcee8e01da5172
                                        
                                            GET /country/GB.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 468
last-modified: Wed, 08 Sep 2021 09:01:59 GMT
x-amz-meta-hash: 09bfac5408302ee8c52fa2ed008c4f13
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:39:37 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "09bfac5408302ee8c52fa2ed008c4f13"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 72wfch6RHPg3IILsD77NjjIXUmw1FjEFCuHEpkHmEtOdPpqfOAsrdg==
age: 1095
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (468), with no line terminators
Size:   468
Md5:    09bfac5408302ee8c52fa2ed008c4f13
Sha1:   ec2b53eba8ec1a31fc6745cd9c4fc09518db1c2f
Sha256: b3e463d925abc879f5b76428144c0da44bc02fae2188f71bc9e7aa7ab6f46037
                                        
                                            GET /country/JP.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 215
last-modified: Wed, 08 Sep 2021 09:00:59 GMT
x-amz-meta-hash: dd1bc2f51b952d5c3421a69d6febe6ce
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:33:58 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "dd1bc2f51b952d5c3421a69d6febe6ce"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GZGTWbhGkDaKAOVQjRfARD0OqWAO3_jcYJe0Fs3SOjGmCUwKk5YOWg==
age: 1432
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with no line terminators
Size:   215
Md5:    dd1bc2f51b952d5c3421a69d6febe6ce
Sha1:   b501eef8705cc2c8e9d8b9a9ce431d70e1ef0f71
Sha256: 147aa1297638071607ef5cf0d722c1953c6716e61ef32f58e3fb7fd132ce84ee
                                        
                                            GET /country/CH.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 236
last-modified: Wed, 08 Sep 2021 09:01:10 GMT
x-amz-meta-hash: 2390cb6eb08128c8300b6a29c41f2842
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:10:53 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "2390cb6eb08128c8300b6a29c41f2842"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 23dbDom8cuSugEyJkoEkQchHuRFsREyFHoyhqvyrue1DNeesl4wTUg==
age: 2814
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with no line terminators
Size:   236
Md5:    2390cb6eb08128c8300b6a29c41f2842
Sha1:   de96debc38e1b541ef81692120f1099d1f1e9d20
Sha256: 3b66ebe14df724fa1f4efc29bf7b8658975e89be92202238d75fad8badc68d36
                                        
                                            GET /country/CA.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 298
last-modified: Wed, 08 Sep 2021 09:02:24 GMT
x-amz-meta-hash: f0b4af400bc4e1017e56de16550915a8
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:51:13 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "f0b4af400bc4e1017e56de16550915a8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GZRk5lLS9FifB23MpnWeZcqkHjkMDJ-GJl_pfGNa0R5HCk4lMt_7LA==
age: 404
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with no line terminators
Size:   298
Md5:    f0b4af400bc4e1017e56de16550915a8
Sha1:   60ab455990aa7f8bdbb54ecac4641202792e590e
Sha256: 47b7b7098df6ea46fb0d3d1fe816b196262ef4fe1378b227056a4075eb50e0f7
                                        
                                            GET /meta-platforms.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 786
last-modified: Fri, 05 Nov 2021 11:07:13 GMT
x-amz-meta-hash: cafd1d7d717ad67e5dbe45b88fa3d47b
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:22:40 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "cafd1d7d717ad67e5dbe45b88fa3d47b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gqRUJQ6L458Rj5MFAkVqi-aco4GVQFwUPy4LkFrDBHpPIiXGyU1Qzg==
age: 2110
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (786), with no line terminators
Size:   786
Md5:    cafd1d7d717ad67e5dbe45b88fa3d47b
Sha1:   0e858c59cd7a560d09b0792bf34621446fc4cf4b
Sha256: 293eff2aa7a4048146447446eff25ae9776419aa39fd30e528c8847aa7b23643
                                        
                                            GET /spdr-sandp500-etf-tr.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 548
last-modified: Wed, 15 Jun 2022 10:23:36 GMT
x-amz-meta-hash: 739b8a1d4950ef3e563a4527ba38d111
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:12:20 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "739b8a1d4950ef3e563a4527ba38d111"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 95awZiuChnwj0FJNdGhvXGmVH4x42xDe-MKTTL3eg2polI-bAEwcFQ==
age: 2735
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (548), with no line terminators
Size:   548
Md5:    739b8a1d4950ef3e563a4527ba38d111
Sha1:   5bb4b592092552384154d47e64a8c65216969b7b
Sha256: cad088efc0978bf886800020a056e4eb07359385addebd54ad4422991689b844
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 12:57:46 GMT
Last-Modified: Wed, 28 Sep 2022 12:22:18 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: loeCScUtwpdqQBfGhGN6JbhNf0tgqvg-lYkedZ5DK_IUXzPE3KtC6Q==
Age: 2128

                                        
                                            GET /netflix.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 453
last-modified: Wed, 08 Sep 2021 08:53:57 GMT
x-amz-meta-hash: 088f20cd1f479350f02d9aada3709050
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:18:39 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "088f20cd1f479350f02d9aada3709050"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZMIdfslshLyLeweNLG2RHiVF4Sx2nPe7UiPJEE8Da57pAHhE-U0dlw==
age: 2358
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (453), with no line terminators
Size:   453
Md5:    088f20cd1f479350f02d9aada3709050
Sha1:   114bd591e902fc05d93e966453b74b252b88dd58
Sha256: c5f5b9304726376ee2b8f6b47ad85c5c7509c14e10fca4c4b1ebda33e76983e6
                                        
                                            GET /socket.io/websocket?from=embed-widget%2Fmarket-quotes%2F&date=2022_09_28-11_58 HTTP/1.1 
Host: widgetdata.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vyXhzOXfMvLMCXBP1WaF7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         209.58.153.114
HTTP/1.1 101 Switching Protocols
                                        
Date: Wed, 28 Sep 2022 12:57:46 GMT
Connection: upgrade
sec-websocket-accept: C4CvPkAbjLFilazszhXpmhM5k9w=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv

                                        
                                            GET /advanced-micro-devices.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 449
last-modified: Wed, 08 Sep 2021 08:53:21 GMT
x-amz-meta-hash: bdbf1c6c85e6683de21dc199c4419970
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:20:29 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "bdbf1c6c85e6683de21dc199c4419970"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4cDRWcowTXJ_okGvnDffTREH3W_Q_Vbrli6KYkihXlka9M8ce19Vgg==
age: 2238
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (449), with no line terminators
Size:   449
Md5:    bdbf1c6c85e6683de21dc199c4419970
Sha1:   928f52baf0174fd424ca7063b819988f6b8520d5
Sha256: 123c77aac45e4969387665181747fc253c5698a99e6508766b26129818d59c6a
                                        
                                            GET /consent/check/ZDOGH3BG7BDBHCL6KDA6CI?arrfrr=https%3A%2F%2Fwww.roifxtrader.com%2F&_s=99d697025b74cfef1890f8d3241e16a1&_b=2 HTTP/1.1 
Host: d.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.214.200.155
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Wed, 28 Sep 2022 12:57:46 GMT
content-length: 437
server: nginx/1.20.0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (437), with no line terminators
Size:   437
Md5:    168568b9ec9c3ff370dc7d96f06d91e2
Sha1:   3c03577b5fb76ab70b912b32f1ffcdcf10c9020c
Sha256: 388c8a0420a626903a01e01b298a0cbbe33d02dc14f79d6a53b49b67a65f81c1
                                        
                                            GET /microsoft.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 304
last-modified: Wed, 08 Sep 2021 09:00:12 GMT
x-amz-meta-hash: 074d127e2f9fd8c2e79c01a5f002979c
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:22:52 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "074d127e2f9fd8c2e79c01a5f002979c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -ysf4XXmuE_rKPe2bau9ktWNawzD3ZJmKCGTKz57uoQnSlw3akAfxw==
age: 2110
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (304), with no line terminators
Size:   304
Md5:    074d127e2f9fd8c2e79c01a5f002979c
Sha1:   a180afde05902cdc100a83180fa387201f992401
Sha256: 6bf4fad87b4483f83117912558a5b8daa68a01d9608f11d5ca9ca16053149e85
                                        
                                            GET /static/bundles/embed/41848.a819f80182db62e2c3b6.css HTTP/1.1 
Host: static.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Origin: https://s.tradingview.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.107
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 1239
date: Tue, 06 Sep 2022 10:03:05 GMT
last-modified: Tue, 06 Sep 2022 09:02:09 GMT
etag: "63170c91-4d7"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-content-type-options: nosniff
access-control-allow-origin: *
referrer-policy: origin-when-cross-origin
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SGeJuQy72hH9z-C-uJlB6O2RQYc8_04s2S2dUd9QlBg9qatpWTNo6A==
age: 1911278
content-security-policy: default-src 'none'
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1672)
Size:   55236
Md5:    c3591c2349c4451152e9f46ce1c1f88d
Sha1:   e9d80ba4abaa2051068399eef8dcac1f141c01c6
Sha256: cce8bd10183f57d7d23854f0a41d84cbff69681ae2d189f05bfa122030aff32c
                                        
                                            GET /tesla.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 508
last-modified: Wed, 08 Sep 2021 09:01:16 GMT
x-amz-meta-hash: 3b7c34c4a74ed2a5415d26d40df1b84a
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:40:27 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "3b7c34c4a74ed2a5415d26d40df1b84a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pOQN5E4JySPOmWrqfRyIL6g1MZipMB6l0K9AiX6LhO8rfX1HGzfQMA==
age: 1049
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (508), with no line terminators
Size:   508
Md5:    3b7c34c4a74ed2a5415d26d40df1b84a
Sha1:   e069a067efe5513c212569aaeeb30338b69cdd1c
Sha256: 338db12bc3e137ec430f9ba84de55c1a85c3185b98025de7ec213b042813238d
                                        
                                            GET /i/favicon/nextroll-32x32.png HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1615
Connection: keep-alive
Last-Modified: Mon, 28 Jun 2021 18:19:21 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: eTpwxbAIDHDUN.4tfrROIgU_pzKN9Xh0
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 28 Sep 2022 00:36:25 GMT
Etag: "403a0a7dcf2d617e7ea852bfb9d11945"
Vary: Accept-Encoding
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
Age: 44566
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ws53WnTr4b9edLm2KbLR2uejgTj4c-5fKZeJnyj43kAaWfoPNMf3zw==


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Size:   1615
Md5:    403a0a7dcf2d617e7ea852bfb9d11945
Sha1:   c4b81037ee9e0fb2543b806193112811459ea199
Sha256: bcaf0e3f087296133e0a996ee3d289a8d1a690147c93e0ab62019b505e6f9355
                                        
                                            GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 28 Sep 2022 12:57:47 GMT
age: 16516224
x-served-by: cache-fra19156-FRA, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 53889
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32014)
Size:   53889
Md5:    ea53ffc3c20542881a2735a62c0426d7
Sha1:   365e24ffd4a54e4c019a47c94204ad90a8538eb5
Sha256: e4f801f6cd7462489966e441ff53795823a607656497f9d0ce8cbfc08f6c7448
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 28 Sep 2022 12:57:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A453A71E50A6240424E5C6448C9572E1CCBE3676"
Expires: Thu, 29 Sep 2022 00:00:00 GMT
Last-Modified: Wed, 28 Sep 2022 12:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 821
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751ca595d9880b69-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    ceb8a10b8617d3ccda99f4e466817b69
Sha1:   854828f59ef8ba4c57becd56aa2fb342106afc0a
Sha256: d165c723d6b51cc5a0a40fc7bdf1aab701c3626c1cb29f0de81f372b50b3df7f
                                        
                                            GET /crypto/XTVCLTC.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 291
last-modified: Wed, 08 Sep 2021 09:03:49 GMT
x-amz-meta-hash: 135fed0ba41e2cc6f0be38d91f6d4327
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:13:27 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "135fed0ba41e2cc6f0be38d91f6d4327"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RaVnC9sF47oy5rWhdXy0CJfIab17bt7wf7LfT5oI8kqt09wewnL7mg==
age: 2670
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with no line terminators
Size:   291
Md5:    135fed0ba41e2cc6f0be38d91f6d4327
Sha1:   4cf7a4ad00909e8b92e5c9a428f71721481a78b0
Sha256: fea85b7101beb79844d8b4396a6df981f4757c150cdf3f61bc59453dd2f440ba
                                        
                                            GET /crypto/XTVCXRP.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 661
last-modified: Wed, 08 Sep 2021 09:01:05 GMT
x-amz-meta-hash: 4cc138d1e09d2133eeca65966f3894f0
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:12:40 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "4cc138d1e09d2133eeca65966f3894f0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: a4XsE4VQJf3b1uskCYLruqcmhXpyiGsEIEMRtpxPlHjGaEvdgHh_ZA==
age: 2714
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (661), with no line terminators
Size:   661
Md5:    4cc138d1e09d2133eeca65966f3894f0
Sha1:   cf40ee7fc2a18c2f6ae3c7522b6234ca45743623
Sha256: b2296bde0cbe8bc2cd069e06dcc26ebcd6cd3203dea044abf5a2fed0dc4ffbf6
                                        
                                            GET /crypto/XTVCEOS.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Wed, 08 Sep 2021 09:04:44 GMT
x-amz-meta-hash: b5bb09f3f95c87ffa9a07fc8c225f1bd
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 12:17:48 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: W/"b5bb09f3f95c87ffa9a07fc8c225f1bd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gxX0vRKtvMH48hYpmnOCdu2eZy_kG3esF89Se5nK6W8eDMOlPxJn9w==
age: 2409
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1453
Md5:    8d1cf32737e25de1f761fa4c0da6bbd1
Sha1:   6302f76ed241d697a17e0c9cdf12d94e4b1e6066
Sha256: 2e20b74a485eaa3c1993f78b7228aabab6f7b4a2ab953a92801423c332e003e5
                                        
                                            GET /crypto/XTVCDOGE.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 331
last-modified: Wed, 08 Sep 2021 09:04:51 GMT
x-amz-meta-hash: 114568fe43536657e04e23ccd32ae693
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:45:53 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "114568fe43536657e04e23ccd32ae693"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DhrD_1fMq-3A4zlVgRDX6LjSmxo3p0dpq6ixik6vutBeEBEP8bFWzw==
age: 724
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (331), with no line terminators
Size:   331
Md5:    114568fe43536657e04e23ccd32ae693
Sha1:   696713666a958223b810fdd07fa4747172407528
Sha256: c16d3b0a51ef2399f2af907fb7a4f677794629008d995a766b189efab37d7d40
                                        
                                            GET /socket.io/websocket?from=embed-widget%2Fmarket-quotes%2F&date=2022_09_28-11_58 HTTP/1.1 
Host: widgetdata.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://s.tradingview.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xLnPN09dSOrz9pD8qlEr5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         209.58.153.114
HTTP/1.1 101 Switching Protocols
                                        
Date: Wed, 28 Sep 2022 12:57:47 GMT
Connection: upgrade
sec-websocket-accept: jc66/ND4U5pReADGPUN2PcLUSGo=
sec-websocket-extensions: permessage-deflate
upgrade: websocket
Server: tv

                                        
                                            GET /_s/v4/app/63258f417d7/js/twk-main.js HTTP/1.1 
Host: embed.tawk.to
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.22.25.131
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Wed, 28 Sep 2022 12:57:46 GMT
age: 243796
last-modified: Sat, 17 Sep 2022 09:12:03 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 751ca58faf6db503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4847
Md5:    b2333f6411f750735b54327b60a5485f
Sha1:   6be07711aaf50ba4e338d16f6e09cc9c3f166f5c
Sha256: 4be36c4d448bff4ae7a0cf7638382722bd36c61257ff393d4cf5b199b8724107
                                        
                                            GET /metal/silver.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 565
last-modified: Wed, 08 Sep 2021 09:03:04 GMT
x-amz-meta-hash: dce62cd8bdd46fc425f784329fcffe2c
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:43:51 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "dce62cd8bdd46fc425f784329fcffe2c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lZqHzYeldKaDd--WVfzwV4qtsufbunQMsGB9vB4v3hBuVLjcSUxRGA==
age: 837
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (565), with no line terminators
Size:   565
Md5:    dce62cd8bdd46fc425f784329fcffe2c
Sha1:   0ad2df26d62c45e2a97a57d122d32f5cc7a70b2b
Sha256: 73fc3f194fea75788959fbf4099dba6c48fcd70deef2293d7d797fe697671764
                                        
                                            GET /crude-oil.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
content-length: 443
last-modified: Wed, 08 Sep 2021 08:59:22 GMT
x-amz-meta-hash: 5e4e832aa47ec693a3c1de44c8b222b5
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 12:43:51 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: "5e4e832aa47ec693a3c1de44c8b222b5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _7S7J6ngfLqqYBeWijepWfRj5ksn-gRQXLg_HTJhH8XQptFo6Q-M7w==
age: 849
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (443), with no line terminators
Size:   443
Md5:    5e4e832aa47ec693a3c1de44c8b222b5
Sha1:   2d5947bfa54cf87422a3d02c46de823d55613400
Sha256: 106132134d99b813f417630a48b4ad75f75423f05cf1ecca333928d67e2e9aaa
                                        
                                            POST /?l=qCqekRDLtEBTXwP&s=598973214290612433&z=4574936&g=NO&svar=1664369861&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1664369861&ssk=c118ac1b944b4a2142737c1ac10fa5a3&svarok=1&b=79056&oaid=5d9fdf4b9a5d47c28813578d6f58d097&rdk=rk1&mprtr=1 HTTP/1.1 
Host: toapodazoay.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/?rzi=4574936&rsz=4574936&rid=
Cookie: reverse=7MZ6qdfGrkifMf4vf-v_QRWF5VkqT5sWmCbpyVzvAK0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                         
                                         139.45.197.152
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 28 Sep 2022 12:57:42 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.25
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /6281b6ff7b967b11798f7d77/1g35b5lj0 HTTP/1.1 
Host: embed.tawk.to
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.22.25.131
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Wed, 28 Sep 2022 12:57:44 GMT
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-63258f417d7"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 5366
x-content-type-options: nosniff
server: cloudflare
cf-ray: 751ca585fa49b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /_s/v4/app/63258f417d7/js/twk-chunk-common.js HTTP/1.1 
Host: embed.tawk.to
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.roifxtrader.com
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.22.25.131
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Wed, 28 Sep 2022 12:57:46 GMT
age: 243796
last-modified: Sat, 17 Sep 2022 09:12:03 GMT
etag: W/"c262969ff89da8a8b3994883a0f57085"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 751ca58fbf82b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /country/US.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Wed, 08 Sep 2021 09:01:07 GMT
x-amz-meta-hash: 2a945cbbe3767a4009ec5f2c655780a7
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 12:18:39 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: W/"2a945cbbe3767a4009ec5f2c655780a7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GRoERT2D8e5M1UeO-gsxR_qdh4SnYS99jNbljM2sl-X6tui5Xo1z7A==
age: 2351
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /embed-widget/ticker-tape/?locale=en HTTP/1.1 
Host: s.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.roifxtrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.73
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:56:30 GMT
expires: Wed, 28 Sep 2022 12:58:30 GMT
cache-control: max-age=120
content-security-policy: base-uri 'none'; object-src 'none'; default-src 'self' https: data: blob: wss: 'unsafe-inline'; script-src https://static.tradingview.com/static/ 'unsafe-eval' blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://songbird.cardinalcommerce.com/edge/v1/ 'nonce-A/mokQhdW1Akxwq0ZAvc3g=='
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
content-encoding: gzip
server: tv
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0utICqrkQE0xV9L00k3usLeqe5cr9ECwWLp_AWvoDPiD-UtE-RdBgA==
age: 74
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /indices/s-and-p-500.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 26 May 2022 07:17:22 GMT
x-amz-meta-hash: f120e635d6a57528861fe87233bc6c11
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 12:20:26 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: W/"f120e635d6a57528861fe87233bc6c11"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S4TDuBGS0c_ysuIjzEQZZMFBtPj30KFvrhbKnAJyoJZGCfJcBwWhMQ==
age: 2240
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /amazon.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Wed, 08 Sep 2021 08:57:49 GMT
x-amz-meta-hash: 839d24db4574bb8543cec9624d3e1007
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 12:37:11 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: W/"839d24db4574bb8543cec9624d3e1007"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pIfwNr8PQTHzx_ZwPEQWkLFn1mqhpchIIJU1Y_0iu4ERKTTXSAIggw==
age: 1236
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /request/69629e3a-a67b-4c24-b391-87063939b213/ HTTP/1.1 
Host: go.bvmcdn.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         104.21.49.22
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:57:41 GMT
location: /request/69629e3a-a67b-4c24-b391-87063939b213
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2FIGfirvDUA77gbw4DM%2BaXbybMhOFRr3AfVYQsIpOc2poj5eHf%2BA5H4B4C3G2%2FxYglSt6TR3nB218GdVo6GsEXO%2BsFYr1QXZPQsFyaun58Y3Rquwz3gr5LLNCgW4QYt6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 751ca56f6835b4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /request/69629e3a-a67b-4c24-b391-87063939b213 HTTP/1.1 
Host: go.bvmcdn.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

                                         
                                         104.21.49.22
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
date: Wed, 28 Sep 2022 12:57:41 GMT
location: https://gtoonfd.com/link?z=4574935&var=b2ab689a-b0a0-4fbd-9ad4-e600fcb634cb&ymid=ccq49hdip8jkggntqdn0
set-cookie: vrt-69629e3a-a67b-4c24-b391-87063939b213=1; Path=/; Max-Age=86400; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C%2B42JDLsvVLor5kwejnIVf6WucyFLoN3Ayk3C4Bsn%2FOO4sTcKDlBqNCBS0zwlhwUypMZVzBhTQkmFnjR%2BWRRbrPlZj6jV1bMvcYLi2MUGkHzrrx17%2BZu80NUkTBQ914A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 751ca5712ac6b4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.roifxtrader.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         172.67.163.98
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Wed, 28 Sep 2022 12:57:43 GMT
vary: Accept-Encoding
link: <https://www.roifxtrader.com/wp-json/>; rel="https://api.w.org/", <https://www.roifxtrader.com/wp-json/wp/v2/pages/6635>; rel="alternate"; type="application/json", <https://www.roifxtrader.com/>; rel=shortlink
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OWTC3YGC3lsIQlSxDDM5teqFJbTvz0rwKqShHJpnIy2CpDVe%2F4jjq7Q9lxG0n9kBlzjpk6uUQxeHA4mxTThczSywa0z10EPg0twFkTlhkfwJq%2F41PK7CMhbkzk2YJMQXHmBaD%2FIm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 751ca5812a71b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /alibaba.svg HTTP/1.1 
Host: s3-symbol-logo.tradingview.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s.tradingview.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Wed, 08 Sep 2021 08:59:49 GMT
x-amz-meta-hash: 1e02f7771eeb782b8bbdec389debc8a8
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 12:09:00 GMT
cache-control: max-age=2592000,s-maxage=3600
etag: W/"1e02f7771eeb782b8bbdec389debc8a8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RcAtLR4p1w_RZKxZWtLcVW-ezdRk1NbChWaoVEVIUxFBjpwVTaD9Aw==
age: 2985
X-Firefox-Spdy: h2


--- Additional Info ---