www.forextime.com/register/open-account
301 Moved Permanently 0 B URL HTTP/1.1 www.forextime.com/register/open-account
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /register/open-account HTTP/1.1
Host: www.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 03 Feb 2023 13:54:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 03 Feb 2023 14:54:13 GMT
Location: https://www.forextime.com/register/open-account
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793ba84239dc0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17603
Expires: Fri, 03 Feb 2023 18:47:36 GMT
Date: Fri, 03 Feb 2023 13:54:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10936
Expires: Fri, 03 Feb 2023 16:56:29 GMT
Date: Fri, 03 Feb 2023 13:54:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 13:43:35 GMT
content-type: application/json
age: 638
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12830
Expires: Fri, 03 Feb 2023 17:28:03 GMT
Date: Fri, 03 Feb 2023 13:54:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: o+JDVvT14QuV0t6rU5r8d/4O4Q4TCsncyFUt1TrMAnTzbxSP/onVZ5CBL5p2IM9VxTG2vdFg4DX6M7mmfIkUvg==
x-amz-request-id: V8H3MY8GSGP80XTY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 13:23:33 GMT
age: 1840
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 13:54:13 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js
200 OK 24 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash 63376e520f58e80f2cff75a65d69fba9
af06e4eac8db3dfe17487018d62fb9b175912b8e
631182aa4d9ba695d52b20e06635a63caa4e06cba5c475d67c09c635cf7b774e
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Sun, 29 Jan 2023 10:39:43 GMT
accept-ranges: bytes
etag: "80161ffcd33d91:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 23598
cache-control: public, max-age=1048
expires: Fri, 03 Feb 2023 14:11:42 GMT
date: Fri, 03 Feb 2023 13:54:14 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 2.1 kB IP
File type gzip compressed data, max compression, from Unix\012- data
Hash 3591407930d66a82590671b251160c1b
fe83813f19f5b03152c7bd1c5623d3c908ae68a4
f00433a53879b690505ca8ee26f0190287336985fb3c3de7b54b92335581bef7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-TQ7PBT
200 OK 115 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TQ7PBT
IP
File type ASCII text, with very long lines (35715)
Size 115 kB (114573 bytes)
Hash 02870638e030c63183c89dc5d38c5053
9e11ae5ce0abc8a6a76df93da08c1504011b0032
eeeb4f881f1dd68877028e7794bb984b36fe180c7b985fe8f380ef99a6740fe3
GET /gtm.js?id=GTM-TQ7PBT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 13:54:14 GMT
expires: Fri, 03 Feb 2023 13:54:14 GMT
cache-control: private, max-age=900
last-modified: Fri, 03 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 114573
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 1.9 kB IP
File type gzip compressed data, max speed, from Unix\012- data
Hash b6debb9cf13d3e96fd891a11a4e653cc
cbee02477020a002af43df1ebcdb2dc05c1fa2f1
3513500c649bd0dece4204b6c18a2e6c9cdcbc730be972da3c9a2edf0ae8e609
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content.mql5.com/core.js
200 OK 14 kB IP
Hash c4ba11478fef8d725ab1c4dcadf09dd5
b48de4d1292042009ba736240a0167d12a4e1579
63e521659f58e9d282ac3f61e82cbdcaa7d3fa5eceda5054a156c8fef7687f08
GET /core.js HTTP/1.1
Host: content.mql5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=259200,proxy-revalidate,public,immutable
content-length: 11104
content-type: text/javascript; charset=UTF-8
content-encoding: br
expires: Mon, 06 Feb 2023 13:54:14 GMT
last-modified: Tue, 24 Jan 2023 16:03:33 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Fri, 03 Feb 2023 13:54:13 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9c45ea25709afbea416f215ee34611b0
117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed
7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type gzip compressed data, max compression, from Unix\012- data
Hash c9fbd6ce7453c1d4221923adb678a05b
54539ba50928bae721700c06bba3119a4888a311
dff4fc5ca9af42fcc6db1ca78dd05eac3269deef97a4ace950c4853421d897ce
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 13:49:06 GMT
age: 308
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content.mql5.com/tr?event=Visit&ref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&id=nxrrynhtikdhvfhdklcsvtpfgwisklqrej&ssn=1675432485648934088&ssn_dr=0&ssn_sr=10&ssn_start=1&fv_date=1675432485&back_ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&title=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&scr_res=1280x1024&ac=16754324856746185&sv=2431&fz_uniq=6479683951319876645&an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1002%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Linux%20x86_64%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22hc%22%3A16%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A5%7D
200 OK 877 B URL HTTP/2 content.mql5.com/tr?event=Visit&ref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&id=nxrrynhtikdhvfhdklcsvtpfgwisklqrej&ssn=1675432485648934088&ssn_dr=0&ssn_sr=10&ssn_start=1&fv_date=1675432485&back_ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&title=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&scr_res=1280x1024&ac=16754324856746185&sv=2431&fz_uniq=6479683951319876645&an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1002%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Linux%20x86_64%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22hc%22%3A16%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A5%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 340ae485eeac89cbef6def143aea0d8b
9cacce7a5e0e579fbf930b386b457446f5580568
0dd887bf8922acd1d8802f25c1e994a02e78f1273a25f75e4cd3dc76091c1820
GET /tr?event=Visit&ref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&id=nxrrynhtikdhvfhdklcsvtpfgwisklqrej&ssn=1675432485648934088&ssn_dr=0&ssn_sr=10&ssn_start=1&fv_date=1675432485&back_ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&title=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&scr_res=1280x1024&ac=16754324856746185&sv=2431&fz_uniq=6479683951319876645&an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1002%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Linux%20x86_64%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22hc%22%3A16%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A5%7D HTTP/1.1
Host: content.mql5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 70
content-type: image/png
expires: -1
strict-transport-security: max-age=31536000; includeSubDomains; preload
set-cookie: _fz_uniq=6479683951319876645; path=/; SameSite=None; domain=.mql5.com; Secure; expires=Sat, 22 Jan 2033 08:02:08 GMT
date: Fri, 03 Feb 2023 13:54:13 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 2.6 kB IP
File type gzip compressed data, max compression, from Unix\012- data
Hash 0fc4839df6a2024a45d218bfd08acb78
3929501048be5933d37b04fd25d068d46f99a1a6
4d079a63e09fdbc496f09b7a6b6a784658a375c1ce0478d44dcd188e656f4877
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18160
Expires: Fri, 03 Feb 2023 18:56:54 GMT
Date: Fri, 03 Feb 2023 13:54:14 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 07:28:23 GMT
expires: Fri, 02 Feb 2024 07:28:23 GMT
cache-control: public, max-age=31536000
age: 109551
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 593 B IP
File type gzip compressed data, from Unix\012- data
Hash c3f9f44c4a237b29757f421eea02e8df
f3a5f98a3a37935a3d9c33b72412582373c2fbd5
24cb0a941c1d6860872123577ddc7b261d262f06ce936f862dbdabe2dd4251fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jssdkcdns.mparticle.com/js/v2/us1-9396d9c23a31454783af64f529f131bc/mparticle.js
200 OK 115 kB URL HTTP/2 jssdkcdns.mparticle.com/js/v2/us1-9396d9c23a31454783af64f529f131bc/mparticle.js
IP
File type ASCII text, with very long lines (63952)
Size 115 kB (115413 bytes)
Hash 2d7245d563507a66c87a868551477ff8
5d62f4c4c497ae4bb0dc16e029566d587e89701d
81cc5b611476fc53cf8777b0abd676ea01ea14461ef7825a2542afbf56e00751
GET /js/v2/us1-9396d9c23a31454783af64f529f131bc/mparticle.js HTTP/1.1
Host: jssdkcdns.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: Kestrel
cache-control: public, max-age=3600
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
x-origin-name: fastlyshield--shield_ssl_cache_iad_kiad7000057_IAD
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:14 GMT
age: 75
x-served-by: cache-iad-kiad7000057-IAD, cache-bma1658-BMA
x-cache: HIT, MISS
x-cache-hits: 16, 0
x-timer: S1675432455.682956,VS0,VE91
vary: Accept, Accept-Encoding
content-length: 115413
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12956, version 1.0\012- data
Hash 1c772d9d0531b187db80bcfc199c1786
c0c04fb334190e10dffed0dcc5c817c2a6041a15
122854df4f39cf922db317714c2ff0eccab27a1028c14a5aa2211f48b7e0eade
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 09:58:17 GMT
expires: Mon, 29 Jan 2024 09:58:17 GMT
cache-control: public, max-age=31536000
age: 446157
last-modified: Wed, 27 Apr 2022 16:54:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12924, version 1.0\012- data
Hash 4610010f425c140b99c88b6819ce1c02
a7e839aa0452ceeb6228de7c15062fe82cc6d1c3
7348a2eb48c9a681d6178433394c7037144d85b57ee33a11339d3a33fa1001a4
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 01:07:57 GMT
expires: Thu, 01 Feb 2024 01:07:57 GMT
cache-control: public, max-age=31536000
age: 218777
last-modified: Wed, 27 Apr 2022 16:02:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13052, version 1.0\012- data
Hash 7cf79fbd1df848510d7352274efc2401
5540b5a26cc7dfe25294c4eabe011e2c6cd60143
bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 10:05:58 GMT
expires: Fri, 02 Feb 2024 10:05:58 GMT
cache-control: public, max-age=31536000
age: 100096
last-modified: Wed, 27 Apr 2022 16:09:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=OPT-WRJBPQK
200 OK 43 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-WRJBPQK
IP
File type ASCII text, with very long lines (1759)
Hash 8f5cfca446085e1c006a95c0e91125c3
2a1aecee0b9638db04d5d0ec83cf5f19c63c4dbf
bfecaebf742b454e916ca81cd31fa2e8c585b2739f3da87ad0b7bca2222968cd
GET /optimize.js?id=OPT-WRJBPQK HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 13:54:14 GMT
expires: Fri, 03 Feb 2023 13:54:14 GMT
cache-control: private, max-age=900
last-modified: Fri, 03 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43265
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LMvTzhEmLsK1pX0ZqDdhjw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /S2npG4spPfirhVeZgCEt5beRB4=
www.redditstatic.com/ads/pixel.js
200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 636897389814ca4d23aa4009b8fb1458
14394dbd8f0e226b71e1bd35c6da2278828feae4
85bcc6e816cf5ea2028e9dc4862f3de068d0606949b3fef3fcc5b32fab37ad86
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9234067.fls.doubleclick.net/activityi;src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account?
200 OK 321 B URL HTTP/2 9234067.fls.doubleclick.net/activityi;src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (623), with no line terminators
Hash c45ae7f62982e90739bcc4db9ff76c83
8a0613c8f1a3d4a6433eb77be490889185dc4799
8fad6dbc61bc2d82ba27ee69c48889d911415db45b54b3d60a90564387780319
GET /activityi;src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account? HTTP/1.1
Host: 9234067.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 13:54:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 321
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 03-Feb-2023 14:09:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0256a02ab4f98c47244bd8a354f52d58
c0ae39a504fbfaa911100d28f36a94dbaa1a79cc
9e70033849edef6ed200754917ae3f736c1fb4e8b53d66eb9b445cff0a4884e5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 13:54:15 GMT
Last-Modified: Fri, 03 Feb 2023 12:43:31 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nq7ptGCfBpqUg4AEB-d1S1aRy-LhsSVfdmdNpd4NvU6YYtvubwlFHQ==
Age: 4244
ob.cheqzone.com/clicktrue_invocation.js?id=11463
200 OK 32 kB URL HTTP/2 ob.cheqzone.com/clicktrue_invocation.js?id=11463
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 34324a5ec7345151657efc3c850fe2f8
7ab2aa537265ade4d3215264931e67446af2337d
32314fdc58a464d1a13bddd1665181e1a826ec76d480c90b0a4f29f7ff7be9d2
GET /clicktrue_invocation.js?id=11463 HTTP/1.1
Host: ob.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 31876
content-encoding: gzip
server: Caddy
etag: "1570d-KpPBg68XdWZ8G+p6SoMdcdAxMZo"
date: Fri, 03 Feb 2023 07:58:41 GMT
cache-control: max-age=43200
expires: Fri, 03 Feb 2023 19:35:39 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H3N3NJkK9JXu5t_MTh549IPKlxW2agsG7PlWdi6qs4UEcoSdJr-Yew==
age: 22716
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 636897389814ca4d23aa4009b8fb1458
14394dbd8f0e226b71e1bd35c6da2278828feae4
85bcc6e816cf5ea2028e9dc4862f3de068d0606949b3fef3fcc5b32fab37ad86
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDMB9S3C77U15JGRJPGG&lib=ttq
200 OK 1.3 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDMB9S3C77U15JGRJPGG&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2727)
Hash 0fd8edd6b806fd0922d801db818688e0
1fd1df83a988f477966e4adea06a1ad99e7ca885
bcdb664617e5a61c288c6cc2550506860251df18e1beded0ab7b3df0fe6fe250
GET /i18n/pixel/events.js?sdkid=CDMB9S3C77U15JGRJPGG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2023020313541554DCB80CEA6A2776CD53
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf603288c19c2577690cc6f843a75ffc83c99bbd68d0dee2dc0cd1d3feb27184aa0501c156cf52777e9f258aea2c151afa1407c946ffa3deabd2d853573d573131301a0d612f7cc8cd74cf1a1305b98bd01164b05733ff60cb431fdb64a7682cb608
content-encoding: gzip
content-length: 1340
x-origin-response-time: 7,104.112.235.191
x-akamai-request-id: 811e6ab.26a508b
expires: Fri, 03 Feb 2023 13:54:15 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 03 Feb 2023 13:54:15 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2LENoIybp0Hx8i0UyPRz76HR0wv; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a104-112-235-191.deploy.akamaitechnologies.com (AkamaiGHost/11.0.0-46340752) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=102, origin; dur=7, inner; dur=4
x-parent-response-time: 109,23.36.79.28
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 7.2 kB IP
Hash d39d0db0ef422966deca8dbd33e0186c
a5ff73a47ea89ede7ec5185f3ac17541825afe6c
117e605558e643636cbcda10c2efc8497413f82c7de41aed97f3feb81993a2c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
200 OK 263 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (622), with no line terminators
Hash 498b81b4388cb2bdb2d615d97d2c9c0d
f071f0867cd95aac0a121a740d5059731510e67e
c70926d98d350e1b6306e90d831394436c8edb2d2e8a4ffb69b7a706c680aac0
GET /ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9234067.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 13:54:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 263
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
200 OK 70 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash e470cdee4fb19533b3076cf5e6445ff0
3fa761e875d60e55f5464f0cee6207bca0d2cbed
e7fa855a1d974007175332f96be3ec95d6c6b94f7f4180dac64e4cf7d3d7115a
GET /i18n/pixel/static/main.MWE2YWY2YTgzMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: _ttp=2LENoIybp0Hx8i0UyPRz76HR0wv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175829D91E25D7003EA9A803DC
x-tt-trace-host: 01f6175df718ab226765794aaab21df67154f0b53b7f693af896ad93db0deb0ef832d63bb31438f0c5e0aa4878e941bb88c0976593910f5ab417b5ca255605e18e5e0fd52686d843afbd593b8bd0d366fe4ffb20082da9c196e6db1f01a9ce8992
content-encoding: gzip
date: Fri, 03 Feb 2023 13:54:15 GMT
content-length: 70411
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 26a5215
X-Firefox-Spdy: h2
cdn.amplitude.com/libs/amplitude-7.2.1-min.gz.js
200 OK 19 kB URL HTTP/2 cdn.amplitude.com/libs/amplitude-7.2.1-min.gz.js
IP
File type ASCII text, with very long lines (60877)
Hash e7ee6bc7f428f90fb1b1ed0e94b9f835
12a8cedc4a363af306b438111de73bc4d8b399d7
4bdadec687b990a491b8a797c8fbfbea6e30b2a28bda402760262bbfc982a3af
GET /libs/amplitude-7.2.1-min.gz.js HTTP/1.1
Host: cdn.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 19222
date: Mon, 12 Dec 2022 00:54:10 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Tue, 22 Sep 2020 19:51:25 GMT
etag: "e7ee6bc7f428f90fb1b1ed0e94b9f835"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rtLe8nVXDx8sL7XBGT5sDlFBE.TwGFEn
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4cHZZ0eOZFssg-eBpB5neQ9h_zOlpUNtk5IgQelE_vmfkWKqQ2um_Q==
age: 4626006
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.9 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (17769), with no line terminators
Hash 939f95ffc91ae8a9eacb6998ec5a635f
e122fe07195821f6abf871cc65f315c6b9e27f4a
49462b3c223095ac3fc223f11a29e4bceed96feba62e167d444e9a082626fc17
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "b07048fb19f7c325242e254218118e14:1675339769.124179"
Last-Modified: Thu, 02 Feb 2023 09:48:30 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Fri, 03 Feb 2023 14:14:15 GMT
Date: Fri, 03 Feb 2023 13:54:15 GMT
Content-Length: 5911
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 03 Feb 2023 13:44:08 GMT
expires: Fri, 03 Feb 2023 15:44:08 GMT
cache-control: public, max-age=7200
age: 607
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bef39ac599211fe23ad884ceacf1c9b
c19b32a600412658c49a3e55d5d8353a5101c31d
0ff4181df99351d3aa3490540d2f19474531fb07e13ee457b9339efab1a47ad9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.twitter.com/oct.js
301 Moved Permanently 0 B URL HTTP/1.1 platform.twitter.com/oct.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /oct.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Date: Fri, 03 Feb 2023 13:54:15 GMT
Location: https://static.ads-twitter.com/oct.js
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F713)
Server-Timing: x-cache;desc= ,x-tw-cdn;desc=VZ
x-tw-cdn: VZ
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 97cfde3a30125ed07f6da6d17a2526d1
48b9f38c283c632feb7ced6653f2575e54d0ddec
57e4547b3c87d265cd2bad9caf44f0d3879b40c95920032919a7fdf4391227a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=10370
date: Fri, 03 Feb 2023 13:54:15 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash ede42358dbe8cf2e6b7e6a2653774d01
5dc8ca0b929f04fb15c7ff81d0a9decda023b7fb
8e841815d41c4ade06e328cb1ffb9be342640167ec6acb658f6b4b373e23a52a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4831
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Last-Modified: Fri, 03 Feb 2023 12:33:44 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MX7217M0KX&cid=75758416.1675432486>m=45je3210&aip=1&z=1491824394
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MX7217M0KX&cid=75758416.1675432486>m=45je3210&aip=1&z=1491824394
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MX7217M0KX&cid=75758416.1675432486>m=45je3210&aip=1&z=1491824394 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 13:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash de969d45b46dce6b360da700a76bdb9a
719ea84f746e44da10595eea9873ecb9b667e31d
e88ac27f25cf487c5922668d90ce7676e9b904260269de0009338acdc1c18742
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 0589aad3b3505620a57aac0930fd16cf
etag: "04c5778a474bb0d3db9fce99311b8edc"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 03 Feb 2023 14:01:58 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 3padRbRtzms2DacAp2vbmg==
x-fb-debug: d4BlvUyDcRfm045BvC7flGQofzvGgZMGeek24OfZ87liyG94vcbOMPGwB/10WP7SQhC42F1nZqbb39d2yn5Y+A==
priority: u=3,i
content-length: 1688
x-fb-trip-id: 1679558926
date: Fri, 03 Feb 2023 13:54:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.googleadservices.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 74ace29e686ae4445710506fba552bd5
f09b4d13010f36b8f3efb0442b3d6e616e26a643
f655be0a03ae5bb0d71fae713a55c95462e40c688c2154221ba8c95d94917ff1
GET /pagead/conversion_async.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 03 Feb 2023 13:54:15 GMT
expires: Fri, 03 Feb 2023 13:54:15 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 10376002428160754156
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15164
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
identity.mparticle.com/v1/identify
204 No Content 0 B URL HTTP/2 identity.mparticle.com/v1/identify
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/identify HTTP/1.1
Host: identity.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-mp-key
Referer: https://www.forextime.com/
Origin: https://www.forextime.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Kestrel
access-control-allow-headers: content-type,x-mp-key
access-control-allow-methods: POST
access-control-allow-origin: *
x-origin-name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
via: 1.1 varnish
age: 1669
x-served-by: cache-bma1680-BMA
x-cache: HIT
x-cache-hits: 258
x-timer: S1675432455.437987,VS0,VE0
strict-transport-security: max-age=900
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 85bd96a56a6a7f09e3e7dadc7980152e
37590c595abeb315046a293a9e53632ae2128ac4
c27be18eef006f48310fb2b0c456d6bcb1f3b0298dcb6e580724923323cb48a7
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: _ttp=2LENoIybp0Hx8i0UyPRz76HR0wv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825D19F86481431D6BBCCFF
x-tt-trace-host: 012b38305f60bfa8a9f04bdd846fde846b507e69fff233d9a114d447ebe9f93c0f827e6bc0806bd5a24cf0439744099e1e4bba0637571d8edb56c6009f69fe5018b8e38bd5b93708ee64c377fa97874d18ceefbea8a477a7fa2bec40c3b56c69b1
content-encoding: gzip
date: Fri, 03 Feb 2023 13:54:15 GMT
content-length: 30917
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 26a532b
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 13:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://9234067.fls.doubleclick.net/ddm/fls/r/src=9234067;type=brows0;cat=allpa0;ord=616472249103;gtm=45He3210;auiddc=733951194.1675432486;u10=undefined;u11=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;u3=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account;~oref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1675432486230&id=t2_by64jl2d&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&uuid=0ff25bf2-327f-427d-b39a-403333ef6a18&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1675432486230&id=t2_by64jl2d&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&uuid=0ff25bf2-327f-427d-b39a-403333ef6a18&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1675432486230&id=t2_by64jl2d&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&uuid=0ff25bf2-327f-427d-b39a-403333ef6a18&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bef39ac599211fe23ad884ceacf1c9b
c19b32a600412658c49a3e55d5d8353a5101c31d
0ff4181df99351d3aa3490540d2f19474531fb07e13ee457b9339efab1a47ad9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash ede42358dbe8cf2e6b7e6a2653774d01
5dc8ca0b929f04fb15c7ff81d0a9decda023b7fb
8e841815d41c4ade06e328cb1ffb9be342640167ec6acb658f6b4b373e23a52a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4831
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Last-Modified: Fri, 03 Feb 2023 12:33:44 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ead5df3e30e38bb1a739ababb3292302
b5986cff7222999bf19e360ced4a445a2202c82c
768a8260af372a1ca06f826c3a3f84b6bc4523130134b32998baf75b64d7de4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1497822/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1497822/tfa.js
IP
File type ASCII text, with very long lines (59652)
Hash a8d37814a6410adacafc6f7fa40632a6
fad8c78aa4d2c88ff9fec6f52e3356eebbf9b03c
8dd4b310ec133f18c97061caf973e4a33e479007dfd56dda3380da430fc2253e
GET /libtrc/unip/1497822/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nQqotAqwwfZjmJEFdwrlBoG7tnB7ig2C7x6Wnki/h5pUOylJkp7iyvCLQKOhr8HzDIT5hledpS8=
x-amz-request-id: YHWMBEW7HHXG7KT2
x-amz-replication-status: COMPLETED
last-modified: Sun, 29 Jan 2023 11:06:10 GMT
etag: "6a3919fd1af905effba3e09c0e20bffa"
x-amz-version-id: Q4zQU22cmeDFabl2kKNSSCromY_3ts2H
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1668-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675432455.392155,VS0,VE189
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 15
content-length: 18343
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash da07b1a085424a7beb3ae06a06294635
4c306ca81691c642b738b2da469b6894ba7da09c
82871724d2a7d2ed7acf571f8e54d0a5ce80c7eb2f91b5197b3b0d3938012a17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1537
Cache-Control: max-age=167162
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Etag: "63dcf600-13a"
Expires: Sun, 05 Feb 2023 12:20:17 GMT
Last-Modified: Fri, 03 Feb 2023 11:54:40 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 314
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 838
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: _ttp=2LENoIybp0Hx8i0UyPRz76HR0wv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230203135415C711B7E53B906E81B90D
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca1146308ed0180d5179cd1a7001d7521e8a8f2f26a25d82b760227e6e797695fdd1ecbc27d43a39fcb6d7f7912b452fd22661acc65c799d546867b811f307c76c4
expires: Fri, 03 Feb 2023 13:54:15 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 03 Feb 2023 13:54:15 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=96, cdn-cache; desc=MISS, edge; dur=3, origin; dur=191
x-origin-response-time: 191,23.36.79.28
x-akamai-request-id: 26a532f
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=BxLdY9G7J528ygXoipXwBg&sscte=1&crd=
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=BxLdY9G7J528ygXoipXwBg&sscte=1&crd=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=BxLdY9G7J528ygXoipXwBg&sscte=1&crd= HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9234067.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 13:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=BxLdY9G7J528ygXoipXwBg&random=2166764992&resp=GooglemKTybQhCsO
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 03-Feb-2023 14:09:15 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-MX7217M0KX>m=45je3210&_p=907307784&_gaz=1&cid=75758416.1675432486&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675432486&sct=1&seg=0&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&dr=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&dt=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&en=page_view&_fv=1&_nsi=1&_ss=2&ep.document_referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&ep.gtm_debug_mode=false&ep.timestamp=2023-02-03T13%3A54%3A45.989%2B00%3A00&ep.gtm_version=441&ep.domain_region=global
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-MX7217M0KX>m=45je3210&_p=907307784&_gaz=1&cid=75758416.1675432486&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675432486&sct=1&seg=0&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&dr=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&dt=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&en=page_view&_fv=1&_nsi=1&_ss=2&ep.document_referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&ep.gtm_debug_mode=false&ep.timestamp=2023-02-03T13%3A54%3A45.989%2B00%3A00&ep.gtm_version=441&ep.domain_region=global
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MX7217M0KX>m=45je3210&_p=907307784&_gaz=1&cid=75758416.1675432486&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675432486&sct=1&seg=0&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&dr=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&dt=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&en=page_view&_fv=1&_nsi=1&_ss=2&ep.document_referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&ep.gtm_debug_mode=false&ep.timestamp=2023-02-03T13%3A54%3A45.989%2B00%3A00&ep.gtm_version=441&ep.domain_region=global HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.forextime.com
date: Fri, 03 Feb 2023 13:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-MX7217M0KX&cid=75758416.1675432486>m=45je3210&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-MX7217M0KX&cid=75758416.1675432486>m=45je3210&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-MX7217M0KX&cid=75758416.1675432486>m=45je3210&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.forextime.com
date: Fri, 03 Feb 2023 13:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=b774aa9b-021d-421a-ae81-32d23311625e&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=b774aa9b-021d-421a-ae81-32d23311625e&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=b774aa9b-021d-421a-ae81-32d23311625e&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:15 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=e542edcb-f177-45e5-a95a-b69b98951d41; Max-Age=63072000; Expires=Sun, 02 Feb 2025 13:54:15 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 19675d38c297e4e7
strict-transport-security: max-age=0
x-response-time: 172
x-connection-hash: a9a079a120d4030e1ff149def3cb54644bae96743cfa4f2048175335d13328ed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
obs.cheqzone.com/ct?id=11463&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675432486373&hl=1&op=0&ag=1317291471&rand=239511761601987710158005002276158161715855977957108009017206027600256908019&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=zX6Xo0YkbL&pto=1235&ver=50&gac=75758416.1675432486&mei=&ap=&duid=1.1675432486.F5YkF8b7uZ2kIj5m&suid=1.1675432486.Bqgry0MW6mVnKUSa&tuid=1.1675432486.4YmUUChGrBBjjysw&fbc=->m=WyJ1c2VyX2NvdW50cnkiLCJvcHRpbWl6ZS5jYWxsYmFjayJd&it=43%2C980%2C160&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 1.0 kB URL HTTP/2 obs.cheqzone.com/ct?id=11463&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675432486373&hl=1&op=0&ag=1317291471&rand=239511761601987710158005002276158161715855977957108009017206027600256908019&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=zX6Xo0YkbL&pto=1235&ver=50&gac=75758416.1675432486&mei=&ap=&duid=1.1675432486.F5YkF8b7uZ2kIj5m&suid=1.1675432486.Bqgry0MW6mVnKUSa&tuid=1.1675432486.4YmUUChGrBBjjysw&fbc=->m=WyJ1c2VyX2NvdW50cnkiLCJvcHRpbWl6ZS5jYWxsYmFjayJd&it=43%2C980%2C160&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
File type ASCII text, with very long lines (2944), with no line terminators
Hash 3bb6b7d7f92aa80e8afad83e8f2d51e5
e29e86c0435fa8dbed6bfa3c812ccd4205f4a7e8
37c88aab3c7a5dbc0ebce41e3492e0bee960e1e1d0093b90bfa0786a3aedec0b
GET /ct?id=11463&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1675432486373&hl=1&op=0&ag=1317291471&rand=239511761601987710158005002276158161715855977957108009017206027600256908019&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=zX6Xo0YkbL&pto=1235&ver=50&gac=75758416.1675432486&mei=&ap=&duid=1.1675432486.F5YkF8b7uZ2kIj5m&suid=1.1675432486.Bqgry0MW6mVnKUSa&tuid=1.1675432486.4YmUUChGrBBjjysw&fbc=->m=WyJ1c2VyX2NvdW50cnkiLCJvcHRpbWl6ZS5jYWxsYmFjayJd&it=43%2C980%2C160&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Fri, 03 Feb 2023 13:54:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152; Max-Age=29030400; Path=/; Expires=Fri, 05 Jan 2024 13:54:15 GMT; HttpOnly; Secure; SameSite=None
content-length: 1016
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=BxLdY9G7J528ygXoipXwBg&random=2166764992&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=BxLdY9G7J528ygXoipXwBg&random=2166764992&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=BxLdY9G7J528ygXoipXwBg&random=2166764992&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://9234067.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 13:54:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/11017218552/?random=44878023&cv=9&fst=1675432486725&num=1&npa=1&label=JPoLCL23hYEYEPjTtYUp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9234067.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D9234067%3Btype%3Dbrows0%3Bcat%3Dallpa0%3Bord%3D616472249103%3Bgtm%3D45He3210%3Bauiddc%3D733951194.1675432486%3Bu10%3Dundefined%3Bu11%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3Bu3%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%3B~oref%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=BxLdY9G7J528ygXoipXwBg&random=2166764992&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.ads-twitter.com/oct.js
200 OK 48 kB URL HTTP/2 static.ads-twitter.com/oct.js
IP
File type ASCII text, with very long lines (65463)
Hash deac5b37d0071b3e29bfbc56bbc434cc
2cee43709e1891a2eb3c8205990a4a20844394d5
b5f3ddb5caab135f25064c5d2c378f54cff0be7209dc5643ce1e1ae535eba29b
GET /oct.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
x-served-by: cache-iad-kiad7000092-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/r20230201/r20110914/elements/html/omrhp.js
200 OK 3.0 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/r20230201/r20110914/elements/html/omrhp.js
IP
File type ASCII text, with very long lines (2812)
Hash 4eb6ea786b3ccb9a391ae42a87bd2464
e732e5d07807f747b24f6e4ec07a6974712e1f2c
13c2ff9f7ca635fdd1172a2a836df15ea2ddfa0cc0d2f24dc89ff215d0703c77
GET /pagead/js/r20230201/r20110914/elements/html/omrhp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 2986
x-xss-protection: 0
date: Thu, 02 Feb 2023 19:17:29 GMT
expires: Thu, 16 Feb 2023 19:17:29 GMT
cache-control: public, max-age=1209600
age: 67006
etag: 3296546412363819624
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash d748dcaaec947b38996a2f987e98b2b9
7e018ab7e9f0c73d53379d1698a06177b0643687
2ef4873c62fe3cfbc33e7a8f0ab428ab78676b1d01c2aee8bc16d50fafe756d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2657
Cache-Control: max-age=122915
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 13:54:15 GMT
Etag: "63dc44c9-139"
Expires: Sun, 05 Feb 2023 00:02:50 GMT
Last-Modified: Thu, 02 Feb 2023 23:18:33 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313
obs.cheqzone.com/tracker/tc_imp.gif?e=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&cri=zX6Xo0YkbL&ts=578&cb=1675432486951
200 OK 43 B URL HTTP/2 obs.cheqzone.com/tracker/tc_imp.gif?e=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&cri=zX6Xo0YkbL&ts=578&cb=1675432486951
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=zX6Xo0YkbL&ts=578&cb=1675432486951 HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 03 Feb 2023 13:54:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 49 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3504)
Hash 40b8ffdc606e81703c5f6a39df96f373
0a39b905fe6b8f947d256b01614abcdd27baef65
93cfc3bdb53008e8640dee5f3e7515b10a9b2959e69d8f2919f3d243cf547f36
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 49146
date: Fri, 03 Feb 2023 13:54:15 GMT
expires: Fri, 03 Feb 2023 13:54:15 GMT
cache-control: private, max-age=3000
etag: "1675254965429469"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/data/
200 OK 20 B URL HTTP/2 sdk.fra-01.braze.eu/api/v3/data/
IP
Hash c521449c25123e5e2a956e5f618812c9
3dc94da7944ec9c2f80c1704ac987b613ae4023b
689e08d01de737d30391a92c129b339611a6ce3f01907e5fb343057d1b2f799d
OPTIONS /api/v3/data/ HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-braze-api-key,x-braze-datarequest,x-braze-triggersrequest,x-requested-with
Referer: https://www.forextime.com/
Origin: https://www.forextime.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
access-control-allow-headers: content-type,x-braze-api-key,x-braze-datarequest,x-braze-triggersrequest,x-requested-with
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432455.476281,VS0,VE19
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=71455d6945fd85e861a344569e24e47f
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=71455d6945fd85e861a344569e24e47f
IP
File type ASCII text, with very long lines (18530)
Hash dc9af92c002c4329975470b190056057
cbb9e634437f1d1d63bd38c08db3783700e74129
603b320100ced201287d4f8381b4ad093a80e66fcae9c2bee5c6194683574c1c
GET /en_US/sdk.js?hash=71455d6945fd85e861a344569e24e47f HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 73d8a2fe69713a231d97c4b6f8b9a89d
etag: "6505916b6e5b4b5fa9fe38436f844ecd"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 03 Feb 2024 11:05:27 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 3Jr5LAAsQymXVHCxkAVgVw==
x-fb-debug: jtOP+ksLGp6YMbwDHEVpOD1EENvYN3oNFIRKkFYrDrOeuK13TWrVcxyfk4XuuMfKAvI8jYjUeHvfG+orabbJpA==
content-length: 88450
x-fb-trip-id: 1679558926
date: Fri, 03 Feb 2023 13:54:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
identity.mparticle.com/v1/identify
200 OK 164 B URL HTTP/2 identity.mparticle.com/v1/identify
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c58cb5110c298a8ae0cfa569e7538adf
3fc885fddf435864fa8371e6e2382faad388ad38
41700cd76f1f6ce28bd65e9911e30e40eecd54ee0688baf1d312896fa6eeb844
POST /v1/identify HTTP/1.1
Host: identity.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-mp-key: us1-9396d9c23a31454783af64f529f131bc
Content-Length: 320
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: Kestrel
access-control-allow-origin: *
content-encoding: gzip
x-origin-name: 4PrgpUXX9K0sNAH1JImfyI--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1680-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432455.474760,VS0,VE108
vary: Accept-Encoding
strict-transport-security: max-age=900
X-Firefox-Spdy: h2
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=b774aa9b-021d-421a-ae81-32d23311625e&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=b774aa9b-021d-421a-ae81-32d23311625e&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=b774aa9b-021d-421a-ae81-32d23311625e&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&txn_id=oadtt&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:15 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167543245608415431; Max-Age=63072000; Expires=Sun, 02 Feb 2025 13:54:16 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167543245608415431; Max-Age=63072000; Expires=Sun, 02 Feb 2025 13:54:16 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_VGA3fnWJY0H675EnjOOTAg=="; Max-Age=63072000; Expires=Sun, 02 Feb 2025 13:54:16 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167543245608415431; Max-Age=63072000; Expires=Sun, 02 Feb 2025 13:54:16 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: f72bf2357cf5b094
strict-transport-security: max-age=631138519
x-response-time: 167
x-connection-hash: cfe98e71331ac0031925243b71c23a28267a69630a383bde9c9ac1774ea61ad2
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675432486543%26url%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675432486543%26url%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4439274%26time%3D1675432486543%26url%3Dhttps%253A%252F%252Fwww.forextime.com%252Feu%252Fregister%252Fopen-account%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675432486543&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&9ce7b83d-b4e5-44aa-8c1c-f8bf0c201362"; Domain=.linkedin.com; Expires=Sat, 03-Feb-2024 13:54:16 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&2023020313541657634ea4-dbf9-4ec0-8fb7-dcf65eb207f6AQH7hAn9FValEYQx4Hs7z8Baq3DqCnLt"; Domain=.www.linkedin.com; Expires=Sat, 03-Feb-2024 13:54:16 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzU0MzI0NTY7MjswMjGKtY9zHQtlg1FBAkINFQtigOccl7gg2Hw6EiZ6ooE6GA==; Domain=.linkedin.com; Expires=Wed, 02 Aug 2023 13:54:16 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675432456:t=1675518856:v=2:sig=AQGiCyPSPHxO66d1poBPUTatBFRoKSQo"; Expires=Sat, 04 Feb 2023 13:54:16 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzzARksjOLEmjcMKQrBg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E92CC1ABD68B435282A248A830C682D6 Ref B: OSL30EDGE0118 Ref C: 2023-02-03T13:54:16Z
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12384
Expires: Fri, 03 Feb 2023 17:20:40 GMT
Date: Fri, 03 Feb 2023 13:54:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12384
Expires: Fri, 03 Feb 2023 17:20:40 GMT
Date: Fri, 03 Feb 2023 13:54:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12384
Expires: Fri, 03 Feb 2023 17:20:40 GMT
Date: Fri, 03 Feb 2023 13:54:16 GMT
Connection: keep-alive
tr.outbrain.com/unifiedPixel?marketerId=006325f74137452b8eaa8aec2f8576314a&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&g=1&optOut=false&bust=049606850046224715&referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=006325f74137452b8eaa8aec2f8576314a&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&g=1&optOut=false&bust=049606850046224715&referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=006325f74137452b8eaa8aec2f8576314a&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&g=1&optOut=false&bust=049606850046224715&referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 13:54:16 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: a40170691890e9f9df729487522e1141
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 00:25:04 GMT
age: 48552
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aTs6L8dJENFRdtBn7ggAbY5yaYRAzSY2B0bmElV4YNPrJg-KRDAyNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 58040
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G0R-0w9HtLB5OXb-w-RyR9QCnrddkS29FqF_GeAQa1CRWkqaUJwQoA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:27:53 GMT
age: 55583
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 04:53:21 GMT
age: 32455
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/data/
201 Created 8.7 kB URL HTTP/2 sdk.fra-01.braze.eu/api/v3/data/
IP
Hash 88f1b7334687cdf5f74aceb9b7b4cc2e
ac5a7625321dc3c0c3bfa89601d67b9cac8b5a9d
f29b5c9d7f7c6ad80bdd7ddab616b75079caf8b7369841075f3c152782aff240
POST /api/v3/data/ HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
X-Requested-With: XMLHttpRequest
X-Braze-Api-Key: 6fd4f390-31e4-4ddb-b049-e6a615bc5049
X-Braze-TriggersRequest: true
X-Braze-DataRequest: true
Content-Length: 597
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 201 Created
content-type: application/json
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
etag: W/"3df14e083b186ca86267d3e5077b03e0"
cache-control: max-age=0, private, must-revalidate
x-request-id: 36fe2331-7b71-4d0e-96e4-f6079184a0d0
x-runtime: 0.484122
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432456.511523,VS0,VE505
vary: Origin,Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 2df5779a-a808-46ec-9246-1a9b9bddd9e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmKLVHwroAMF72Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bd7b-3cfe97e07d17958836425784;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZZXEXszbtmGh7kLfhabCGd41rZRnSmQvdcySUQRTDtJRBqZVUK3LaQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 07:19:27 GMT
age: 23689
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=549567273353642&ev=CHEQ&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&rl=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&if=false&ts=1675432487325&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675432487324.1465195246&it=1675432487164&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=549567273353642&ev=CHEQ&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&rl=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&if=false&ts=1675432487325&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675432487324.1465195246&it=1675432487164&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=549567273353642&ev=CHEQ&dl=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&rl=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&if=false&ts=1675432487325&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675432487324.1465195246&it=1675432487164&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 03 Feb 2023 13:54:16 GMT
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 13:54:16 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 33291231e306a75323777b1c60557b7f
d.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: d.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 673
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
access-control-allow-origin: https://www.forextime.com
access-control-allow-credentials: true
date: Fri, 03 Feb 2023 13:54:15 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675432486543&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4439274&time=1675432486543&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4439274&time=1675432486543&url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0309abb3-2d47-4ca3-8cc7-6c57d770b622"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 03-Feb-2024 13:54:16 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2453:u=1:x=1:i=1675432456:t=1675518856:v=2:sig=AQF3gzhaZunlNOrTsG1jsLi-Mjqh2rII"; Expires=Sat, 04 Feb 2023 13:54:16 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzzARngCh6pOJ/qLzkVA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B9E9FB3CB209418E9D7B3EFF95DCCEFD Ref B: OSL30EDGE0118 Ref C: 2023-02-03T13:54:16Z
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 0
X-Firefox-Spdy: h2
content.mql5.com/st?id=nxrrynhtikdhvfhdklcsvtpfgwisklqrej&p_di=463&p_dcl_s=475&p_dcl_e=476&p_dc=2362&p_dns_s=0&p_dns_e=0&p_tcp_s=0&p_tcp_e=0&p_req=22&p_res_s=159&p_res_e=161&d_fcp=585&r_script_s=175&r_script_e=2269&r_other_s=175&r_other_e=1732&r_img_s=176&r_img_e=2359&r_style_s=176&r_style_e=992&r_font_s=618&r_font_e=766&r_ajax_s=926&r_ajax_e=2275&r_iframe_s=992&r_iframe_e=1121&err=%7B%22undefined%22%3A1%7D&ssn=1675432485648934088&ssn_dr=2&ssn_sr=0&fv_date=1675432485&ref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&back_ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&title=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&scr_res=1280x1024&ac=167543248751980102&sv=2431&fz_uniq=6479683951319876645&an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1002%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Linux%20x86_64%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22hc%22%3A16%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A1846%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D
200 OK 70 B URL HTTP/2 content.mql5.com/st?id=nxrrynhtikdhvfhdklcsvtpfgwisklqrej&p_di=463&p_dcl_s=475&p_dcl_e=476&p_dc=2362&p_dns_s=0&p_dns_e=0&p_tcp_s=0&p_tcp_e=0&p_req=22&p_res_s=159&p_res_e=161&d_fcp=585&r_script_s=175&r_script_e=2269&r_other_s=175&r_other_e=1732&r_img_s=176&r_img_e=2359&r_style_s=176&r_style_e=992&r_font_s=618&r_font_e=766&r_ajax_s=926&r_ajax_e=2275&r_iframe_s=992&r_iframe_e=1121&err=%7B%22undefined%22%3A1%7D&ssn=1675432485648934088&ssn_dr=2&ssn_sr=0&fv_date=1675432485&ref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&back_ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&title=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&scr_res=1280x1024&ac=167543248751980102&sv=2431&fz_uniq=6479683951319876645&an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1002%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Linux%20x86_64%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22hc%22%3A16%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A1846%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 48b7a1e65c0e92830152164b22a7c37d
16f99525ed7feee4e80d1e32df48d36286cdfca4
e3849fdc1eab88579b20b1b56875d6ef8299c4ad165e03921400ccae69149861
GET /st?id=nxrrynhtikdhvfhdklcsvtpfgwisklqrej&p_di=463&p_dcl_s=475&p_dcl_e=476&p_dc=2362&p_dns_s=0&p_dns_e=0&p_tcp_s=0&p_tcp_e=0&p_req=22&p_res_s=159&p_res_e=161&d_fcp=585&r_script_s=175&r_script_e=2269&r_other_s=175&r_other_e=1732&r_img_s=176&r_img_e=2359&r_style_s=176&r_style_e=992&r_font_s=618&r_font_e=766&r_ajax_s=926&r_ajax_e=2275&r_iframe_s=992&r_iframe_e=1121&err=%7B%22undefined%22%3A1%7D&ssn=1675432485648934088&ssn_dr=2&ssn_sr=0&fv_date=1675432485&ref=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&back_ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&title=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&scr_res=1280x1024&ac=167543248751980102&sv=2431&fz_uniq=6479683951319876645&an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1002%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Linux%20x86_64%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22hc%22%3A16%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A1846%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D HTTP/1.1
Host: content.mql5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: _fz_uniq=6479683951319876645
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 70
content-type: image/png
expires: -1
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Fri, 03 Feb 2023 13:54:15 GMT
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 517
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.551234,VS0,VE20
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 144
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.555967,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Fcookiesync.mparticle.com%2Fv1%2Fsync%3Fesid%3D60203%26MPID%3D1737040490701390414%26ID%3D%24UID%26Key%3Dus1-9396d9c23a31454783af64f529f131bc%26env%3D2
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Fcookiesync.mparticle.com%2Fv1%2Fsync%3Fesid%3D60203%26MPID%3D1737040490701390414%26ID%3D%24UID%26Key%3Dus1-9396d9c23a31454783af64f529f131bc%26env%3D2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fcookiesync.mparticle.com%2Fv1%2Fsync%3Fesid%3D60203%26MPID%3D1737040490701390414%26ID%3D%24UID%26Key%3Dus1-9396d9c23a31454783af64f529f131bc%26env%3D2 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 13:54:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fcookiesync.mparticle.com%252Fv1%252Fsync%253Fesid%253D60203%2526MPID%253D1737040490701390414%2526ID%253D%2524UID%2526Key%253Dus1-9396d9c23a31454783af64f529f131bc%2526env%253D2
AN-X-Request-Uuid: 8ff89fc6-f2ba-4493-91d5-1ee40d38713b
Set-Cookie: uuid2=2021794164276132398; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 04-May-2023 13:54:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1001.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 549
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.564824,VS0,VE25
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 518
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.560976,VS0,VE29
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 518
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.572924,VS0,VE19
content-length: 0
X-Firefox-Spdy: h2
jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/JS/us1-9396d9c23a31454783af64f529f131bc/Forwarding HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 519
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
server: Kestrel
access-control-allow-origin: *
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.576849,VS0,VE21
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&RedC=c.clarity.ms&MXFR=31BB4433672067D03892569E632069F4
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=31BB4433672067D03892569E632069F4; domain=.clarity.ms; expires=Wed, 28-Feb-2024 13:54:16 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 0
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fcookiesync.mparticle.com%252Fv1%252Fsync%253Fesid%253D60203%2526MPID%253D1737040490701390414%2526ID%253D%2524UID%2526Key%253Dus1-9396d9c23a31454783af64f529f131bc%2526env%253D2
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fcookiesync.mparticle.com%252Fv1%252Fsync%253Fesid%253D60203%2526MPID%253D1737040490701390414%2526ID%253D%2524UID%2526Key%253Dus1-9396d9c23a31454783af64f529f131bc%2526env%253D2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fcookiesync.mparticle.com%252Fv1%252Fsync%253Fesid%253D60203%2526MPID%253D1737040490701390414%2526ID%253D%2524UID%2526Key%253Dus1-9396d9c23a31454783af64f529f131bc%2526env%253D2 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 13:54:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://cookiesync.mparticle.com/v1/sync?esid=60203&MPID=1737040490701390414&ID=0&Key=us1-9396d9c23a31454783af64f529f131bc&env=2
AN-X-Request-Uuid: b13892af-ebda-4304-b36c-6dca977a5993
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1001.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
c.bing.com/c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&RedC=c.clarity.ms&MXFR=31BB4433672067D03892569E632069F4
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&RedC=c.clarity.ms&MXFR=31BB4433672067D03892569E632069F4
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&RedC=c.clarity.ms&MXFR=31BB4433672067D03892569E632069F4 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&MUID=0477E1AA4DEC6D7E1EADF3074C196CAA
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0477E1AA4DEC6D7E1EADF3074C196CAA; domain=c.bing.com; expires=Wed, 28-Feb-2024 13:54:16 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: AA6C30F62EF0476693F6379E74D75061 Ref B: OSL30EDGE0113 Ref C: 2023-02-03T13:54:16Z
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 0
X-Firefox-Spdy: h2
t.co/i/adsct?bci=4&eci=1&event_id=03058d81-1ecb-4de7-a087-befe214ea16d&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=4&eci=1&event_id=03058d81-1ecb-4de7-a087-befe214ea16d&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=4&eci=1&event_id=03058d81-1ecb-4de7-a087-befe214ea16d&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: muc_ads=e542edcb-f177-45e5-a95a-b69b98951d41
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:15 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 22c731a97b0fd44e
strict-transport-security: max-age=0
x-response-time: 170
x-connection-hash: a9a079a120d4030e1ff149def3cb54644bae96743cfa4f2048175335d13328ed
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&MUID=0477E1AA4DEC6D7E1EADF3074C196CAA
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&MUID=0477E1AA4DEC6D7E1EADF3074C196CAA
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=4E1501057DB64FC2AA5D497F0C55923E&MUID=0477E1AA4DEC6D7E1EADF3074C196CAA HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 17 Jan 2023 20:36:49 GMT
accept-ranges: bytes
etag: "b1c8df6cb32ad91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 03-Feb-2023 14:04:16 GMT; path=/; SameSite=None; Secure;
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 42
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=4&eci=1&event_id=03058d81-1ecb-4de7-a087-befe214ea16d&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=4&eci=1&event_id=03058d81-1ecb-4de7-a087-befe214ea16d&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=4&eci=1&event_id=03058d81-1ecb-4de7-a087-befe214ea16d&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=ff6d85e3-c3dc-48df-8e9a-5f34bb42d5a3&tw_document_href=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nw97l&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:16 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_acjm5ELsl8gnv/clKqXdRg=="; Max-Age=63072000; Expires=Sun, 02 Feb 2025 13:54:16 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 8173080499325ab7
strict-transport-security: max-age=631138519
x-response-time: 170
x-connection-hash: cfe98e71331ac0031925243b71c23a28267a69630a383bde9c9ac1774ea61ad2
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 471 B IP
Hash 91f77accfdecd9abff22f103c9726e50
a2085989812bc7985bcd60da2c4913b7c93ef5ec
fe5af7a15129947869cf30856f1ef7655fff6036543771d8a414d3f425ff8969
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 13:54:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 03:38:25 GMT
Expires: Wed, 08 Feb 2023 03:38:24 GMT
Etag: "a2085989812bc7985bcd60da2c4913b7c93ef5ec"
Cache-Control: max-age=602704,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1576
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793ba8577c85b503-OSL
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1607
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.forextime.com
content-type: application/json
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 0
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1602
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.forextime.com
content-type: application/json
date: Fri, 03 Feb 2023 13:54:16 GMT
content-length: 0
X-Firefox-Spdy: h2
cookiesync.mparticle.com/v1/sync?esid=60203&MPID=1737040490701390414&ID=0&Key=us1-9396d9c23a31454783af64f529f131bc&env=2
204 No Content 0 B URL HTTP/2 cookiesync.mparticle.com/v1/sync?esid=60203&MPID=1737040490701390414&ID=0&Key=us1-9396d9c23a31454783af64f529f131bc&env=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/sync?esid=60203&MPID=1737040490701390414&ID=0&Key=us1-9396d9c23a31454783af64f529f131bc&env=2 HTTP/1.1
Host: cookiesync.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Kestrel
x-origin-name: 6pOFtq5qpnIJ0Pt8WbH5c2--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:17 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.724200,VS0,VE369
X-Firefox-Spdy: h2
d.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: d.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 112162
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
access-control-allow-origin: https://www.forextime.com
access-control-allow-credentials: true
date: Fri, 03 Feb 2023 13:54:16 GMT
X-Firefox-Spdy: h2
api2.amplitude.com/
200 OK 7 B IP
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api2.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 1590
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:17 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-63dd1209-33114143396bf22047d41109
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=1573&scd=0&ssd=1&est=1675432486707&ver=36&isls=true&src=i&invt=1500&msa=3057&rv=1&tim=1675432488281&vi=1675432486703&ri=712416079cf4b39565197f40e8d04c0b&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=1573&scd=0&ssd=1&est=1675432486707&ver=36&isls=true&src=i&invt=1500&msa=3057&rv=1&tim=1675432488281&vi=1675432486703&ri=712416079cf4b39565197f40e8d04c0b&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1497822/log/3/unip?en=pre_d_eng_tb&tos=1573&scd=0&ssd=1&est=1675432486707&ver=36&isls=true&src=i&invt=1500&msa=3057&rv=1&tim=1675432488281&vi=1675432486703&ri=712416079cf4b39565197f40e8d04c0b&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Fri, 03 Feb 2023 13:54:17 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.forextime.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5BEBF8F32AFF4F85B7FF3BA4CFFC9D24 Ref B: OSL30EDGE0113 Ref C: 2023-02-03T13:54:18Z
date: Fri, 03 Feb 2023 13:54:18 GMT
X-Firefox-Spdy: h2
cdn.shareaholic.net/assets/pub/shareaholic.js
200 OK 4.3 kB URL HTTP/2 cdn.shareaholic.net/assets/pub/shareaholic.js
IP
File type ASCII text, with very long lines (10540), with no line terminators
Hash e33511561808ca812c76b301b406d103
94e974603a6d772f66614045d19f0e3e18ccae6e
a61f812802a68805c57d74929ca078ac0ce1e6cec9685d5280a9f3d02d27050e
GET /assets/pub/shareaholic.js HTTP/1.1
Host: cdn.shareaholic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:18 GMT
content-encoding: gzip
content-length: 4285
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 19 Dec 2022 20:20:18 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: eqRoj7HtU5fIvOeBL4yckGJKQ0wPVNmM+YAogC+KBsxLnjc/57mhG85LjvlusEvZFL1Nt9g6gKA=
x-amz-request-id: THAYRRM45PG4C2SY
etag: "e33511561808ca812c76b301b406d103"
cache-control: max-age=1200, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1675432458.cds226.sk1.hn,1675432458.cds201.sk1.c
X-Firefox-Spdy: h2
m9m6e2w5.stackpathcdn.com/v2/bec87dbf/main.js
200 OK 44 kB URL HTTP/2 m9m6e2w5.stackpathcdn.com/v2/bec87dbf/main.js
IP
File type SVG Scalable Vector Graphics image\012- C source, ASCII text, with very long lines (62011)
Hash 34f5f16ecb4cf4f85574db52c81213fb
86de621bdef3b5603bd9f4686a2af26e16f2cf92
40f7fe7e46a337cd1d3e47cd6e25fa5150702967edf88c1d24647cfe32dc0837
GET /v2/bec87dbf/main.js HTTP/1.1
Host: m9m6e2w5.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:18 GMT
content-encoding: gzip
content-length: 41854
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 19 Dec 2022 20:19:59 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: UfjmZKB7E9YUrY0vXGV2Q4QFmkUFf7Rkudm6LThhwpl7+eRxcirLt8dDB2kADGk4IpJE000Z+08=
x-amz-request-id: PAKD9GVGPTREG1NW
etag: "bfbe20460e43896d158d4b21e5c02ca8"
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1675432458.cds220.sk1.hn,1675432458.cds230.sk1.c
X-Firefox-Spdy: h2
i5rwkk4h.micpn.com/p/js/1.js
200 OK 15 kB URL HTTP/2 i5rwkk4h.micpn.com/p/js/1.js
IP
Hash ef8e653839b04198ef065fbbddaaa5b2
0cf177497a04f863f6ecab1c197da3ee82a38b55
4d64321d5342da86ab64ac4760189242852b338b72547198b22a06bfd42473d2
GET /p/js/1.js HTTP/1.1
Host: i5rwkk4h.micpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
x-uuid: 889534d6-8ee2-48a7-b3e2-5b5b83b9a34e
cache-control: no-cache max-age=0
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
p3p: policyref="https://movableink.com/w3c/p3p.xml", CP="DEVa PSAa PSDa IVAa IVDa OUR IND DSP NON COR NAV UNI"
timing-allow-origin: https://www.forextime.com
date: Fri, 03 Feb 2023 13:47:11 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RIPXd_BTXC-t_BhsOMqHUwaahk-E_ZQy5a9ZPlTao-2Pja9P809Tzw==
age: 427
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c1583e973f564b45b3399b5891bd099
af94128ee33bc3d509524f79f755f975d59e40fd
67be8ec0be539a8f9002df889b98d8849126221221ddb5340d730d6f5a99fb6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "67BE8EC0BE539A8F9002DF889B98D8849126221221DDB5340D730D6F5A99FB6A"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3938
Expires: Fri, 03 Feb 2023 14:59:56 GMT
Date: Fri, 03 Feb 2023 13:54:18 GMT
Connection: keep-alive
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1631
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.forextime.com
content-type: application/json
date: Fri, 03 Feb 2023 13:54:18 GMT
content-length: 0
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1626
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.forextime.com
content-type: application/json
date: Fri, 03 Feb 2023 13:54:18 GMT
content-length: 0
X-Firefox-Spdy: h2
www.shareaholic.net/config/7bb553f715a185b64e387629db153b8a.json
200 OK 831 B URL HTTP/2 www.shareaholic.net/config/7bb553f715a185b64e387629db153b8a.json
IP
File type JSON data\012- , ASCII text, with very long lines (2287), with no line terminators
Hash e94f2b40db6152553cc9f5726cfb48db
608b296295f32b083c228cf6f46e1036fce9a329
5e10e1b4a74db23863ddb0a359b37987c510a4611b7fc3850339a205552def9e
GET /config/7bb553f715a185b64e387629db153b8a.json HTTP/1.1
Host: www.shareaholic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 07:20:23 GMT
etag: W/"98f36442d7b084f203822a30b3660b6f"
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json
cache-control: max-age=3, public, must-revalidate
x-varnish: 657630287 652935381
via: 1.1 varnish (Varnish/6.0)
access-control-allow-methods: GET, HEAD
access-control-allow-headers: *
access-control-allow-origin: *
access-control-expose-headers: Etag, Access-Control-Allow-Origin, x-client-geo-latlong, x-client-geo-country, x-client-geo-city, x-client-geo-zip, x-client-geo-region, x-client-geo-metrocode
access-control-max-age: 2000
x-client-geo-latlong: 59.945200,10.755900
x-client-geo-country: NO,Norway
x-client-geo-city:
x-client-geo-region:
x-client-geo-metrocode:
x-client-geo-zip:
accept-ranges: bytes
content-length: 831
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5152714&tm=gtm002&Ver=2&mid=9cab74c5-661c-4374-8a0b-83f3e5162ff1&sid=536dce80a3ca11edb53c99d2cc7805f3&vid=536dba30a3ca11ed9c4e3163d7fca451&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Register%20with%20FXTM%20and%20trade%20Forex,%20Gold,%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&p=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&r=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account<=2382&evt=pageLoad&sv=1&rn=470383
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5152714&tm=gtm002&Ver=2&mid=9cab74c5-661c-4374-8a0b-83f3e5162ff1&sid=536dce80a3ca11edb53c99d2cc7805f3&vid=536dba30a3ca11ed9c4e3163d7fca451&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Register%20with%20FXTM%20and%20trade%20Forex,%20Gold,%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&p=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&r=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account<=2382&evt=pageLoad&sv=1&rn=470383
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5152714&tm=gtm002&Ver=2&mid=9cab74c5-661c-4374-8a0b-83f3e5162ff1&sid=536dce80a3ca11edb53c99d2cc7805f3&vid=536dba30a3ca11ed9c4e3163d7fca451&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Register%20with%20FXTM%20and%20trade%20Forex,%20Gold,%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&p=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&r=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account<=2382&evt=pageLoad&sv=1&rn=470383 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=164F108F35A666903E3A0222345367B8; domain=.bing.com; expires=Wed, 28-Feb-2024 13:54:19 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1756084D123542E180EF23ED668367A2 Ref B: OSL30EDGE0113 Ref C: 2023-02-03T13:54:19Z
date: Fri, 03 Feb 2023 13:54:18 GMT
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/up/pixie.js
200 OK 3.3 kB URL HTTP/1.1 acdn.adnxs.com/dmp/up/pixie.js
IP
File type ASCII text, with very long lines (9139), with no line terminators
Hash 75b9af81e30e45403e6856566e888545
d013e9a47331447f32c2bdf6f35b286e711788f0
dd26e2e55783f6174ceea7c7a3b10e5af1c7fca56fc2543956a38b848f32a151
GET /dmp/up/pixie.js HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 3340
Server: nginx/1.18.0 (Ubuntu)
Content-Type: application/javascript
Last-Modified: Wed, 02 Jun 2021 15:04:00 GMT
ETag: W/"60b79de0-23b3"
Expires: Mon, 31 Oct 2022 05:58:51 GMT
Cache-Control: max-age=86402
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 03 Feb 2023 13:54:19 GMT
Age: 42182
X-Served-By: cache-lga21930-LGA, cache-bma1680-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 13, 7424
X-Timer: S1675432459.077347,VS0,VE0
Vary: Accept-Encoding
bat.bing.com/p/action/5152714.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5152714.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5152714.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 516B85CA8F7F4DC4A104DAD1908D1119 Ref B: OSL30EDGE0113 Ref C: 2023-02-03T13:54:19Z
date: Fri, 03 Feb 2023 13:54:18 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/pixie?e=PageView&pi=c25fd88d-1ad7-4656-a57b-e121e35243ad&it=1675432490186&v=0.0.20&u=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&r=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&st=1675432490186&et=1675432490186&if=0
200 OK 42 B URL HTTP/1.1 ib.adnxs.com/pixie?e=PageView&pi=c25fd88d-1ad7-4656-a57b-e121e35243ad&it=1675432490186&v=0.0.20&u=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&r=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&st=1675432490186&et=1675432490186&if=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pixie?e=PageView&pi=c25fd88d-1ad7-4656-a57b-e121e35243ad&it=1675432490186&v=0.0.20&u=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&r=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&st=1675432490186&et=1675432490186&if=0 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 03 Feb 2023 13:54:19 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1001.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
s.yimg.com/wi/config/10097064.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10097064.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 2818f7c1d0a6c6df2bab1d3d6344fd8a
a33691eb219b8913737e56120be7e29101ff63e1
81a55d12e0229dbfaad3014d29723654a7f35079d81b89757ed29859f980c9a3
GET /wi/config/10097064.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LiCIQSP2xC4g7fcXTthh8BaCePgHhtBCvbCLLn34P7juAcnW67u3S3VaKVIN7IwL0LnfTKQ8Rcw=
x-amz-request-id: A457YTC62JFNVJEZ
date: Fri, 03 Feb 2023 13:53:25 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 25 May 2022 20:57:37 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "2818f7c1d0a6c6df2bab1d3d6344fd8a"
x-amz-server-side-encryption: AES256
x-amz-version-id: KQKpbIpBo_BF8DsjNEnFDLJ8ZF_P6J47
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 55
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10133581.json
200 OK 2 B URL HTTP/2 s.yimg.com/wi/config/10133581.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10133581.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: A45EVHGJW6RWMQV3
x-amz-id-2: hU3hvvC6Sn+/dRCrA4rcUtcUUB4cQOgqcNqPqG3elcnvshDxP25ky6u2tIi0Eqg8psqbLRghNgg=
content-type: application/json
date: Fri, 03 Feb 2023 13:53:24 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 55
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da00b5904ed59b25600341c0140352b2
95b6356c5e5a0900c534717788821f55baeaeae5
b4bff28f21897106eb893a64a961e20e874b381d3d174d7748f90872cdefa47d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4BFF28F21897106EB893A64A961E20E874B381D3D174D7748F90872CDEFA47D"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9696
Expires: Fri, 03 Feb 2023 16:35:55 GMT
Date: Fri, 03 Feb 2023 13:54:19 GMT
Connection: keep-alive
partner.shareaholic.com/partners.js?location=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cl=en&id_sync=dd544be3-4e88-47e1-96b6-7cd4853558e6&pvs=1&site=7bb553f715a185b64e387629db153b8a
200 OK 0 B URL HTTP/2 partner.shareaholic.com/partners.js?location=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cl=en&id_sync=dd544be3-4e88-47e1-96b6-7cd4853558e6&pvs=1&site=7bb553f715a185b64e387629db153b8a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partners.js?location=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&referrer=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cl=en&id_sync=dd544be3-4e88-47e1-96b6-7cd4853558e6&pvs=1&site=7bb553f715a185b64e387629db153b8a HTTP/1.1
Host: partner.shareaholic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:19 GMT
content-type: application/javascript;charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Accept-Encoding, User-Agent
content-length: 0
p3p: CP='OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC'
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&.yp=10097064&f=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&e=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&.yp=10097064&f=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&e=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&.yp=10097064&f=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&e=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:19 GMT
expires: Fri, 03 Feb 2023 13:54:19 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBAsS3WMCEKKOOWdNKdkz-O2DGO1IbwIFEgEBAQFj3mPmYwAAAAAA_eMAAA&S=AQAAAlluEeQmtBRhwJdkK1-uqvI; Expires=Sat, 3 Feb 2024 19:54:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2003%20Feb%202023%2013%3A54%3A50%20GMT&n=0&b=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&.yp=10133581&f=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&e=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Fri%2C%2003%20Feb%202023%2013%3A54%3A50%20GMT&n=0&b=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&.yp=10133581&f=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&e=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Fri%2C%2003%20Feb%202023%2013%3A54%3A50%20GMT&n=0&b=Register%20with%20FXTM%20and%20trade%20Forex%2C%20Gold%2C%20Oil%20%26%20CFDs%20%7C%20FXTM%20EU&.yp=10133581&f=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account&e=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:19 GMT
expires: Fri, 03 Feb 2023 13:54:19 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBAsS3WMCEMXZbpF2UFnnb_24ke5w5s8FEgEBAQFj3mPmYwAAAAAA_eMAAA&S=AQAAAmsIrP3bma9Duz9UA2kf-AY; Expires=Sat, 3 Feb 2024 19:54:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c6842dd716009ad9c1451353b2d54319
d9601559d010c95f2e3e1f732794e95173ac5abf
75577201dc8c3657c05e1115d2e4aaa9bd23c925da751edddd66c828f8451be2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89922
Date: Fri, 03 Feb 2023 13:54:19 GMT
Etag: "63dbb557-1d7"
Expires: Sat, 04 Feb 2023 14:53:01 GMT
Last-Modified: Thu, 02 Feb 2023 13:06:31 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WUf_tsKQ6LIrB4TXC5VSjD1A0E5E08bdKCq6xBuCzfGxmtJn9hjO5Q==
Age: 6390
analytics.shareaholic.com/e
200 OK 43 B URL HTTP/2 analytics.shareaholic.com/e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
POST /e HTTP/1.1
Host: analytics.shareaholic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 239
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:19 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.forextime.com
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
p3p: CP="OTI DSP COR DEVo ADMa OUR CONo IND COM INT ONL PUR STA OTC"
expires: Thu, 01 Jan 1970 00:00:00 GMT
referer-policy: unsafe-url
content-security-policy: referrer always
X-Firefox-Spdy: h2
trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=4575&scd=0&ssd=1&est=1675432486707&ver=36&isls=true&src=i&invt=3000&msa=3057&rv=1&tim=1675432491283&vi=1675432486703&ri=712416079cf4b39565197f40e8d04c0b&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1497822/log/3/unip?en=pre_d_eng_tb&tos=4575&scd=0&ssd=1&est=1675432486707&ver=36&isls=true&src=i&invt=3000&msa=3057&rv=1&tim=1675432491283&vi=1675432486703&ri=712416079cf4b39565197f40e8d04c0b&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1497822/log/3/unip?en=pre_d_eng_tb&tos=4575&scd=0&ssd=1&est=1675432486707&ver=36&isls=true&src=i&invt=3000&msa=3057&rv=1&tim=1675432491283&vi=1675432486703&ri=712416079cf4b39565197f40e8d04c0b&ref=https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account&cv=20230129-6-RELEASE&item-url=https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 03 Feb 2023 13:54:20 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://www.forextime.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
d.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: d.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3234
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
access-control-allow-origin: https://www.forextime.com
access-control-allow-credentials: true
date: Fri, 03 Feb 2023 13:54:20 GMT
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1626
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.forextime.com
content-type: application/json
date: Fri, 03 Feb 2023 13:54:20 GMT
content-length: 0
X-Firefox-Spdy: h2
resources.digital-cloud.medallia.eu/wdceu/141328/onsite/embed.js
200 OK 528 B URL HTTP/2 resources.digital-cloud.medallia.eu/wdceu/141328/onsite/embed.js
IP
File type ASCII text, with very long lines (586)
Hash a48423696d31177e10ebceeda6237161
f8839624a9059c5dfcc4a2d4acfab50f99aec419
47c1078ec2b3c17edb56270432967170ba95259462876fcdba7502e5599228e9
GET /wdceu/141328/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud.medallia.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xJBIf4lFUNS2M6HrYbacrPvqTohu4DbvH0e3FXQRcfGOrz7xTvGi+OfKcYnEcmujK5CMFVNxwyM=
x-amz-request-id: BC3Y4HY5YXMSC1QV
last-modified: Tue, 24 Jan 2023 09:04:19 GMT
etag: "c01ab398b6e955f1f52d705f1f10ce48"
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: max-age=0,must-revalidate
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:21 GMT
via: 1.1 varnish
age: 819756
x-served-by: cache-bma1630-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675432462.620992,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 528
X-Firefox-Spdy: h2
resources.digital-cloud.medallia.eu/wdceu/141328/onsite/generic1674551057955.js
200 OK 83 kB URL HTTP/2 resources.digital-cloud.medallia.eu/wdceu/141328/onsite/generic1674551057955.js
IP
File type Unicode text, UTF-8 text, with very long lines (20668)
Hash aa78bb4aa9c733b986836b2c6d71452a
01f66f907ef117379b5a52b7604d030dd59cc803
ad6c8febb49f9bc9ca9ba771033daf006fca5e3fe71ecda29fd1540471627514
GET /wdceu/141328/onsite/generic1674551057955.js HTTP/1.1
Host: resources.digital-cloud.medallia.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 74S7Cr77rlqPLXuC4yJlD7b2z6aDyrpZ5WYdHuXdrh2UHoRapQFFeKwL70VMB+RUDk+1QSXQYF0=
x-amz-request-id: JANHA0BP5M3HKN5Y
last-modified: Tue, 24 Jan 2023 09:04:19 GMT
etag: "e74e3c956c10a9048c1c80ae45467fe0"
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: max-age=31622400
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:21 GMT
via: 1.1 varnish
age: 817042
x-served-by: cache-bma1630-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675432462.641933,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 82954
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1647
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Cookie: cg_uuid=cac0f9d701b9e71a34bd1169a84df152
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.forextime.com
content-type: application/json
date: Fri, 03 Feb 2023 13:54:21 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsps.ssl.com/
200 OK 1.8 kB IP
Hash 655c725098198338f28f1903cec0d90a
9fcba0a6c035519d461ab5276a9c7e18266b2a6a
2a8a287ef9fa9e1e6aa57ea0c2f7e9db9ce07434cc2f97e2e6ab4cef96543969
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 13:54:21 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Thu, 09 Feb 2023 16:48:42 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "9fcba0a6c035519d461ab5276a9c7e18266b2a6a"
Last-Modified: Thu, 02 Feb 2023 16:48:43 GMT
X-Proxy-Cache: HIT
udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
200 OK 0 B URL HTTP/2 udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1
Host: udc-neb.kampyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:22 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept
access-control-max-age: 1800
x-me: prod-instance-gatewayservice-green-tcbx
x-application-context: application:9090
content-type: image/gif; charset=UTF-8
content-length: 0
server: Jetty(9.2.11.v20150529)
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.forextime.com/register/open-account
200 OK 0 B URL HTTP/2 www.forextime.com/register/open-account
IP
GET /register/open-account HTTP/1.1
Host: www.forextime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:13 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Cookie
cache-control: public, max-age=3600
x-drupal-dynamic-cache: HIT
x-ua-compatible: IE=edge
content-language: en
x-content-type-options: nosniff
expires: Fri, 03 Feb 2023 14:54:13 GMT
last-modified: Fri, 03 Feb 2023 10:45:22 GMT
x-generator: Drupal 9 (https://www.drupal.org)
reporting-endpoints: csp="https://www.forextime.com/system/reporting/csp", csp_reportonly="https://www.forextime.com/system/reporting/csp_reportonly", default="https://www.forextime.com/system/reporting/default"
x-drupal-cache: HIT
access-control-allow-origin: https://www.forextime.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-max-age: 1728000
cf-cache-status: HIT
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 793ba8440b74b500-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700&display=swap&subset=cyrillic,vietnamese
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700&display=swap&subset=cyrillic,vietnamese
IP
GET /css?family=Source+Sans+Pro:300,400,600,700&display=swap&subset=cyrillic,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 Feb 2023 13:54:14 GMT
date: Fri, 03 Feb 2023 13:54:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.clarity.ms/tag/cr3lsfcswf
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/cr3lsfcswf
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/cr3lsfcswf HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=008b1e6ba3414b53a95311c2ed92e45c.20230203.20240203; expires=Sat, 03 Feb 2024 13:54:14 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0
x-cache: CONFIG_NOCACHE
x-azure-ref: 0BhLdYwAAAAAn8NNn8c/gTpFrSguv47odQ1BIMzBFREdFMDQxOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 03 Feb 2023 13:54:14 GMT
X-Firefox-Spdy: h2
use.fontawesome.com/7f85a56ba4.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/7f85a56ba4.css
IP
GET /7f85a56ba4.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 13:54:15 GMT
content-type: text/css
x-amz-id-2: Zsfkg1LG0dsTpAconQXPl6g4jbtswHSNTo/BYLIoDURwur1V1m8id2p1l1X55EdCMC0FXbnDGAY=
x-amz-request-id: T5W1NXHY5YT1ZBNQ
last-modified: Wed, 30 Jun 2021 21:14:33 GMT
etag: W/"8360eb270b919a1fb4776bc448d9ed14"
cache-control: max-age=1800
cf-cache-status: HIT
age: 2937
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZfNVX3f77SkqTsa2aG8hUXK2Z78rfLzs%2Bl7B%2F5KeCFNrzLINPbCRgkdQ8NPKl3jVEySsoDTXG2d46O9CWLeFMc6R76gM8QYcv760kG7F2G%2FodC5xJvGv8Y3H0nHqxoHRUrzwnn%2Bf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 793ba84beadd7306-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: riR0SlkaeVA2y0a1HRe0Ulb98SGxA5yLuYHqw4On6aSkYt2X6ve9t6QqZlKuJ5BaVwzfk3zP9GI=
x-amz-request-id: 5TQCYP5N8EC7C9SB
date: Fri, 03 Feb 2023 13:52:25 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 116
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
jssdks.mparticle.com/v3/JS/us1-9396d9c23a31454783af64f529f131bc/events
202 Accepted 0 B URL HTTP/2 jssdks.mparticle.com/v3/JS/us1-9396d9c23a31454783af64f529f131bc/events
IP
POST /v3/JS/us1-9396d9c23a31454783af64f529f131bc/events HTTP/1.1
Host: jssdks.mparticle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain;charset=UTF-8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.forextime.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.forextime.com
Content-Length: 1860
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
content-type: application/json
server: Kestrel
access-control-allow-origin: *
content-encoding: gzip
x-origin-name: 7arPuRjnqGEhiMyprEtnLk--F_us1_origin
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:21 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432461.471297,VS0,VE56
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.clarity.ms/eus/s/0.7.1/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus/s/0.7.1/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus/s/0.7.1/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d936557825629e"
server: Microsoft-IIS/10.0
x-cache: TCP_HIT
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
x-azure-ref-originshield: 0r8jbYwAAAACXLVLHNYLlSa6dlqEW0+VpRlJBMjMxMDUwNDE4MDA5ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
x-azure-ref: 0BxLdYwAAAAB9o+QeLOf2T6glnyhJH3sdQ1BIMzBFREdFMDQxOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 03 Feb 2023 13:54:14 GMT
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4439274/domain/forextime.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4439274/domain/forextime.com/token
IP
GET /partner/4439274/domain/forextime.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.forextime.com
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Fri, 03 Feb 2023 12:56:41 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XJwiIYhMFvTzMuYFfvetC7sdq_WRtGnki4R00j8TUQYvD4WzrmLihA==
age: 3454
X-Firefox-Spdy: h2
sdk.fra-01.braze.eu/api/v3/content_cards/sync
200 OK 0 B URL HTTP/2 sdk.fra-01.braze.eu/api/v3/content_cards/sync
IP
OPTIONS /api/v3/content_cards/sync HTTP/1.1
Host: sdk.fra-01.braze.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-braze-api-key,x-braze-contentcardsrequest,x-braze-datarequest,x-requested-with
Referer: https://www.forextime.com/
Origin: https://www.forextime.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
access-control-allow-origin: *
access-control-allow-methods: POST, GET
access-control-expose-headers:
access-control-max-age: 7200
access-control-allow-headers: content-type,x-braze-api-key,x-braze-contentcardsrequest,x-braze-datarequest,x-requested-with
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:16 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432457.638046,VS0,VE19
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
trc.taboola.com/1497822/trc/3/json?tim=1675432486711&data=%7B%22id%22%3A701%2C%22ii%22%3A%22%2Feu%2Fregister%2Fopen-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675432486703%2C%22cv%22%3A%2220230129-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account%22%2C%22e%22%3A%22https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dexinitylimited-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675432486711%2C%22ref%22%3A%22https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account%22%2C%22item-url%22%3A%22https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1497822/trc/3/json?tim=1675432486711&data=%7B%22id%22%3A701%2C%22ii%22%3A%22%2Feu%2Fregister%2Fopen-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675432486703%2C%22cv%22%3A%2220230129-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account%22%2C%22e%22%3A%22https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dexinitylimited-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675432486711%2C%22ref%22%3A%22https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account%22%2C%22item-url%22%3A%22https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1497822/trc/3/json?tim=1675432486711&data=%7B%22id%22%3A701%2C%22ii%22%3A%22%2Feu%2Fregister%2Fopen-account%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675432486703%2C%22cv%22%3A%2220230129-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account%22%2C%22e%22%3A%22https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dexinitylimited-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675432486711%2C%22ref%22%3A%22https%3A%2F%2Fwww.forextime.com%2Fregister%2Fopen-account%22%2C%22item-url%22%3A%22https%3A%2F%2Fwww.forextime.com%2Feu%2Fregister%2Fopen-account%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.forextime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Fri, 03 Feb 2023 13:54:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1668-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675432456.856824,VS0,VE106
vary: Accept-Encoding
x-vcl-time-ms: 106
X-Firefox-Spdy: h2
104.18.231.99
54.230.245.100
23.36.79.32
212.82.100.181
23.72.139.51
141.226.228.48
93.184.220.66
151.101.244.157
37.252.171.22