Iforex.tw

server: rhino-core-shield
date: Fri, 12 Jan 2024 02:32:02 GMT
content-type: text/html
content-length: 174
location: https://www.iforex.tw/
via: 1.1 google
set-cookie: GCLB=CPmmyp2Dqp2JMQ; path=/; HttpOnly
alt-svc: clear

HTTP/2 200 
server: rhino-core-shield
content-length: 81107
last-modified: Thu, 11 Jan 2024 11:54:01 GMT
etag: "44423cce1f85e984a998597135c0a917"
x-amz-server-side-encryption: AES256
content-encoding: br
accept-ranges: bytes
cache-control: max-age=3600
expires: Fri, 12 Jan 2024 03:32:03 GMT
date: Fri, 12 Jan 2024 02:32:03 GMT
set-cookie: GCLB=CLDuzcOTm5jwRA; path=/; HttpOnly
set-cookie: geoip=US; path=/; domain=.iforex.tw; secure; SameSite=Lax
set-cookie: device_mobile=false; path=/; secure; SameSite=Lax
set-cookie: device_tablet=false; path=/; secure; SameSite=Lax
set-cookie: device_os=; path=/; secure; SameSite=Lax
set-cookie: device_os_ver=; path=/; secure; SameSite=Lax
set-cookie: device_browser=; path=/; secure; SameSite=Lax
set-cookie: WSID=dfcab87089ed944719625e8716831743; path=/; domain=.www.iforex.tw; secure; SameSite=Strict
x-content-type-options: nosniff
content-type: text/html; charset=utf-8
report-to: {"group":"csp-endpoint","max-age":10886400,"endpoints":[{"url":"https://content.webapi-services.net/api/cspreport"}]}
content-security-policy: upgrade-insecure-requests; default-src 'self' data: blob: gap: 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.linkedin.com *.bizographics.com *.loggly.com *.doubleclick.net *.wistia.com *.twimg.com *.twitter.com *.googleadservices.com *.facebook.com *.googletagmanager.com *.snapengage.com *.visualwebsiteoptimizer.com *.facebook.net *.iforex.com *.google-analytics.com *.bootstrapcdn.com *.youtube.com *.wistia.net *.opmnstr.com *.webapi-services.net *.googlesyndication.com *.optnmnstr.com *.mxpnl.net https://pixel-tracking.appspot.com https://pixelmachine-981.appspot.com *.mte-media.com mte-media.com *.typekit.net  *.optimizely.com d5phz18u4wuww.cloudfront.net *.hotjar.com *.ads-twitter.com *.finadsr.com wcs.naver.net *.criteo.net *.criteo.com https://s.yimg.com https://sp.analytics.yahoo.com *.fihtrader.com *.vestle.com appleid.cdn-apple.com *.livechatinc.com *.appier.net https://sc-static.net https://*.snapchat.com; img-src 'self' data: blob: *; font-src 'self' data: blob: *.gstatic.com *.bootstrapcdn.com *.typekit.net *.webapi-services.net *.hotjar.com *.wistia.com *.livechatinc.com; connect-src 'self' data: *.doubleclick.net *.facebook.com *.wistia.com https://embedwistia-a.akamaihd.net *.googletagmanager.com *.opmnstr.com *.mxpnl.net *.iforex.com *.webapi-services.net *.litix.io *.hotjar.io *.hotjar.com wss://*.hotjar.com *.google-analytics.com *.finadsr.com *.snapengage.com *.criteo.com *.criteo.net *.iforex.co.uk *.vestle.com https://s.yimg.com *.fihtrader.com *.google.com *.iforex.eu *.iforexcrypto.com https://api.livechatinc.com *.twitter.com *.naver.com *.appier.net *.snapchat.com; child-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-src 'self' data: gap: *.webapi-services.net *.facebook.com *.twitter.com *.google.com *.linkedin.com *.snapengage.com *.youtube.com *.wistia.com *.googlesyndication.com *.googletagmanager.com *.iforex.com https://fast.wistia.net *.hotjar.com *.criteo.com *.iforex.co.uk *.fihtrader.com *.livechatinc.com *.snapchat.com; media-src 'self' blob: data: *.iforex.com *.webapi-services.net *.gstatic https://embedwistia-a.akamaihd.net *.mte-media.com *.snapengage.com *.wistia.com *.livechatinc.com; object-src 'self' https://embed-ssl.wistia.com *.mte-media.com; worker-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-ancestors 'self' *.iforex.com *.iforex.co.uk *.vestle.com *.iforex.eu *.iforexcrypto.com *.fihtrader.com; report-uri https://content.webapi-services.net/api/cspreport;
referrer-policy: no-referrer-when-downgrade
x-debug-siteenv: prod