Iforexarab.com

server: rhino-core-shield
date: Wed, 07 May 2025 05:11:02 GMT
content-type: text/html
content-length: 174
location: https://www.iforexarab.com/
via: 1.1 google
set-cookie: GCLB=CLiP-Km91Pvt4gEQAw; path=/; HttpOnly
alt-svc: clear

HTTP/2 200 
server: rhino-core-shield
content-length: 112253
last-modified: Wed, 07 May 2025 00:39:18 GMT
etag: "925a9bd007e43e0fa5e7eaced30fa568"
x-amz-server-side-encryption: AES256
content-encoding: br
accept-ranges: bytes
cache-control: max-age=3600
expires: Wed, 07 May 2025 06:11:03 GMT
date: Wed, 07 May 2025 05:11:03 GMT
set-cookie: GCLB=CNjV8On6ub_VZRAD; path=/; HttpOnly
set-cookie: geoip=US; path=/; domain=.iforexarab.com; secure; SameSite=Lax
set-cookie: device_mobile=false; path=/; secure; SameSite=Lax
set-cookie: device_tablet=false; path=/; secure; SameSite=Lax
set-cookie: device_os=; path=/; secure; SameSite=Lax
set-cookie: device_os_ver=; path=/; secure; SameSite=Lax
set-cookie: device_browser=; path=/; secure; SameSite=Lax
set-cookie: WSID=0a1ef79c5cb3e129921b723c4fd8ae35; path=/; domain=.www.iforexarab.com; secure; SameSite=Strict
x-content-type-options: nosniff
content-type: text/html; charset=utf-8
report-to: {"group":"csp-endpoint","max-age":10886400,"endpoints":[{"url":"https://content.webapi-services.net/api/cspreport"}]}
content-security-policy: upgrade-insecure-requests; default-src 'self' data: blob: gap: 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.linkedin.com *.bizographics.com *.loggly.com *.doubleclick.net *.wistia.com *.twimg.com *.twitter.com *.googleadservices.com *.facebook.com *.googletagmanager.com *.snapengage.com *.visualwebsiteoptimizer.com *.facebook.net *.iforex.com *.google-analytics.com *.bootstrapcdn.com *.youtube.com *.wistia.net *.opmnstr.com *.webapi-services.net *.googlesyndication.com *.optnmnstr.com *.mxpnl.net https://pixel-tracking.appspot.com https://pixelmachine-981.appspot.com *.mte-media.com mte-media.com *.typekit.net  *.optimizely.com d5phz18u4wuww.cloudfront.net *.hotjar.com *.ads-twitter.com *.finadsr.com wcs.naver.net *.criteo.net *.criteo.com https://s.yimg.com https://sp.analytics.yahoo.com *.fihtrader.com *.vestle.com appleid.cdn-apple.com *.livechatinc.com *.appier.net https://sc-static.net https://*.snapchat.com *.tiktok.com https://ssl.pstatic.net https://*.appsflyer.com *.iforex.eu *.mediago.io; img-src 'self' data: blob: *; font-src 'self' data: blob: *.gstatic.com *.bootstrapcdn.com *.typekit.net *.webapi-services.net *.hotjar.com *.wistia.com *.livechatinc.com *.appsflyer.com; connect-src 'self' data: *.doubleclick.net *.facebook.com *.wistia.com https://embedwistia-a.akamaihd.net *.googletagmanager.com *.opmnstr.com *.mxpnl.net *.iforex.com *.webapi-services.net *.litix.io *.hotjar.io *.hotjar.com wss://*.hotjar.com *.google-analytics.com *.finadsr.com *.snapengage.com *.criteo.com *.criteo.net *.iforex.co.uk *.vestle.com https://s.yimg.com *.fihtrader.com *.google.com *.iforex.eu *.iforexcrypto.com https://api.livechatinc.com *.twitter.com *.naver.com *.appier.net *.snapchat.com *.tiktok.com *.googlesyndication.com https://46bamcrx2mthrxda3mx3vxaq4m0jrioo.lambda-url.eu-west-1.on.aws *.appsflyer.com *.mediago.io; child-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-src 'self' data: gap: *.webapi-services.net *.facebook.com *.twitter.com *.google.com *.linkedin.com *.snapengage.com *.youtube.com *.wistia.com *.googlesyndication.com *.googletagmanager.com *.iforex.com *.iforex.eu https://fast.wistia.net *.hotjar.com *.criteo.com *.iforex.co.uk *.fihtrader.com *.livechatinc.com *.snapchat.com *.mediago.io; media-src 'self' blob: data: *.iforex.com *.webapi-services.net *.gstatic https://embedwistia-a.akamaihd.net *.mte-media.com *.snapengage.com *.wistia.com *.livechatinc.com; object-src 'self' https://embed-ssl.wistia.com *.mte-media.com; worker-src 'self' data: blob: *.googletagmanager.com *.iforex.com *.webapi-services.net; frame-ancestors 'self' *.iforex.com *.iforex.co.uk *.vestle.com *.iforex.eu *.iforexcrypto.com *.fihtrader.com; report-uri https://content.webapi-services.net/api/cspreport;
strict-transport-security: max-age=15768000 ; includeSubDomains
referrer-policy: no-referrer-when-downgrade
x-debug-siteenv: prod