Fnmarketsglobal.com

date: Wed, 31 Dec 2025 09:08:54 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
vary: accept-encoding
set-cookie: __cf_bm=8nnPnOQEA1lc0rFKj64ZhFOOqqj5QCjIjtw7R5OVCOM-1767172134.432358-1.0.1.1-7erdLkDfIDGdcv5D2qA_u7BM67t2eoXMwzJLa9ibRXKIhBB00gg4EgL4r_6D9hQsJayBDtMUGOq_ixyCOz6iQ0HVUN9m4tsH_CzTaw.Eaa9GOdKdp7NpP5b0e5Yz0QE.; HttpOnly; Secure; Path=/; Domain=fnmarketsglobal.com; Expires=Wed, 31 Dec 2025 09:38:54 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZWVnyEd4cr5ucfNSWzfsa8Q3iC7kEKI1VZaZTkdvXPkxGvaX%2FVJvSHcmXryaCn3FHckNgKmZ%2BGTILZSqVHqDs7tfxi6QfZWw7bMAsGedUM9dyVNl0AfSOqMYX2k%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-security-policy: default-src 'self';       script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://api-iam.intercom.io https://blog-admin.fnmarketsglobal.com https://static.cloudflareinsights.com https://widget.intercom.io https://connect.facebook.net https://www.clarity.ms https://s.adroll.com https://dynamic.criteo.com https://d2r1yp2w7bby2u.cloudfront.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://widget.trustpilot.com https://in1.clevertap-prod.com https://js.intercomcdn.com https://sslwidget.criteo.com https://d.adroll.com https://scripts.clarity.ms;       style-src 'self' 'unsafe-inline';       img-src 'self' data: https://fnmarkets.s3.ap-northeast-1.amazonaws.com https://fnmarkets.fra1.cdn.digitaloceanspaces.com https://fnmarkets.fra1.digitaloceanspaces.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://c.clarity.ms https://downloads.intercomcdn.com https://www.google.com.bd https://cs.adingo.jp https://x.adroll.com https://d.adroll.com https://c.bing.com https://public-prod-dspcookiematching.dmxleo.com https://pixel.tapad.com https://upload.wikimedia.org https://static.intercomassets.com https://js.intercomcdn.com https://sst.fnmarkets.com;       font-src 'self' data: https://fonts.intercomcdn.com;       connect-src 'self' wss://quote.fnmarkets.com wss://quote.fnmarketsglobal.com https://api-backend.fnmarkets.com https://api-backend.fnmarketsglobal.com https://blog-admin.fnmarketsglobal.com https://www.google-analytics.com https://www.google.com https://www.google.com.bd https://in1.clevertap-prod.com https://f.clarity.ms https://api-iam.intercom.io https://measurement-api.criteo.com wss://nexus-websocket-a.intercom.io https://widget.trustpilot.com https://www.googleadservices.com https://*.intercom-messenger.com wss://*.intercom-messenger.com;      media-src 'self' https://fnmarkets.s3.ap-northeast-1.amazonaws.com https://www.facebook.com;       object-src 'none';       frame-src 'self' https://www.googletagmanager.com https://web.fnmarkets.com https://web.fnmarketsglobal.com https://td.doubleclick.net https://widget.trustpilot.com https://gum.criteo.com https://f.clarity.ms https://widget.eu.criteo.com https://widget.us.criteo.com https://x.adroll.com https://widget.as.criteo.com https://intercom-sheets.com;     frame-ancestors 'none';       base-uri 'self';       form-action 'self' https://api-iam.intercom.io;       upgrade-insecure-requests;       block-all-mixed-content;
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: camera=(self "https://websdk.sumsub.com" "https://*.sumsub.com" "https://widget.intercom.io" "https://js.intercomcdn.com"), microphone=(self "https://websdk.sumsub.com" "https://*.sumsub.com" "https://widget.intercom.io" "https://js.intercomcdn.com"), display-capture=(self "https://websdk.sumsub.com" "https://*.sumsub.com" "https://widget.intercom.io" "https://js.intercomcdn.com" "https://*.intercomcdn.com" "https://*.intercom.io"), geolocation=(), fullscreen=(self)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: br
server: cloudflare
cf-ray: 9b68a2903a8c9b45-FRA