fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
301 Moved Permanently 0 B URL HTTP/1.1 fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 15 Sep 2022 16:00:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 15 Sep 2022 17:00:58 GMT
Location: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UuU76nynNK7bElu6XBwucNGkQLbgMulnIRHeLIt1IDII%2FHeBORywjRRDhIkED0sr9GgpYZNZdaqhTsVXz1GsyKXNnQyV2QGjzBH%2BpBmzbad2mo6nksG2554%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 74b2940dbc240afa-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 15:10:26 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bT-_FqDKkPyqQbgs6noyzzCNEd-vYX6WXC3pXCNNHkQ5Pkw3jMv9kg==
Age: 3031
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5999
Expires: Thu, 15 Sep 2022 17:40:57 GMT
Date: Thu, 15 Sep 2022 16:00:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: p8LQqN5QOVq9eAwJk0ZAeBb64CLSgiZZoQdRDi4mBZxPlHHEODDtFQ==
age: 41143
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:00:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/WAmj7PJkWP8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/WAmj7PJkWP8
IP
Hash 1c5aa6e5207e5fe046a2b809969fe7a3
56765f223a0c16566b4a468550f9473b6b4a5e6b
61cdc2dbdde6d2a352ad3b3c917a16d9b0372759172dadc468b0a3e27bd34772
POST /s/gts1d4/WAmj7PJkWP8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:00:59 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fbs.com/page-load-stat?htmlLoaded=1
200 OK 0 B URL HTTP/2 fbs.com/page-load-stat?htmlLoaded=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /page-load-stat?htmlLoaded=1 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/octet-stream
content-length: 0
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aTN1%2B9iBoSmkFMCKRkFQRjyNLdWU4Xe6nOBeXrRyrrAK01BYRwegkFDSODfdrEGHRVqNhvOaMyk06w1OyPwviX5WNGiCy0zNU%2BtI0omurGAKhiqoGvWmmTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa290afa-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8377710453a1e94386f7eedb0d77aaa1
9263f0eb2d8e23dbdeda22b3050e3a59f178f329
dadc275022572c77484ec6ddff5924ba6b92ed6b1c2a8f4eb2980a248c4e54e6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 16:00:59 GMT
Last-Modified: Thu, 15 Sep 2022 14:52:11 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MXOBeKlXj0IKo0X-yOfPayeCOOinbJPs-p701Tz-jr7yjAuxqtC5rA==
Age: 4128
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 15 Sep 2022 15:03:22 GMT
Expires: Thu, 15 Sep 2022 16:02:22 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: z61o9lcKhbzOpgWO1zZMlXq5hvaol05j5fRC1_dw4tPIQk84Y_RmYg==
Age: 3457
fbs.com/cabinet/assets/fonts/notosans-bold.woff2
200 OK 20 kB URL HTTP/2 fbs.com/cabinet/assets/fonts/notosans-bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19628, version 1.0\012- data
Hash d0fa8d88f35e153eb6c5cf431361273b
071029688a57ea444844749ef4ce3bcfb2c6f577
27872b99b91653e9faed7dde626ed9f608a5dc8c0f8fd3e067161381b9cb27e8
GET /cabinet/assets/fonts/notosans-bold.woff2 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/octet-stream
content-length: 19628
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: "631f20c5-4cac"
accept-ranges: bytes
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BGq7VZdC495mELDS7xa47ggzCaIdL9lXX%2FVaWIy21HBSh3Io2Ga77%2BJpC2FTHo4vuR95c%2FLuKQO36yIAbytD8OAu%2B5OrmkHWzuPRGq3IcFxvHYighzLx2yE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecc40afa-OSL
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/fonts/notosans-regular.woff2
200 OK 19 kB URL HTTP/2 fbs.com/cabinet/assets/fonts/notosans-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18860, version 1.0\012- data
Hash df4895889e10b6f75dbc193ee7f97ed8
cc85cf48a9ace90843c81ec64f3eb3b91c4bef84
3b2eba59c3d4282338166104349fcb83c53767295fe8d4dd874e7ceec4a94af2
GET /cabinet/assets/fonts/notosans-regular.woff2 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/octet-stream
content-length: 18860
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: "631f20c5-49ac"
accept-ranges: bytes
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cnfaSebvSltAAJ28KAaaNErDGWQ0%2BqUiF9T8629blIGrp3aYxw8SB7OgKo9oqa8t2qVKXm7e23h1lBaIMZDcYdkLTVFFcLxl14AF3EJdbu29rPDx87VDMgo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecc20afa-OSL
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/ITA.svg
200 OK 1.5 kB URL HTTP/2 fbs.com/cabinet/assets/img/flags/ITA.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 5cf6ee7b6f9b21e37823dec873cd2a15
7befdfdb15443c78672d79b0bd6a1b5f43210e6a
a298a1b8e0380046aff970cd6e557414ebab5ab5a90603c0d045d62018a15457
GET /cabinet/assets/img/flags/ITA.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-37c"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TNwxQZQxUEs0SHk4Day2Wsk2vSgvkq9nPQVZ%2F2pbdqMkVqtxY2Wi9MWtgFr2Bwpim2AdS%2BT2x49gaNcVam4ZpS2k6bp%2B8WOgzjizHJ77bhYtEzvSPuK2BvQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea090afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d266e3a50e76b9b3ea96ffb5e26a51b5
10cff1e73a6c2e51f7ae459e0cf1c3960ef01186
3ca24b7028918af888631f4eb19e43310fe331ab4938f8218230752191dac6f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CA24B7028918AF888631F4EB19E43310FE331AB4938F8218230752191DAC6F0"
Last-Modified: Wed, 14 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2579
Expires: Thu, 15 Sep 2022 16:43:58 GMT
Date: Thu, 15 Sep 2022 16:00:59 GMT
Connection: keep-alive
trsbf.com/static/fbs.min.js
200 OK 60 kB URL HTTP/2 trsbf.com/static/fbs.min.js
IP
Hash 6adf73e82997e41c66f0db951aa0289e
61003c7072779065591c684162ca4339fcb84fdc
9020f6a384afc1c6b66da6a516bc83717c9af47f8de1ac09271252c59aea3d8f
GET /static/fbs.min.js HTTP/1.1
Host: trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/javascript; charset=UTF-8
server: nginx/1.20.2
vary: Accept-Encoding
last-modified: Wed, 14 Sep 2022 09:21:55 GMT
etag: W/"877a32306967cfbcf06132e77a3d6fb5"
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
cache-control: max-age=12h
x-cache-status: HIT
set-cookie: reuseridx=wKgqm2MjTDtxewAfrfQKAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.server.retentioneering.com; path=/; HttpOnly; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d266e3a50e76b9b3ea96ffb5e26a51b5
10cff1e73a6c2e51f7ae459e0cf1c3960ef01186
3ca24b7028918af888631f4eb19e43310fe331ab4938f8218230752191dac6f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CA24B7028918AF888631F4EB19E43310FE331AB4938F8218230752191DAC6F0"
Last-Modified: Wed, 14 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2578
Expires: Thu, 15 Sep 2022 16:43:58 GMT
Date: Thu, 15 Sep 2022 16:01:00 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dB7l8wxFAEBc3F2ee87nKQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AEAZn3xRRRYlS38p6U6YUf4X+x0=
fbs.com/cabinet/assets/img/flags/IND.svg
200 OK 1.5 kB URL HTTP/2 fbs.com/cabinet/assets/img/flags/IND.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (312)
Hash 74bad479e409f276c693daf627bd8f6a
e8716da7a941b4c784d5b41e917ab7fc2787af2d
68b866ba998d68d0ced00ed41f0e17cd48c42afd4e49d41f46f8fe77f55c90f0
GET /cabinet/assets/img/flags/IND.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-df4"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jWD6jA0U9VQw5Oq5ucqEeWi%2BQL3x2caPkAnsoBjsDaGMJwcmPM3MawztzV%2B8Zajzo4uIIA2bYFwMMwz6lXR824xXyIGbMX%2FIPcBgYbjEm%2B%2B%2B5Jv%2FaksHr9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa1e0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/3973.e99661e3c2e77b9c6f05.js
200 OK 7.8 kB URL HTTP/2 fbs.com/cabinet/3973.e99661e3c2e77b9c6f05.js
IP
File type ASCII text, with very long lines (36527), with no line terminators
Hash 92b9e91ef468efae3c3e5a13610431f1
6c64c235052cf791340d4bef2f6a2ed1cc92749d
21dc37ce4523f3e5935014a28cf0854e1ff3e6eeab7dd94ae2aabe2f4f9f58f4
GET /cabinet/3973.e99661e3c2e77b9c6f05.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-8eaf"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NHi7YgH9nrm0Bi26IKAyA3UgwvJ99z5p5f91KENJMO7xRzOBWPfr0ONhpaUO20yLGY2%2BohqhlljzILqcen66vUHhIQS9E98CVJNa%2B6GwzhfAZ6lwukcl7QY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ef900afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/3865.7f802ffb80a8b8cfc0fa.js
200 OK 13 kB URL HTTP/2 fbs.com/cabinet/3865.7f802ffb80a8b8cfc0fa.js
IP
File type ASCII text, with very long lines (64419), with no line terminators
Hash 25ee317b88e9bce3727d79ca35d173c7
0a3dd723e84f3741c0e89c48e67ade2d5b212e11
f76ccd17d49835a67efc3c0d3ef2af0f8ca1718e52ba6819a39714279a7b61f8
GET /cabinet/3865.7f802ffb80a8b8cfc0fa.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-fba3"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zWaZ5Imu1PMWizf5lob4%2BeWUDbcmrvnRdxuSRKQ5DESP5RWMpe90tkGBNBx0XMR4Y4aSmLHUMPl3stcyr8kIRf4Kno0q1mnq438zxFGNR3EVOtI5jV%2B7S%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ef8e0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/7885.7aebd664f6abd362ac08.js
200 OK 30 kB URL HTTP/2 fbs.com/cabinet/7885.7aebd664f6abd362ac08.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash bffe369a1967c20abe619bceef733ffe
fabf7ae8a4b4c83875b31e35e10300b89b2b1f5c
96ff4d032e32f35b4f58802fe5f057dce43cef574d3cead63f8f26aee10a7742
GET /cabinet/7885.7aebd664f6abd362ac08.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1b19b"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UmjKVvvlrju48zGFJ3TuvEs%2BHO4g5e9v1yvwsxJ8HXzjzqRY4vVDVxwUs3S%2BZSvd7P4YR3bOSlcjw%2FQhvS2hDhKcaEFQFOGebGVLC3aaZFksSK4XpDeNjTM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ef8f0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:00 GMT
access-control-allow-headers: Content-Type
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
X-Firefox-Spdy: h2
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json; charset=utf-8
Content-Length: 1404
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:00 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fbs.com/cabinet/8224.4aa630a8f0b3687e2f5d.js
200 OK 5.0 kB URL HTTP/2 fbs.com/cabinet/8224.4aa630a8f0b3687e2f5d.js
IP
File type ASCII text, with very long lines (17959), with no line terminators
Hash 528f82ad6225fb0275d3fc22e5413925
850f91f104af970f3b2b632227967c42e0788111
5283aaf37354c05ad85590bfa25b04e58be6a7fd653a171799a703d32a9f6eea
GET /cabinet/8224.4aa630a8f0b3687e2f5d.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-4627"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BUdziJ5D5CR1uRPmsdrjFIfalIAO5wkatONigKAo%2BwCn5QwXw5Bu8e3VJH3d0vVxooMgX8%2BAQ5uaySON4bD2G6r4BR2FywkNnVSCeoCALgjydYyC%2FXVtYHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ef940afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json; charset=utf-8
Content-Length: 1257
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:00 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.pushwoosh.com/webpush/v3/pushwoosh-web-notifications.js
200 OK 45 kB URL HTTP/1.1 cdn.pushwoosh.com/webpush/v3/pushwoosh-web-notifications.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash f092e06ff1e7e957d028ea9811b1f11b
689b795e3b8bad42a78e7e6c2e6a2d68653c9491
4c69e9317b545d023ea95040208d583463d1499099bb23ed10e828341e5e6816
GET /webpush/v3/pushwoosh-web-notifications.js HTTP/1.1
Host: cdn.pushwoosh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Sep 2022 16:01:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 13 Sep 2022 08:45:52 GMT
x-rgw-object-type: Normal
ETag: W/"d50a1b2bd010ebf2eca5a3e1f9c1df25"
X-Amz-Storage-Class: STANDARD
Expires: Fri, 16 Sep 2022 16:01:00 GMT
Cache-Control: max-age=86400, public
X-Cache-Status: HIT
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS, DELETE, HEAD
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Access-Control-Allow-Headers, is_auto_request, Content-Length, Accept-Encoding, X-Registry-Auth
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
fbs.com/cabinet/6383.83fcac4cbc79118ff68c.js
200 OK 5.2 kB URL HTTP/2 fbs.com/cabinet/6383.83fcac4cbc79118ff68c.js
IP
File type ASCII text, with very long lines (20359), with no line terminators
Hash b66f2ad5008dd745e373478eef2a4fd3
7dc2e55c0347318a12c99a829271062ab8db1d9b
4d1c330bc16e54c6d79de9690d3bf07603151534f1d63c8a31cd92fdbf642561
GET /cabinet/6383.83fcac4cbc79118ff68c.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-4f87"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: SWE
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IRfNraLHHNEBNgdtNn8y6%2FYb51KKv4EhhZRpoi5M1cCgHqbKodpdrIL1mfu88LJSIpDNtQigl69sgSYBFSPWSh1hTAhP%2Ba%2BLsee%2FwathN4HE57IGy8o237Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ffa00afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/common.1b28ed3a9570ffc87313.js
200 OK 29 kB URL HTTP/2 fbs.com/cabinet/common.1b28ed3a9570ffc87313.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 961d0343da5813af0f3df2cc01c5645e
668b20f3e3fbbbd13d1d3419b12dad7743898a45
b96a7a7774c4b9e3735009bd94a4d697e3589fc014fe1d9fb8da7159fdade205
GET /cabinet/common.1b28ed3a9570ffc87313.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1d0c4"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B02zSjl2uPQc3JZQ2SKNLb2zxdQ%2FHPxSy%2B73zSBOil778HBRwTPk2GgQApjtfnF4i%2BQ9AFdDjtYHOTYIAKeTPfy2jvEOQnm80QyM0q2a37uOyV90b%2FVf9xk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ffa10afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json; charset=utf-8
Content-Length: 1218
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:00 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fbs.com/page-load-stat?angularLoaded=1
200 OK 0 B URL HTTP/2 fbs.com/page-load-stat?angularLoaded=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /page-load-stat?angularLoaded=1 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
X-User-Host: https://fbs.com
X-User-Language: id
X-User-Platform: website
X-User-Location: NOR
X-User-Role: trader
X-Application-Id: 1
sentry-trace: a7c4d7ac58824b32a54895bfe3f3a737-817583c5891ad531-0
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=8; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/octet-stream
content-length: 0
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JpSwjqE6aWAQUS1%2BQEMOW0t1vyHVqcf7L0R%2BY1JkEFGP7reA7d5GK15cOu%2BNveM9s4eusDx79CgBmHJzt%2BbstGrqEHFuZK63uiuKASSQkGuRdMmuRwY0TeI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2941969300afa-OSL
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/attention.png
200 OK 2.2 kB URL HTTP/2 fbs.com/cabinet/assets/img/attention.png
IP
File type PNG image data, 94 x 94, 8-bit/color RGBA, non-interlaced\012- data
Hash 65de4961910b6362cf341ac747cc2165
4dc4f595f04b7fdbe10cdaf447de938f25fe70ea
6d84f79e15a21c95e9c28f1ec2dfeb14ef868ada7e2aafbbda33b3b69ac399ae
GET /cabinet/assets/img/attention.png HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=8; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: image/png
content-length: 2174
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: "631f20c5-87e"
accept-ranges: bytes
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3huck9xR%2BF6jTx2LLIEd4%2BGfV3YSG6xLf1StezTBLfz3EthaeS%2B0s0ry17D1Z91JIOluoWUF%2FOWOqiENDokLJz88x9Nm22X9I2ZPeHwNVYqEE7lukzzVWSI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2941989590afa-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ed97a4b82680caefc4ffdebf786e12fc
a638a68f346844709bac57a92bf3d2c28043165e
b81ed44963f5d8b54c62e7fe18db301d3c8eeaf8fbbfb099270562156e12fdc9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?onload=ngx_captcha_onload_callback&render=6LdW-XgUAAAAAM1pORjmphBzSSzwpPqVmFfvXbri
200 OK 617 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=ngx_captcha_onload_callback&render=6LdW-XgUAAAAAM1pORjmphBzSSzwpPqVmFfvXbri
IP
File type ASCII text, with very long lines (954), with no line terminators
Hash 64760f9c6da72848e1a61e05fe51eb7b
5cddde177a14a57446f710d7b87f55cee6b62fb9
c68a057d3640b21e603e23808f974dbc12e52da99ae5989bf5ba9db91f71e211
GET /recaptcha/api.js?onload=ngx_captcha_onload_callback&render=6LdW-XgUAAAAAM1pORjmphBzSSzwpPqVmFfvXbri HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 15 Sep 2022 16:01:00 GMT
date: Thu, 15 Sep 2022 16:01:00 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 617
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/cfg/social-networks.json?ts=1663257600000
200 OK 40 kB URL HTTP/2 fbs.com/cabinet/assets/cfg/social-networks.json?ts=1663257600000
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (15948), with no line terminators
Hash 5a49bb8b4e9b3af9f175a82ae1bb0989
8de9a5a2749095592eec7f6c7a13eca17b2129db
efd0b74edc6b24edbca7dfc593c0cc30a81824dc65b61b787f149e0ff8ae2486
GET /cabinet/assets/cfg/social-networks.json?ts=1663257600000 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
X-User-Host: https://fbs.com
X-User-Language: id
X-User-Platform: website
X-User-Location: NOR
X-User-Role: trader
X-Application-Id: 1
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=7; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/json
last-modified: Thu, 15 Sep 2022 16:00:00 GMT
etag: W/"63234c00-3e4d"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y8OQNjaI7dvnRTlUUUJ%2FHMQBQWDO5y0aQ%2F4aV3adotqBZJ8mpa%2BhNrG5wMJuqyFmBhvclrcu9WivnpVYHjpb8mJR9JqavCHJ1cZquMY%2Bs6zvLYkXWC4G2UA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2941939050afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/android-chrome-256x256.png
200 OK 1.8 kB URL HTTP/2 fbs.com/android-chrome-256x256.png
IP
File type PNG image data, 256 x 256, 4-bit colormap, non-interlaced\012- data
Hash a3da117d4fe670adb925c1620ca4bc37
af3c110dca7f1e6479b50bb61973a8f128f301c0
053099fe1c16946eff93b0d0d5bebf2608201318c4dff3d66c845cfdc95b7676
GET /android-chrome-256x256.png HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=8; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: image/png
content-length: 1820
last-modified: Tue, 27 Jul 2021 08:43:57 GMT
etag: "60ffc74d-71c"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
cache-control: max-age=14400
cf-cache-status: HIT
age: 1021
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yks4h9umA%2BGO%2Bz4AQmI6PXZkjuOXIr2JEaHz%2F8ad8tKkH5msKCRdCkG9D5ayPlWnBq0bReeYlWFse4IhpnvxrRf2SDTuboEU1lnFVTK8GavC7Ym%2BsiHklXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2941b6b990afa-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7dff4bc87dbee6fd33e0d7a3dc5ed3bd
59878d4dd98e60b39dcf7ac288e77bb262afab5d
8c3a027cee1f48144eb0504deff1f2b9aa98c9fc3f4e3057ece6caac9f604315
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5209
Cache-Control: max-age=147398
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:00 GMT
Etag: "6322d4a9-1d7"
Expires: Sat, 17 Sep 2022 08:57:38 GMT
Last-Modified: Thu, 15 Sep 2022 07:30:49 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
cdn.pushwoosh.com/webpush/v3/pushwoosh-service-worker.js
200 OK 27 kB URL HTTP/1.1 cdn.pushwoosh.com/webpush/v3/pushwoosh-service-worker.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 96a9e556b9405a94db6237d14399fbf1
ecf8972c28f57ba5d71c1179a5335cb92db5f341
008a20bc1c9a1f75178b26d93c18391aae4afc7690804b990937d6b3ac2545a9
GET /webpush/v3/pushwoosh-service-worker.js HTTP/1.1
Host: cdn.pushwoosh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Sep 2022 16:01:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 13 Sep 2022 08:45:52 GMT
x-rgw-object-type: Normal
ETag: W/"d3aa7a7ef179cfa8f5c244ae6379bc42"
X-Amz-Storage-Class: STANDARD
Expires: Thu, 15 Sep 2022 17:01:00 GMT
Cache-Control: max-age=3600, public
X-Cache-Status: HIT
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS, DELETE, HEAD
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Access-Control-Allow-Headers, is_auto_request, Content-Length, Accept-Encoding, X-Registry-Auth
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fee2d54a463e6c163120fa83f992ef3d
65bd437990496454b495512b3f531add57627b24
f045e03f2ed4e2c74dfeee40e1dccea4f68d678cbf3b82c2e50849554c99078f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash b581976aeb4050d5d17fa216844b5e72
8f3f7d3792c62953728c3253125c68219e019e49
7fde9ea15813721fdc3eccc8e62e4bf6ecb84732d44c168c6509b3438fc85eb1
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 1107a2847f9ab08ea4bd038655f86dd0
etag: "fede7bf26e690be4b3540bd1eaa9cc65"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 15 Sep 2022 16:08:44 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: tYGXautAUNXRf6IWhEtecg==
x-fb-debug: GWsBxIB7tN+c4+oANX5Mzl0YoSmGXzkHICpstWC99zpKXIGsc2TKO3LGQsCqlb+GGOgLpMwslVgrDsWrtuVz8w==
content-length: 1686
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 16:01:00 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fbs.com/cabinet/4157.d72593751e943616d24b.js
200 OK 2.5 kB URL HTTP/2 fbs.com/cabinet/4157.d72593751e943616d24b.js
IP
File type ASCII text, with very long lines (7988), with no line terminators
Hash b05f650e7054d471ea4e592305e0b4d7
dab007ff8d299d64089f4e8702b7edeb9426cc9f
f8e9233ad03d7d9528172e36066fa960a344117881739c40feaa4a6a6f04bcdd
GET /cabinet/4157.d72593751e943616d24b.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1f34"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z1JRUkqsa8h9hUXonDjg1YdZWlJvNd6gKG7Ro3nKRfC0MvMWHnvXNILC6tmgsVtzvxmKmiYI87TWcxFqYULhqsGwns7M3D3yMZItqaLayscmkcEE19LG6kg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ff9f0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Thu, 15 Sep 2022 16:01:00 GMT
expires: Thu, 15 Sep 2022 16:01:00 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fbs.com/cabinet/6166.6aa8012113d25ebbff11.js
200 OK 30 kB URL HTTP/2 fbs.com/cabinet/6166.6aa8012113d25ebbff11.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 61209cea4431798dd58dcbd78f1f35af
8865cc15df4ee2966e8668397b00ccccdd3b61ad
ad127b2f87736dd05c3bfc80fed54eb7b59789eac16be8b9105552748b0ac943
GET /cabinet/6166.6aa8012113d25ebbff11.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https:%2F%2Ffbs.partners
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=8; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-25e98"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1021
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mDtEdf5XTuA0BBK347mBYJVSICxWw211lno5umbVHep5J0q8WqtjaYdwinFyDo1kMecakluTFchPj2LvucijsELlXKWzO%2FxHYiABs%2B9sS7RLfoUf2vEfkIo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29419b9880afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json; charset=utf-8
Content-Length: 1161
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:00 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=7277742ff79aadc2e46f31a85aa68a29
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=7277742ff79aadc2e46f31a85aa68a29
IP
File type ASCII text, with very long lines (13285)
Hash 7ed773c99b5cb33cadaf28a892f8798d
71347b25948298f1d297771994e6258ee0f248f0
e65a09e7fa667dd0e2caf1fb408df22da5579dfed9e271d4d6aa9637c2a302f8
GET /en_US/sdk.js?hash=7277742ff79aadc2e46f31a85aa68a29 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: c023ce6a293dfabde07442cfbf4d041c
etag: "aa576d5e3c5f81156bdd8b041b8a82fc"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 15 Sep 2023 14:05:41 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: ftdzyZtcszytryiokvh5jQ==
x-fb-debug: Mo+KYOFWlFtqeVH45SagqBDwTNyMbobTQ4VBIUELSmsK8OZkwAUqYWbW+VXIWf9/BIwCWUiIEO+3fSUhYmOcnQ==
content-length: 87032
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 16:01:01 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c4ccde3c005912d7beb96d384b682bb
32921158136d33b968ae900879201217e2eb4ff3
4e53060ab4fb2227c698e4f3487ced9512af7bea2c5842c106d9970bbb3842a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 12:31:58 GMT
expires: Sun, 10 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 444543
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 00:48:31 GMT
expires: Sat, 09 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 573150
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL HTTP/2 www.gstatic.com/recaptcha/api2/logo_48.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 20:02:15 GMT
expires: Mon, 19 Sep 2022 20:02:15 GMT
cache-control: public, max-age=604800
age: 244726
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e669093dc2c285ce41d74ad82e5c3d2
1e65ded94e2b8c575979da362ce8dc2e304c5d5f
5a3c12851ee84e69a6ff8f0707d036d36827c77011af12aeabc187220e0fc79c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/o/oauth2/iframe
200 OK 345 B URL HTTP/2 accounts.google.com/o/oauth2/iframe
IP
File type HTML document, ASCII text, with very long lines (385), with no line terminators
Hash 0e3dd866df57a8958e8c593f83486a9f
6266f745549e7404c24ac2f787b0cc20f1d1f612
3ad5f22e7a8410aa5d11fc9ad042d4a6b36cabc8a03b5133e9909e2d2e55f60b
GET /o/oauth2/iframe HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Sep 2022 16:01:01 GMT
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-FpJ0-XPdUamtF3qI10FkQQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdpIFrameHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdpIFrameHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/IdpIFrameHttp/cspreport
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.z2a12LkW96g.es5.O/d=1/rs=AOaEmlHeSnuHrM44y1tAD9SSj44ODEuRFQ/m=base
200 OK 35 kB URL HTTP/2 www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.z2a12LkW96g.es5.O/d=1/rs=AOaEmlHeSnuHrM44y1tAD9SSj44ODEuRFQ/m=base
IP
File type ASCII text, with very long lines (868)
Hash d71eba62f2ab91363d8bb8715a150099
c984ff901e5a8619d5bd5d17faa866232e5dc56f
48e740b11060128171cd253f8766d51db503fac900ce73f778711a89cfe024ad
GET /_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.z2a12LkW96g.es5.O/d=1/rs=AOaEmlHeSnuHrM44y1tAD9SSj44ODEuRFQ/m=base HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/identity-boq-js-css-signers"
report-to: {"group":"boq-infra/identity-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers"}]}
content-length: 34843
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 22:24:04 GMT
expires: Wed, 13 Sep 2023 22:24:04 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 03 Sep 2022 01:09:31 GMT
content-type: text/javascript; charset=UTF-8
age: 149817
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0b4eed58b61d5b83ee76acc95859d7bf
e7b7cfeaa2c704cd6092846cbec314689d0504b3
f99e45e7102d04339cd5c11123d84714b27621e287633a4c18fa38ceb161eb59
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F99E45E7102D04339CD5C11123D84714B27621E287633A4C18FA38CEB161EB59"
Last-Modified: Thu, 15 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2442
Expires: Thu, 15 Sep 2022 16:41:43 GMT
Date: Thu, 15 Sep 2022 16:01:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0b4eed58b61d5b83ee76acc95859d7bf
e7b7cfeaa2c704cd6092846cbec314689d0504b3
f99e45e7102d04339cd5c11123d84714b27621e287633a4c18fa38ceb161eb59
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F99E45E7102D04339CD5C11123D84714B27621E287633A4C18FA38CEB161EB59"
Last-Modified: Thu, 15 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2442
Expires: Thu, 15 Sep 2022 16:41:43 GMT
Date: Thu, 15 Sep 2022 16:01:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0b4eed58b61d5b83ee76acc95859d7bf
e7b7cfeaa2c704cd6092846cbec314689d0504b3
f99e45e7102d04339cd5c11123d84714b27621e287633a4c18fa38ceb161eb59
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F99E45E7102D04339CD5C11123D84714B27621E287633A4C18FA38CEB161EB59"
Last-Modified: Thu, 15 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2442
Expires: Thu, 15 Sep 2022 16:41:43 GMT
Date: Thu, 15 Sep 2022 16:01:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:45:05 GMT
age: 65756
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1633672fad0b564108cf81ad711dc881
d37ad0f40bc1f3f0022467dd0af2478980bd858a
cc7176a297f6009f07074fb9af796132b4452833be675bf378cc950fe81a582a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9071
x-amzn-requestid: b450f7cf-6cc7-4d1f-aef3-4496f0971727
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeIxuEq6oAMF9jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632254d7-6912ef8731d81fa43b805e5b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:25:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6LDUuDX1W8-Q88pDJma0xCAd5QuJ0YV-VpJ_8LVyDHX9YN1k0fQZ8Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:36:39 GMT
etag: "d37ad0f40bc1f3f0022467dd0af2478980bd858a"
content-type: image/jpeg
age: 62662
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a6939786c9343412c9af87efd3f44e0
14131148fda4e8d85b582fd20e76bcc814341bf1
8412c50f0fdc131d9c4422f2d7307fc1ee062c3580a1d754ef71cf84f9727d49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8447
x-amzn-requestid: 3237c2fa-bc17-4b8d-8afd-bacfaa90ca71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FypF7KIAMFd7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63145010-7052273b184685c83569c712;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzi_WnjJW5XjIfj8kyVL4LcQEjcuw1_zwrDiJegEZ2r8GOZcQahPEw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:46:45 GMT
age: 65656
etag: "14131148fda4e8d85b582fd20e76bcc814341bf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f50c34bc30a732593e8fe465055a44ff
af100925cba1be716fd2200715d6136bd7f0c5bc
703049736ccc8815945d69634059c4cd39533417e0969107d460c36a6787c761
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5078
x-amzn-requestid: b6177371-a8ba-4541-a48d-21bd806e866e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0erUHT-IAMFWKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ab15-157ed5b700e0aad5481f5c0f;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:04:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MYJf90B8rX8_nPUl4stpbZcQeQDaZ2Hgyu6GmsfdqUh-0Nx5OJJThw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:54 GMT
age: 70747
etag: "af100925cba1be716fd2200715d6136bd7f0c5bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4833535b1650b0ac875704023b650e66
96ab8cd8e14350f730d26731f3445710324e24e2
d2b5a51e39a4890ba56e819d4d5d1d57d4d3cfc50dde42efdf23b8e9be17d1c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9400
x-amzn-requestid: 8cf35176-18a1-427b-870c-bdae465060c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYM18E-iIAMFcmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ff4f2-427bc0ff6593e71e25b91589;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 03:11:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZVnPAYUOBCRUYD3wEx79lIMjBJCKyVB9CmnTqMJIaFPbQGPoHwB73w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:37 GMT
age: 70764
etag: "96ab8cd8e14350f730d26731f3445710324e24e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ef9865421a37eae9a4df04083d27485
c7cf1f6a259cece60a34261ec83ee00736e1d72b
723b65ba660f22281f85d6caceea23e9cd932ee9084dc905a08a585746c4c4cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9922
x-amzn-requestid: de1e3e45-74ff-41b2-986f-e78473cb6d98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVc1SGM7IAMFw0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631edb54-2099524d6f2c338b41eea101;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 07:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MtgQUzYMa3mT0lxPhQ5ZCp9XVVyBH8T0dlx_0wSLMZlaFEiCikTXMw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:25:51 GMT
age: 63310
etag: "c7cf1f6a259cece60a34261ec83ee00736e1d72b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/ua-parser-js@0/dist/ua-parser.min.js
200 OK 7.4 kB URL HTTP/2 cdn.jsdelivr.net/npm/ua-parser-js@0/dist/ua-parser.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (19280)
Hash 4d77bbed33e46af5fa324c88d1fe02f4
b33e16b393a6f09b529422c81f27e401da0dd27d
55435775d79163a194a5c10a351178d310b52e0c2ee3132e1a8b42ca5075bb63
GET /npm/ua-parser-js@0/dist/ua-parser.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.8.1
x-jsd-version-type: version
etag: W/"4bb3-xn81YAue+z8diTHUycCuwBYtzpE"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 16:01:01 GMT
age: 7865
x-served-by: cache-fra19153-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7377
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 14d2b9e05b08be0507c994fe98d27267
cb37783998cc45dec0778c2fb1d4515219402f40
177d18d48588ef4af4c365d6ab2353cf4a08d7325861457caeb824cdca70870b
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:01:02 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "7A7CB537C4B84232A733550E6C7418B5EE69F869"
Expires: Fri, 16 Sep 2022 03:00:00 GMT
Last-Modified: Thu, 15 Sep 2022 15:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1864
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b294238d27b512-OSL
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: application/json; charset=utf-8
Origin: https://fbs.com
Content-Length: 1201
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:02 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
t.trsbf.com/endpoint/event
204 No Content 0 B URL HTTP/2 t.trsbf.com/endpoint/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /endpoint/event HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: application/json; charset=utf-8
Origin: https://fbs.com
Content-Length: 1201
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:02 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fbs.com/api/2/v1/verify
200 OK 140 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 75e0219a4a2d827b8258e155a7bc0823
52f84cc60aa272b79e15803c4794e089709ac112
ca0c5febe6ed271996ce734cedaa9b17e31de0a8a4640e20150b35b9c7ff782c
POST /api/2/v1/verify HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https:%2F%2Ffbs.partners
Content-Type: application/json
X-User-Host: https://fbs.com
X-User-Language: id
X-User-Platform: website
X-User-Location: NOR
X-User-Role: trader
X-Application-Id: 1
Origin: https://fbs.com
Content-Length: 584
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=11; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e; G_ENABLED_IDPS=google; _gcl_au=1.1.1584914639.1663257647
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:02 GMT
content-type: application/json
grpc-metadata-content-type: application/grpc
access-control-allow-origin: *
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, HEAD, OPTIONS, PATCH
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,X-User-Language,X-User-Host,X-User-Ip,X-User-Platform,X-User-Location,X-Request-Token,X-User-Role,X-Application-Id,X-User-Facebook-Clickid,X-User-Facebook-Browserid,X-User-Utm-Campaign, X-User-Utm-Source, X-User-Utm-Medium, X-User-Utm-Term, X-User-Utm-Content, X-User-Google-Gclid, X-User-Google-Dclid, X-Ray-Id
access-control-expose-headers: X-Request-Token,X-User-Location,X-User-City
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
content-security-policy: default-src 'self'
x-request-id: 674268b8d9407ace2b97db415dd5cbfb
cache-control: no-cache, no-store, no-transform
pragma: no-cache
referrer-policy: no-referrer-when-downgrade
x-user-region: xx
x-user-city: London
x-user-location: NOR
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cUowJDAYDI1Vj0TPHhf93XphvxSYYxxMlMI0%2F%2B8s4RenRvGHKzh0jBRpniN702YdVcn5OQA67XosVtlffS%2BqCmJRnwX25I8pbbcjq2gRcz2TypCi9jYC8LA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 74b294240db90afa-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b55891855e19f2b828c28e3f3996bd9d
475257fc1fa3e52e4e9885bdd0bba40f9180d6bb
9ee86e1177d59f2ae93749881dbfe313f280386ce2a9d4688341064f4afe2eb5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:01:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 14:54:59 GMT
Expires: Tue, 20 Sep 2022 14:54:58 GMT
Etag: "475257fc1fa3e52e4e9885bdd0bba40f9180d6bb"
Cache-Control: max-age=427435,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74b2942639200b39-OSL
cdn.pushwoosh.com/webpush/v3/pushwoosh-service-worker.js
200 OK 27 kB URL HTTP/1.1 cdn.pushwoosh.com/webpush/v3/pushwoosh-service-worker.js
IP
ASN #24940 Hetzner Online GmbH
Hash c54f9b1e642f7aeba8d6c214fe757a1d
51f1e585a6b5c660a282824d44a436707680d846
dd82130ae4671f55631408902aae8dd2472940ea8a80089d88b99faba0f64977
GET /webpush/v3/pushwoosh-service-worker.js HTTP/1.1
Host: cdn.pushwoosh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Sep 2022 16:01:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 13 Sep 2022 08:45:52 GMT
x-rgw-object-type: Normal
ETag: W/"d3aa7a7ef179cfa8f5c244ae6379bc42"
X-Amz-Storage-Class: STANDARD
Expires: Thu, 15 Sep 2022 17:01:02 GMT
Cache-Control: max-age=3600, public
X-Cache-Status: HIT
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS, DELETE, HEAD
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Access-Control-Allow-Headers, is_auto_request, Content-Length, Accept-Encoding, X-Registry-Auth
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
websdk.appsflyer.com/?st=pba&af_id=56482d03-04b5-4edb-a7df-3acded2134a6
200 OK 9.6 kB URL HTTP/1.1 websdk.appsflyer.com/?st=pba&af_id=56482d03-04b5-4edb-a7df-3acded2134a6
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21856)
Hash 2902a2c87591f52fe75ec67763d36598
f95fdcd612b076f2deccc29c4674a80f1db9cad6
3f9873dc0fcde232799bfaea802351433c9934862bb296e993c442cf0fbfcd6f
GET /?st=pba&af_id=56482d03-04b5-4edb-a7df-3acded2134a6 HTTP/1.1
Host: websdk.appsflyer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 4haMOXDItrc8YAsvjP5Y/gbfdGolA2yEsUPI+FqwDDhYzG2L2zfJACl/etuphYJSQMXfI7TXm8g=
x-amz-request-id: MKFRWNGA75DSVKN5
Last-Modified: Wed, 27 Apr 2022 08:41:43 GMT
ETag: "cc82ca2a69eac2386ea395ea1e0ad0f6"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2999
Expires: Thu, 15 Sep 2022 16:51:02 GMT
Date: Thu, 15 Sep 2022 16:01:03 GMT
Content-Length: 9575
Connection: keep-alive
www.facebook.com/tr/?id=1098434490199868&ev=fb_page_view&dl=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&rl=&if=false&ts=1663257646499&sw=1280&sh=1024&at=
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1098434490199868&ev=fb_page_view&dl=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&rl=&if=false&ts=1663257646499&sw=1280&sh=1024&at=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1098434490199868&ev=fb_page_view&dl=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&rl=&if=false&ts=1663257646499&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 16:01:03 GMT
expires: Thu, 15 Sep 2022 16:01:03 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.woopra.com/js/w.js
200 OK 13 kB URL HTTP/2 static.woopra.com/js/w.js
IP
File type ASCII text, with very long lines (36322)
Hash 0050dcfaf8e649757b3080e0d2eb67e0
2f54f375dc27f8b34c6300d5d9d769675453195d
186e643b572e988e96a7fb0309a764b21bdcb0de5871cb27aa79211b205fec3b
GET /js/w.js HTTP/1.1
Host: static.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache/2.2.15 (Red Hat)
last-modified: Wed, 14 Sep 2022 19:30:43 GMT
etag: "21dbc-8e84-5e8a82a2f2347"
content-encoding: gzip
cache-control: public, max-age=86400
content-type: text/javascript
access-control-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Sep 2022 16:01:03 GMT
age: 73755
x-served-by: cache-iad-kcgs7200041-IAD, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 329
x-timer: S1663257664.565600,VS0,VE0
vary: Accept-Encoding
content-length: 12608
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 56b4a90e8be043082aa30d490fe93e47
6c94d4b9610ec757d7e7851ac2e478edff1309f8
c59724a0ece262f497d3f09f4e90ae49a11a3a150134183cc10ef2c47f5fe9b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cfd2db57907a02add07cc8f727a30ca6
f9a6f8af7868c0be0a22fee404e0b07cf737bbaa
d8bac3b77cb2732588815a8bcb3ad6a49e518f04f99bf20513d91ffb30eee947
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 108 B URL HTTP/2 fbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type gzip compressed data, max compression\012- data
Hash a9396d24eadf3d2796b8f5fce54ca84c
30074953eb4f19966676e6ca68a031a24004c2e9
6d40961ffccd40d34a4c7af42541d34c6b5519d000b68158eb6743cd935f3faf
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https:%2F%2Ffbs.partners
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=11; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e; G_ENABLED_IDPS=google; _gcl_au=1.1.1584914639.1663257647; __tid=uid-1251253854.7639207197; _ga=GA1.2.1855202183.1663257648; _gid=GA1.2.1995146669.1663257648; _dc_gtm_UA-7430729-6=1; wooTracker=FDN9LWO5Dds2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.fbs.com; Secure; SameSite=None;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T3QdIrWkIshgkqynt2Bll5DNc%2BNnyGRwCMincdtqK2yRSfI1akqU4EQOxQrAG3j7NOjgWwxB2RiF50yuD%2BXTDQrBnCWc6pEpDyCH0j02XGvj7lsRkL5Yo3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942e28bb0afa-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 494442c43edcdf235d01cee3d0bdb0c7
aecaeb9d2deaed3eb925e3c1555560f930be5d9c
7331e64d00a193e1a5f921dfe52e1a49e9694e7f01f367f2a2cd7f804e34f085
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7331E64D00A193E1A5F921DFE52E1A49E9694E7F01F367F2A2CD7F804E34F085"
Last-Modified: Tue, 13 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9582
Expires: Thu, 15 Sep 2022 18:40:45 GMT
Date: Thu, 15 Sep 2022 16:01:03 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 11b0d390b226172bac78316f026d41d2
1986ab485dd23ba51d5e399a173b520823cc431f
471214744f611874f5a75be81d9db24acc779ed26510a0c128951b5e110f067b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "471214744F611874F5A75BE81D9DB24ACC779ED26510A0C128951B5E110F067B"
Last-Modified: Wed, 14 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15533
Expires: Thu, 15 Sep 2022 20:19:56 GMT
Date: Thu, 15 Sep 2022 16:01:03 GMT
Connection: keep-alive
esfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 esfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: esfbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fwkl76odHuypwKWIex43Sl8Z7WUCPsD7Dz9FbSaPCk4EyiSminN89xhFa%2BCRNGtaqRT9fUQR9AU4bH%2B6o5mKHbSN5Aj2TZxdLCNU7pyg6j0wnBC2ahLf3yClFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.esfbs.com; Secure; SameSite=None;
__cflb=0H28vtzHa1KNQvVZ4g49vSog1AyHd39DnQZH1tEUWU3; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942e3f060b65-OSL
X-Firefox-Spdy: h2
ipalabolgbtgsbf.com/gtag/js?id=G-YHBC306T7X&l=dataLayer&cx=c&sign=0a220b7227d9c8748483ff0010f18c5fb6abc5ce6d6530920410cc8abbbb6d1e_20220915
200 OK 86 kB URL HTTP/2 ipalabolgbtgsbf.com/gtag/js?id=G-YHBC306T7X&l=dataLayer&cx=c&sign=0a220b7227d9c8748483ff0010f18c5fb6abc5ce6d6530920410cc8abbbb6d1e_20220915
IP
Hash 1b7581b8955f78ad71198cf18b94f97f
e6eb48723c06caf79547de37a200de8dbe10184c
83edf0391edf0ace186674e0cb01b7cf83a88bb17c14d4ce43e196b188c8a638
GET /gtag/js?id=G-YHBC306T7X&l=dataLayer&cx=c&sign=0a220b7227d9c8748483ff0010f18c5fb6abc5ce6d6530920410cc8abbbb6d1e_20220915 HTTP/1.1
Host: ipalabolgbtgsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:02 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: private, max-age=450
expires: Thu, 15 Sep 2022 16:06:04 GMT
content-encoding: gzip
via: 1.1 google
X-Firefox-Spdy: h2
indonesia-fbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 indonesia-fbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: indonesia-fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GZywvBl0D%2F5oMLrHR0qApMRFHQfZMIpnKrakwyAGDBeZP3Zwfy%2B5IGjBZMVJdTbHX7v3xrujjZBnDTldHZ3RQpK45DsiMNnX9G7t%2BOQvzRrhureyyCjuOget1%2B9axUaW%2BxpK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.indonesia-fbs.com; Secure; SameSite=None;
__cflb=0H28uknH1ryJSgSucGykHDZVmNihBNB6CfFi8k52WoM; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
server: cloudflare
cf-ray: 74b2942f0af4b527-OSL
X-Firefox-Spdy: h2
fbs.com/cabinet/ngsw.json?ngsw-cache-bust=0.645889987948457
200 OK 44 kB URL HTTP/2 fbs.com/cabinet/ngsw.json?ngsw-cache-bust=0.645889987948457
IP
File type JSON data\012- , ASCII text
Hash a6a25f05b2e8abffffca324063685db6
2a757d863556e4e3f59aa3caeaaaff7681563a3f
b26802140798355794b6b0fe7baeb2c1894cceeb05bc0d6098f3754b41271039
GET /cabinet/ngsw.json?ngsw-cache-bust=0.645889987948457 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/ngsw-worker-polyfill.js
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=9; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e; G_ENABLED_IDPS=google
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:01 GMT
content-type: application/json
last-modified: Thursday, 15-Sep-2022 16:01:01 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Gu6IJP1ysOLqShmAXQ%2FhNY02Ue6%2FM%2FUvNHC55oRs%2FzxEk75UF17BKlNlQKrYpqwh8Yi%2FVtsHdPPTjCJQv%2BB9BXn1PHkMrKVMITWJxSXAWbAv3cDF3YBN7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29421eb5e0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.ae/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 fbs.ae/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: fbs.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kz3hk9K5A4LzzX81GaVIF0Wz%2BInRLzM4RcG6mIv53cAjmbSVUWHXLCSrRmTvg1uahLgsiIYkdTPJvW4xqtmaU67xTHMCFJhrCr%2BbgyvNtLzn3rJiY5N5Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.fbs.ae; Secure; SameSite=None;
__cflb=0H28uqY5nmnbFTzX3GG8MqF4ZVdY9RYs7En3LVt5BjZ; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942e9af1b4e8-OSL
X-Firefox-Spdy: h2
frfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 frfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: frfbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JswT%2BU4qX%2BrNnrcgI%2F7ZRMVfFrPW%2Ba%2FDLWXzihE6pMR%2FQdJwmg0n3zuxK5pf2fnHVnX2198nhZU42PrqsGFsVscaoyknuhZ3aw8Nq0EmzP2dAIWBNQUNvV2Saw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.frfbs.com; Secure; SameSite=None;
__cflb=0H28veZH9jVeiogPwESU9Y3LTPwQVHPNgypb96Zucuh; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942eae9ab4fa-OSL
X-Firefox-Spdy: h2
fbsfx.pk/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 fbsfx.pk/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: fbsfx.pk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zMyED7XlothMUKJFQWPiWBz3mdBW3cf7Xl%2FVjUQ%2BUYvUrKf7J%2BjbuA84HI9JGoFrHlDcuyG%2F%2FBoTTs2mpdyvtTHnyNkXV0CT4cRrRybDZs5dzB%2B4OJLGrNFS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.fbsfx.pk; Secure; SameSite=None;
__cflb=0H28uoarKbsUNA1fbD7ZytKvfcY8EQvWFnyEjkWf6Ww; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942ea9400b51-OSL
X-Firefox-Spdy: h2
jpfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 jpfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: jpfbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2yHyp75V1wJ7hcXoQiUkNEvRozQJIfNrE5GuZY%2BuerB4AVmdvsNIajkI%2B1JEsCiCdgsesV8L7mAnoNXvaokFQ3hSij%2BM4xYrFGlpab4ct%2FzNpUbfKW6hC4fOag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.jpfbs.com; Secure; SameSite=None;
__cflb=0H28vG4WhAQFezMTgrZvtbRVZMxF6SYBPMzV4kLqdHV; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942ebd0c0b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 54bd2af71210a73e2f5491611491beb4
8579f437d31aabd2a677b4529093b0d891cf6f02
e4b959a4c103a84aed15da70fd3074dc6ccd55300efa86e4b59a7cf1682200b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 54bd2af71210a73e2f5491611491beb4
8579f437d31aabd2a677b4529093b0d891cf6f02
e4b959a4c103a84aed15da70fd3074dc6ccd55300efa86e4b59a7cf1682200b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 428b1d90fffece44a08eaae1d9dd0c92
6242211bb1cb824dd712fa4304893326c898063f
a5cba790073cf1ba45e9a1d57e1960ba9893615096ce8c301a0efc0ecd57180f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 16:01:03 GMT
Last-Modified: Thu, 15 Sep 2022 14:16:50 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6pXUZDD9IVOaSQcFHE_xt5aZjX8gKj1h3Im_UB2i6WGkS3ofdHlMKw==
Age: 6253
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 428b1d90fffece44a08eaae1d9dd0c92
6242211bb1cb824dd712fa4304893326c898063f
a5cba790073cf1ba45e9a1d57e1960ba9893615096ce8c301a0efc0ecd57180f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 16:01:03 GMT
Last-Modified: Thu, 15 Sep 2022 14:30:17 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: H-qtj2uo2rwDU6B2gihZgugNN8UsJ5R9e88LZ3SM2MreQIDtlu1rAQ==
Age: 5446
ptfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 ptfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: ptfbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=knhufR5e89AHBkNvQFYiJdCPlGq6QiHyRyfBZrkcuhLMFjVbxr9fse%2BTjWuRmG7EsV9sB6lAMpHyMHjzhdD1kOTtodpxLOKKWy1eSAdsB30LFNt%2BJeyEXQYWiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.ptfbs.com; Secure; SameSite=None;
__cflb=0H28vA2wtGwZKjhEmAKLndRfLFV56A5qFtJhXLanCTu; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942eed360b06-OSL
X-Firefox-Spdy: h2
unpkg.com/web-vitals/dist/web-vitals.iife.js
302 Found 2.6 kB URL HTTP/2 unpkg.com/web-vitals/dist/web-vitals.iife.js
IP
Hash b54ff74efe2ba51a914b2d0640309a60
eb72d69a3ceb2bd811f3342a5d76d52ae6527077
388136f7088921ddeb7285a440c1001efd82ddb6f8739f0c326424a7a69ed818
GET /web-vitals/dist/web-vitals.iife.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 15 Sep 2022 16:01:01 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /web-vitals@3.0.2/dist/web-vitals.iife.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GD0XNMC2HQ1V5P631Z6K38T7-fra
cf-cache-status: HIT
age: 458
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b294235fe9b52d-OSL
X-Firefox-Spdy: h2
vnfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 vnfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
Analyzer Verdict Alert fortinet Phishing
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: vnfbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpV15fYsw3VX9dIuWihjdw3VJDiXDGr7ggC%2BaasNWxaPW%2BcQfs%2BWjrKopqoMQMnFfu7%2BKB3OTEyc8vigni1KOkmY2WJDk9yB0%2B5pHL0nU%2BN9XpkQMiOm1dUa%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.vnfbs.com; Secure; SameSite=None;
__cflb=0H28vHBCUN1XRsTw443Zbe4wMuezhtWn1D6Nw2sTg91; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942efdabb51d-OSL
X-Firefox-Spdy: h2
ms-brokerfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 ms-brokerfbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: ms-brokerfbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JEhiqhGcu8gzviXXEaD9tVzx2P1p8UDRCe1wsuqLIYPfFU9vrEaJRj%2FJG6YcgGL%2F6Ur746QeSDbYwgweuYM07tZNN5ixInwMYhx5iMmQxvuX05dQD4UL53ykwaxCDfzFEN4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.ms-brokerfbs.com; Secure; SameSite=None;
__cflb=0H28vH8fQPGz5Xsh9HV1aQgjuq2QbaZ9GdPkdCQpmbH; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
server: cloudflare
cf-ray: 74b2942efdaab51d-OSL
X-Firefox-Spdy: h2
kofbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
200 OK 43 B URL HTTP/2 kofbs.com/image/ga?_ga=GA1.2.1855202183.1663257648
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /image/ga?_ga=GA1.2.1855202183.1663257648 HTTP/1.1
Host: kofbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nd8AfsUbEDNjMXnOvwaM1SL2bfEanW8fAO2jRYt1z73%2FAcPfssenjh0luhRnFpwYGhWfePe2CglhVeKIFjCUw6W1PXqx0r2pN9lOLtmwJvK1pyh5KXKDIjbAhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _ga=GA1.2.1855202183.1663257648; Expires=Thu, 22-Nov-2068 16:31:44 GMT; Max-Age=1560413752; Path=/; Domain=.kofbs.com; Secure; SameSite=None;
__cflb=0H28vfgSVNTiKfPQ5uZbzRUJyiW5VnwhsUvGYPzncxb; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:01:03 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2942eee5ab51b-OSL
X-Firefox-Spdy: h2
6811282.fls.doubleclick.net/activityi;src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners?
200 OK 451 B URL HTTP/2 6811282.fls.doubleclick.net/activityi;src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (656), with no line terminators
Hash 545c9d84a5a6c46772d244267d737fd3
6526faf2a0e966b74a2959bac763588408acadb1
dc6817fe5eb362b39a922d3b141b9d3d704d9e5db79a833cc0fd47b8b69a9f17
GET /activityi;src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners? HTTP/1.1
Host: 6811282.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:03 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 451
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 16:16:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
12037928.fls.doubleclick.net/activityi;src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners?
200 OK 452 B URL HTTP/2 12037928.fls.doubleclick.net/activityi;src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (657), with no line terminators
Hash cfc79bc835b6585e78b2d01dfdf4a9bf
5394939b5de716e2f1238a5e2ad2511737a91e9a
b1b25c30454597dfd75a9e01eb5c0e3b0ab42ca5eb2c645a86de92dcec7e5d3c
GET /activityi;src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners? HTTP/1.1
Host: 12037928.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:03 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 452
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 16:16:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wa.onelink.me/v1/onelink
200 OK 13 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 593e8538d63f30de24fbb439dd424870
f838a78077c6d023e0d0bca95f0f335df4b8b468
38bc0f256821a9c0a02a1c0cedf8ff70c211e637ef77ac199de2fe0cf36ba9ec
GET /v1/onelink HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://fbs.com
Content-Type: application/json
Date: Thu, 15 Sep 2022 16:01:03 GMT
Content-Length: 13
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 54bd2af71210a73e2f5491611491beb4
8579f437d31aabd2a677b4529093b0d891cf6f02
e4b959a4c103a84aed15da70fd3074dc6ccd55300efa86e4b59a7cf1682200b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 54bd2af71210a73e2f5491611491beb4
8579f437d31aabd2a677b4529093b0d891cf6f02
e4b959a4c103a84aed15da70fd3074dc6ccd55300efa86e4b59a7cf1682200b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wa.onelink.me/v1/onelink
200 OK 13 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 593e8538d63f30de24fbb439dd424870
f838a78077c6d023e0d0bca95f0f335df4b8b468
38bc0f256821a9c0a02a1c0cedf8ff70c211e637ef77ac199de2fe0cf36ba9ec
GET /v1/onelink HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://fbs.com
Content-Type: application/json
Date: Thu, 15 Sep 2022 16:01:04 GMT
Content-Length: 13
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ff1c0d8a380ce4a561609526d995bf5
135ecd7e71ea2823d39f8c1efcb2121618ed8167
f7228281af8d6de222aa47b3a78a627f85315244e65a8956fa2c0c7dff1bb7ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6971ad04397ebe0a117d03ae5c1de8c5
5179eab2d14b4c8c52c00fd6bf2953fb98ad5b8f
97a64e5b9bf5e3e347b23e4bbf41aa0fe6ffd379d50b379770f5c7347e6bb248
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
200 OK 452 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (655), with no line terminators
Hash 52801af96d4de2e12af5b5220f5fddc5
4ee61270b4ab29e763e8bccfbcef4c988a528483
ee2fbaa134a8d858c9ae355cf08e05852f27ae8df6382e3f2f130a71952a64e4
GET /ddm/fls/i/src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://6811282.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 452
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
200 OK 453 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (656), with no line terminators
Hash 4ff4589ca50099430683a2953848dadf
5a0e8da431718e27840fa5bc38f0bb1462c63a1e
c67c5ed4f708621dee5287e1fd981dc799e2d2aebd8b07ce21df825ad6425a28
GET /ddm/fls/i/src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12037928.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 453
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6971ad04397ebe0a117d03ae5c1de8c5
5179eab2d14b4c8c52c00fd6bf2953fb98ad5b8f
97a64e5b9bf5e3e347b23e4bbf41aa0fe6ffd379d50b379770f5c7347e6bb248
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a8b2bb270d78a6dddeb5b7fa01bd896c
eee28c4dd10c090f100c6ed383392b67d9fb9200
5c929c1a5e85ed508916eda62cccedb3ef1a5f407468596fa2726c476e2a9340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a8b2bb270d78a6dddeb5b7fa01bd896c
eee28c4dd10c090f100c6ed383392b67d9fb9200
5c929c1a5e85ed508916eda62cccedb3ef1a5f407468596fa2726c476e2a9340
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=6811282;type=visit0;cat=visit0;ord=6479584072400;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:04 GMT
expires: Thu, 15 Sep 2022 16:01:04 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=12037928;type=visit0;cat=visit0;ord=7812235626130;gtm=2yg9e0;auiddc=1584914639.1663257647;u27=undefined;u29=id;u30=NOR;u31=undefined;u32=undefined;u33=undefined;u34=undefined;u35=1855202183.1663257648;~oref=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:04 GMT
expires: Thu, 15 Sep 2022 16:01:04 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db503d6c6780cb1b8dfeffa10a50eada
51a459bdc02f20576031f526be6788f653095d94
b7a653d3c381c6cea5b6838aea01a7de8ea5c2d8bdf5ff92c4cd5c22829c8e8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fbs.com/cabinet/ngsw-worker-polyfill.js
304 Not Modified 0 B URL HTTP/2 fbs.com/cabinet/ngsw-worker-polyfill.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cabinet/ngsw-worker-polyfill.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=11; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e; G_ENABLED_IDPS=google; _gcl_au=1.1.1584914639.1663257647; __tid=uid-1251253854.7639207197; _ga=GA1.2.1855202183.1663257648; _gid=GA1.2.1995146669.1663257648; _dc_gtm_UA-7430729-6=1; wooTracker=FDN9LWO5Dds2; _ga_YHBC306T7X=GS1.1.1663257648.1.0.1663257648.60.0.0; client_id=1855202183.1663257648
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
If-Modified-Since: Mon, 12 Sep 2022 12:06:29 GMT
If-None-Match: W/"631f20c5-1f9da"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 15 Sep 2022 16:01:05 GMT
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1f9da"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ns1uIExSEe1ioqMn0Ic%2Blzc5%2FvEK3zXM1YO2EuLFzxA6xMh9rIuQQyVLzEmSs0Mb9g5hzbwrWF0%2BHBArzJVrIfwmgTeguD2PntZha9qHWP%2BLZQvqm2odJBU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2943c38f20afa-OSL
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-5b7452867b0bdc119349.js
200 OK 51 kB URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-5b7452867b0bdc119349.js
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 7ee6340b2ffb7483f9914935c83b48c1
1ded50d13361841c3819a4240f59a4a2c827a29d
cc4f21b1b3090e639d0b0dc7e74fbfe57d53f9cfd526d1cd8945f9595477c05a
GET /web_widget/latest/web-widget-framework-5b7452867b0bdc119349.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:05 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: BKmyICt9QkV+RPev8Y7yzzEep8aEJfIlEBYRJ6XtbfzGVCDH+M4vjs8ratK91Kr+epZxZgJNueU=
x-amz-request-id: Y8G6BHF5C4X9FS5V
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:24 GMT
etag: W/"1ca4c184eab3ff777753a0863d8dbce4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:23 GMT
x-amz-version-id: FNHCq25cugRsETU3qoOa8F7WQnVBq6TG
cf-cache-status: HIT
age: 122278
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1QoRcrgFbDoFt6cWLhseXeold1fG9Je7CE6BgUROlklxSNHiqCfOthkq4l%2BEHyaChKLWu1TDyFgZXvWgCDsOn%2BxQeqpnajnfAgJRrw9d8gW9fVwtTniDJa9yjdBoQykfiWAIQts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74b2943b5af9b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.adroll.com/j/roundtrip.js
200 OK 17 kB URL HTTP/1.1 s.adroll.com/j/roundtrip.js
IP
File type ASCII text, with very long lines (1096)
Hash 8e630a7b2f5b367c91dacbfd14ed24ad
75abf5e054d4322f076b3ff24e33520613c28764
3f60b50afc8b77b920c112a19a52436ecb5e9031a93027f0b5d22190cb7ec703
GET /j/roundtrip.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 21:24:31 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: Vddx38ZQKv1IbZ14KTosCACMGBmCuRF1
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 15 Sep 2022 15:23:20 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"ce41fb88f59dfd9edbd6253effb535a4"
Vary: Accept-Encoding
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
Age: 2353
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zqPxk_q_hLWWGffW2gHqueqk4ZVsUMya0o6VAdcePom6NMfuyHeSTQ==
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=02D7F81E308964F309B8EA3E317C6551; domain=.bing.com; expires=Tue, 10-Oct-2023 16:01:06 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 16681759E5F942198B2AEFCDB756B00B Ref B: OSL30EDGE0514 Ref C: 2022-09-15T16:01:06Z
date: Thu, 15 Sep 2022 16:01:05 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20620ba615dba1de34528390492c3f53
2ca43d3a828682e10eb7638972b79b7136395e2b
12cf30cf1de58b4bab8af4a5d159b42909c554ae7b34e6f7361d9a49f1e861b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fbs.com/cabinet/polyfills.e599a91eeca9e2010199.js
200 OK 31 kB URL HTTP/2 fbs.com/cabinet/polyfills.e599a91eeca9e2010199.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 72d0359ef85f8035e92c9de45ea88bc4
d963347b46deb1aadf6e7d0b4ba162700f842232
b18a739ca0c0751d6e165cb278d701030e865753591ddc127b5798ab3985afb0
GET /cabinet/polyfills.e599a91eeca9e2010199.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-14c2c"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vpL7C7x3I2rTOi73CNXxxoMJG1FgfiqBDcq%2FSjn66%2FU8tde6DfgGA6p4pjSilQYWJm9TjO6vEyWPvMG34Jmc2YQqcFzVARIjcn%2B8dvPDqR5XkNtEACHrA9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa210afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-YHBC306T7X&cid=1855202183.1663257648>m=2re9e0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-YHBC306T7X&cid=1855202183.1663257648>m=2re9e0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YHBC306T7X&cid=1855202183.1663257648>m=2re9e0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://fbs.com
date: Thu, 15 Sep 2022 16:01:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c4c5f92fe04f0f0c1421ab5555f31efc
41625b8e8e833c2036ffb79f9462106e9f85f60e
b39a5dc25e427e517c0c5970f454db3f2237173b6cfad5b498def2eff6467f00
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20620ba615dba1de34528390492c3f53
2ca43d3a828682e10eb7638972b79b7136395e2b
12cf30cf1de58b4bab8af4a5d159b42909c554ae7b34e6f7361d9a49f1e861b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 313 B IP
Hash edaa5542509347ba6dffb530f1859a55
29a819a101817d9257db34a06d5b4df1a27ff604
95f58ad06e063f952354ed7fa679e63e6d82f9d436668512af7345a045e24db2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3117
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Last-Modified: Thu, 15 Sep 2022 15:09:09 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313
googleads.g.doubleclick.net/pagead/viewthroughconversion/965355462/?random=1663257648347&cv=9&fst=1663257648347&num=1&bg=ffffff&hl=id&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2yg9e0&sendb=1&ig=0&data=country%3DNOR%3BpersonType%3Dtrader_&frm=0&url=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&tiba=Daftar%20sebagai%20Trader&auid=1584914639.1663257647&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/965355462/?random=1663257648347&cv=9&fst=1663257648347&num=1&bg=ffffff&hl=id&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2yg9e0&sendb=1&ig=0&data=country%3DNOR%3BpersonType%3Dtrader_&frm=0&url=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&tiba=Daftar%20sebagai%20Trader&auid=1584914639.1663257647&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2502), with no line terminators
Hash f7a62d0bbe37346a5299a4ef9ad90b63
7f2b09b3480e24425054648986d333c041748121
85456f4d81832b6a6515e26a1d06aa3df4a72c5fa08127ba8aeeb299fed0b91f
GET /pagead/viewthroughconversion/965355462/?random=1663257648347&cv=9&fst=1663257648347&num=1&bg=ffffff&hl=id&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2yg9e0&sendb=1&ig=0&data=country%3DNOR%3BpersonType%3Dtrader_&frm=0&url=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&tiba=Daftar%20sebagai%20Trader&auid=1584914639.1663257647&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1107
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 16:16:06 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7eda7b69d5f3ac3a010f2dc7983bb0dd
f5440d16893175ec230c2c15301ba1da21806fe0
eaf2ba00982f478a5ad482bc93e770d02969c33db33a3576bbc6f9ea2d2f39eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAF2BA00982F478A5AD482BC93E770D02969C33DB33A3576BBC6F9EA2D2F39EB"
Last-Modified: Tue, 13 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1301
Expires: Thu, 15 Sep 2022 16:22:47 GMT
Date: Thu, 15 Sep 2022 16:01:06 GMT
Connection: keep-alive
www.google.com.hk/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YHBC306T7X&cid=1855202183.1663257648>m=2re9e0&aip=1&z=106693411
200 OK 42 B URL HTTP/2 www.google.com.hk/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YHBC306T7X&cid=1855202183.1663257648>m=2re9e0&aip=1&z=106693411
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-YHBC306T7X&cid=1855202183.1663257648>m=2re9e0&aip=1&z=106693411 HTTP/1.1
Host: www.google.com.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 16:01:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7eda7b69d5f3ac3a010f2dc7983bb0dd
f5440d16893175ec230c2c15301ba1da21806fe0
eaf2ba00982f478a5ad482bc93e770d02969c33db33a3576bbc6f9ea2d2f39eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAF2BA00982F478A5AD482BC93E770D02969C33DB33A3576BBC6F9EA2D2F39EB"
Last-Modified: Tue, 13 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1301
Expires: Thu, 15 Sep 2022 16:22:47 GMT
Date: Thu, 15 Sep 2022 16:01:06 GMT
Connection: keep-alive
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-7430729-6&cid=1855202183.1663257648&jid=1692671620&gjid=396528370&_gid=1995146669.1663257648&_u=YGBAiEABBAAAAE~&z=6391247
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-7430729-6&cid=1855202183.1663257648&jid=1692671620&gjid=396528370&_gid=1995146669.1663257648&_u=YGBAiEABBAAAAE~&z=6391247
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-7430729-6&cid=1855202183.1663257648&jid=1692671620&gjid=396528370&_gid=1995146669.1663257648&_u=YGBAiEABBAAAAE~&z=6391247 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: text/plain
Origin: https://fbs.com
Content-Length: 0
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://fbs.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 15 Sep 2022 16:01:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7eda7b69d5f3ac3a010f2dc7983bb0dd
f5440d16893175ec230c2c15301ba1da21806fe0
eaf2ba00982f478a5ad482bc93e770d02969c33db33a3576bbc6f9ea2d2f39eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAF2BA00982F478A5AD482BC93E770D02969C33DB33A3576BBC6F9EA2D2F39EB"
Last-Modified: Tue, 13 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15349
Expires: Thu, 15 Sep 2022 20:16:55 GMT
Date: Thu, 15 Sep 2022 16:01:06 GMT
Connection: keep-alive
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=WZtI3eZNMQey&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=WZtI3eZNMQey&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=WZtI3eZNMQey&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7eda7b69d5f3ac3a010f2dc7983bb0dd
f5440d16893175ec230c2c15301ba1da21806fe0
eaf2ba00982f478a5ad482bc93e770d02969c33db33a3576bbc6f9ea2d2f39eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAF2BA00982F478A5AD482BC93E770D02969C33DB33A3576BBC6F9EA2D2F39EB"
Last-Modified: Tue, 13 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15349
Expires: Thu, 15 Sep 2022 20:16:55 GMT
Date: Thu, 15 Sep 2022 16:01:06 GMT
Connection: keep-alive
www.woopra.com/track/push/
204 No Content 0 B URL HTTP/2 www.woopra.com/track/push/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/push/ HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: multipart/form-data; boundary=---------------------------4093409612045853690555490600
Origin: https://fbs.com
Content-Length: 300
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/push/
204 No Content 0 B URL HTTP/2 www.woopra.com/track/push/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/push/ HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: multipart/form-data; boundary=---------------------------39822727604568201663104195552
Origin: https://fbs.com
Content-Length: 302
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=ZDbGIYc73gNf&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=ZDbGIYc73gNf&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=ZDbGIYc73gNf&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
ipalabolgbtgsbf.com/g/collect?v=2&tid=G-YHBC306T7X>m=2re9e0&_p=1234825208&_gaz=1&cid=1855202183.1663257648&ul=en-us&sr=1280x1024&_fplc=0&_z=ccd.v9B&_s=1&sid=1663257648&sct=1&seg=0&dl=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&dt=Daftar%20sebagai%20Trader&en=page_view&_fv=2&_ss=2&ep.referrer=&ep.page=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ep.title=Daftar%20sebagai%20Trader&ep.rete_uid=ae4d1e76-132a-464c-8463-bbb46d248a75&ep.regulated=IFSC&ep.ttclid=&ep.user_agent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ep.user_agent_list_1=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&richsstsse
200 OK 148 B URL HTTP/2 ipalabolgbtgsbf.com/g/collect?v=2&tid=G-YHBC306T7X>m=2re9e0&_p=1234825208&_gaz=1&cid=1855202183.1663257648&ul=en-us&sr=1280x1024&_fplc=0&_z=ccd.v9B&_s=1&sid=1663257648&sct=1&seg=0&dl=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&dt=Daftar%20sebagai%20Trader&en=page_view&_fv=2&_ss=2&ep.referrer=&ep.page=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ep.title=Daftar%20sebagai%20Trader&ep.rete_uid=ae4d1e76-132a-464c-8463-bbb46d248a75&ep.regulated=IFSC&ep.ttclid=&ep.user_agent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ep.user_agent_list_1=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&richsstsse
IP
Hash b7b0af4ea2999d33e76021d41d784956
9e0d6637f104f1bb44f05d324e76de340831a92d
3212f4f5e10aba4064c3a41eda95adea6e432875cffdf49bb12d0cb8b6845db4
GET /g/collect?v=2&tid=G-YHBC306T7X>m=2re9e0&_p=1234825208&_gaz=1&cid=1855202183.1663257648&ul=en-us&sr=1280x1024&_fplc=0&_z=ccd.v9B&_s=1&sid=1663257648&sct=1&seg=0&dl=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&dt=Daftar%20sebagai%20Trader&en=page_view&_fv=2&_ss=2&ep.referrer=&ep.page=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ep.title=Daftar%20sebagai%20Trader&ep.rete_uid=ae4d1e76-132a-464c-8463-bbb46d248a75&ep.regulated=IFSC&ep.ttclid=&ep.user_agent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&ep.user_agent_list_1=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&richsstsse HTTP/1.1
Host: ipalabolgbtgsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:04 GMT
content-type: text/plain
vary: Accept-Encoding
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://fbs.com
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
X-Firefox-Spdy: h2
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=SPv7WoxOImXK&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=SPv7WoxOImXK&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=SPv7WoxOImXK&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7eda7b69d5f3ac3a010f2dc7983bb0dd
f5440d16893175ec230c2c15301ba1da21806fe0
eaf2ba00982f478a5ad482bc93e770d02969c33db33a3576bbc6f9ea2d2f39eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAF2BA00982F478A5AD482BC93E770D02969C33DB33A3576BBC6F9EA2D2F39EB"
Last-Modified: Tue, 13 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15349
Expires: Thu, 15 Sep 2022 20:16:55 GMT
Date: Thu, 15 Sep 2022 16:01:06 GMT
Connection: keep-alive
www.woopra.com/track/push/
204 No Content 0 B URL HTTP/2 www.woopra.com/track/push/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/push/ HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: multipart/form-data; boundary=---------------------------264931413433568173281800430830
Origin: https://fbs.com
Content-Length: 304
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/push/
204 No Content 0 B URL HTTP/2 www.woopra.com/track/push/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/push/ HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: multipart/form-data; boundary=---------------------------350986838817573714122087539053
Origin: https://fbs.com
Content-Length: 304
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/push/
204 No Content 0 B URL HTTP/2 www.woopra.com/track/push/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/push/ HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: multipart/form-data; boundary=---------------------------272627511810464212217587856
Origin: https://fbs.com
Content-Length: 298
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/push/
204 No Content 0 B URL HTTP/2 www.woopra.com/track/push/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track/push/ HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: multipart/form-data; boundary=---------------------------5179536413756331802830755394
Origin: https://fbs.com
Content-Length: 300
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=4ZRUfnabs6qc&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%2F%2Ffbs.partners%3Fibl%3D1983%26ibk%3Dfbsindonesia%26ibl%3D1983&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=4ZRUfnabs6qc&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%2F%2Ffbs.partners%3Fibl%3D1983%26ibk%3Dfbsindonesia%26ibl%3D1983&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=4ZRUfnabs6qc&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%2F%2Ffbs.partners%3Fibl%3D1983%26ibk%3Dfbsindonesia%26ibl%3D1983&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=FxGCbqC9SG8c&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=FxGCbqC9SG8c&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=FxGCbqC9SG8c&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=yNyHrv8SgGyv&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=yNyHrv8SgGyv&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=yNyHrv8SgGyv&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=IsiXnaR9mYvd&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=IsiXnaR9mYvd&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=IsiXnaR9mYvd&ce_url=%2Fcabinet%2Fregistration%2Ftrader&ce_title=Daftar%20sebagai%20Trader&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 20620ba615dba1de34528390492c3f53
2ca43d3a828682e10eb7638972b79b7136395e2b
12cf30cf1de58b4bab8af4a5d159b42909c554ae7b34e6f7361d9a49f1e861b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=e9bplO5y9e0p&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%2F%2Ffbs.partners%3Fibl%3D1983%26ibk%3Dfbsindonesia%26ibl%3D1983&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
200 OK 58 B URL HTTP/2 www.woopra.com/track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=e9bplO5y9e0p&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%2F%2Ffbs.partners%3Fibl%3D1983%26ibk%3Dfbsindonesia%26ibl%3D1983&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0fd54405b1ab0d3e81e1c41676392763
849894683b868b7ee3edd6dee022658c61670dd4
d787ce5f92f6b2fa08c244b2cb9cd93bb67432179f715d018b5a1dfb7082a7d6
GET /track/ce/?project=fbs.forex&instance=woopra&meta=&screen=1280x1024&language=en-US&app=js-client&referer=&cookie=FDN9LWO5Dds2&event=pv&timeout=600000&idptnc=e9bplO5y9e0p&cv_persontype=trader_&cv_language=id&cv_userauth=false&ce_url=%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%2F%2Ffbs.partners%3Fibl%3D1983%26ibk%3Dfbsindonesia%26ibl%3D1983&ce_title=Daftar%20sebagai%20Trader&ce_br_name=Firefox&ce_br_version=96&ce_domain=fbs.com&ce_uri=https%3A%2F%2Ffbs.com%2Fcabinet%2Fregistration%2Ftrader%3Faccount%3Dcent%26lang%3Did%26fbs_reflink%3Dhttps%3A%252F%252Ffbs.partners&ce_scroll%20depth=0.9523326572008114&ce_returning=false HTTP/1.1
Host: www.woopra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58
date: Thu, 15 Sep 2022 16:01:06 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f43e28662141dfc4541ac7921c3388f5
5b49f434954dd9fed11f2e54974e380b5a80bfe4
a9d4d3220bb9feabacca114b762d8e834bb54ebcc0114c8cd29d2f56edb57733
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 16:01:06 GMT
Last-Modified: Thu, 15 Sep 2022 15:47:04 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t6gmEgf-iXAXOlqDG3rFPqmznqufhFkowZsYfOx1hcseOAvBnR2Z4g==
Age: 842
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c4c5f92fe04f0f0c1421ab5555f31efc
41625b8e8e833c2036ffb79f9462106e9f85f60e
b39a5dc25e427e517c0c5970f454db3f2237173b6cfad5b498def2eff6467f00
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wa.appsflyer.com/events?site-id=56482d03-04b5-4edb-a7df-3acded2134a6
200 OK 71 B URL HTTP/1.1 wa.appsflyer.com/events?site-id=56482d03-04b5-4edb-a7df-3acded2134a6
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ac253216353db0507c4d08ed6de9b6b0
651a0e0817b687ce081bf6755f6ec78de9155611
0992b9939e3735e259d0292f747c37d2d81a50168a0479c02636d85ede6d7944
POST /events?site-id=56482d03-04b5-4edb-a7df-3acded2134a6 HTTP/1.1
Host: wa.appsflyer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: text/plain
Origin: https://fbs.com
Content-Length: 1416
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://fbs.com
Content-Type: application/json
Date: Thu, 15 Sep 2022 16:01:06 GMT
Set-Cookie: af_id=42d7757a-2886-471b-8e8d-4e4904313222-p; Domain=appsflyer.com; Expires=Sat, 14 Sep 2024 16:01:06 GMT
Content-Length: 71
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f43e28662141dfc4541ac7921c3388f5
5b49f434954dd9fed11f2e54974e380b5a80bfe4
a9d4d3220bb9feabacca114b762d8e834bb54ebcc0114c8cd29d2f56edb57733
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 16:01:06 GMT
Last-Modified: Thu, 15 Sep 2022 15:37:58 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ed_9PkkXG5OVX96xn9SDsGMzpRyGriQUGGL5u0QOsTTAfI4Vgslzaw==
Age: 1388
ocsp.digicert.com/
200 OK 312 B IP
Hash bb5011a32469d04a8c6eef616480093e
10d67597f4d964e4b7ac3356cd07f75f70af0189
a14a68abd9f16becedc20dabd6921592f1d50a141475635d7412afe1157619fc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5876
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:06 GMT
Last-Modified: Thu, 15 Sep 2022 14:23:10 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 312
wa.appsflyer.com/events?site-id=56482d03-04b5-4edb-a7df-3acded2134a6
200 OK 71 B URL HTTP/1.1 wa.appsflyer.com/events?site-id=56482d03-04b5-4edb-a7df-3acded2134a6
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 409eb43cf9f1f520685a6f699d2f7535
6abeb9749a49eac4aa2e5aaa39df2cefcc8ffdb3
a739cf0450fffd133912fead5fe47f6728d30dd0f151503e0425be91a4a2f724
POST /events?site-id=56482d03-04b5-4edb-a7df-3acded2134a6 HTTP/1.1
Host: wa.appsflyer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Content-Type: text/plain
Origin: https://fbs.com
Content-Length: 1416
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://fbs.com
Content-Type: application/json
Date: Thu, 15 Sep 2022 16:01:06 GMT
Set-Cookie: af_id=870652dd-e0fd-4592-92ad-ba0096010ef0-p; Domain=appsflyer.com; Expires=Sat, 14 Sep 2024 16:01:06 GMT
Content-Length: 71
Connection: keep-alive
wa.onelink.me/v1/onelink?af_id=42d7757a-2886-471b-8e8d-4e4904313222-p
200 OK 51 B URL HTTP/1.1 wa.onelink.me/v1/onelink?af_id=42d7757a-2886-471b-8e8d-4e4904313222-p
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c0c2297f26ffabb578dc8fbc4bdf0875
254527ba95b222e8011e06ef78b3f8b385f3e934
335c4e9838a71951d13df02a576ba0e7c18af152a59ca87998fa688a2aaec803
GET /v1/onelink?af_id=42d7757a-2886-471b-8e8d-4e4904313222-p HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://fbs.com
Content-Type: application/json
Date: Thu, 15 Sep 2022 16:01:06 GMT
Set-Cookie: af_id=42d7757a-2886-471b-8e8d-4e4904313222-p; Path=/; Domain=onelink.me; Expires=Sat, 14 Sep 2024 16:01:06 GMT
Content-Length: 51
Connection: keep-alive
static.zdassets.com/web_widget/latest/classic/web-widget-classic-90bee35.js
200 OK 4.3 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-90bee35.js
IP
File type ASCII text, with very long lines (13518), with no line terminators
Hash 3b7d7a48b294800b2e3f6813b1159747
0da19b9d33a8d2a3a540b06b0ed9542cf3cdf23a
814cbe24b6f45210126ed8a372431cbc1d0ac04a91def922b2aced3392adafcd
GET /web_widget/latest/classic/web-widget-classic-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: R6CSDxzU9Wnglr6kvPZu/J9VLysqmDotyPQyq3mi+6hBsosOFq54N6Y2lgmpr6XB/9zmS4BEtM8=
x-amz-request-id: Y8G46Z2A9BVK85EQ
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"acc0272ff26f9e9f07f375360e97f9c4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: fC22iUBU7.KcVnEhTOoxgXWcov6IU0Ga
cf-cache-status: HIT
age: 122279
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=unNxaMWHTSiEu2y7DunmwtTiVl8W86e2A%2FlxrWXz0B7UT7PJRQlm2%2B5FrYeLN0XGRa50MXm25lceDrv2TMq7%2BketC1SBmYj2%2FO8ZJ1KLs4fZ77nLn%2BrHPaMtDyPb9mMWiqm61Jc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74b294422d6cb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
wa.onelink.me/v1/onelink?af_id=870652dd-e0fd-4592-92ad-ba0096010ef0-p
200 OK 51 B URL HTTP/1.1 wa.onelink.me/v1/onelink?af_id=870652dd-e0fd-4592-92ad-ba0096010ef0-p
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 61a47bb0eae60c022905ba99f8611762
5dc6e76e3bedd9b9b247dcd118ffecd2d19a51fd
07b5062c102e43c4a25c17a388b91c1bb3594c989230a36cc71d041f8fc1c07f
GET /v1/onelink?af_id=870652dd-e0fd-4592-92ad-ba0096010ef0-p HTTP/1.1
Host: wa.onelink.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: https://fbs.com
Content-Type: application/json
Date: Thu, 15 Sep 2022 16:01:07 GMT
Set-Cookie: af_id=870652dd-e0fd-4592-92ad-ba0096010ef0-p; Path=/; Domain=onelink.me; Expires=Sat, 14 Sep 2024 16:01:07 GMT
Content-Length: 51
Connection: keep-alive
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=v68bsl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czM4anYwQ2t2VFclMkZySmNIeU14RVNjNUZJcmlWNXIyZiUyQndqeEc3SmRiTVpN; expires=Tue, 10 Oct 2023 16:01:07 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 260979
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash e31a658735851a3358cc1e7673041884
a591585d8dc25628176495603cf8229428658832
f35389605ef4f9aabc0590d03a39b4adae6b368392591a9589fb1620714c9704
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4058
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:07 GMT
Last-Modified: Thu, 15 Sep 2022 14:53:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash e31a658735851a3358cc1e7673041884
a591585d8dc25628176495603cf8229428658832
f35389605ef4f9aabc0590d03a39b4adae6b368392591a9589fb1620714c9704
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4058
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:01:07 GMT
Last-Modified: Thu, 15 Sep 2022 14:53:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7220be447989606f97cb130c743af08c
2783f24b7539c2bad42df8d2989cc7f720b500b4
c7545cfc6907cfc3b1aa84b6c563f4c71f94b06d590a127e3d397c6f9bc949c5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 16:01:07 GMT
Last-Modified: Thu, 15 Sep 2022 15:26:14 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UUKaSSycH5xDCpLEul3liJd9VIQJIFhuXInDMiSrhP7r9i8b3xZG1w==
Age: 2093
fbs.com/cabinet/ngsw-worker-polyfill.js
304 Not Modified 0 B URL HTTP/2 fbs.com/cabinet/ngsw-worker-polyfill.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cabinet/ngsw-worker-polyfill.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=13; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e; G_ENABLED_IDPS=google; _gcl_au=1.1.1584914639.1663257647; __tid=uid-1251253854.7639207197; _ga=GA1.2.1855202183.1663257648; _gid=GA1.2.1995146669.1663257648; _dc_gtm_UA-7430729-6=1; wooTracker=FDN9LWO5Dds2; _ga_YHBC306T7X=GS1.1.1663257648.1.0.1663257652.56.0.0; client_id=1855202183.1663257648; _uetsid=9253c8a0350f11ed9411f7cd30d60b0d; _uetvid=9253b5a0350f11edbc175bb4fc83cd88; afUserId=870652dd-e0fd-4592-92ad-ba0096010ef0-p; AF_SYNC=1663257652235; _fbp=fb.1.1663257651863.1067016089
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
If-Modified-Since: Mon, 12 Sep 2022 12:06:29 GMT
If-None-Match: W/"631f20c5-1f9da"
Cache-Control: max-age=0
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 15 Sep 2022 16:01:07 GMT
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1f9da"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hEKBNgWjcoPZvTlNfy6Qo1ySIrvZ9ezd9Uems3qJupqE0HBsYnBFNiuGKKf5dlcqYgLWG41eStTXn7lTJ%2FQTdPUEpOzR5whjztDIC%2Bp4SHUgcma%2BgcEEbf8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29446dcb30afa-OSL
X-Firefox-Spdy: h2
fbs.com/cabinet/line.131e4856a1e7e6dd3f9c.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/line.131e4856a1e7e6dd3f9c.svg
IP
GET /cabinet/line.131e4856a1e7e6dd3f9c.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-81e"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=USs6dK7LagHdCSnoAwAow92iaPhsZm1On7h4wW3HAHqGXXhmK%2FuEKCi5hjHBiCX42gASY5NibsTu6g6mMX%2FGuUMyNZlEehhtwX5vDAJ%2BA1fwYDpR0GQeZGo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecbe0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/ngsw.json?ngsw-cache-bust=0.374009065656418
200 OK 0 B URL HTTP/2 fbs.com/cabinet/ngsw.json?ngsw-cache-bust=0.374009065656418
IP
GET /cabinet/ngsw.json?ngsw-cache-bust=0.374009065656418 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/ngsw-worker-polyfill.js
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=9; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/json
last-modified: Thursday, 15-Sep-2022 16:01:00 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2BloZ%2FJsyPJZxGJLx6v5VrymOr87xBrvxCjRvh84Cf9L%2Bfsn%2FK2XvndJY7g4suTC0jbB286F9rsC6oMukbkc9U8DQ8hLo1rXb6iWJ5VMOK%2Fgd4%2Bm%2Bx%2Fxt3w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2941c9cf20afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/ekr/asset_composer.js?key=791e8902-aa8f-4d3c-b6f4-30da6bdd6e6d
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/asset_composer.js?key=791e8902-aa8f-4d3c-b6f4-30da6bdd6e6d
IP
GET /ekr/asset_composer.js?key=791e8902-aa8f-4d3c-b6f4-30da6bdd6e6d HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:05 GMT
content-type: application/javascript
x-amz-id-2: dUZfshkH6s6HIQA7+U0tDhX+A5i1VSOF0AP1wrYwttudGl3FDx99SpKMnalxiwyFmxN4PZcqRnA=
x-amz-request-id: Y9E1NT7ZVNF7R3ZX
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: 57KHzv0Z81imwMa0XxScJAmcLiHhq1Ku
cf-cache-status: HIT
age: 19
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2%2FqPyxXZwMlDGEK945CM2kMakNNcsuNxQq7t2VWdgvoPAknyGhe2zceH9Id7GdBMBVD0%2B2Uvtf7XW7jY7GtAIiPjvbBbdhk0WwRv%2FIg9Mw6wXKmUxilDXCfetBsl2SY1pjtqB%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74b294391817b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=fbs.com&origin=onetag
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?topUrl=fbs.com&origin=onetag
IP
GET /syncframe?topUrl=fbs.com&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=e6019e0a-ec18-4f7f-8598-13291d0cf596; expires=Tue, 10 Oct 2023 16:01:06 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 473329
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
fbs.com/cabinet/3930.b9263bb5eff1ee9c24ee.js
200 OK 0 B URL HTTP/2 fbs.com/cabinet/3930.b9263bb5eff1ee9c24ee.js
IP
GET /cabinet/3930.b9263bb5eff1ee9c24ee.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-2a26"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9nfBeI%2BYBtbAu7%2BDzSQmMZh7WZrRC6PQddwM8g2c7VczzHNCw4y9CWO5bVVDCwlZvC1az5KLCZmstjnijpDyvDhpoMwuloWKGEBlRS9D%2FTDPnDE9%2BTOP200%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ff9d0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/DEU.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/DEU.svg
IP
GET /cabinet/assets/img/flags/DEU.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-361"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gJvnLCzgHO09czfgxlG8A55n2M1Fb3T94n%2FQg0iQcAp10gpxPHtQBAMFz%2FbHHrkUcVkIpD%2BctPH3RbKyQYKzgjzdU1hAwAojvhMy5k7KfGQLvVzF%2Bj1bs4w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412da030afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/partners-logo/reg-log-en-logo.svg?v=2
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/partners-logo/reg-log-en-logo.svg?v=2
IP
GET /cabinet/assets/img/partners-logo/reg-log-en-logo.svg?v=2 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-175f"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=54f7%2BwTfOZoAhELRs%2FIoveJjP%2Bwo8RJUikYSNL0miqqGz0%2BkePEPCUdXzAflHKCU4Q519K9Xpi5N%2FmoRvVUcZXGNiIJUt4Ppdgszcb4Hw9v5cUbYxPM3bFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412d9ff0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/1855.47fd9c72a141cbd5d08d.js
200 OK 0 B URL HTTP/2 fbs.com/cabinet/1855.47fd9c72a141cbd5d08d.js
IP
GET /cabinet/1855.47fd9c72a141cbd5d08d.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-c92d"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: SWE
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1023
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yfUoDVZ2Y2AF6q9quRVVoDotndp9%2F9COam%2FNYs4MuOas3XdwaP7HE7c8JYyE5sNS02HjiH8KSvOpIf4TLy7gzCr52KnXf5VE%2FDiR3X3EgW3agb2w%2FU9rByE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ffa40afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.criteo.net/js/ld/ld.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/ld.js
IP
GET /js/ld/ld.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: text/javascript
last-modified: Thu, 25 Aug 2022 11:02:07 GMT
etag: W/"630756af-a8d9"
expires: Fri, 16 Sep 2022 16:01:06 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-7495-90bee35.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-7495-90bee35.js
IP
GET /web_widget/latest/classic/web-widget-7495-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: ZBr913E0HWa7WElrl7UEO+IQkcHOrTR4UnHOtT+/BvuuhfwwUo4GWxm9KKC1lTUb9nrRoOZLx6k=
x-amz-request-id: Y8G5HBZ9MF190HB5
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"e3d47e602c7c001fa5a7ce4f932eb4b2"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: 3ayjeJfsxaQP1TngNH_QToghKc6IA83d
cf-cache-status: HIT
age: 122279
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q4YhRUIve92br5KbCm6qu8NlgFVIjGCGxGiNTf6WZhGGJWZl%2F%2FEfWZ2dIIKifyrqH%2BkF8vcIsw65UPxuore25JwPmaTuRbwSJMi0aw0eV2YphI%2FBWNEwsupGO22fQjz7LBS7iLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74b294426dc2b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/runtime.d206bb7bddee93d8abc4.js
200 OK 0 B URL HTTP/2 fbs.com/cabinet/runtime.d206bb7bddee93d8abc4.js
IP
GET /cabinet/runtime.d206bb7bddee93d8abc4.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-17f0"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=snXJjtWkKiBjMwIUsOfOpd4Kcang3f0tVnXzZ1o%2BrapySc5s7gLjWOmxGGPDisGs319Lpd%2F2zLC6mvY3RBdV0PVYmYy%2F6SGQ9KvNa0EvcOc8gWTpoFnM5Ns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa200afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/JPN.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/JPN.svg
IP
GET /cabinet/assets/img/flags/JPN.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-315"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FdFvB9v8l6tGMDJ7IRQr14rBzw3lMd5iohdRDAt6zmg8Lthdd5uSiXj45uJVbk7qU1owUsPnV%2FR0%2FEv19ykNF5oQG7pEd%2BGgb4YthUhtpXgN26xts71vgYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea130afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/MYS.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/MYS.svg
IP
GET /cabinet/assets/img/flags/MYS.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-e52"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LlyWKmrOifJlofJqc8wmWRgGb0WDNLW5BSgouySL6xzCYqAJVT3GHAoX6BfLkhdHRhxOvFGdlRUKB5TB2393CoDc63VUp%2FBonbmsfN0F%2BwYgEQ%2BLkmv3GGs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea150afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/IDN.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/IDN.svg
IP
GET /cabinet/assets/img/flags/IDN.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-315"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cV3BtcByJGaoQZSLinYtNr6TOKCj4%2B9aD9Pl2uXzuB2f2jGaaiuQZzvVqhOt2LUSOZWOHUFgSPUj7BU3vMVlfUiO4iw7qtaV0STBvsMHwLfy%2BeRn%2F0HBWcQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea120afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/partners-logo/lc-no-flag-id.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/partners-logo/lc-no-flag-id.svg
IP
GET /cabinet/assets/img/partners-logo/lc-no-flag-id.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-f779"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GeobYhaTBQiNRdErbSRf5t0MAYCofY0qRosTwvBgM8rEZ6ZxQLCwTzvAKr8q0hjsz5UFlWfWwu4NU8qqVMMJBDpa5qD1yPkQH0bDagb%2FIeusUJDHZHNdFLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412da010afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/viber.b7bd4dba8b0bbefe9dbc.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/viber.b7bd4dba8b0bbefe9dbc.svg
IP
GET /cabinet/viber.b7bd4dba8b0bbefe9dbc.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-b88"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tLTum4Chk6C4BGv1Om9WZFlVJzW5lIaO8Dn0R3x6xc0sZd8M%2FQiBZ%2FHgH2p8YzApSgSRd55TGEoLvRdv0DPcjj5Lt3IaiQupKL1mp6%2BTwzhHjq7QgcG2mt0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecbc0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
ipalabolgbtgsbf.com/gtm.js?id=GTM-WDFWBJJ
200 OK 0 B URL HTTP/2 ipalabolgbtgsbf.com/gtm.js?id=GTM-WDFWBJJ
IP
GET /gtm.js?id=GTM-WDFWBJJ HTTP/1.1
Host: ipalabolgbtgsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: private, max-age=450
expires: Thu, 15 Sep 2022 16:06:03 GMT
last-modified: Thu, 15 Sep 2022 15:00:00 GMT
content-encoding: gzip
via: 1.1 google
X-Firefox-Spdy: h2
fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
200 OK 0 B URL HTTP/2 fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
IP
GET /cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983 HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
vary: Accept-Encoding
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rwo9vHNqTxyWnM73fUn%2B5cXyA7E8Nu6J73AMeYqnD%2BeNShFWwOBKfM%2BUjz6SOGHVbkOMalGwQnXtN%2BopcUdwXglCBCZ8Ph8jtYt%2FeE05dMujARvG%2BcmhzSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; SameSite=None; Secure; path=/; expires=Thu, 15-Sep-22 17:00:59 GMT; HttpOnly
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b294103ec10afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/VNM.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/VNM.svg
IP
GET /cabinet/assets/img/flags/VNM.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-3d1"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v793KIH7R5D3rnFrnZLLZiy09UIFE9EpU%2B64ue7dEBLMiQXyPe6pPGmc39aTdhMTdIqtsp%2FbKH%2BTyjh0eAbbyEXU1YyO8i8yOxgFbqc1uv5MPsAcYyRy%2FMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea180afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
200 OK 0 B URL HTTP/2 www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
IP
GET /recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157166
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 17:23:20 GMT
expires: Wed, 13 Sep 2023 17:23:20 GMT
cache-control: public, max-age=31536000
age: 167860
last-modified: Tue, 06 Sep 2022 00:04:24 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fbs.com/cabinet/1674.58ee992d39ed13028cd2.js
200 OK 0 B URL HTTP/2 fbs.com/cabinet/1674.58ee992d39ed13028cd2.js
IP
GET /cabinet/1674.58ee992d39ed13028cd2.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1e7fd"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WQwwBRUPHNxyVbk2Akv7j76rCIdh3MzR8AC7QOj%2F7PE43LEjhHTsDDUbfTmfQckt%2BkHO3OuLDIEW3SY0dR8mCuaz5%2BGnmH1%2FsgnwP0OZdbz8ZxW%2FxOSAcMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29417ef910afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
t.trsbf.com/endpoint/storage/get
200 OK 0 B URL HTTP/2 t.trsbf.com/endpoint/storage/get
IP
GET /endpoint/storage/get HTTP/1.1
Host: t.trsbf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fbs.com
Connection: keep-alive
Referer: https://fbs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: application/json
access-control-allow-origin: https://fbs.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: x-forwarded-for, x-forwarded-proto, x-forwarded-port, host, x-amzn-trace-id, user-agent, accept, accept-language, accept-encoding, origin, referer, sec-fetch-dest, sec-fetch-mode, sec-fetch-site, content-type
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/TUR.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/TUR.svg
IP
GET /cabinet/assets/img/flags/TUR.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-62f"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LsKPVxvUnYAXIH8dS4uz%2Fzv4Q0w1NLZYW4xq2kT1ZTb8IO7gWUeGDMw74LUPlraWvY2oz%2F%2FAEgxHTaUJm1hMS4ed90BJmLrqzlDXq6MICZhaF2vL3PXadOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea0b0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/CHN.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/CHN.svg
IP
GET /cabinet/assets/img/flags/CHN.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-a34"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ojnwdUtA%2BfrB1YAgkh3XptFNR22TTLlGb1R9qE6CBL2NmUDlUd%2BSCI%2FaWwLUynk4NXHPeX4iA78J0mKYCFj1jOYs6b93ewFaK0sI5NLimxrkZYki3guNWIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea1b0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/favicon.ico
200 OK 0 B URL HTTP/2 fbs.com/cabinet/favicon.ico
IP
GET /cabinet/favicon.ico HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy; rete_user-id_fbs.com=ae4d1e76-132a-464c-8463-bbb46d248a75; rete_server-id-received_fbs.com=true; rete_last_event_ts_fbs.com=1663257644931; rete_rete_marketing_session_3_last_event_ts_fbs.com=1663257644932; rete_rete_marketing_session_3_last_utm_fbs.com={"utm_source":null,"utm_medium":null,"utm_campaign":null,"utm_content":null,"utm_term":null,"gclid":null,"yclid":null,"ymclid":null,"fbclid":null}; rete_rete-marketing-session-3-id_fbs.com=4ac0581b-1045-4bf0-acca-7f1e64b5ffd1; rete_user_ae4d1e76-132a-464c-8463-bbb46d248a75_event_index_fbs.com=8; rete_rete-session-id_fbs.com=36963cdd-edb3-43ac-a522-82de2cf97f1e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:00 GMT
content-type: image/x-icon
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-3aee"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sgABD4XiV1T3e%2BaJt9BK%2BXXNorF%2FclQ79PQO8%2FM53Ux%2FrF6DWzE0XG%2FiqazkoMmKZP5nyJZK9oSLLLVLQHkWs7Fl9fburGGtLJQib1AmSI%2FHy8gSxgcFhW8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b2941b6b9c0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/scripts.9e783d87e348479b4fa0.js
200 OK 0 B URL HTTP/2 fbs.com/cabinet/scripts.9e783d87e348479b4fa0.js
IP
GET /cabinet/scripts.9e783d87e348479b4fa0.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-cae2"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8IlQKpmK8ryIIF04XUMlCF9sDBSK1sAFoBFIKaRiDLAo%2Fu3gc6nLeqcbevrvFkU5MW9MoQZTxWz%2BppVyqviOn7aZG%2Fk3n8XbVOfAE01cRkbadEbRWshkkzY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa220afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/PAK.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/PAK.svg
IP
GET /cabinet/assets/img/flags/PAK.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-65d"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ls1JSOV4J68nlRIxbwS4EcG0aaTZKR9SGo0mnmLtr%2FCjZ0NfXNpsQwPD4zmmigmkyxTun3TrspJarzAKqZqiCqHaXPVVq7Hnddy3pX4Tbkv3tmRnNntFQRg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea170afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/PHL.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/PHL.svg
IP
GET /cabinet/assets/img/flags/PHL.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-b85"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HVywDdDG5FiVIjwwG8jIvHZd9F6KcxrGNjvsaotZx5uQoYSlxM2h9XX5NtihjIQQmkrf7r16xjPgRsXuNouflCiJqo2DVk389g7UBca23k402TIRJRtanng%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa1f0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbshelp.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 fbshelp.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: fbshelp.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/
Origin: https://fbs.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-556cddd5cf-6npsz
x-request-id: 8783385bf675a5824cbe06bdc5b8393b
x-runtime: 0.002023
vary: Origin, Accept-Encoding
x-cached: STALE
last-modified: Thu, 15 Sep 2022 15:44:05 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Avnb7sdmZUCe21u54rmEgSpQA8HhxtoiWsIAyXzbVBjg%2BfaBclcVSq6ZwUM%2BvadXM9M5OHkb8mtIPOEGlrNFnbh4mKFivWlCgkREcNqjbK3IkdChhR1mN9Sy2bBdTKUBEDRJAs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=1c422f5f272cd3560bd15c8564e7a729aa9cd921-1663257666; path=/; domain=.fbshelp.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74b2944199100af6-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/telegram.a86e2572fa610972c5e6.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/telegram.a86e2572fa610972c5e6.svg
IP
GET /cabinet/telegram.a86e2572fa610972c5e6.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-690"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=os3iNdH3TAoEkq84L6hmSP8LkfXIDkLTrr7s9Fc6UnzMxNKE4nRey0ACROF6zGPPVwX5raPYXZlhwFWuLGfEz9m0T%2FGpxFM8tYA981AYnV%2FJFsEXBzAzRzM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecbd0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/main.129e25d00ef9f61d410a.js
200 OK 0 B URL HTTP/2 fbs.com/cabinet/main.129e25d00ef9f61d410a.js
IP
GET /cabinet/main.129e25d00ef9f61d410a.js HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1ceca5"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cache-control: max-age=14400
cf-cache-status: HIT
age: 1022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TixQiavWgfHi30yb%2FOQanAX%2BeFNr2VGzwBrDFATnH7OxOEb3BGy7NrNb6Aq7kiy%2FSGNNxAnT4TKCKVKUgAGkRAtEpIz8ju9EsftFceVBSCSrCT5f%2FPGRsCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412fa230afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/ESP.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/ESP.svg
IP
GET /cabinet/assets/img/flags/ESP.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-1766"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=arJka6L1%2BFfJgZTp%2ByK%2BzWKgPuhp0YIpoVAQFfr7px61jTvr%2FCvzMHv5xuNTSs7%2BEJKnc99ot77rnSstRwpfuKzJMiH9QD5SFdYY7noXA65vN2d%2BGDoB240%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea070afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/GBR.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/GBR.svg
IP
GET /cabinet/assets/img/flags/GBR.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-786"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5oh9uxyFi%2F6awZqZkVGT5590oBoyruLkwWSZQDwKHl6EmH3rLd5VY04hTbNeL9tNQBbkFegPAFqjFp%2FIDx8vId40Z%2F3z3s7aDWUtLD3WWy38wJLq%2BGPXuvQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea050afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 80705
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/ARE.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/ARE.svg
IP
GET /cabinet/assets/img/flags/ARE.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-3d9"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nCBY1gC2vJskYtKv63w31xn988McOqqrf0EeuVLdW2xbLJE0%2FWmwalDoWHz9KOJZEy%2Bow16I%2F8qMyFsFZJyL4%2BM4UfFNZ9JpqXupSyyU%2FdW7898msELOPTo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea100afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-90bee35.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-90bee35.js
IP
GET /web_widget/latest/classic/web-widget-8165-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:01:06 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: YwnHc7xYNPBFFxkS/C50e3eq87gV6fPFOAkk7Y39xvnJzBnhFNiKfan+1MevFdd33GS9115nYe4=
x-amz-request-id: Y8GFEMQBCFR452VG
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"3fb1755f31689e15a362e7877ecd38ff"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: fl4iJBp226DsBwc17By.2NRmuCl7N21T
cf-cache-status: HIT
age: 122279
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2FxEIEl6UWMCb65XOMsbJsrQyU4EzzYYGKaPmZp80ebjyqhxFyVOmf%2FEWPeKEII5OsBGBr2hYHf3losWNY7EDVkrM1eiJxT%2FnMEtWd%2B9J2R7uMmIezczz4bXEp3cfHCPWyyPZcw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74b294426dc1b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/THA.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/THA.svg
IP
GET /cabinet/assets/img/flags/THA.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-3e7"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2mnbETuaZdoeENllbgoRL8s%2BQ0st8LwX7HUBOPfEK09i6Y5m1Ho1V3IDqSJq1d6A9QeUMTulDXEdM0glPx0Dikg8lEkRW%2B01u2GRJk63yH2sd73j44pweQA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea160afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/KOR.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/KOR.svg
IP
GET /cabinet/assets/img/flags/KOR.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-17fc"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wRtpqht8RAZNewF5XXIQZh0Uv9o%2BRZA%2BFuSwBCCWqcWaK5bOfka0iqj7JuqsW10a2KbayS2ZYg80ML1yIiezCeIxk0yRxVlLBwzPCyR3obe9%2F9tjj0AdIRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea140afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/i-role-trader.efd2c2690f1d2ca19886.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/i-role-trader.efd2c2690f1d2ca19886.svg
IP
GET /cabinet/i-role-trader.efd2c2690f1d2ca19886.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-346e"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wu1Z3hSr3Z5WCvfo6MpWRNahFa55lGDOQliOzFcSx0Ie9Y%2FqmVUCAbjhyyIqD0CjbUJyPjUMtxOuUmZ1zAMo27qlxAAG0Niw%2B3M%2BsGjA2Jemv%2FKF7BW1SpE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecac0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/fb-msg.6232e2c66324f3f786f2.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/fb-msg.6232e2c66324f3f786f2.svg
IP
GET /cabinet/fb-msg.6232e2c66324f3f786f2.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/styles.980521207c8f93f1e485.css
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-29e"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XELNIdMf4LqRWlqpo00XyT4lglRf74HYMyOgPysJVe%2BJPiMGq9GNMNjvRFnNYLsNfPWPL7omqVj58oXKkVDOoMH1YWEdL4DBFAVB5ekiYnaTdH3D%2FKXLKOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29414ecb90afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/PRT.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/PRT.svg
IP
GET /cabinet/assets/img/flags/PRT.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-a2d"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PQkxzLvyRS%2Bf%2FS1B3EbWSBI9e%2Fq2gi1tb1ATn4Nnqi0uCSBYTm23hFR3Zh8ZR3s3XibK59tyWIlscAPZLsvTODVx0f9ul9ldNeeAb0KeN4vLYz8wmNYk0F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea0a0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fbs.com/cabinet/assets/img/flags/FRA.svg
200 OK 0 B URL HTTP/2 fbs.com/cabinet/assets/img/flags/FRA.svg
IP
GET /cabinet/assets/img/flags/FRA.svg HTTP/1.1
Host: fbs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbs.com/cabinet/registration/trader?account=cent&lang=id&fbs_reflink=https://fbs.partners?ibl=1983&ibk=fbsindonesia&ibl=1983
Connection: keep-alive
Cookie: __cflb=0H28ux28hyYvBGcUVxpNG4a9BRX3uYSLB9Tj4nszvMy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 12:06:29 GMT
etag: W/"631f20c5-37c"
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-frame-options: deny
x-user-location: NOR
x-user-region: xx
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lk%2BKxPb8Wh%2BxRPxLUsibr08Rw9cHPCx2zF64R6P9H4WPUKShswQWKgsnqwjatUPDZzhAfkaSDNqmRnDk%2FEja6hVUw%2F2TuHbCAKId%2FLjGXnbFD9Oz%2BZhrjWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b29412ea080afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
172.67.70.229
23.36.76.226
31.13.72.36
178.250.2.146
104.16.126.175
52.31.237.246
94.130.239.232
93.184.220.29