| xs523936.xsrv.jp/qO5ODwxjId684HQ7YgS4/144d3418175a920e59088b203452796f/c2Fuaml2LmphaW5AZzQyLmFp |  103.141.97.7 | | 0 B |
URL xs523936.xsrv.jp/qO5ODwxjId684HQ7YgS4/144d3418175a920e59088b203452796f/c2Fuaml2LmphaW5AZzQyLmFp IP103.141.97.7:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /qO5ODwxjId684HQ7YgS4/144d3418175a920e59088b203452796f/c2Fuaml2LmphaW5AZzQyLmFp HTTP/1.1
Host: xs523936.xsrv.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 09:54:29 GMT
content-type: text/html; charset=UTF-8
content-length: 0
refresh: 0;url=https://mx4ko.cfd?e=sanjiv.jain@g42.ai
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mx4ko.cfd/?e=sanjiv.jain@g42.ai |  209.141.55.9 | | 0 B |
URL mx4ko.cfd/?e=sanjiv.jain@g42.ai IP209.141.55.9:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?e=sanjiv.jain@g42.ai HTTP/1.1
Host: mx4ko.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 16 Apr 2024 09:54:29 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.16
Set-Cookie: PHPSESSID=ae34gkubbdaq714e7boi62be45; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
location: main/
|
|
| mx4ko.cfd/main/ | 209.141.55.9 | | 3.5 kB |
IP209.141.55.9:0
File typeJavaScript source, ASCII text, with very long lines (3082) Hashdf91acc247736f5bd1dce5035486ea97 f1aae2e6a4b478f715be796c8c8d65d768efc16a 534c6a6aa861c92cff334a4fd9960de03bc8f4fbb7ae5517b3d2db61a2ed0bad
GET /main/ HTTP/1.1
Host: mx4ko.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=ae34gkubbdaq714e7boi62be45
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 09:54:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback |  104.17.2.184 | | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP104.17.2.184:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mx4ko.cfd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 16 Apr 2024 09:54:30 GMT
content-length: 0
location: /turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback
access-control-allow-origin: *
cache-control: max-age=300, public
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87534b5bacc80b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mx4ko.cfd/favicon.ico | 209.141.55.9 | | 135 B |
IP209.141.55.9:0
File typeHTML document, ASCII text Hash83b862bead2d480026254fb2a6eb9969 26bad9e6c1579172b0e3b6bc1c18918164ff6478 fb258cb538ca92d61c8cd4eb08cc23da70c278b8766eaa731ce11e9b2f1da4d4
GET /favicon.ico HTTP/1.1
Host: mx4ko.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mx4ko.cfd/main/
Cookie: PHPSESSID=ae34gkubbdaq714e7boi62be45
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 09:54:30 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 135
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 15 Apr 2024 19:31:32 GMT
ETag: "87-61627ab3c2d2a"
Accept-Ranges: bytes
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1278888442:1713259769:4t-vEBPnigJCc__IBZ6kLgPwjqa5-efAdMQbJQU_oWw/87534b5c9fdfb4f9/d53f9cef182b10d | 104.17.2.184 | | 7.2 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1278888442:1713259769:4t-vEBPnigJCc__IBZ6kLgPwjqa5-efAdMQbJQU_oWw/87534b5c9fdfb4f9/d53f9cef182b10d IP104.17.2.184:0
File typeASCII text, with very long lines (976), with no line terminators Hashb2127a1a9fe1292eb3a61ea79bcbc610 af0e65bb4815b2ee9efab9a952490a28fe558cc1 75497401fe7f29b6fb8e828411ced134c102c19691c1a92f6d60f85d4cdc812e
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1278888442:1713259769:4t-vEBPnigJCc__IBZ6kLgPwjqa5-efAdMQbJQU_oWw/87534b5c9fdfb4f9/d53f9cef182b10d HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/55r4s/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: d53f9cef182b10d
Content-Length: 37314
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 09:54:35 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: +xUvJvjLLt41ZNfPaZsoQjyo1jyvy4SHqJgWzcp9JaXPP6vGTCyJ2TO3rAhVC09fvhvS41J5otPacU8O9oBiXIewZ5AM4SI/9m5MUHfoGFA=$JVjr/LoeN71bIqM2BVOw7g==
cf-chl-out-s: WjRSC2M+y6UNVVoLh8Z71eK7TTxLjm8JjixEqxuDJrwAg+yWC70gcwbqGg5Z2dZGbJ998hrXyAJrFhiCJfx4BZxwMI8A30joTQhmEt5zaPgiAvnQel1GHEk5lvtNf/2zO5ni1WZTa4QNjDY6ORa0aw==$78P8cMD3XoxNGw7aLPDxrA==
server: cloudflare
cf-ray: 87534b7aa99cb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87534b5c9fdfb4f9 | 104.17.2.184 | | 128 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87534b5c9fdfb4f9 IP104.17.2.184:0
File typeASCII text, with very long lines (65536), with no line terminators Size128 kB (127885 bytes) Hash18f188365791371cc7b35864cfa6bd99 a691e6961da322d43b1df1c65a77b783d9d5739c 22f4959416e4c9d0e7dd3ac0cbca85197bd67651241c5a806efa57488b5e8f18
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=87534b5c9fdfb4f9 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/55r4s/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 09:54:30 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 87534b5d189cb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87534b5c9fdfb4f9/1713261270834/27c0c11f17c592bf0f34fb3c221a891bd3984189b132617b7650c7c775e6b377/Yy61xxdLK68KOv6 | 104.17.2.184 | | 8.0 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/87534b5c9fdfb4f9/1713261270834/27c0c11f17c592bf0f34fb3c221a891bd3984189b132617b7650c7c775e6b377/Yy61xxdLK68KOv6 IP104.17.2.184:0
Hash5e31ab4a3ccc309baef12d57de26c880 1140b3816f06b45175262f9fd48a838823a2a607 fd5ea4115806ec706918b201f4c9070e072f89dc4fd94556be27c27f967fdbef
GET /cdn-cgi/challenge-platform/h/b/pat/87534b5c9fdfb4f9/1713261270834/27c0c11f17c592bf0f34fb3c221a891bd3984189b132617b7650c7c775e6b377/Yy61xxdLK68KOv6 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/55r4s/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Tue, 16 Apr 2024 09:54:31 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gJ8DBHxfFkr8PNPs8IhqJG9OYQYmxMmF7dlDHx3Xms3cAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1QvuFhVj8-HIEpd2829MedEvnrcAHahftJq4lCTdordKDtEpBDr1tC6_z1kq102Fe8SVbT4nRFRPCH_vL6Pwcc16C8jLMMvXraoC-BiyzAX3Yyr6lZj9UCQ7aK3JEr-tlD2wmLRtqyXfZQu9FdZsCMm0LU5LDAKE1uUBeAV-vLkP_1imLjHgbFE2lJH52yahbxiIjoqT_3PjB45ow3W9ciKiR89cUoS7X-sc6I2Lo7P_Y_FH4aGxC4fBDbjKZDO7UYOs3i1xJCHhgRA2dPWk0tZTjV7-jJE-oyRiReJNq7shr4jYws0e9BzlY1UCMa-U_JWdRb9So4JnoGPmfvSU_QIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tICfAwR8XxZK_DzT7PCIaiRvTmEGJsTJhe3ZQx8d15rN3ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 87534b64eb67b4f9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1278888442:1713259769:4t-vEBPnigJCc__IBZ6kLgPwjqa5-efAdMQbJQU_oWw/87534b5c9fdfb4f9/d53f9cef182b10d | 104.17.2.184 | | 20 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1278888442:1713259769:4t-vEBPnigJCc__IBZ6kLgPwjqa5-efAdMQbJQU_oWw/87534b5c9fdfb4f9/d53f9cef182b10d IP104.17.2.184:0
File typeASCII text, with very long lines (22536), with no line terminators Hash02593ce4dbb1eb2a3f05496a4f5fa780 0b785954d89a3b4fb1a733ea800d0626843e998c f2b9472d5f6e819f195bcd7d0b435fad05b80112db9ec5029bc68246c0b6f58d
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1278888442:1713259769:4t-vEBPnigJCc__IBZ6kLgPwjqa5-efAdMQbJQU_oWw/87534b5c9fdfb4f9/d53f9cef182b10d HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/55r4s/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: d53f9cef182b10d
Content-Length: 25488
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 09:54:32 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: DVSvFTzkFXO5zZE9G6o80rnqsSwcOzPZqUO4z+Dls7FseBhH6x3nhUTauzsPnk4U$2mDuj6Doij5mLKDki2inaQ==
server: cloudflare
cf-ray: 87534b66adb8b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| mx4ko.cfd/main/main.php | 209.141.55.9 | | 5.7 kB |
IP209.141.55.9:0
File typeHTML document, ASCII text, with very long lines (4198) Hashe11c2acf1ae86fc07f6c79e559a6075a 6b430e0023c111831bdd16e24f8039dd90c091bf 10c57b3e50bc1fc08d7e6de8562b40c1b0147b98e1ee09290edd2cfcb7375620
POST /main/main.php HTTP/1.1
Host: mx4ko.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 539
Origin: https://mx4ko.cfd
DNT: 1
Connection: keep-alive
Referer: https://mx4ko.cfd/main/
Cookie: PHPSESSID=ae34gkubbdaq714e7boi62be45
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 09:54:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js | 104.17.24.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP104.17.24.14:443
Requested byhttps://mx4ko.cfd/main/main.php#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?cfg=sanjiv.jain@g42.ai CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mx4ko.cfd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 09:54:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2786797
expires: Sun, 06 Apr 2025 09:54:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PAa1KyL7%2B2wdFazdlWHUYjIdqkqHjBLz9%2B%2F2sNN5lT1fbBYg8wLRgoJrIP4RD9BIPqPSf8xQokU%2BzvQ89Qw3JpE12FZendEoQRL2c%2Fy8YJcCXQZBjlKexvHGexpZqohUd9rNj7fU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87534bd69bebb500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87534bb98f74b4f9/1713261285658/Z9qFGH3Ui71XENz | 104.17.2.184 | | 7.9 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/87534bb98f74b4f9/1713261285658/Z9qFGH3Ui71XENz IP104.17.2.184:0
File typePNG image data, 10 x 41, 8-bit/color RGB, non-interlaced Hash78f7eba223b29c0b49dd9ba278a68ad8 a39f463cbe058688c5d10ea30e38d7162786b8c5 1a68883843d5fd885e17935c9918c397f45fa9977aeb21cae91c75532eef7555
GET /cdn-cgi/challenge-platform/h/b/i/87534bb98f74b4f9/1713261285658/Z9qFGH3Ui71XENz HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/toL804vmeDYrjlL/55r4s/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 09:54:46 GMT
content-type: image/png
server: cloudflare
cf-ray: 87534bbe6e05b4f9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 209.141.55.9 | 200 OK | 19 kB |
URL User Request POST HTTP/1.1IP209.141.55.9:443
CertificateIssuerLet's Encrypt Subjectmx4ko.cfd Fingerprint9B:EE:C5:BA:E8:52:CE:D3:4C:DA:94:1B:9A:F3:1E:20:B2:12:C0:2D ValidityMon, 15 Apr 2024 13:40:41 GMT - Sun, 14 Jul 2024 13:40:40 GMT
File typeHTML document, ASCII text, with very long lines (4198) Hashe11c2acf1ae86fc07f6c79e559a6075a 6b430e0023c111831bdd16e24f8039dd90c091bf 10c57b3e50bc1fc08d7e6de8562b40c1b0147b98e1ee09290edd2cfcb7375620
POST /main/main.php HTTP/1.1
Host: mx4ko.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 539
Origin: https://mx4ko.cfd
DNT: 1
Connection: keep-alive
Referer: https://mx4ko.cfd/main/
Cookie: PHPSESSID=ae34gkubbdaq714e7boi62be45
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 09:54:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
|
|
| outlook.office.com/mail/favicon.ico |  132.245.230.9 | 200 OK | 7.9 kB |
URL GET HTTP/2outlook.office.com/mail/favicon.ico IP132.245.230.9:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://mx4ko.cfd/main/main.php#v1BGQ6qfJT2tok6TwZ9DNY6BhXscrZVW0wCRD36mW9QltWeZWnDKmKmDHOQ8OL4OiHGVKNiHW82p5gp2E3M1N9EuXvCLhHAzogv94OQ0XSq29Q5OTSQG1uaZ0NKhulQTCm2GaSH7L7aVYgKR8Axa5I95wTm1fdURzWxKPfSBn3xljicsSKCYsL3YFq0VDUMdRkYHzQjWTQhd8tF1diZG43FJtFE7ArlrLj8kash4jyhr2XtgfsWjwC3ZiI6S9sjVLsgWUx0d5iF8f9ovClP8XS7fBe8KHrFsUWpPtp3zIIHYS5turjCpbKFMZNxGed999yYCY1cGKTECZ86qrJPDtvqsiX8xbhGlQFXOG9ur3942hbtJUjmnONQ7LZEWhkh70fVGpq8tzcvQnZAijWG7JwevwTrNeJVeYQVoh3RQgnGEnhWGdCOX93sFWUtaDpoCgj1xnSnDf4hDldjzQ7x0a0G6U9hyyFbPZcmm4JZkNhX9vgIloglyg1FbbXJKCUzC7WYbFXwtfuCKLl59BrIRto2FlMpYHZAOVz0Bxx4M1HwN2CXE3Fvx4ycplCo2BZRxyS85pdRrUneXZbB3R7AVGNl1pJ41JWzhOHmeVeFQCUNC6pFYwgTc3fetZiuIe3Z3LmhHAXxcSkOYJuWgKQtO5Hh50MNeQMiC8AjJxQVqbJpVdmbYcFMim4nmRbBIXTl6uEP1vLsHvRCJdOHqtuJQz7cqiO9gIunc9deFYGmtyZcLNUchoW7X3kom8yDR203cdhRcXdGvcTh0NuicqqauLzRU7uLavOmI5dV3rByEuQFikXuLoEg9d73kCOu7CRQI5LLwnkbRaQ9vOEhciylvGpQidlqQcgyh2jOpEZhOQrkE5CRoadUQCK8Q5yGiPfARzohdnz2e0nS6ZKv9XpZA98qfH7ywn8oWwG9Ufc8gz1nyLSHJhHjrPKGxSf3fnsbU8lPoxXE7Z1FLTnub4OCUzirsyvHVXTP6fFuMC9UCazn4XRf2GRWgaoIIUpESjuYy9tlMCfoNPLSMD8Ok0LAa9iT3IyW12UAcoWY0bmO18HNMPB6PnG0xZTBHsxJurkHQgFQs2FtbmgXbS31fK1MJVnrnVbSmvzcMf3eiJHt6YqiQuj6ekTYghqEcBwz76MTmQ7EAP7GNxYE2iKgCEfTVFx8g4InbuhxkpbUeiB1QzGSRq9u5oo13V9k0RIbmZIHoUCDddF4NlXEM69RvxSzt2TtUBFgBnX0izEvMjzzEwerDoj8WbHpeBT8cyoOWmOeVsJIMjirPwSsVbBRnihCTaK6J9VGvJVrcF9ZYrqOYjgTvSLSa2v4dfbXp6DUQyl2ev2cWs0VMhPh9BakDFpRVAOkGsew1Azf5Br24sYQKN8Toie2YDTTdIdUasqb20r8CTbGl9x5XGZmYdpWRjQ413YcvpoypPH1ISI42ga0W9nVnMSe5Ij7LhjhHIP6xw8gpRks7us4EPZ1BRgHzzPlR8CyQsFoZOEoFZQNtjS88RaKJqsj0hFSphqgJ6FJUj8AiZnMifVq75bRwDbxUQpk8PBSVgBQAJqTIOG03BrbHD3dgeKb59vdZ65VnHMXqcQ90wa47CgOfj2vyMHDWcRWjXSGEED5QteRZpV71bWgvYM3LtHHGzEZwwFbbjg1MvTMUOUV0QcvOZzzsgh9QW8ntOyE8PGVkzHfnCbnsoThnsRQJ9Zz68WzWvd4kTZFsHUQk6eNu74RAWIk6HUcPRLMmZRGSRmlzhcTnqGSyLK9HstN9nZZfLMBKDiDvEZ4WbXjCEcbpWl6oOUycUyrFk3pYl3t02yWevgQ9s2zonFNcAmouUQ9fTzdfDHfFfcTLsKVVMujaa7mKtLenBoDvYQLBx1gNdayGVtBIXVS73eSw06UCvx7toS5WUmJ7whOrKpaIl2PohIVhPPTkn1OLUTHOfqVMIJes9oavq0TIIOZxESS2TGNNAvCQWxDEhR6rghWHiQp0Eoyjhrlb89ZIEBzA9cer3lSjCO0VFqWkOuD6WZh48hMNSln2yCtBXlVAaWvPmr9bWNhSMzWVQJIJ56LDIefFAagK6MAtdJEaxW3jvZfmJX6O3RsL6HrGSIqZu0sIK7Sh3VBzVRWFO2tSTWEZD5FvO6ui7X0S4Sa7OLHKCDprFTjzPXzt3fZRltatralv3vDShkCUX1mDVFcKDLeH1dymHIQ8TbDWHhOYBrTztfdoVp9ybngdBPziyqqrB4ojldhXEbx7qKwlaGUm3azFZ9XxzoZasnuOALMfXjnn3TJdzEzDO9iOigmREl27IwVjiIyf1VC4Pmio0S2P1kDkA0beldm4Kio20Wi1SU6Hho6hh86jtKD3KPi62FbNXzPXw8Yo246ktcCLlI4OtISexbkAQvnN5dKBlJZoN6Ihik2D37rxQjLnv6XlCl8HyTjUCijqp2HHnKlrSNYI7K6CQ3Xtp5bYZuSBNb1ceJTBuf2n2059LbLCfI5EOgCNLvpyHqKVaEwFTz2WA85lkQXzz2eojRc5nBD42o0c3xSX6UTG2Y1mPZWp2bNl20qpB4uEsuRw1Jt8DmOGlQ2bPZBRapdcpEC1J6FcBwICfcLSzzyUqB6gBI8L7mYx1AyKHdXiJFVZRGSqgrlG2sXDa5pisnPtYneFBbYlQTkIzc9PDvwGYtk8zJr17gu5EJLfUJBLDVtc7D2L9yr72LgBvHCCY7ICQtSLdtwQp03wD5iNDJUFuahZSUCQ2ktTOmE1QaSfaVMO04CENwkiHBizvUqxfTq3g456fYlqU8fVcRz0nUi5vBE1v4yLYZPe4VlkTHKNP0J1Ri1fdjkIVZJr4ic3i1inWDHQksE9snakGczTwUCrUmSYE41X6jk3X2ThuyrWVBhBOQvkL7LFtDE8IG5O0qSXsLfXkGUfhbR52mqNubtXP75xObmOBeL4001kGVAY6s48OuWjGpgvxl2lwp98DVcEWeZC9zBg1FpQal9QLqliMoEjNNrrJE6F?cfg=sanjiv.jain@g42.ai CertificateIssuerDigiCert Inc Subjectoutlook.com Fingerprint2C:61:C5:26:BC:9A:1C:E6:BE:6B:92:00:FC:AF:29:2A:23:84:5E:5C ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 21 Jan 2025 23:59:59 GMT
File typeMS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel Hashac16fa7fc862073b02acd1187fc6def4 f2b9a6255f6293000f30eee272abdd372a14e9d3 e35d94b76894d6eca96ff5b1a12d94dfe73485ef3c52cb5b4395be8ffac1cb45
GET /mail/favicon.ico HTTP/1.1
Host: outlook.office.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mx4ko.cfd/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 7886
content-type: image/x-icon
last-modified: Mon, 15 Apr 2024 16:41:28 GMT
accept-ranges: bytes
etag: "1da8f53c326b2ce"
server: Microsoft-IIS/10.0
request-id: bea3792d-49b2-364e-a0fc-b88e5ce3a521
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000
x-preferredroutingkeydiagnostics: 0
x-calculatedbetarget: GVZP280MB1014.SWEP280.PROD.OUTLOOK.COM
x-backendhttpstatus: 200
x-besku: UNKNOWN
x-proxy-routingcorrectness: 1
x-proxy-backendserverstatus: 200
x-firsthopcafeefz: GVX
x-bepartition: Clique/CLSWEP280GVX00
x-feproxyinfo: GV2PEPF0000384D.SWEP280.PROD.OUTLOOK.COM
x-feefzinfo: GVX
ms-cv: LXmjvrJJTjag/LiOXOOlIQ.1
x-powered-by: ASP.NET
x-feserver: GV2PEPF0000384D
date: Tue, 16 Apr 2024 09:54:50 GMT
X-Firefox-Spdy: h2
|
|
0.0.0.0