GET /cdn-cgi/phish-bypass?atok=pqEBIiNHLjDDc_qLcmiUfwEgPVZ9L.rHol3ba2Tlf.c-1750035206.3868043-0.0.1.1-%2F&original_path=%2F&cf-turnstile-response= HTTP/1.1
Host: enviossarko.kyiv.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 400 Bad Request
date: Mon, 16 Jun 2025 10:12:39 GMT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BSM%2FpKPs%2FhAeV%2BlEROMQDTb3nwEbC1D%2BdkJFMmtiZbt9wzIV%2BPCbhRFb%2BLaNfcm5Yo7WvyU9GICqHl%2FhBYewtToZzQvHrwLJFnLcRIT9sipH"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 950987b50b6bb4f9-OSL
X-Firefox-Spdy: h2

GET /cdn-cgi/phish-bypass?atok=pqEBIiNHLjDDc_qLcmiUfwEgPVZ9L.rHol3ba2Tlf.c-1750035206.3868043-0.0.1.1-%2F&original_path=%2F&cf-turnstile-response= HTTP/1.1
Host: enviossarko.kyiv.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Mon, 16 Jun 2025 10:12:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 950987b5e90f1c16-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Encoding: gzip

GET /favicon.ico HTTP/1.1
Host: enviossarko.kyiv.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://enviossarko.kyiv.ua/cdn-cgi/phish-bypass?atok=pqEBIiNHLjDDc_qLcmiUfwEgPVZ9L.rHol3ba2Tlf.c-1750035206.3868043-0.0.1.1-%2F&original_path=%2F&cf-turnstile-response=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Mon, 16 Jun 2025 10:12:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 16 Jun 2025 11:12:40 GMT
Location: https://enviossarko.kyiv.ua/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J6nOgbspreSRJUr4skwadbvqk2S45VrWpUQmr%2BjPQE7d83ITDJZ%2FmjomLpfI9OnWUjBwVHah5%2Br7vLwAEF7WklvOZe0ZEMn0RKouG7EDUba3VBdqBjxQvw8Ok2QHmwSsVKtZEWh3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 950987b70a781c16-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=460&min_rtt=450&rtt_var=143&sent=3&recv=6&lost=0&retrans=0&sent_bytes=395&recv_bytes=1025&delivery_rate=5537284&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

GET /favicon.ico HTTP/1.1
Host: enviossarko.kyiv.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://enviossarko.kyiv.ua/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 521 No Reason Phrase
date: Mon, 16 Jun 2025 10:12:40 GMT
content-length: 0
server: cloudflare
cache-control: private, max-age=14400
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BaORpt%2BkRvSFJ3V3b0DUUUYuW2m3oWkd10b8n6GpLuWm2IsnFpSRzF2GNGyBfbPzpvdrIr1beDWpOL1WNTPbr%2BIUctMgto02GJH%2FmFHUyBc0"}]}
cf-ray: 950987b768b77131-OSL
X-Firefox-Spdy: h2