GET /images/navicon3.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 15889
last-modified: Tue, 30 May 2017 04:42:35 GMT
etag: "3e11-550b66eb244c0"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QYX3M0JLsO9DRb0gwyvBafkTvUR4tl%2FJwYr7TPu048Cpc1wllYCi%2BDCCVJSUbNgC51HxDi51Tp1rZUXY31jqM2eBEb77b0QCDZYCHDCB91hIrhoNOmxIezA6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbbe5b56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=34&recv=21&lost=0&retrans=0&sent_bytes=16118&recv_bytes=5012&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=243&x=1", cfExtPri, cfHdrFlush;dur=6

GET /images/navicon6.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 1175
last-modified: Fri, 11 Jun 2021 12:43:51 GMT
etag: "497-5c47cdc166fc0"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNUBCM0rVgl%2BqB%2F7%2FVwOVuenezAeaTuJietnUfk8ow4G21vDMvn1LrK09TwILcPO5zLX%2FVKDplgoOdD7q6UoygIsk3dpXvdFE9B1IKLNJ80GEtzUXIZ6wC5b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbbe5e56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=34&recv=21&lost=0&retrans=0&sent_bytes=16118&recv_bytes=5012&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=242&x=1", cfExtPri, cfHdrFlush;dur=7

GET /images/navicon5.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 15551
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "3cbf-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=acgKjjpwLnc8XSEmLAji6loIEOuFVd4Xt5aft%2BCojsZ0LhdOqEy6nJeKxUa8Y2mM5r%2FSR%2BsvOCAgPSxJjTiGFGRm%2FQOhISkD3UfsYAuhk5aG4pc1C30AT%2For"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbbe6156c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=34&recv=21&lost=0&retrans=0&sent_bytes=16118&recv_bytes=5012&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=243&x=1", cfExtPri, cfHdrFlush;dur=6

GET /images/regicon.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 19508
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "4c34-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KIXjlDVlBB71%2BthzjKvUNTa7JiXIFdAGl%2F7TGIUoMsv9iy0BIFsPEsz3PLthhDy0Yg8pOWiWblo5YRlE1HBT16Dp3ZyRiXe7P3nSsZyB7Gr9gUtQXiApvQfB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbce6656c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3339&min_rtt=1316&rtt_var=2306&sent=113&recv=26&lost=0&retrans=0&sent_bytes=100118&recv_bytes=6004&delivery_rate=13735532&cwnd=48000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=250&x=1", cfExtPri, cfHdrFlush;dur=4

GET /images/logo1_1x.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 38035
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "9493-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wS792b3fmhuXMnbg3yhg8mKErbv5LkgOxIUGhL0gATJ8bR5oVfl7gslHenmzwnu30N4IB2oleR3vCk0ALRKd6dr6fnbU61OjZFHlj%2FxkaCsI5upzdKj8NB%2FX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae5656c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4238&min_rtt=2189&rtt_var=2310&sent=42&recv=23&lost=0&retrans=0&sent_bytes=25619&recv_bytes=5873&delivery_rate=51888&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=246&x=1", cfExtPri, cfHdrFlush;dur=1

GET /images/navicon1.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 18288
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "4770-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eEcUVvOMwjziOgCmr31oqnNls3Jpc1BNnnSnzJK%2Fva4ti%2BqQcy%2FyozE%2FLW7th3lYPjbjB%2BY6Rkc5bLWPRVB%2FhK9LXRjFGqxNYE515ItfFwWCWEZ167taoxEA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbbe5856c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=33&recv=20&lost=0&retrans=0&sent_bytes=16091&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=240&x=1", cfExtPri, cfHdrFlush;dur=4

GET /images/navicon2.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 16374
last-modified: Tue, 30 May 2017 04:42:33 GMT
etag: "3ff6-550b66e93c040"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UksiedSiK69UXSN%2BX7VZXfsyfLTnNmJreOkvND6Lx8aXgoV9%2BWFUzeOEkZc%2Fd5vIYEwbuggCWX%2FRjXbdnSPPJiMtArV6mkRhhWai8YAzEaqMv8pcNblyO8HC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbbe5a56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=33&recv=20&lost=0&retrans=0&sent_bytes=16091&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=240&x=1", cfExtPri, cfHdrFlush;dur=8

GET /images/userin.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 18182
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "4706-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EpdiPtYxzgMa0HpRWRWxVXzgxAD7S%2BByk9MFjENb3ze564xg5QvLiDMRumHifakXfn2NmULCPen3vCZqm6x5%2B2MJhuuPgdDQJVlpHbRsxNdBPFAOBasAxU9A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbbe6256c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=34&recv=21&lost=0&retrans=0&sent_bytes=16118&recv_bytes=5012&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=244&x=1", cfExtPri, cfHdrFlush;dur=5

GET /images/download1.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 23553
last-modified: Tue, 30 May 2017 04:42:35 GMT
etag: "5c01-550b66eb244c0"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NFsxtl%2B1GRt%2BwiUd37mzL%2FqsDxTAgKNSm9LXq%2F70xEw39na96xcR%2FgMExWno7YNSegr1I1f%2FqDvgjAw1bsb60k1l8hDE1Iyv%2BGpdU70qbGgi%2FZhhOyPAb%2Bgs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbce6856c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3339&min_rtt=1316&rtt_var=2306&sent=113&recv=26&lost=0&retrans=0&sent_bytes=100118&recv_bytes=6004&delivery_rate=13735532&cwnd=48000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=253&x=1", cfExtPri, cfHdrFlush;dur=1

GET /images/no211.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 720
last-modified: Mon, 26 Aug 2019 15:38:33 GMT
etag: "2d0-59106f2ce7040"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FuHK8kI%2Fm133JcJPhlykXSTIcpREig1X%2B8boIh%2FFKvA3ZAaiP8%2FgVi9sV%2B8z1F4zK0zavWrBz6pWMezx%2BXvMdQC49SnpGX7XVAtZwDWSVwmORVK0eiQeE3yG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbce6956c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=1316&rtt_var=2068&sent=196&recv=27&lost=0&retrans=0&sent_bytes=196118&recv_bytes=6050&delivery_rate=11931047&cwnd=96000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=256&x=1", cfExtPri, cfHdrFlush;dur=4

GET /images/yep_d.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 15222
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "3b76-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zSECoEE9S1Wfkqb%2BptwNsjl6Ox5UbPdjd04O8TWJTwSRXFRjhXpr7LjSPi1r7fj93H5DvMBZdcN4tja90kDJQblv9uMPDR8JdFsmgRDfayjQiS92Asqc5DpK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbce6b56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=1316&rtt_var=2068&sent=182&recv=27&lost=0&retrans=0&sent_bytes=180640&recv_bytes=6050&delivery_rate=11931047&cwnd=96000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=254&x=1", cfExtPri, cfHdrFlush;dur=6

GET /images/flags.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/style.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 29723
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "741b-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z51nvjQTSZwAShiEwWUVrpskcO%2BBRVyPxKagg5jcTMGN9KpEcKyQbffguD5h67X5RYcf6IH3R8F65t5EUAz%2F6T8JkoSEUsYAVQx2gsdpI2R21R0j654bAAjV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7eef56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=1316&rtt_var=3333&sent=263&recv=37&lost=0&retrans=0&sent_bytes=262356&recv_bytes=8481&delivery_rate=2154306&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=366&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/premchar.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 69808
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "110b0-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v3d7XWodQ6AUUrCN5Q9zDhmmb84xzIpvBtPmQkwJG%2BA1mjSVsmpS230sWZcKNaEqeoj5HGcfeewz8U04LaAZnp4CtoP77r%2BpFn0QVzRcnBG9bL%2FzdHsy8D8j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7ef356c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=1316&rtt_var=3333&sent=289&recv=37&lost=0&retrans=0&sent_bytes=293517&recv_bytes=8481&delivery_rate=2154306&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=367&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/navbara.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 22290
last-modified: Tue, 30 May 2017 04:42:35 GMT
etag: "5712-550b66eb244c0"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LdrFYd8BIfWT2CSSxqgrhkZFcxH%2FGQfcop5HFIF3QVVv%2FxxkyvXfzNCADXLocnwrE%2FjnCqB4TFMH6mT%2B37ttLEtQAx3MZweIb%2FXvjrv6FwXMhlJZNq79mh1j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7ef756c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3592&min_rtt=1316&rtt_var=3066&sent=350&recv=38&lost=0&retrans=0&sent_bytes=365821&recv_bytes=8526&delivery_rate=771531&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=368&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/free_download.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 32532
last-modified: Sat, 15 Jul 2017 04:35:36 GMT
etag: "7f14-55453b26c1600"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fvtEc27GfmlMEM3nEO6ftnH594nbSUerbsoMJYQNweWDFYswI0nsIlu8x6KHjZWxmQRKE1VNowhbeJOUIDBksPagZJ9kAiuRARL3arzWsbAfrJRZjnlOS9nh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7ef556c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3592&min_rtt=1316&rtt_var=3066&sent=360&recv=38&lost=0&retrans=0&sent_bytes=377821&recv_bytes=8526&delivery_rate=771531&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=369&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/navbar.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 22290
last-modified: Tue, 30 May 2017 04:42:34 GMT
etag: "5712-550b66ea30280"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JsPD2wl%2FRlX0dDrsbvi3PM09q6UshiBcCokgdoNv3ubIFazTnTzyN6dEtTFCPJF%2BXheZGNzCBJCAwdi0urJbXQHAQGBSMBZHeCUWru7KizHlleorvB7czX5Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7eeb56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3592&min_rtt=1316&rtt_var=3066&sent=399&recv=38&lost=0&retrans=0&sent_bytes=423433&recv_bytes=8526&delivery_rate=771531&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=369&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/premium_download.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 35695
last-modified: Sat, 15 Jul 2017 04:35:36 GMT
etag: "8b6f-55453b26c1600"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IC0iIaFdbDhm0AewhSbiILyT1PlJZtL3ENGRjhTw89cYSElFnUDoFpk%2By42aOGEecY7cEO%2F9Ln%2F4vQnbVcqB6VRbzBGBniZsnyanQikARY5DAXNWqLAdvzDX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7ef656c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3592&min_rtt=1316&rtt_var=3066&sent=419&recv=38&lost=0&retrans=0&sent_bytes=446980&recv_bytes=8526&delivery_rate=771531&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=370&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/frechar.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: image/png
content-length: 66710
last-modified: Fri, 19 Jul 2024 07:38:56 GMT
etag: "10496-61d94c9aac4eb"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 688
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mh6pzOsa7ARTt9TQdnoUpuXQOl2SNqetbQfkg6X%2F%2FaQVGsyZeBUh7cRU%2FQsYSeg2JeLQvC8eF1Usy1HAbILhZ3wYyh01N4ZQVahtHQPPckMlZvDHSE3MoY6e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc7ef156c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3592&min_rtt=1316&rtt_var=3066&sent=442&recv=38&lost=0&retrans=0&sent_bytes=473556&recv_bytes=8526&delivery_rate=771531&cwnd=192000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=371&x=1", cfExtPri, cfHdrFlush;dur=5

GET /gtag/js?id=UA-79936000-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Jan 2025 08:45:02 GMT
expires: Mon, 27 Jan 2025 08:45:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 84447
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /gtag/js?id=G-SBML259V1V&l=dataLayer&cx=c&gtm=457e51n0za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Jan 2025 08:45:03 GMT
expires: Mon, 27 Jan 2025 08:45:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 112676
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /cj4a5v6tx9uq/favicon.ico HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Mon, 27 Jan 2025 08:45:03 GMT
content-length: 0
location: https://mexa.sh/cj4a5v6tx9uq
x-test-header: 1
x-content-type-options: nosniff
cf-cache-status: BYPASS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHzeHRC5nmQQOVr%2FGZ8IhhVGgjuqXwwnHEKpyS3rO6JIb48EaHjeWdpCMkdWtp3RshBjcH%2FnblF0RXeETOITTZ8AGJoRiZgvBuxJ2W218M7DCSqGuCzMrCkH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dde80456c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3973&min_rtt=1316&rtt_var=3548&sent=512&recv=42&lost=0&retrans=0&sent_bytes=555005&recv_bytes=8968&delivery_rate=938179&cwnd=276000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=802&x=1", cfExtPri, cfHdrFlush;dur=0

GET /images/.png HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/css_newTheme/main.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: text/html; charset=utf-8
last-modified: Tue, 17 Dec 2019 16:49:23 GMT
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: EXPIRED
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6tUwHz1OhCms2FPzGbB%2Fa1LyyCxfCcU9DF9zTOZvMnk1X6vfF%2B0Z1UktvEQCLkKgCgI96M4H%2B14NcmR3J1bnj0mPF6y8ZlKb1nhClwg7de8OobjHDHw4wpNZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dc6edc56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4303&min_rtt=1316&rtt_var=3851&sent=509&recv=40&lost=0&retrans=0&sent_bytes=553417&recv_bytes=8618&delivery_rate=5700682&cwnd=276000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=531&x=1", cfExtPri, cfHdrFlush;dur=0

GET /?rb=lKHnPGcZDc_DsbkH0YX-veU5yt49FdkqGqlue4dLn_f0AmMnGzfFxvzd_nX0KYLK4IUtWCGoU1G5DQvCL-XY1_AjXhPQfnDMhsdSnNomhrfwCCQaL5GuV2EfEyxubGEhpuI6nGAz--u_6VO4VKptFXX8YAxbRDhnLTgjvW8s7Ci3GIL4ZWZbthMuMUnD0F9YDfm2B3CD31MDEvwwhBhJt91DJXcsJHk03UQJ3rZjEGre7bauBBzS8BbqaUOjOBAaZ-TiP0qhTIY%3D&request_ab2=0&zoneid=7359319&js_build=iclick-v1.1059.2&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fmexa.sh%2Fcj4a5v6tx9uq%2FG-RJ01299953.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=1&wgl=&js_build=iclick-v1.1059.2&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=30b5e8e6-84c0-41c2-8c3e-509aad0803f3&wasm=1&userId=00815e3cbfc64939e50d25c8cc2e601b&m=link HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mexa.sh/
Origin: https://mexa.sh
DNT: 1
Connection: keep-alive
Cookie: OAID=00815e3cbfc64939e50d25c8cc2e601b; oaidts=1737967502
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 27 Jan 2025 08:45:03 GMT
content-type: application/json
x-trace-id: 2a5b19b9be8eb36acd19f20d9aedd22d
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://mexa.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00815e3cbfc64939e50d25c8cc2e601b; expires=Tue, 27 Jan 2026 08:45:03 GMT; path=/; secure; SameSite=None
oaidts=1737967503; expires=Tue, 27 Jan 2026 08:45:03 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Mon, 03 Feb 2025 08:45:03 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2

GET /5/7359319 HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: application/javascript
x-trace-id: b0ceddf4ee2ff555e424c981b71edd9b
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00815e3cbfc64939e50d25c8cc2e601b; expires=Tue, 27 Jan 2026 08:45:02 GMT; path=/; secure; SameSite=None
oaidts=1737967502; expires=Tue, 27 Jan 2026 08:45:02 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

GET /gid.js?userId=00815e3cbfc64939e50d25c8cc2e601b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mexa.sh
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Jan 2025 08:45:03 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://mexa.sh
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=00815e3cbfc64939e50d25c8cc2e601b; expires=Tue, 27 Jan 2026 08:45:03 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 908776deba4456cb-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /cj4a5v6tx9uq/G-RJ01299953.zip HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: text/html ; charset=UTF-8
expires: Sun, 26 Jan 2025 08:45:02 GMT
x-test-header: 1
x-content-type-options: nosniff
cf-cache-status: BYPASS
set-cookie: lang=english; domain=mexa.sh; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=702b6Ku3b0ki2wxPzHOTn6JzppxQ1lqbpUN%2BBjwxPWyJNrAjftNxuT9Ok1RvpF6B2OQpj4C%2B49n3lJQQSIyrmXztObABt%2BenNuAAEvshMYqLRLVXHDr7QGRA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776d8aa5ab529-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6063&min_rtt=481&rtt_var=11118&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3261&recv_bytes=1253&delivery_rate=5799732&cwnd=254&unsent_bytes=0&cid=1bbefa674512ec11&ts=279&x=0"
X-Firefox-Spdy: h2

GET /css_newTheme/main.css HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: text/css
last-modified: Sun, 13 Jan 2019 07:31:45 GMT
etag: W/"89fe-57f51eb945a40"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2ByB7qNqSi6dxz77FdA5MhMUS6t2ZBYSAjMYtipWcPcnifu6Xtav%2Fd7hFI2ddx9visHgiCgReRSF%2BHuNsXdK4K2MIFfgIW%2FlAPq6RJ473aixjvEsszVu7EcO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae4c56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=21&recv=19&lost=0&retrans=0&sent_bytes=4346&recv_bytes=4417&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=233&x=1", cfExtPri, cfHdrFlush;dur=0

GET /js/jquery.paging.js HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2017 04:42:32 GMT
etag: W/"4ba5-550b66e847e00"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 5346
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8WD2N4TaE9Jj%2Fvw1qZWq9VddfSUL07hNKehdgWuanHK2Gf3uwgAMcq%2FTvsiWRh6Mb5EkTY2ogibVg1ceoHoqZE1Izgf2dYz3XT5OckFpO558qbrWiS02924N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae4e56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=33&recv=20&lost=0&retrans=0&sent_bytes=16091&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=237&x=1", cfExtPri, cfHdrFlush;dur=7

GET /js/jquery-1.9.1.min.js HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2017 04:42:32 GMT
etag: W/"169d5-550b66e847e00"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 5347
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LfZrRvogRo327%2BgJTQAjqyP9qUauT3Ug%2F630sXOo99W8iego%2BbvUSTzdpN677lwMKI%2FcvarKO5DmOT74DyeDMOCfku%2BWDD2RHoJJKonymsdmIf1iwXNYhszA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae4d56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=33&recv=20&lost=0&retrans=0&sent_bytes=16091&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=236&x=1", cfExtPri, cfHdrFlush;dur=8

GET /wrr?z=7359319&p_rid=30b5e8e6-84c0-41c2-8c3e-509aad0803f3&rb=lKHnPGcZDc_DsbkH0YX-veU5yt49FdkqGqlue4dLn_f0AmMnGzfFxvzd_nX0KYLK4IUtWCGoU1G5DQvCL-XY1_AjXhPQfnDMhsdSnNomhrfwCCQaL5GuV2EfEyxubGEhpuI6nGAz--u_6VO4VKptFXX8YAxbRDhnLTgjvW8s7Ci3GIL4ZWZbthMuMUnD0F9YDfm2B3CD31MDEvwwhBhJt91DJXcsJHk03UQJ3rZjEGre7bauBBzS8BbqaUOjOBAaZ-TiP0qhTIY=&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fmexa.sh%2Fcj4a5v6tx9uq%2FG-RJ01299953.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=1&wgl=&js_build=iclick-v1.1059.2&navlng=en-US&vsbl=true&pnt=0&pnrc=0&wasm=1&dmn=waisheph.com&userId=00815e3cbfc64939e50d25c8cc2e601b HTTP/1.1
Host: waisheph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mexa.sh/
Origin: https://mexa.sh
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 27 Jan 2025 08:45:03 GMT
content-type: text/plain
content-length: 2
x-trace-id: 684c8877ac1e93b326e066f740b6db59
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://mexa.sh
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00815e3cbfc64939e50d25c8cc2e601b; expires=Tue, 27 Jan 2026 08:45:03 GMT; path=/; secure; SameSite=None
oaidts=1737967503; expires=Tue, 27 Jan 2026 08:45:03 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Mon, 03 Feb 2025 08:45:03 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

GET /css_newTheme/style.css HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: text/css
last-modified: Wed, 09 Aug 2017 05:59:44 GMT
etag: W/"9b82-5564bc956d400"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ys8lu1CmKQLXz9VV2x3wLam0iEhsuVlkOpE0T300qeGSFT1LVWi7mxedr62xkJ%2BVFmr2uI603bqMp2KCrlNsVGxV1O7Lf0q2c8rXaUDuuGmHnZ5v2uyCIa7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae4a56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=33&recv=20&lost=0&retrans=0&sent_bytes=16091&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=235&x=1", cfExtPri, cfHdrFlush;dur=9

GET /cj4a5v6tx9uq HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
DNT: 1
Connection: keep-alive
Cookie: lang=english; _ga_SBML259V1V=GS1.1.1737967503.1.0.1737967503.0.0.0; _ga=GA1.1.2075728459.1737967503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:03 GMT
content-type: text/html ; charset=UTF-8
expires: Sun, 26 Jan 2025 08:45:03 GMT
x-test-header: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OF%2FdT%2Fts%2Ba%2Bz%2FQIMbZ3vLBMCUQJpD1d%2FZF3sWOcusvBIyyNi969Ws00wSm%2BMBsvXHpdZ5wOh5j66A1%2FzxbxZybnFcvzB9qW0RjAu7as2Y7SNBKrlZP%2F0ZtRX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 908776df797b56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6097&min_rtt=1316&rtt_var=6909&sent=514&recv=44&lost=0&retrans=0&sent_bytes=555700&recv_bytes=9373&delivery_rate=2823&cwnd=276000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=1068&x=1", cfExtPri, cfHdrFlush;dur=0

GET /js/paging.js HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2017 04:42:32 GMT
etag: W/"6ad-550b66e847e00"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 5346
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DBP522IYzT2R22cYHl88SVmZlS1jcGednDfgTiiS%2BzXZ%2BVLZRitO3xGaITv79KLLx%2FMHiZ38rd0tgDYF3PRkjbdGVJRwer%2F7hf7Xu4CCqflK6DcLq48iH236"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae5356c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=33&recv=20&lost=0&retrans=0&sent_bytes=16091&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=238&x=1", cfExtPri, cfHdrFlush;dur=6

GET /js/jquery.cookie.js HTTP/1.1
Host: mexa.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mexa.sh/cj4a5v6tx9uq/G-RJ01299953.zip
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 27 Jan 2025 08:45:02 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2017 04:42:32 GMT
etag: W/"c31-550b66e847e00"
x-test-header: 1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 5346
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l4gayiNSa9f%2BXM7NMkl5Se0BUIr0008FDjlXR9NaC3a%2FLKe%2FMdb8hHONlDx1xRkPsd0hdp2esPEmcQjtyzsDvj%2BPTxU1A%2BPCQns1R1Y6FwxON5yySaXrN1DY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908776dbae5056c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4473&min_rtt=2189&rtt_var=2452&sent=31&recv=20&lost=0&retrans=0&sent_bytes=14026&recv_bytes=4714&delivery_rate=271344&cwnd=12000&unsent_bytes=0&cid=4bdb8371a9911fae&ts=234&x=1", cfExtPri, cfHdrFlush;dur=0