Report - samo.koraex.workers.dev/link

Report Overview

Visited public
2025-06-02 10:52:23
Tags
URL
samo.koraex.workers.dev/link_card/22e91569
Finishing URL
samo.koraex.workers.dev/link_card/22e91569
IP / ASN
172.67.192.51
#13335 CLOUDFLARENET
Title
ОLХ.UA - Отpимaння коштiв

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
samo.koraex.workers.dev	unknown	2019-02-08	2025-06-02	2025-06-02	37 kB	2.0 MB	104.21.57.205
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-05-28	467 B	17 kB	142.250.74.10
ireland.apollo.olxcdn.com	53971	2017-03-09	2020-04-26	2025-05-25	472 B	117 kB	3.167.2.104
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-05-28	3.3 kB	194 kB	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-06-02 10:51:59	low	Client IP	104.21.57.205	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
2025-06-02 10:52:02	low	Client IP	172.67.192.51	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
2025-06-02 10:52:02	low	Client IP	104.21.57.205	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
2025-06-02 10:52:02	low	Client IP	172.67.192.51	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=42	ScriptElement	553 kB	2025-05-10	2025-06-02
Pretty URL samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=42 IP 104.21.57.205 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-10 20:32 Last Seen2025-06-02 10:52 Times Seen4 Hash 36fd0c9d6b6a7878bf17d86d3fb211ae 7abae0b028d1e32481462e3cceba6dc8ae9f7695 4a6413df121b40496049c5c5699acfb7d3bb34fc5444df579fc0ab61b731a6ec Loading...

	samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0	ScriptElement	346 kB	2025-06-02	2025-06-02
Pretty URL samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0 IP 104.21.57.205 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-02 10:52 Last Seen2025-06-02 10:52 Times Seen1 Hash 56cdf76be29752099bf361a33ead2a9b 6ace66838ea5fbb42e05d6acba9b38fd6ebd338e d914bd19f8cc82cc359c40abc11fb3d49f2cf4fe5b402bed38b9e3261cf86765 Loading...

	samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0	ScriptElement	346 kB	2025-06-02	2025-06-02
Pretty URL samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0 IP 104.21.57.205 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-02 10:52 Last Seen2025-06-02 10:52 Times Seen1 Hash 56cdf76be29752099bf361a33ead2a9b 6ace66838ea5fbb42e05d6acba9b38fd6ebd338e d914bd19f8cc82cc359c40abc11fb3d49f2cf4fe5b402bed38b9e3261cf86765 Loading...

	samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=97	ScriptElement	553 kB	2025-05-10	2025-06-02
Pretty URL samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=97 IP 104.21.57.205 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-10 20:32 Last Seen2025-06-02 10:52 Times Seen4 Hash 36fd0c9d6b6a7878bf17d86d3fb211ae 7abae0b028d1e32481462e3cceba6dc8ae9f7695 4a6413df121b40496049c5c5699acfb7d3bb34fc5444df579fc0ab61b731a6ec Loading...

HTTP Transactions (64)

	URL	IP	Response	Size
	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH4B&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	32 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH4B&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 32 B (32 bytes) Hash 0c00ece49acb0526a08ca97068454091 0ec992634b6177e1f9eb4755b7a0ef149c3902be fa681d322cacbf55aea5031cd381f0fe6a6f76d457fbf67d591a7cf671f57014 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH4B&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 content-length: 32 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=owBTYAi%2BESjV6EMoDLluwoUPurzvmo2VnTbTneKFct2PlD1dti2w2mNcXo2T2K6WKOw9Mrh2beNtdpRQ9T8j0mbb7YGKSmHfdKZdkn1NjSO5qAT5g6HlZ%2FYhe5deD7%2BpnBA0jeVGIPQXFg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966621ee577130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * server: cloudflare vary: Accept-Encoding nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2778&min_rtt=803&rtt_var=1674&sent=409&recv=148&lost=0&retrans=0&sent_bytes=365223&recv_bytes=14696&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2350&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6O6RC51o2mHO%2FZKv673fpjDzRI8PvFNlaDIXHiHui9xj8a%2Fb5d%2FtS2L%2F2uoBIPW6UnDs%2BYq8X5yYj9b05xcRkme5As0BhlzjRSZv7d6hr86qoKu9d7CYoFFkskxXgi%2BGfwOnjSECM7axRw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625beb97130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1839&min_rtt=803&rtt_var=730&sent=454&recv=184&lost=0&retrans=0&sent_bytes=381300&recv_bytes=30798&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2939&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2hdnVZ%2FgrHeG%2BgfyPZ5LwbW%2BcawfSxY9ia%2BtU%2FdTk0bVKx7BMkcQUwE9Z72JOzVNY9rIoHy6Dkye71tsGnT9YawOlWhylPpHc4hDRddGvvCdYMCYN%2Bqr9%2BhlTYkXlH%2FaeRjMaM4KJH1%2F%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625cebe7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1720&min_rtt=803&rtt_var=786&sent=455&recv=185&lost=0&retrans=0&sent_bytes=382378&recv_bytes=30844&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2950&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHKo8&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHKo8&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHKo8&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:17 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D0M6jY4w27wa41ulR5jNAq70%2F8z%2BxyMHwhdjbW1KeMGJlgiDJ3kJSwXcMMmbbpjobDQcLmr81sxQjU4sSSYFmknvBUhStjEuxR1UAzTE9wUdEKTwQS4cuHW2oZYBsO%2BXH8Fso2Qp7ZkyiA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966680e96b7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2087&min_rtt=803&rtt_var=1225&sent=486&recv=207&lost=0&retrans=0&sent_bytes=396094&recv_bytes=36940&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=17519&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gf983AiP6LU8SkYlCx3U239nsGIHNtZB2pujHDRxMFdowzCuVM4DBO5FO32y9OlfrBnxXbS2jhTxlNTg5DCJy7jPytWjVFT5U28B6Dirajri69USN8THPl7uT4C2UzVedhiIcdkWrAYW4g%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666254eac7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1937&min_rtt=803&rtt_var=937&sent=449&recv=182&lost=0&retrans=0&sent_bytes=377413&recv_bytes=30707&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2894&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I7AxmCRLBBi4JiBPYgaEFFBNqN29U17THgnSd8GZQyiOLKsqIMzH86f108hVz2YvZ8dswKXFT04DPEQ5utYflCvIwka7UNGuK3bX0cIgx1NVKDoLk55GDPmtDxVIM%2BWAU%2Bha1U4OvX0fUg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666250ea87130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2254&min_rtt=803&rtt_var=941&sent=435&recv=170&lost=0&retrans=0&sent_bytes=371791&recv_bytes=24357&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2841&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHDm&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHDm&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHDm&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 210 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EMi%2FKCXBmUZjgi688arhU%2BC4zw5GNZcSz02qFon3s%2BKuA9xl9xzojS8bgLKZvADTH2bKqFxKTRKKBXKUAlFkhpEc6D3Yk1adGTWQ2hSWdwi2YVJXYzj13JQFUwbRTXPRnqE0M%2FnlIYoA8g%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625aeb47130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1939&min_rtt=803&rtt_var=707&sent=451&recv=183&lost=0&retrans=0&sent_bytes=379556&recv_bytes=30753&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2919&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vt2g%2FJlPu7Kn82mEiQtLjTPZpYW7GuMsIBDb4JTgWD6yw3uUSOwaNXqW%2FEm0CwYZOranMpcRNPPJUqnE1K7P4myuLjvHN6co9wX4mwBCDJuiu8c6W26zTWRFjVkQkmt7EUJR3z1fZzbgwQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625cebd7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1557&min_rtt=803&rtt_var=719&sent=461&recv=188&lost=0&retrans=0&sent_bytes=387800&recv_bytes=32076&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2983&x=80"

	GET fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap	142.250.74.10	200 OK	17 kB
URL GET fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap IP 142.250.74.10:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73 ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type ASCII text, with very long lines (1572) Size 17 kB (16755 bytes) Hash 74291d8cdc492b4aad108fd3c974eee0 b3f38c2086316a13a9a9a689e9570846a3d5b1ec 9b941f94540dcb07a154305f1a7a6d6d92d495271e7d882028028a7facd566f7 HTTP Headers `GET /css2?family=Roboto:wght@400;500;700&display=swap HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Mon, 02 Jun 2025 10:52:00 GMT date: Mon, 02 Jun 2025 10:52:00 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET ireland.apollo.olxcdn.com/v1/files/qa3mvolxsraf-UA/image;s=750x1000	3.167.2.104	200 OK	116 kB
URL GET ireland.apollo.olxcdn.com/v1/files/qa3mvolxsraf-UA/image;s=750x1000 IP 3.167.2.104:443 ASN #0 Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerAmazon Subjectapollo.olxcdn.com Fingerprint63:90:C1:E1:7A:9F:62:61:85:B9:52:10:5F:C6:36:1C:B6:A9:92:B6 ValiditySat, 19 Oct 2024 00:00:00 GMT - Sun, 16 Nov 2025 23:59:59 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 750x1000, Scaling: [none]x[none], YUV color, decoders should clamp Size 116 kB (116324 bytes) Hash cb1e6fec9eeec275166b51647ef650ac 79487cb3e1fd57bbbe3a939a2c8e3f5a8222c261 4b468b36ed78470118ae8f55b10b8c1d7170e0c0acfe8b2a79bd7d5fac48aed6 HTTP Headers `GET /v1/files/qa3mvolxsraf-UA/image;s=750x1000 HTTP/1.1 Host: ireland.apollo.olxcdn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/webp content-length: 116324 date: Sat, 31 May 2025 13:43:10 GMT x-trace: b94c71e2-2eb0-48f3-9b21-721068ab68fb last-modified: Sat, 31 May 2025 13:43:10 GMT cache-control: public,max-age=604800 etag: "qa3mvolxsraf-UA" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS x-cache: Hit from cloudfront via: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P2 x-amz-cf-id: frPV5TgpOd0pbHYsKqrfAT9mX10eIjVsuQiKBWVFGdZeuXG_cwaIQA== age: 162530 X-Firefox-Spdy: h2

	POST samo.koraex.workers.dev/chatwoot-sdk/init	104.21.57.205	201 Created	1.6 kB
URL POST samo.koraex.workers.dev/chatwoot-sdk/init IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JSON text data Size 1.6 kB (1644 bytes) Hash 0f8d2b4d4724d0b196c8aa2048a2b7d2 d62479e93f041d5760c4c8c64d91eea7fb1fbc8c 68669283afb0d0821207b37671adc5261ff56bdacca62f80e0c75082c4ccb296 HTTP Headers POST /chatwoot-sdk/init HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 clientinfo: {"language":"en-US","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","timezone":0} Content-Type: application/json Content-Length: 113 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT content-type: application/json; charset=utf-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NzvrZc0mC68rBDCW76BYmOrcsSXPB2FN%2FvUirkNUETzPJaHpIVGyQDHZyWruQOhiIxsVxuFdQf9En1RJFcf0zJBFt1PrugLonNrTBWQrlOe2HNqHed6eaYYFeCwfcPMMvWXJJhJHHyJxLg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661fee437130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: gzip etag: W/"66c-1iR56T8EHVdgxMjGTZHup/sfvIw" strict-transport-security: max-age=15552000; includeSubDomains vary: Accept-Encoding access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1917&min_rtt=803&rtt_var=790&sent=388&recv=136&lost=0&retrans=0&sent_bytes=355348&recv_bytes=11640&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2114&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH2c	104.21.57.205	200 OK	118 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH2c IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 118 B (118 bytes) Hash 3ac4bb2f2577f47c5abd352e672ecc54 5bddf271d14aec0218005b6b5d5333cfb8b04da1 bfe39f3c5d0337e46010c64b46cf6584edca9ce85b684b8d0966dfa84c1da3ba HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH2c HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xJXTT9xpRq86xO8UwsNwn1SJF868CcDgstLvJgGQUKK7Zo8hCRuPTjEz2vbHY3NDcgWDGntSp4w3Udt%2FsTW59IjpIrPx9X2B8vAGULquK6GH6BpIxftNjkgxkkZjubQ5Y0uVx1be2nWlMA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666212e4f7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2204&min_rtt=803&rtt_var=998&sent=397&recv=141&lost=0&retrans=0&sent_bytes=361582&recv_bytes=12642&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2198&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH2r	104.21.57.205	200 OK	118 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH2r IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 118 B (118 bytes) Hash c12232cc06ab403bb9a7c7742904a303 68d1d6d29ea994d1f4a4545288eea9a1fa6fc265 61d891528f0f92e3296200d1afff46c6bdd5e879423d505e87f55afa04b00403 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH2r HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BSp9aLVPR7y6lzrALasC7tvmwFBYR2yBu4QWR1RjRT9SucKwOhXpFgIrUcTRRG7ninzTYeO3g5Dwh92IiJyptlSXlQM4I24kwsAgFxEn%2F97I8JMEs7mpDjAOmv0WcprbfyK7pXlKlaMitQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666213e507130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2204&min_rtt=803&rtt_var=998&sent=398&recv=141&lost=0&retrans=0&sent_bytes=362332&recv_bytes=12642&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2208&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPHEJ2EZ%2BhDGfpA7bRKlQur9Tmz%2BDHzPkBoILiul%2FGu63AQ8lqZEbrTO2QGILIGdE%2BRZyLzMcZnQSTg20%2B8SJzK1YKPAAdQoJwGu9I6HXW%2Fzj%2FaRIU%2BjwFml08XdoFZUexOcWX5JEoCHdg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625aeb57130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1720&min_rtt=803&rtt_var=786&sent=457&recv=186&lost=0&retrans=0&sent_bytes=383489&recv_bytes=31984&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2965&x=80"

	GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=42	104.21.57.205	200 OK	553 kB
URL GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=42 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JavaScript source, ASCII text, with very long lines (65474) Size 553 kB (553115 bytes) Hash 36fd0c9d6b6a7878bf17d86d3fb211ae 7abae0b028d1e32481462e3cceba6dc8ae9f7695 4a6413df121b40496049c5c5699acfb7d3bb34fc5444df579fc0ab61b731a6ec HTTP Headers GET /application/views/templates/_base/bootstrap/js/main.js?ver=42 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: text/javascript nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EbGuJ91z3eu1qG32O%2FlQnsB9hvkgdm%2FZlZICBd1QzdUy5STrxl%2Bc5fi3r2eGhU3t1wbUi%2B0ppSJglCMXvTvONssvUEzQhi51dMFdyF3CbUQU23fwiBf2EvviAgkGHyuNPgDAhKdRm9SmCA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661bee1e7130-OSL cf-cache-status: MISS accept-ranges: bytes cache-control: max-age=14400 content-encoding: gzip etag: "8709b-6346870336761-gzip" last-modified: Mon, 05 May 2025 19:23:43 GMT vary: Accept-Encoding server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2646&min_rtt=803&rtt_var=1492&sent=90&recv=116&lost=0&retrans=0&sent_bytes=19872&recv_bytes=9075&delivery_rate=2065037&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1562&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH3u&sid=vrXaG5ysXT7kPfhQAZ-u	104.21.57.205	200 OK	32 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH3u&sid=vrXaG5ysXT7kPfhQAZ-u IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 32 B (32 bytes) Hash 2b720721f58462e05f1817926427946f 3e8e0a99253bf2a791d2e38129106a8d4f2417db 9f808bb2fc7f358286681deb3ecc98be1662d95109273f3e3b38d9dde0d67e82 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH3u&sid=vrXaG5ysXT7kPfhQAZ-u HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 content-length: 32 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pMoYjwhZryCIMjF3aPcR9UexdF7vxIClRu5Oajiz82%2FoxlqTkhNq3Fdp7xFsE0%2Bjt1FaeDLAFDMz4ryljTyNluaCaTOQJty704GDl5un33EL2fd68yILU8xqCg6nM8DCymvEWPEQjTczLg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966621ce547130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * server: cloudflare vary: Accept-Encoding nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2778&min_rtt=803&rtt_var=1674&sent=408&recv=148&lost=0&retrans=0&sent_bytes=364544&recv_bytes=14696&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2330&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH71&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH71&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH71&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 214 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E0p9tmEbsA05yvao5TbG4OnEXxClj%2BOGNHykXGjxPOGNz0aZ0dOoOihUp4%2BHwKW4lTUsdCQkt0rip6%2FsHw2hl6gCO1QaA40JW3I%2Bp%2BVUEJQHdmTelaBjxpPvEY0TYMI3AAMlhR5uMLqZHA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666231e947130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2413&min_rtt=803&rtt_var=1572&sent=416&recv=154&lost=0&retrans=0&sent_bytes=366677&recv_bytes=17135&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2549&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vvRQVLgz%2BKG6RZaq%2FQwRnw4lhSoPsFNE901xL8G2MCq5U0iV5Holx84ThjAfydVfW0YXNXtzyLwwqyduAT68HHqSh%2B3YPZ8TaMKLJSk7T6n2X2gRMq8KPaNuByOO0A3tuaLZ26qXX1wLhw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666254eae7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2072&min_rtt=803&rtt_var=889&sent=446&recv=180&lost=0&retrans=0&sent_bytes=375240&recv_bytes=30026&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2886&x=80"

	GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2	142.250.74.35	200 OK	23 kB
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type Web Open Font Format (Version 2), TrueType, length 22796, version 1.0 Size 23 kB (22796 bytes) Hash 40ee6416c01f7a00cb9e1c3cef551f68 dff6282f80563c09ed0d584f15fdc0fc0078731f c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb HTTP Headers GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 22796 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 29 May 2025 13:32:28 GMT expires: Fri, 29 May 2026 13:32:28 GMT cache-control: public, max-age=31536000 last-modified: Wed, 08 Jan 2025 18:23:10 GMT content-type: font/woff2 age: 335972 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2	142.250.74.35	200 OK	23 kB
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type Web Open Font Format (Version 2), TrueType, length 22796, version 1.0 Size 23 kB (22796 bytes) Hash 40ee6416c01f7a00cb9e1c3cef551f68 dff6282f80563c09ed0d584f15fdc0fc0078731f c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb HTTP Headers GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 22796 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 29 May 2025 13:32:28 GMT expires: Fri, 29 May 2026 13:32:28 GMT cache-control: public, max-age=31536000 last-modified: Wed, 08 Jan 2025 18:23:10 GMT content-type: font/woff2 age: 335972 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH3p&sid=vrXaG5ysXT7kPfhQAZ-u	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH3p&sid=vrXaG5ysXT7kPfhQAZ-u IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH3p&sid=vrXaG5ysXT7kPfhQAZ-u HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 2 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZmCbjjNxvpa17Ij6uznnSTJbOfhUtEl6ebj%2F70yUtbNg9F%2B3pFA9LuNnGrdswvsiYIz99ITejEClxiCT5bOhdDQhImf8iHDDHkMIlAAE9zPlqs6nk6WZFQ6nyLfUpgwsGRpBWBOMh1RpcA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666219e537130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2075&min_rtt=803&rtt_var=1006&sent=404&recv=146&lost=0&retrans=0&sent_bytes=363213&recv_bytes=14606&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2294&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHBj&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	1.2 kB
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHBj&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type data Size 1.2 kB (1163 bytes) Hash 8f1ad08fa646ff1f54f623b336b51545 ce15ecf37097ca24bcb0070bf6c491ce1b756cd7 6a946765ef2eb29e7b734f360e9d8608f4ccdf94b510c8f97876702aee795d1a HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHBj&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 content-length: 285 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5eJY2SWM6dl8WjeyABDzu%2BYrKvlhhLpgYv0xYZWHVKIfPjl%2BSvT2UCKvreXcJFaNW1y4LSgA6m69rLy6JGSJifIFt7KfRRm5WamXS27dOLaMTmY%2FWmebGOZrWZ4grUWV3WGeSHB2sUtD8A%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966624fea77130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: gzip vary: accept-encoding server: cloudflare nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2446&min_rtt=803&rtt_var=744&sent=431&recv=167&lost=0&retrans=0&sent_bytes=369737&recv_bytes=23041&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2814&x=80"

	GET samo.koraex.workers.dev/link_card/22e91569	104.21.57.205	200 OK	18 kB
URL User Request GET samo.koraex.workers.dev/link_card/22e91569 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (17271), with no line terminators Size 18 kB (17878 bytes) Hash 8ef68873d2687dc363ae05aab97e2985 7da0808c815bfbd9877f1fc020e6baaf500faf04 7edfb4f9c1469ab093325e615204dfe7576f5e77a70b46d9f7b7d1afb511d667 HTTP Headers `GET /link_card/22e91569 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Mon, 02 Jun 2025 10:51:59 GMT content-type: text/html; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JaBQH4XiM%2BzogsMfSJ5rfMm%2B5wuHSCRWjp4U8R0XEX1tNRLrZZkrq9y3BzNn0fLXq5x1bkqJvD1ELtKSIW3JAhuIu%2BLnR3uMvgTra0xth4yEmfNmX1WSwGWfcTUKYoKs7W7Jqk3rwKT9FA%3D%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare cf-ray: 949666116c62569a-OSL cf-cache-status: DYNAMIC cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT content-encoding: br vary: Accept-Encoding pragma: no-cache set-cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j; Path=/; Max-Age=31536000; Expires=Tue, 02 Jun 2026 10:51:59 GMT alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6464&min_rtt=504&rtt_var=11469&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1136&delivery_rate=6522522&cwnd=254&unsent_bytes=0&cid=7ca8d8402dde54e4&ts=376&x=0" X-Firefox-Spdy: h2

	GET samo.koraex.workers.dev/config/22e91569?page=buy	104.21.57.205	200 OK	6.0 kB
URL GET samo.koraex.workers.dev/config/22e91569?page=buy IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with very long lines (5960), with no line terminators Size 6.0 kB (5960 bytes) Hash d6b0e60a1163dbb6ffcd73d9116d69ca 394e7d7f3a3b7c350b9c60fa7accb08519012e7a 7523a0a64453b178066a933658dd7ec47a67930df8872bb65ba15a75dd58245f HTTP Headers `GET /config/22e91569?page=buy HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: text/html; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AbB1eHp%2FfWUWnJZ%2F%2F3u%2FnP60egOr6eXtr8l8Lmtmecc13j3SS690aH9vRYp1nUCt8D%2FYNjzGS8DeADdd2LrC3GuSokCr2hEtw3kSlZRRR6RkCYsTkaenjeOGOGLGh2Eg89O5FajPQB%2FD3g%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966619ce017130-OSL cf-cache-status: DYNAMIC cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT vary: Accept-Encoding pragma: no-cache x-decompressed-content-length: 5960 content-encoding: br server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3501&min_rtt=803&rtt_var=2244&sent=71&recv=105&lost=0&retrans=0&sent_bytes=9568&recv_bytes=6836&delivery_rate=1202431&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1261&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6p&sid=vrXaG5ysXT7kPfhQAZ-u	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6p&sid=vrXaG5ysXT7kPfhQAZ-u IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6p&sid=vrXaG5ysXT7kPfhQAZ-u HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 214 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30vilJiSw0ZPRAG4I5alVwmsfL6RfdnyIn%2F06BZqWtm1iXHfimMsaYBEmt7LzskLqSF1DK8Sq0%2FrMKyS9VkyUnQmNulZ4NWSGwxoTummwudfi6KB%2FAn2bGiUV31SNc%2BAC1m9Dbslj%2BuJ2g%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666231e937130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=803&rtt_var=1655&sent=414&recv=153&lost=0&retrans=0&sent_bytes=366006&recv_bytes=17090&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2518&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8GWjm1rAT%2FsA8Hz8qvNgaV8NGP6iI97kNVuJFE6n1uA6%2BiHlEI9JZYYcI0cjgFwN4ibc5EWbUP4j5g8MdxRuoQl9VuCXIsmhq6ZVNROy9SkYIoEhyBJ0vtAq9JNNsg28RODiWbNBMzxBJQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666255eaf7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1939&min_rtt=803&rtt_var=707&sent=450&recv=183&lost=0&retrans=0&sent_bytes=378483&recv_bytes=30753&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2901&x=80"

	GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2	142.250.74.35	200 OK	40 kB
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0 Size 40 kB (40128 bytes) Hash 9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2 HTTP Headers GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 40128 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 29 May 2025 10:03:46 GMT expires: Fri, 29 May 2026 10:03:46 GMT cache-control: public, max-age=31536000 age: 348494 last-modified: Wed, 08 Jan 2025 18:23:10 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHDl&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHDl&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHDl&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:07 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wEON3clxlkzR2jgXyQ0FqLW9IC%2FpM7B1itQtlq%2FtZcNwi6%2FnRRcTcY5ll%2FIwVCHa33Hcg%2FXhjaUNd1e8N47XNRpYcB2w5%2BpdkKvvvVJ0B2skfkHFdUus1XL91%2BbBG4DMhfWYW%2FLMzEWEUQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625aeb37130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2103&min_rtt=803&rtt_var=1398&sent=465&recv=191&lost=0&retrans=0&sent_bytes=389571&recv_bytes=32867&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=7471&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxjyALUtdKJxJIrmAlTb%2FpjQuhjjnLgyE5GU0z2PhvKjPvo9r%2FbngpXONsxNWCHM24GMlDoZx2yBjxTueju5MY8HjOzpTdD6iietW6c0Q6Tu6f6F66dEzHg8vM1HguOTFyXtb2cdufgO1g%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625aeb67130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1839&min_rtt=803&rtt_var=730&sent=453&recv=184&lost=0&retrans=0&sent_bytes=380228&recv_bytes=30798&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2930&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJa7&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJa7&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJa7&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:12 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zGMUapFZx3TuDY6yKUCA99A9a3CwfvruiiOCxI4kh2N5FzDStVM0TKGZ12oykyGXwlc3wvCpJG7m%2FD%2B%2Fe27ByVMgab46YArNIQSIUjKBXwWSJ0QhfzrJuUSgD1KuTMPeho4wWdIiXjgmiQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966661b8917130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1942&min_rtt=803&rtt_var=896&sent=478&recv=201&lost=0&retrans=0&sent_bytes=393666&recv_bytes=35198&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=12523&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZLOnCoVFm0gbXUL2GQVVw2VxUz7GMjtcIvt%2BL%2FfpyQEp7CAIOf8TzVXTzkQOZ6CQsyWAmZX%2FgZBl4ciogfSIzG%2Fj6CN39EsJG9Y1D7Q3md%2BUKITXXwr3KavRcb2lURtCBbCsrlBciseetQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625cebc7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1620&min_rtt=803&rtt_var=789&sent=460&recv=187&lost=0&retrans=0&sent_bytes=386722&recv_bytes=32030&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2981&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHINO&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHINO&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHINO&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:12 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7sggVGrvB9bq2EAhEtO7F7slfC41BMJ%2BKsbhMkCoHz%2FHUGcHSW4hPtmPUUzPeteiyTmEzL8WedRTtn6dCxUSxTecHl4CvHPhbhVWAvIJ1ilvEx2rSamF7aS4cTblhtg52XsB4AFCjCOnRw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666430fb17130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1902&min_rtt=803&rtt_var=891&sent=474&recv=198&lost=0&retrans=0&sent_bytes=392150&recv_bytes=34654&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=12455&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJZL&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJZL&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJZL&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 192 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:12 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=txC%2FqBBroB5Ovk9vnEriTytg%2FSDW%2FXJo8sn%2F9IRPcdwYzaLBHPwIdW8v5JxS8jfwJACk04uaPnRL1qFyEelAxPNhpLOHrimiCxEJpg9wedQ06vcChFbroO9gSxK7r6pl6HbfM8TSILbICg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966661688e7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1812&min_rtt=803&rtt_var=848&sent=477&recv=200&lost=0&retrans=0&sent_bytes=393024&recv_bytes=35152&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=12477&x=80"

	GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2	142.250.74.35	200 OK	23 kB
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type Web Open Font Format (Version 2), TrueType, length 22796, version 1.0 Size 23 kB (22796 bytes) Hash 40ee6416c01f7a00cb9e1c3cef551f68 dff6282f80563c09ed0d584f15fdc0fc0078731f c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb HTTP Headers GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 22796 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 29 May 2025 13:32:28 GMT expires: Fri, 29 May 2026 13:32:28 GMT cache-control: public, max-age=31536000 last-modified: Wed, 08 Jan 2025 18:23:10 GMT content-type: font/woff2 age: 335972 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH47&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH47&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH47&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 2 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rQUbDex0UHrKxheO1i73XbStydGPp3nubA24xWb6oqVW8OtzwIO6IHJYMspiTjbYjf00r4ki8JWJIPVe5Yd1V8skrBQcXtV%2BAtm5gUOewQr6M4M1aX%2BO5u111fZvqL9sI0gk0e3EQjNqeg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966621de557130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2669&min_rtt=803&rtt_var=1941&sent=406&recv=147&lost=0&retrans=0&sent_bytes=363878&recv_bytes=14651&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2312&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=krT2vDNp1oDJ1c3OfTiwvphW62ArQVDNSOpk32hr61Rx3gYjK%2FFviY%2BmLNjAHarns8kZblyaSE4zy81F%2F3XWXqEyh1LrNXkd6uVpqmJTTN0QPGozqJIHUAxcs%2BU9Veu8pxUIPC5E7yqWJQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666250ea97130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2254&min_rtt=803&rtt_var=941&sent=434&recv=170&lost=0&retrans=0&sent_bytes=370715&recv_bytes=24357&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2838&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7EHGoUuKETNuIP2QAi6MLN0gyhHPPJKwXpt0%2F3pCy1x5gk52g7Fg%2FkXh8mKEcYCY%2F%2Bn7p%2Fo3oJyCIILLGKMoPqbOai3J%2FpBE1vhznWsWIBXosL%2BTg84Cl4zyqVFFV8Ipk64MxdJ1BCLcCg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666254eaa7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2247&min_rtt=803&rtt_var=720&sent=443&recv=178&lost=0&retrans=0&sent_bytes=373056&recv_bytes=28748&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2883&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xslPkzDbavrWDcPcijjPluHp93o1De9YzBXMoNeTFS1AEJ33mI5GRtJZs5%2BN%2BKm4KtMKMzUyVcZzbjL5Zm8JRjp1VLfRHuaRmD3YKgiFz3hMhLeVTDWq21dhlj35BvJ2Ii0QCEOlZYCKdg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625aeb77130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1620&min_rtt=803&rtt_var=789&sent=458&recv=187&lost=0&retrans=0&sent_bytes=384573&recv_bytes=32030&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2975&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHFF&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHFF&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHHFF&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 632 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y31NYpoX2oyBIEYKp4Oi7NB1XCqp9ctJq8xB%2FSq5bUXdNiUjSKv8eAJkT0%2FNgMV7mEGvPMIP8ctwTB6hCZLGtks6K6O1JJhcPOHrWjBzEdJQshLhoI2ba9bxE8vNzupUYzVhH0EK%2BGiOQg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666263ec17130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1755&min_rtt=803&rtt_var=936&sent=462&recv=189&lost=0&retrans=0&sent_bytes=388874&recv_bytes=32122&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=3005&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJbB&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJbB&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHJbB&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:17 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=URh%2FaXdFx5UxlRXc8tx2BjlpF16JKM0Wv%2FYlpIq8rHf7D08NEf3Pj%2BT30kGo%2FHx%2FP8tsFWCj3rWRdxowqAhvfR%2Bn1BNt6qOx9OWitmaM1MUd0llUQ%2BnDuiWTuCuDYJQrrQu55u9ZILoLAQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496666228937130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1919&min_rtt=803&rtt_var=719&sent=482&recv=204&lost=0&retrans=0&sent_bytes=394571&recv_bytes=36395&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=17446&x=80"

	GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2	142.250.74.35	200 OK	40 kB
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0 Size 40 kB (40128 bytes) Hash 9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2 HTTP Headers GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 40128 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 29 May 2025 10:03:46 GMT expires: Fri, 29 May 2026 10:03:46 GMT cache-control: public, max-age=31536000 age: 348494 last-modified: Wed, 08 Jan 2025 18:23:10 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	POST samo.koraex.workers.dev/chatwoot-sdk/init	104.21.57.205	201 Created	1.6 kB
URL POST samo.koraex.workers.dev/chatwoot-sdk/init IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JSON text data Size 1.6 kB (1644 bytes) Hash 0f8d2b4d4724d0b196c8aa2048a2b7d2 d62479e93f041d5760c4c8c64d91eea7fb1fbc8c 68669283afb0d0821207b37671adc5261ff56bdacca62f80e0c75082c4ccb296 HTTP Headers POST /chatwoot-sdk/init HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 clientinfo: {"language":"en-US","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","timezone":0} Content-Type: application/json Content-Length: 113 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT content-type: application/json; charset=utf-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pITqOVnzN%2FUzfYUSuqAnTizTAHgkbAwJUp03N5cMsTqSJ7wRq%2FYa9IUIvypsdlOGRxjpcHbAdTO5dNwCNRJtpjkTh5p4JaMBvbwYVFicsQNR8jE3xkwUQH0jpS3BbXGu49PIejezj3YDGw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661fee427130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: gzip etag: W/"66c-1iR56T8EHVdgxMjGTZHup/sfvIw" strict-transport-security: max-age=15552000; includeSubDomains vary: Accept-Encoding access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2060&min_rtt=803&rtt_var=878&sent=393&recv=137&lost=0&retrans=0&sent_bytes=359481&recv_bytes=11686&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2127&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6M&sid=vrXaG5ysXT7kPfhQAZ-u	104.21.57.205	200 OK	1 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6M&sid=vrXaG5ysXT7kPfhQAZ-u IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type very short file (no magic) Size 1 B (1 bytes) Hash 1679091c5a880faf6fb5e6087eb1b2dc c1dfd96eea8cc2b62785275bca38ac261256e278 e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6M&sid=vrXaG5ysXT7kPfhQAZ-u HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 content-length: 1 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ay26J3I2juEikUS%2FUE%2Fx3BlBsOrxjFNekejM32unrUSmREH%2FEBgj%2FReC46DOv5SBuyS2nehyJKf5j55EIooZOaxqG3syEZF3cQjAp%2FiFc5eUqgCacQ%2B%2F1Axg8%2F04Kzi3blv%2BrokC%2BLbV3g%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966622ae8e7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * server: cloudflare vary: Accept-Encoding nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2381&min_rtt=803&rtt_var=1242&sent=420&recv=157&lost=0&retrans=0&sent_bytes=367401&recv_bytes=18641&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2596&x=80"

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6P&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6P&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH6P&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l2YuMBk%2FcPsqyV8eeQnRVJvncguvI3C5u%2FRkz3WatItx2JvMyKmQAa86RrT5am8FGrngWwbbC7eor4yPfkZckWr%2F5jvor7hzN6WagGOlOBTYveXO%2FoFRM09H8VzqitEJKbUWiEoO4sqjpA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966622ae907130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2431&min_rtt=803&rtt_var=953&sent=423&recv=159&lost=0&retrans=0&sent_bytes=368730&recv_bytes=18732&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2643&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HEP6Xh76ZssME%2F5RhGQm7GdfMUlta0mHxgPvD%2Bom%2Fg3NDQO5bnAL1XfZpVqkHVcizu83SJuIQ7TsFbj1vzKoOTnlLnaPx%2Fb7vmtCS7nt0KujMtDxhhyNJzM1%2FnSZWdvdqbc5kbixRWl0kA%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966625beb87130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1620&min_rtt=803&rtt_var=789&sent=459&recv=187&lost=0&retrans=0&sent_bytes=385646&recv_bytes=32030&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2979&x=80"

	GET samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0	104.21.57.205	200 OK	346 kB
URL GET samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65204), with no line terminators Size 346 kB (345942 bytes) Hash 56cdf76be29752099bf361a33ead2a9b 6ace66838ea5fbb42e05d6acba9b38fd6ebd338e d914bd19f8cc82cc359c40abc11fb3d49f2cf4fe5b402bed38b9e3261cf86765 HTTP Headers GET /application/views/templates/_base/script.js?ver=1.14.0 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Mon, 02 Jun 2025 10:52:00 GMT content-type: text/javascript nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fEOEhJGhZ8jlFTtxr%2FPmEvnPFSndMCtsCYE9XLR5Sw3xQnazEu9CozJs5XbclrKGBhGBsOainEBMPYjpIhSh1sw9%2Fx77U%2BmxISD%2B4z2wrscllLYi8J53yvN6OISzZG8I2Xv2u19oN9oASw%3D%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare cf-ray: 94966615dc8c569a-OSL cf-cache-status: HIT accept-ranges: bytes age: 0 cache-control: max-age=14400 content-encoding: gzip etag: "54756-636948d12769d-gzip" last-modified: Mon, 02 Jun 2025 10:51:50 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=822&min_rtt=396&rtt_var=413&sent=49&recv=40&lost=0&retrans=0&sent_bytes=45932&recv_bytes=1712&delivery_rate=30503097&cwnd=257&unsent_bytes=0&cid=7ca8d8402dde54e4&ts=990&x=0" X-Firefox-Spdy: h2

	GET samo.koraex.workers.dev/config/22e91569?page=buy	104.21.57.205	200 OK	6.0 kB
URL GET samo.koraex.workers.dev/config/22e91569?page=buy IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with very long lines (5960), with no line terminators Size 6.0 kB (5960 bytes) Hash d6b0e60a1163dbb6ffcd73d9116d69ca 394e7d7f3a3b7c350b9c60fa7accb08519012e7a 7523a0a64453b178066a933658dd7ec47a67930df8872bb65ba15a75dd58245f HTTP Headers `GET /config/22e91569?page=buy HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: text/html; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ly%2BP66kpiHFy9VeP2gQeDQC3oJkG1Dg2mnGCoLPQiKHLgGPZ1bm8WGzQTHdcm8RKm327ia8QNw%2FXxMcU8pncEZrl9d6tmESXL52azKJTx12UPIj8pFW90e63ZsDFupVPWFeY3xqiQNYIqQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966619bdff7130-OSL cf-cache-status: DYNAMIC cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT vary: Accept-Encoding pragma: no-cache x-decompressed-content-length: 5960 content-encoding: br server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3747&min_rtt=803&rtt_var=2337&sent=68&recv=104&lost=0&retrans=0&sent_bytes=6755&recv_bytes=6791&delivery_rate=581077&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1240&x=80"

	GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/css/main.css?ver=31	104.21.57.205	200 OK	14 kB
URL GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/css/main.css?ver=31 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with very long lines (13564), with no line terminators Size 14 kB (13564 bytes) Hash b728ca95c60bb09b4aeeeae9d2402840 af87a91c2abe63cda56a4e6fb99c128ad9664f90 dae5aaefa20880c6be90637694f4e2f6d1b2d1ddd22ae154b728fe5c855786aa HTTP Headers GET /application/views/templates/_base/bootstrap/css/main.css?ver=31 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: text/css content-length: 2968 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZbDsH2JVRvUqPU5IpGSCFqlOS3vQ%2BhkrOJKcjFrFOVKjGgej4JzZCVEp2E%2BE4dleFeBq6M2GMZr5enEzNT9sQGiepW%2BNm4FlS7af73m6u7hgvTThBLLw%2Fgf%2Bl0US6eFK3TQBR19seLAOew%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661bbe1a7130-OSL cf-cache-status: MISS accept-ranges: bytes cache-control: max-age=14400 content-encoding: gzip etag: "34fc-6346870337ed1-gzip" last-modified: Mon, 05 May 2025 19:23:43 GMT vary: Accept-Encoding server: cloudflare nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2840&min_rtt=803&rtt_var=1472&sent=86&recv=115&lost=0&retrans=0&sent_bytes=16137&recv_bytes=9030&delivery_rate=1273725&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1537&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3Cj0bHyhqKuGJoe%2BoGSfxvqnnNKdDSuDUfPx%2BkPjmZ%2BLoPGFAqiAPkkRLjVmTKjR3RqOcRFmpnJKh85jL3XW0G5mJa161BbIXe1gwaJmvDRVf%2FDM21X4M3jEph6IeGqqMvvBvxEAX8WEQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666255eb07130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2072&min_rtt=803&rtt_var=889&sent=445&recv=180&lost=0&retrans=0&sent_bytes=374163&recv_bytes=30026&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2886&x=80"

	GET samo.koraex.workers.dev/application/views/templates/olxua/assets/css/fWn22riy.css	104.21.57.205	200 OK	3.4 kB
URL GET samo.koraex.workers.dev/application/views/templates/olxua/assets/css/fWn22riy.css IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with very long lines (3442) Size 3.4 kB (3443 bytes) Hash 4f2e3fb07046f6de321622c02925b957 d59ed026b9c6f3cd3742c97a98a7caa1e355d2b5 75e26440adfda0ebcb54abc523d0e35352416d4f4d7a142c9950888d5e147edb HTTP Headers GET /application/views/templates/olxua/assets/css/fWn22riy.css HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Mon, 02 Jun 2025 10:52:00 GMT content-type: text/css content-length: 1282 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G3bpLsrconB7Ug3JFoJQjEfkGReTI97HoMOob3%2FP9TaP1WpVsT22i7EyJSyUlBbQpoQgeCp4k%2FygkDCwIpLPE1z7e1kvJKankBqm4GsE6k7KF7d%2FjYe4YoXaSoJfUyoA4HoOQNtdN0KpYA%3D%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare cf-ray: 94966615cc7e569a-OSL cf-cache-status: EXPIRED accept-ranges: bytes cache-control: max-age=14400 content-encoding: gzip etag: "d73-63468703f989a-gzip" last-modified: Mon, 05 May 2025 19:23:44 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3188&min_rtt=467&rtt_var=5261&sent=19&recv=21&lost=0&retrans=0&sent_bytes=9990&recv_bytes=1712&delivery_rate=14577181&cwnd=257&unsent_bytes=0&cid=7ca8d8402dde54e4&ts=966&x=0" X-Firefox-Spdy: h2

	GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=97	104.21.57.205	200 OK	553 kB
URL GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/js/main.js?ver=97 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JavaScript source, ASCII text, with very long lines (65474) Size 553 kB (553115 bytes) Hash 36fd0c9d6b6a7878bf17d86d3fb211ae 7abae0b028d1e32481462e3cceba6dc8ae9f7695 4a6413df121b40496049c5c5699acfb7d3bb34fc5444df579fc0ab61b731a6ec HTTP Headers GET /application/views/templates/_base/bootstrap/js/main.js?ver=97 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: text/javascript nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=df53RaF6BmTOP8EOWR%2FI2LwxF3IfxgXw2ILZ98PgIUsGsrpOgYmgjAj9IDfMPTAn7MrcGBpqYvk9esZe9dPq9M0%2Fi7%2BqxE2IVyNKp8yo8R1LYbSC5XByIvWeJ3VonPO9ndjfCToop5SOPQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661bce1b7130-OSL cf-cache-status: MISS cache-control: max-age=14400 content-encoding: gzip etag: "8709b-6346870336761-gzip" last-modified: Mon, 05 May 2025 19:23:43 GMT vary: Accept-Encoding server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2201&min_rtt=803&rtt_var=1337&sent=108&recv=119&lost=0&retrans=0&sent_bytes=38578&recv_bytes=9214&delivery_rate=4175641&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1595&x=80"

	GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/css/main.css?ver=10	104.21.57.205	200 OK	14 kB
URL GET samo.koraex.workers.dev/application/views/templates/_base/bootstrap/css/main.css?ver=10 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with very long lines (13564), with no line terminators Size 14 kB (13564 bytes) Hash b728ca95c60bb09b4aeeeae9d2402840 af87a91c2abe63cda56a4e6fb99c128ad9664f90 dae5aaefa20880c6be90637694f4e2f6d1b2d1ddd22ae154b728fe5c855786aa HTTP Headers GET /application/views/templates/_base/bootstrap/css/main.css?ver=10 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: text/css content-length: 2968 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=43wy2DPMxrLR92%2BZ3CkVcxEGkn%2ByyHD8JH9dkBy4oG4a%2FmMQ8jOZadtOuQQzcu8m2LkRjsYLcsde6tMdq9LUsacQOGTObPK9w6pPKwF6Xn8L5Wd1eEQoznO54kPjAmA%2B76mvHkNviSmEtg%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661bee1d7130-OSL cf-cache-status: MISS accept-ranges: bytes cache-control: max-age=14400 content-encoding: gzip etag: "34fc-6346870337ed1-gzip" last-modified: Mon, 05 May 2025 19:23:43 GMT vary: Accept-Encoding server: cloudflare nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2646&min_rtt=803&rtt_var=1492&sent=90&recv=116&lost=0&retrans=0&sent_bytes=19872&recv_bytes=9075&delivery_rate=2065037&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1562&x=80"

	GET wss://samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=websocket&sid=vrXaG5ysXT7kPfhQAZ-u	104.21.57.205	101 Switching Protocols	0 B
URL GET wss://samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=websocket&sid=vrXaG5ysXT7kPfhQAZ-u IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=websocket&sid=vrXaG5ysXT7kPfhQAZ-u HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://samo.koraex.workers.dev Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: bMWCsKxeW6LEou53by2/eQ== DNT: 1 Connection: keep-alive, Upgrade Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache Upgrade: websocket HTTP/1.1 101 Switching Protocols Date: Mon, 02 Jun 2025 10:52:02 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: i1PreW/jNENwx2J5iyk6aCxghbQ= Sec-WebSocket-Extensions: permessage-deflate Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNNzLix1SoRK9p8myFY%2BcDa9sldP%2BgoYSIhXamsFZTLWiEAYFYs5md0uaYyWPcQKBA9OKKjlZGB7ijmmKM6Yk5UP3elibKEVzpD4e7q6HMZJiTpaTLRV9jb3qVEZGCbTDufbtjLBaiEBiQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 949666226ce356bf-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=607&min_rtt=482&rtt_var=292&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3131&recv_bytes=1413&delivery_rate=4947608&cwnd=252&unsent_bytes=0&cid=2e06a7eaad1a2837&ts=54&x=0"

	GET wss://samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=websocket&sid=dCg1GJy8QBCeaDRdAZ-v	172.67.192.51	101 Switching Protocols	0 B
URL GET wss://samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=websocket&sid=dCg1GJy8QBCeaDRdAZ-v IP 172.67.192.51:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=websocket&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://samo.koraex.workers.dev Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: oIZ2fkXeLLhEECF9WhOKDw== DNT: 1 Connection: keep-alive, Upgrade Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache Upgrade: websocket HTTP/1.1 101 Switching Protocols Date: Mon, 02 Jun 2025 10:52:02 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: QcQp7XRS7S/iAkQ7MPSG3WWE2mA= Sec-WebSocket-Extensions: permessage-deflate Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OxIGfjTnGI7W7mtsAF7O879WVFjJd86hXwUNVyNLAcLlw9vVcY2v6Ybas9yWxwanQJ%2F9ltRwA2cceCTYf3sR2mIJygeoOapEUE8dutKu%2FqBPiXq332i4JTEJOgboW8Um%2BOBRNNtCB97C6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 949666230988b4ee-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=613&min_rtt=563&rtt_var=196&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3132&recv_bytes=1413&delivery_rate=6016620&cwnd=252&unsent_bytes=0&cid=40d51f9b591c33c9&ts=34&x=0"

	GET samo.koraex.workers.dev/application/views/templates/olxua/assets/img/PzKR3WJa.png	104.21.57.205	200 OK	21 kB
URL GET samo.koraex.workers.dev/application/views/templates/olxua/assets/img/PzKR3WJa.png IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type PNG image data, 1183 x 399, 8-bit colormap, non-interlaced Size 21 kB (21407 bytes) Hash 1274fa5f993ad058dcfb4224c6671973 c96a67d660d5f0f0c93bf1af5548d87be7023864 21487ec472989c57a3c4822fedb04540f43ab05936fda53a1d8dff1053bee213 HTTP Headers GET /application/views/templates/olxua/assets/img/PzKR3WJa.png HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Mon, 02 Jun 2025 10:52:00 GMT content-type: image/png content-length: 21407 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lWLNAQiDmwzjm18K14S7BO8ylJni86GUbSDvI1MvqAfRr3P1iO6cjOsc3l5BZ6sUTAknbOJ%2Fvp0Nt0WeaSSMh5PgDKWo9fsOC1z7%2BJAY5ds5YBGeC%2BFeYYadzWmvDCdnfpUreej4Y29VxQ%3D%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare cf-ray: 94966615cc84569a-OSL cf-cache-status: REVALIDATED accept-ranges: bytes cache-control: max-age=14400 etag: "539f-63468703f88f9" last-modified: Mon, 05 May 2025 19:23:44 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2275&min_rtt=396&rtt_var=3595&sent=22&recv=24&lost=0&retrans=0&sent_bytes=11876&recv_bytes=1712&delivery_rate=14577181&cwnd=257&unsent_bytes=0&cid=7ca8d8402dde54e4&ts=975&x=0" X-Firefox-Spdy: h2

	GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHIMD&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	195 B
URL GET samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHIMD&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 195 B (195 bytes) Hash 7bfce3a7b0da42f3458a8e3002847b31 0756751549600a2f6bb5253baace4b5e9087fde3 27b437aee2a72bf44d70d15bd28b132ee94552ee01e27c3a1071fd20400db196 HTTP Headers GET /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHIMD&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:07 GMT content-type: text/plain; charset=UTF-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kchdo6NBvrju67Qd1GSznn5DNrc0hr9wD40RbmlPy055XJ1iDQOz3oAnTYU8okzuNDudttIikjVPk1%2Ffcss9kb0%2BZUtkwotKYdO5HeP79PTNHqzeSM4FYf9Ym4vG8UgneA%2FtMQUZDasLgw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666428faf7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1963&min_rtt=803&rtt_var=1328&sent=468&recv=193&lost=0&retrans=0&sent_bytes=391077&recv_bytes=33365&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=7545&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHILC&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHILC&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHILC&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 192 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:07 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tl9tzAaGTMq48OwHa2Z%2BOm87XM5h55gNFcKKtZyqxVc2u%2F9jOVgA7uSBbuPLEvWg80o4tH6EQG7Lqx4yTkmXbOsdvIVXAvzxYfcpv6iS92qpVbwbe%2BKmzx4RdEFJgYLJ%2F2eQ6ybEcJaCjw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666421fad7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2103&min_rtt=803&rtt_var=1398&sent=466&recv=191&lost=0&retrans=0&sent_bytes=390400&recv_bytes=32867&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=7484&x=80"

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHKnT&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHKnT&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHKnT&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 192 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:17 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sYVd%2BuS20AidFIFJIzk0H0Yo38jPdu3mcbaXEmUQpsDzIMfsxSfKtDx5%2BOSkMTqYJ084Fp0lEXZkBEIqcNs%2BRUnxVoCtYPAT5gJO828nKXsZ6wAEV9D8VOeJ%2FxfiQn%2FRpOP7U35o5mcnqQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966680996a7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1919&min_rtt=803&rtt_var=719&sent=484&recv=205&lost=0&retrans=0&sent_bytes=395425&recv_bytes=36848&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=17469&x=80"

	GET samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0	104.21.57.205	200 OK	346 kB
URL GET samo.koraex.workers.dev/application/views/templates/_base/script.js?ver=1.14.0 IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65204), with no line terminators Size 346 kB (345942 bytes) Hash 56cdf76be29752099bf361a33ead2a9b 6ace66838ea5fbb42e05d6acba9b38fd6ebd338e d914bd19f8cc82cc359c40abc11fb3d49f2cf4fe5b402bed38b9e3261cf86765 HTTP Headers GET /application/views/templates/_base/script.js?ver=1.14.0 HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Mon, 02 Jun 2025 10:52:00 GMT content-type: text/javascript nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BuPaKbgL1Eh0dSTLskefVsNaYQpX5XEEjw36PtEvGZM%2BxMOj%2FRVrHF4bUb%2BT7IcrRsJwd2%2Bgh3oIen4F8dQIsbqmI3f1%2Bgfzpofx6mDo505JzAiwGOUldEPaHDqviHSN3wtrkPVvL59DXQ%3D%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare cf-ray: 94966615cc82569a-OSL cf-cache-status: MISS accept-ranges: bytes cache-control: max-age=14400 content-encoding: gzip etag: "54756-636948d12769d-gzip" last-modified: Mon, 02 Jun 2025 10:51:50 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=821&min_rtt=396&rtt_var=514&sent=39&recv=38&lost=0&retrans=0&sent_bytes=34180&recv_bytes=1712&delivery_rate=30503097&cwnd=257&unsent_bytes=0&cid=7ca8d8402dde54e4&ts=982&x=0" X-Firefox-Spdy: h2

	POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH9J&sid=dCg1GJy8QBCeaDRdAZ-v	104.21.57.205	200 OK	2 B
URL POST samo.koraex.workers.dev/socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH9J&sid=dCg1GJy8QBCeaDRdAZ-v IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers POST /socket.io/?identifier=AV4Aof_fpx_1xx33T13R_drfrtrnlvZ5vzvnfTkyVcMnFhjMqabfHR0Yxw9PPBct2VoY9DcjrR7XD8zIdVC0TbuA9eTGSKRfN4U45NLXjbIRYRiXYAx4juODB4z2e0nJe4JC&EIO=4&transport=polling&t=PSmHH9J&sid=dCg1GJy8QBCeaDRdAZ-v HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-type: text/plain;charset=UTF-8 Content-Length: 912 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:02 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9MrIb6h%2FQrZJA01nJf1EDtgrLzC4B%2BwhHpFeunEXvj6UXd51s4PyeIAE2UZ9jyjVTLVdqshh98H5817dUHdTnWg1q%2Fu%2FlDFINOcTXTT8KQoFxGgN9YEsQm22Mh9S97%2B8HqX3jEkfnM6Jw%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 94966623ce967130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: br server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2337&min_rtt=803&rtt_var=1020&sent=421&recv=158&lost=0&retrans=0&sent_bytes=368058&recv_bytes=18687&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2626&x=80"

	GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2	142.250.74.35	200 OK	40 kB
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP 142.250.74.35:443 ASN #15169 GOOGLE Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0 Size 40 kB (40128 bytes) Hash 9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2 HTTP Headers GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 40128 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 29 May 2025 10:03:46 GMT expires: Fri, 29 May 2026 10:03:46 GMT cache-control: public, max-age=31536000 age: 348494 last-modified: Wed, 08 Jan 2025 18:23:10 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET samo.koraex.workers.dev/application/views/templates/olxua/assets/img/UWagCE9i.ico	104.21.57.205	200 OK	4.2 kB
URL GET samo.koraex.workers.dev/application/views/templates/olxua/assets/img/UWagCE9i.ico IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Size 4.2 kB (4158 bytes) Hash 7f518bc7fec51721e80edde49849f8ca 9ce0e4fe875f6d72b402c4fdb0204b3ff151d7ef 5daae2afcd433aaf6600ac8c1201c27bc679d48e1e6f573b6bb480b83695df4f HTTP Headers GET /application/views/templates/olxua/assets/img/UWagCE9i.ico HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://samo.koraex.workers.dev/link_card/22e91569 Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Mon, 02 Jun 2025 10:52:01 GMT content-type: image/vnd.microsoft.icon nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WyEDmSZane%2BHfaBB%2FIa0u%2FvLlJPnpJYcwQQJs0fcrTg5kkZsS1eTkjbiu3ESc56wxnkJuWvwDD%2B%2F2cxEero%2FVFK5gudnH9BxLwwysc%2FBXHLq%2FYEsbQCyepKwacBL8gXBOQy9StN5ShV82A%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661aee157130-OSL cf-cache-status: REVALIDATED cache-control: max-age=14400 etag: W/"103e-63468703f7d41" last-modified: Mon, 05 May 2025 19:23:44 GMT vary: Accept-Encoding content-encoding: br server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3263&min_rtt=803&rtt_var=2158&sent=81&recv=112&lost=0&retrans=0&sent_bytes=12532&recv_bytes=8895&delivery_rate=1202431&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=1401&x=80"

	POST samo.koraex.workers.dev/chatwoot-sdk/init	104.21.57.205	201 Created	1.6 kB
URL POST samo.koraex.workers.dev/chatwoot-sdk/init IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type JSON text data Size 1.6 kB (1644 bytes) Hash 0f8d2b4d4724d0b196c8aa2048a2b7d2 d62479e93f041d5760c4c8c64d91eea7fb1fbc8c 68669283afb0d0821207b37671adc5261ff56bdacca62f80e0c75082c4ccb296 HTTP Headers POST /chatwoot-sdk/init HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 clientinfo: {"language":"en-US","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","timezone":0} Content-Type: application/json Content-Length: 113 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT content-type: application/json; charset=utf-8 nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ghhbLyIBpHSGR4M%2BwMlLVD%2Btq3NCPx4bPODIGs4bp%2Fi68m%2BQL2YJO1AaLUDjIbTtz0WnXvPTOwKHyIICrZTqplZxfAkfwoAb8jD%2B8%2BSJXL%2BCuU6Yl8XUB1GfckUb%2BvGJBbXAvVCOEFcQEQ%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 9496661fde417130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * content-encoding: gzip etag: W/"66c-1iR56T8EHVdgxMjGTZHup/sfvIw" strict-transport-security: max-age=15552000; includeSubDomains vary: Accept-Encoding access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2060&min_rtt=803&rtt_var=878&sent=391&recv=137&lost=0&retrans=0&sent_bytes=357422&recv_bytes=11686&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2124&x=80"

	POST samo.koraex.workers.dev/chatwoot/add-history-action	104.21.57.205	201 Created	0 B
URL POST samo.koraex.workers.dev/chatwoot/add-history-action IP 104.21.57.205:443 ASN #13335 CLOUDFLARENET Requested by https://samo.koraex.workers.dev/link_card/22e91569 Certificate IssuerGoogle Trust Services Subjectkoraex.workers.dev Fingerprint3B:91:E4:57:0D:77:15:B7:E0:A6:1C:8B:08:DF:3B:83:66:0F:1B:71 ValidityFri, 30 May 2025 07:23:09 GMT - Thu, 28 Aug 2025 08:21:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /chatwoot/add-history-action HTTP/1.1 Host: samo.koraex.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://samo.koraex.workers.dev/link_card/22e91569 Content-Type: application/json Content-Length: 258 Origin: https://samo.koraex.workers.dev DNT: 1 Connection: keep-alive Cookie: PHPSESSID=4atkbqfsslvvuueiqosp86hd7j Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 201 Created date: Mon, 02 Jun 2025 10:52:02 GMT nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3LeHq7drlIAk95wanaFz8CyZlId6kYsCYbwOfJUrcBn9KWXmipfx8g8axhE3TbumbjwbCYGHhpoFKg5zkP9N6t26Cp120KSMDxJY%2Brc5VMRzQ9wDflAFE175nXNRhgm9zPRMmoSyRZb8A%3D%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 949666254ead7130-OSL cf-cache-status: DYNAMIC access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains access-control-allow-credentials: true access-control-allow-headers: X-Requested-With,content-type access-control-allow-methods: GET, POST, OPTIONS, PUT, PATCH, DELETE content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: no-referrer x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=1937&min_rtt=803&rtt_var=937&sent=448&recv=182&lost=0&retrans=0&sent_bytes=376342&recv_bytes=30707&delivery_rate=19813646&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=103200&unsent_bytes=0&cid=3819a6bbc8fc3b7b&ts=2893&x=80"

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (64)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN