Report - broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao

Report Overview

Submitted URL
broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao
IP
104.18.27.14
ASN
#13335 CLOUDFLARENET
Submitted
2023-03-23 03:46:21
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.googletagmanager.com	75	2013-05-22T04:07:37Z	2023-03-26T10:46:46Z	380 B	84 kB	142.250.74.40
tls-eun1.fpapi.io	282447	2020-11-09T23:28:49Z	2023-03-24T18:54:40Z	376 B	486 B	13.248.141.108
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-26T05:09:08Z	3.2 kB	46 kB	34.120.237.76
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-26T05:11:12Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-26T05:11:59Z	333 B	391 B	34.117.237.239
www.free-kassa.ru	373893	2015-04-04T18:26:40Z	2023-03-24T18:54:40Z	388 B	3.2 kB	104.22.18.208
qxbroker.com	257192	2021-05-23T07:32:01Z	2023-03-25T18:55:06Z	32 kB	719 kB	104.18.31.146
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-26T05:10:41Z	343 B	700 B	142.250.74.163
unpkg.com	11693	2016-01-08T00:26:01Z	2023-03-26T14:30:15Z	347 B	505 B	104.16.123.175
static.cloudflareinsights.com	1294	2019-09-24T16:34:56Z	2023-03-26T05:15:00Z	449 B	392 B	104.16.56.101
broker-qx.pro	unknown	2022-08-31T14:34:38Z	2023-03-25T18:55:06Z	876 B	1.3 kB	104.18.27.14
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-26T05:09:13Z	2.7 kB	7.1 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-26T05:09:18Z	782 B	2.4 kB	35.241.9.150

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-23 03:46:18	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-03-23 03:46:18	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-03-23 03:46:19	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-03-23 03:46:19	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-03-23 03:46:20	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-03-23 03:46:21	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2023-03-23 03:46:25	high	Client IP	108.177.14.127	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751	119 B	2023-03-26	2023-03-26
Pretty URL qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:54 Last Seen2023-03-26 14:39:54 Times Seen1 Hash 585d755fb8062368e7b7037758c59927 5522d99a1b505d8cdf8bfa52e9de9e0d157336b7 59b6b070579ae750ac18e44479daf72cc15a2cfa9199f220cb51725673ff3021 Loading...

	www.googletagmanager.com/gtag/js?id=G-L4T5GBPFHJ	248 kB	2023-03-26	2023-03-26
Pretty URL www.googletagmanager.com/gtag/js?id=G-L4T5GBPFHJ IP 142.250.74.40 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:54 Last Seen2023-03-26 14:39:54 Times Seen1 Hash 96fde54790b1e3fbe1f23d2dab7abb50 55801d9d5bab5d080a723bb2e7fead03cb01090c dfc800d6f42d5c714ebc965377528e9cf406b97873f73082f73c896304962228 Loading...

	qxbroker.com/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1679529600	28 kB	2023-03-26	2023-03-26
Pretty URL qxbroker.com/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1679529600 IP 104.18.31.146 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:54 Last Seen2023-03-26 14:39:54 Times Seen1 Hash e7e40118cb40d7ce110ccf7ed84aa2b4 b21b56a6aee82a80fac2adc6bb226d80e6d87e41 15c634823c9ab1f1bfb03b9dfe84aeebbffb0cb9eeec5f6f2af2fdd60d7049dd Loading...

	unpkg.com/imask	138 kB	2023-03-08	2023-10-24
Pretty URL unpkg.com/imask IP 104.16.123.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 13:26:52 Last Seen2023-10-24 16:21:44 Times Seen30 Hash 9922107c70833dc00b85c3dcfaadc982 2aa4985f163ef58e66cc20f5d5ce9b299b1198dd 0a4c2ecf677f70d4d9d1b3ef31558bb18a0bee17b8f1f38ce5ca65f8871118ba Loading...

	qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751	114 B	2023-03-26	2023-03-26
Pretty URL qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:54 Last Seen2023-03-26 14:39:54 Times Seen1 Hash b649e3ab6cdab6f3a9dec428c7ff597e 34709ed462d619a653cf3016fbf719d0530e6f29 25742b0d5a5675d688c8bb1a9656c9dfa45b65973fd6327e3de9981504d726c4 Loading...

	http:blank	620 B	2023-03-26	2023-03-26
Pretty URL http:blank IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:54 Last Seen2023-03-26 14:39:54 Times Seen1 Hash 0adfb75032d2773d1b907844cce932ac 546a46b41fe762805058e638478f79b971db902c b291ae801f4af9bee4a46b751e7151119abd18b4b1ff01ef91267fbcd02ea638 Loading...

	static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114	17 kB	2023-03-26	2023-04-17
Pretty URL static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 IP 104.16.56.101 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 13:20:50 Last Seen2023-04-17 23:16:21 Times Seen1248 Hash f23fdce5f9fc681a13ca76353818ffac 6779cba0c60c1e89ab3ec72c90a952268b2ba37d a4ef73601a6552d55503bcbd9b6cd23fc0c33fa075f8efe724cddd4e3ee55542 Loading...

	qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751	161 B	2023-03-13	2023-11-25
Pretty URL qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 20:46:42 Last Seen2023-11-25 19:36:39 Times Seen60 Hash cdf8bdee2cbe206174c968b5a945fdda fef68566f40b3499cd8dae5c90383357e9b7d900 b97776fdfba1418d67b2b975fc8cf5df7193937d85eecd53a21a56531ceca8b8 Loading...

	qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751	1.5 kB	2023-03-26	2023-03-26
Pretty URL qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:39:54 Last Seen2023-03-26 14:39:54 Times Seen1 Hash fc48ac7ee33a81d33c360288d6c63856 18a8e16e4d608599c51b4c6713c55ac2d41440c2 e8bed5de42dfcd09ad2857263ecc65a592d08a747f9ec28ac72a67b96f30ea2c Loading...

HTTP Transactions (57)

	URL	IP	Response	Size
	broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao	104.18.27.14	301 Moved Permanently	0 B
URL HTTP/1.1 broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao IP 104.18.27.14:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao HTTP/1.1 Host: broker-qx.pro User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` HTTP/1.1 301 Moved Permanently Date: Thu, 23 Mar 2023 03:46:10 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Thu, 23 Mar 2023 04:46:10 GMT Location: https://broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao Set-Cookie: __cf_bm=jESVOqYPnmb115w8p4OKdesRf0ru_aSrI3UoJrR5ykg-1679543170-0-AV4vGYoo3rqrtivxsr+Q1cPqjx28EdPXdXaoxF57S0uZ39c1rPApE2YBQMVozRPRB725P1xHcx3yLM/5uXdcykY=; path=/; expires=Thu, 23-Mar-23 04:16:10 GMT; domain=.broker-qx.pro; HttpOnly; SameSite=None Vary: Accept-Encoding Server: cloudflare CF-RAY: 7ac3af902c42b4f3-OSL

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash bea3185dd820a31c1981317f37c3456d 1a548a5d27270fc11df9011837a7149571cedd78 469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9" Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4117 Expires: Thu, 23 Mar 2023 04:54:47 GMT Date: Thu, 23 Mar 2023 03:46:10 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 210a2a42cfc4f4aced144f5de9babcc6 ece6ecfb2db8d036c3bfc7f02f8ea387e3f965db 59553a312d3fb34f1f0aea469f7e7cc810ff9993481ddbd73ea5d461cf97ed51 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51" Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13778 Expires: Thu, 23 Mar 2023 07:35:48 GMT Date: Thu, 23 Mar 2023 03:46:10 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash bc86ef2a0cee04915bc360f5821adc8f 3658f9028cce204d38f7f48fcfaa2a8e4f54383a aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 23 Mar 2023 03:15:05 GMT content-type: application/json age: 1865 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 51a5d4696a6090c295850554508b51ce c44e143c2223546e64b19f543b8101aaf3b11e97 8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16623 Expires: Thu, 23 Mar 2023 08:23:13 GMT Date: Thu, 23 Mar 2023 03:46:10 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash e7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK x-amz-id-2: pUVZUbhb9Rss8Hj+sXYP4Efqtr2U2sid9f9FFXGFIXCRe3RT5K8zrkvC59ZXSYG/P5Yqh+XwAKc= x-amz-request-id: HKX690SF5142VCC1 x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 23 Mar 2023 02:59:46 GMT age: 2784 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Thu, 23 Mar 2023 03:46:10 GMT content-type: application/json content-length: 12 vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/dignity-1.png	104.18.31.146	200 OK	3.0 kB
URL HTTP/2 qxbroker.com/site/img/main/dignity-1.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 130 x 85, 8-bit colormap, non-interlaced\012- data Size 3.0 kB (3000 bytes) Hash b41cbfb8ce8738c28fd4f5c3c7ac6369 692a7c9536aab655b18febc8303ed4f60a8270a8 99a46c6d086e03934d015302418b2d9c03eb744442f46ba869dcefbcb6303388 HTTP Headers GET /site/img/main/dignity-1.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png content-length: 3000 last-modified: Mon, 23 May 2022 08:15:49 GMT etag: "628b42b5-bb8" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af945b17b500-OSL X-Firefox-Spdy: h2

	qxbroker.com/site/img/main/dignity-3.png	104.18.31.146	200 OK	2.4 kB
URL HTTP/2 qxbroker.com/site/img/main/dignity-3.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 133 x 88, 8-bit colormap, non-interlaced\012- data Size 2.4 kB (2419 bytes) Hash 0ee999c0fe77ce1d8c740e207044c134 857572f904ffbfa90d58a620d0ff7ec195529265 a347ed25720f720e85e9de4700e0c6e9b890f0e70daead06051034c95dd10580 HTTP Headers GET /site/img/main/dignity-3.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png content-length: 2419 last-modified: Mon, 23 May 2022 08:15:49 GMT etag: "628b42b5-973" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af945b1bb500-OSL X-Firefox-Spdy: h2

	qxbroker.com/site/img/main/dignity-2.png	104.18.31.146	200 OK	2.6 kB
URL HTTP/2 qxbroker.com/site/img/main/dignity-2.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 133 x 86, 8-bit colormap, non-interlaced\012- data Size 2.6 kB (2614 bytes) Hash b5fe8971134a5e126b1954593be43b59 7d513ba7c5f59f960e50716fccfd03373aa83b54 67090a766d7ac33be2ecd858d85de028804b718dcbb369afeb28a0ba35041e00 HTTP Headers GET /site/img/main/dignity-2.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png content-length: 2614 last-modified: Mon, 23 May 2022 08:15:49 GMT etag: "628b42b5-a36" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af945b18b500-OSL X-Firefox-Spdy: h2

	qxbroker.com/site/img/main/reviews-appraisals.png	104.18.31.146	200 OK	1.1 kB
URL HTTP/2 qxbroker.com/site/img/main/reviews-appraisals.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 262 x 42, 8-bit colormap, non-interlaced\012- data Size 1.1 kB (1131 bytes) Hash 2092ffc38268ddeccf0e7914025c2cd3 8d73a291e410f8f0704991b973e432354159cafb 55755bfd4b23dbb061be8236e6002c0cf81a93e722bba68c06966fd9c53abd18 HTTP Headers GET /site/img/main/reviews-appraisals.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png content-length: 1131 last-modified: Mon, 23 May 2022 08:15:49 GMT etag: "628b42b5-46b" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af946b28b500-OSL X-Firefox-Spdy: h2

	www.free-kassa.ru/img/fk_btn/17.png	104.22.18.208	200 OK	2.8 kB
URL HTTP/2 www.free-kassa.ru/img/fk_btn/17.png IP 104.22.18.208:0 ASN #13335 CLOUDFLARENET File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data Size 2.8 kB (2843 bytes) Hash e4ae71432cbec7d4e051a27234ed674e e6c551fc14ae8a6635e648d2aabe21fbdf0cf567 2a90bfb10097f71bb8936e23433ca80741164e0d0bb297d9731bc975cfd883fb HTTP Headers `GET /img/fk_btn/17.png HTTP/1.1 Host: www.free-kassa.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png content-length: 2843 last-modified: Wed, 09 Dec 2015 10:32:35 GMT etag: "1be0c71-b1b-526749bd02b47" cache-control: max-age=5184000 expires: Tue, 02 May 2023 07:15:13 GMT cf-cache-status: HIT age: 1715458 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af94be26b511-OSL X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.163	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.163:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash 23c054d3aee551b6fdc42a5a472a7040 b1a46c12ac7d65c979fd1998bdb243f3dba8f956 9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 23 Mar 2023 03:46:11 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.googletagmanager.com/gtag/js?id=G-L4T5GBPFHJ	142.250.74.40	200 OK	84 kB
URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-L4T5GBPFHJ IP 142.250.74.40:0 ASN #15169 GOOGLE File type ASCII text, with very long lines (30260) Size 84 kB (83633 bytes) Hash 9a00594f6a0f9234594184efbf6ca1e3 6d64ac07fb960d271e5853f69c81d4712607b3b5 f6e5ac1975cf90ad24846a0c4860e9ebf5acc5a7df8e2e7c4e1fb1d9a4dcbe40 HTTP Headers `GET /gtag/js?id=G-L4T5GBPFHJ HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Thu, 23 Mar 2023 03:46:11 GMT expires: Thu, 23 Mar 2023 03:46:11 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 83633 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	qxbroker.com/site/js/main.min.js?6	104.18.31.146	200 OK	47 kB
URL HTTP/2 qxbroker.com/site/js/main.min.js?6 IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type data Size 47 kB (47437 bytes) Hash 7ab33800db8b6f09b1ce1a2da8b35c47 77ef4139b01face1a6d547beb8b506beb25e531e baef2bd651401ab7efc3785b271dfb26717cb8a154d772d821f9c0293b15ca73 HTTP Headers GET /site/js/main.min.js?6 HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 22 Mar 2023 15:21:15 GMT vary: Accept-Encoding etag: W/"641b1ceb-2150f" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af946b30b500-OSL X-Firefox-Spdy: h2

	qxbroker.com/fonts/Roboto-Regular.ttf	104.18.31.146	200 OK	171 kB
URL HTTP/2 qxbroker.com/fonts/Roboto-Regular.ttf IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob\012- data Size 171 kB (171272 bytes) Hash 11eabca2251325cfc5589c9c6fb57b46 096c9245b6a192d1403a82848e104a65f578a8ec 017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed HTTP Headers GET /fonts/Roboto-Regular.ttf HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: application/octet-stream content-length: 171272 last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: "606485bb-29d08" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af958bbbb500-OSL X-Firefox-Spdy: h2

	qxbroker.com/fonts/Roboto-Bold.ttf	104.18.31.146	200 OK	170 kB
URL HTTP/2 qxbroker.com/fonts/Roboto-Bold.ttf IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data Size 170 kB (170348 bytes) Hash e07df86cef2e721115583d61d1fb68a6 3dd713113ff2d79b94d2df343e2e28fa8e7279cf c9cc991deb5d27f267830a19f2301eb164d9e61ec08669c1a1a291c5620ff40a HTTP Headers GET /fonts/Roboto-Bold.ttf HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: application/octet-stream content-length: 170348 last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: "606485bb-2996c" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af959bc0b500-OSL X-Firefox-Spdy: h2

	qxbroker.com/fonts/Roboto-Medium.ttf	104.18.31.146	200 OK	172 kB
URL HTTP/2 qxbroker.com/fonts/Roboto-Medium.ttf IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med\012- data Size 172 kB (171656 bytes) Hash 58aef543c97bbaf6a9896e8484456d98 f6783010d5def128c4a1539333324f75701d9bab e35252aa3dc2e84e9d7211586fee9aede2a426d3230c8b131881d985f16ff836 HTTP Headers GET /fonts/Roboto-Medium.ttf HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: application/octet-stream content-length: 171656 last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: "606485bb-29e88" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af959bbfb500-OSL X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 23 Mar 2023 03:17:23 GMT age: 1728 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 06d9f362ccdffc7496525b2fe54bf448 5c4ede7d5ba99d8e63efe6c13f318b668aa92578 adaa82a5a926ed5a0f9bf7c49e546d5594022a4c0683f64898ca046a5f4ba543 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "ADAA82A5A926ED5A0F9BF7C49E546D5594022A4C0683F64898CA046A5F4BA543" Last-Modified: Wed, 22 Mar 2023 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19403 Expires: Thu, 23 Mar 2023 09:09:34 GMT Date: Thu, 23 Mar 2023 03:46:11 GMT Connection: keep-alive`

	tls-eun1.fpapi.io/	13.248.141.108	200 OK	204 B
URL HTTP/2 tls-eun1.fpapi.io/ IP 13.248.141.108:0 ASN #16509 AMAZON-02 File type ASCII text, with no line terminators Size 204 B (204 bytes) Hash e09b2ee681f51ae6f859520cc7d11614 2b105ceaf69f3910c2a162106525ff2297ef1ff1 1d4228edd199b700988e775330daeee717271775e1ec57c13cd95c2b70b77323 HTTP Headers `GET / HTTP/1.1 Host: tls-eun1.fpapi.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://qxbroker.com Connection: keep-alive Referer: https://qxbroker.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * cache-control: max-age=2592000, immutable, private strict-transport-security: max-age=63072000; includeSubDomains content-type: text/plain; charset=utf-8 content-length: 204 date: Thu, 23 Mar 2023 03:46:11 GMT X-Firefox-Spdy: h2`

	qxbroker.com/profile/favicons/favicon-16x16.png	104.18.31.146	200 OK	985 B
URL HTTP/2 qxbroker.com/profile/favicons/favicon-16x16.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Size 985 B (985 bytes) Hash f21eebef2a930bf221126838c0f0ad8e 4e83a6e8265d61ae1a45eba4c05c197da5935351 3663db0f03c872445f1ed92e8c76d4cd9fd02abcbcf4b579141e0a62b2fa5d7d HTTP Headers GET /profile/favicons/favicon-16x16.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png content-length: 985 last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: "606485bb-3d9" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af969c26b500-OSL X-Firefox-Spdy: h2

	qxbroker.com/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1679529600	104.18.31.146	200 OK	16 kB
URL HTTP/2 qxbroker.com/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1679529600 IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type data Size 16 kB (16144 bytes) Hash c77cf0daf1a746de7187dcc2c73eb4c4 c93c2a4cf16423e2c57e2ab6bdeb09dd126ec4ef f161bdaaded34b65d1b0a7b784940a44c9354dd0b91a32be34b6420b71f3b419 HTTP Headers GET /cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1679529600 HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: application/javascript; charset=UTF-8 x-control-type-options: nosniff content-encoding: gzip cache-control: max-age=14400, public vary: accept-encoding server: cloudflare cf-ray: 7ac3af95fbf4b500-OSL X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 18b877ebbad1529e4bd91e12220d91c4 a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc 7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4730 Expires: Thu, 23 Mar 2023 05:05:01 GMT Date: Thu, 23 Mar 2023 03:46:11 GMT Connection: keep-alive`

	qxbroker.com/site/img/main/platform-bg.png	104.18.31.146	200 OK	36 kB
URL HTTP/2 qxbroker.com/site/img/main/platform-bg.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 2400 x 653, 8-bit colormap, non-interlaced\012- data Size 36 kB (35618 bytes) Hash cc2fcf1bc65b32c5b148fa3b274451f9 c066dc62ec66cabc34bf6bfcc37a18f3cb3dc59d aa7b299a2bba11533951d113e233020fa8cee41d7b3e1f6fba1f8c37b970d192 HTTP Headers GET /site/img/main/platform-bg.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-9254" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af957ba9b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/appendix-mobile.png	104.18.31.146	200 OK	72 kB
URL HTTP/2 qxbroker.com/site/img/main/appendix-mobile.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type PNG image data, 569 x 843, 8-bit colormap, non-interlaced\012- data Size 72 kB (71761 bytes) Hash eecab80cac4e7c0884d2205eba3965ec 5937e40fea654d61796350723048161ba222313e d4688ef26fe1b6fdefa68c2d5c634222651809f4d86cb58006311b3387d2bc83 HTTP Headers GET /site/img/main/appendix-mobile.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-1188c" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af946b26b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/icons/twitter.svg	104.18.31.146	200 OK	608 B
URL HTTP/2 qxbroker.com/site/img/icons/twitter.svg IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1127), with no line terminators Size 608 B (608 bytes) Hash 2a08d81a9a6b9353466dc28de7b8d0c3 55f71cdd259bdbe6d53e3983118646bc97289ca3 cdd01adde2a61842fc1e534ec975a18fa044dc44d59b59b37b63348ba6b56553 HTTP Headers GET /site/img/icons/twitter.svg HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/svg+xml last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: W/"606485bb-467" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af958bb9b500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7846 Expires: Thu, 23 Mar 2023 05:56:59 GMT Date: Thu, 23 Mar 2023 03:46:13 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7846 Expires: Thu, 23 Mar 2023 05:56:59 GMT Date: Thu, 23 Mar 2023 03:46:13 GMT Connection: keep-alive`

	qxbroker.com/site/img/main/start-trading-1.png	104.18.31.146	200 OK	8.3 kB
URL HTTP/2 qxbroker.com/site/img/main/start-trading-1.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type data Size 8.3 kB (8342 bytes) Hash afc97072aa49a449f175ec0766d07e0b 6c536ee2c31e4fbe50f9b3ea0711470c92b8446e 9fc15897aff033930cab6076aa8f046a4e645a65a0824ac4f36686dc51d33bf5 HTTP Headers GET /site/img/main/start-trading-1.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-18fc" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af946b29b500-OSL X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7846 Expires: Thu, 23 Mar 2023 05:56:59 GMT Date: Thu, 23 Mar 2023 03:46:13 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a72dbc-373a-4f8e-af8b-0ed08e2803e6.jpeg	34.120.237.76	200 OK	6.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a72dbc-373a-4f8e-af8b-0ed08e2803e6.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.7 kB (6668 bytes) Hash ad549baba5e36a47876bd01552d5d91d 2de066240ff8c399fa1eb3b87fe7673294ee207c fdd10f366b8acf79ea4aac5fa47233e351d923dc21d669fe98b48487870244b4 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a72dbc-373a-4f8e-af8b-0ed08e2803e6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6668 x-amzn-requestid: 18a822d0-3a3c-4225-a297-c5cb93b28663 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM8H3FEBIAMFkrg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b73cb-309c2ab7261fd7c635c54555;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT x-amz-cf-pop: HIO50-C1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: Uvg1q6MVNES5M-RCWbAlkAVSia1QT7XHDJEZp0oSVUoDoe_1GS6kuQ== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:43:22 GMT etag: "2de066240ff8c399fa1eb3b87fe7673294ee207c" content-type: image/jpeg age: 21771 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg	34.120.237.76	200 OK	5.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 5.8 kB (5753 bytes) Hash 6f29db357e8536a4aeccdd3df67d3205 391c43d349b943ea9af4aa6e3b6910c07370ee78 b0ee1cab104b785c33aca9f3caae8f9c1abd856af3cfe1603b2b7036727468ae HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5753 x-amzn-requestid: d2538544-4f4c-4de0-a438-a48642dd0f17 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM8pDGqyIAMFwRQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b74a0-339c26cd16208aae5c47dc2f;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:35:28 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: VRd1F4m0DnPtGvICp20ib8dhdwJ_jxdVMJEHqA9CmvQB6USSEupsLA== via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:43:22 GMT age: 21771 etag: "391c43d349b943ea9af4aa6e3b6910c07370ee78" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg	34.120.237.76	200 OK	6.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.7 kB (6692 bytes) Hash c05bfdf1411a931d8ea9adc64b07bc74 156ef59e53564a4f2b27002b2695fafecd578d82 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6692 x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM9d9FcOoAMFaFQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: PNAVsyfdAHjn5F6Rt1uz1U46QCIGvTCqZatbAurr6Ilu0quHWExuSw== via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:43:34 GMT age: 21759 etag: "156ef59e53564a4f2b27002b2695fafecd578d82" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg	34.120.237.76	200 OK	4.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.9 kB (4912 bytes) Hash f4a771935927950222124e14b56046df d07fe53e4ac41048497b2732c017f6666c3eda9e 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4912 x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM8H3Fl1IAMFYgA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT x-amz-cf-pop: HIO50-C1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: 4xGMCVWy2EXLLN8keteGLQvQjOp6KH97rkn_FK10eyng0-5EudcOig== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:43:33 GMT etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e" content-type: image/jpeg age: 21760 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffed036ca-a43b-426f-a0f3-fb8f2e221171.jpeg	34.120.237.76	200 OK	6.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffed036ca-a43b-426f-a0f3-fb8f2e221171.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.4 kB (6430 bytes) Hash 27bd1bd539c3711ff340f243098cab93 4860b7e75775fe187a9253a4d38222e36552f529 34278c150d0686e999228226d0d92e3e7ed1116978ab94fd21b3047c44a69972 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffed036ca-a43b-426f-a0f3-fb8f2e221171.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6430 x-amzn-requestid: abbe5dc0-5218-46ef-b264-30aa5d0a87b3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BzanbGRCIAMF96g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64113e2f-3c198b4a31aaa8f263ec8db5;Sampled=0 x-amzn-remapped-date: Wed, 15 Mar 2023 03:40:31 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: WxDQn6RNw2UUL4QLlZA13MahPDBJokKWw298G97UFmp_HT5DfYrJ8Q== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 bb763d35677c62f9f5d9728bba884662.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 11:36:44 GMT age: 58169 etag: "4860b7e75775fe187a9253a4d38222e36552f529" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg	34.120.237.76	200 OK	9.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.7 kB (9687 bytes) Hash 6de676f6856031e5c1baebe9166a8269 d81a4852f956999fa28a5f667ed73506843d0731 71f282ba594e454a2abf1c3700ade4d9461d6d48ac2726f746f3da5a63e29c38 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9687 x-amzn-requestid: b7c8cd8c-6103-4aa4-9016-f02cf368908d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM8JGHyEoAMFzJw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b73d3-2fb1fd1b5be3289047f8aed4;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:32:03 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: LJr_FUB0Pp-5jqhn6kXCUxPYlRZCXlZtzEx8aYqeKhkl8Hhx5Ef9ZQ== via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:43:22 GMT etag: "d81a4852f956999fa28a5f667ed73506843d0731" content-type: image/jpeg age: 21771 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	qxbroker.com/cdn-cgi/rum?	104.18.31.146	204 No Content	0 B
URL HTTP/2 qxbroker.com/cdn-cgi/rum? IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/rum? HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 534 Origin: https://qxbroker.com Connection: keep-alive Referer: https://qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=TEDB6_sqgX7870U1NaqMrS4BoiAeb.9pjHd20SsAQ64-1679543171-0-AYGQEbZAmTTCztqmZow/V7gAnyAdokB1jiQpjdXXooc1uA25m/vrxgl4MN1UY+icB+nXAZfYFWpgWTsBgfchU0sOT9XaA9rsHq8bs0RQFD6fvQh1CX6HVF3Q+fBhRTy/Qw==; _ga_L4T5GBPFHJ=GS1.1.1679543178.1.0.1679543186.0.0.0; _ga=GA1.1.66571708.1679543179; __vid1=9e4947f35751465411fd1a4f5c358c78 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 204 No Content date: Thu, 23 Mar 2023 03:46:19 GMT access-control-allow-origin: https://qxbroker.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true server: cloudflare cf-ray: 7ac3afca6a83b500-OSL x-frame-options: DENY x-content-type-options: nosniff X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/appendix-tab.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/appendix-tab.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/appendix-tab.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Wed, 01 Dec 2021 10:23:43 GMT vary: Accept-Encoding etag: W/"61a74d2f-682e7" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af945b23b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/about-us/about-us-innovation.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/about-us/about-us-innovation.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/about-us/about-us-innovation.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-16737" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af946b2db500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/icons/advcash.svg	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/icons/advcash.svg IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/icons/advcash.svg HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/svg+xml last-modified: Thu, 30 Sep 2021 12:07:04 GMT etag: W/"6155a868-118a" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af957baeb500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	unpkg.com/imask	104.16.123.175	302 Found	0 B
URL HTTP/2 unpkg.com/imask IP 104.16.123.175:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /imask HTTP/1.1 Host: unpkg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 302 Found date: Thu, 23 Mar 2023 03:46:11 GMT content-type: text/plain; charset=utf-8 access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /imask@6.4.3 vary: Accept, Accept-Encoding via: 1.1 fly.io fly-request-id: 01GW68Q2X3VEQ5SXJ61HTD4T4R-fra cf-cache-status: HIT age: 487 strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 7ac3af946905b4fa-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/platform.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/platform.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/platform.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-1e375" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af945b15b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/appendix.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/appendix.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/appendix.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-13ba2" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af945b22b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/icons/mastercard.svg	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/icons/mastercard.svg IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/icons/mastercard.svg HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/svg+xml last-modified: Tue, 12 Oct 2021 13:58:21 GMT etag: W/"6165947d-1c70" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af957babb500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	qxbroker.com/site/img/icons/instagram.svg	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/icons/instagram.svg IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/icons/instagram.svg HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/svg+xml last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: W/"606485bb-31f" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af958bb8b500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao	104.18.26.14	302 Found	0 B
URL HTTP/2 broker-qx.pro/?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao IP 104.18.26.14:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /?lid=68751&click_id=wdppmshe4qksfrfn2vq99hao HTTP/1.1 Host: broker-qx.pro User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/2 302 Found date: Thu, 23 Mar 2023 03:46:10 GMT content-type: text/html; charset=UTF-8 location: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 cache-control: no-cache, private strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: DYNAMIC set-cookie: __cf_bm=I731Uuu1cmF7p1Pc0doFiEUIUwLZ3pfL7vzUakfBJyc-1679543170-0-AX0dzneezwHo7/kUVKnpvg+ES0Wstq5pmz6evuBtZ8+rZQlWo+LGQxTD6aFWfbEbqihXew3eVnIzfI4Of4hB89g=; path=/; expires=Thu, 23-Mar-23 04:16:10 GMT; domain=.broker-qx.pro; HttpOnly; Secure; SameSite=None server: cloudflare cf-ray: 7ac3af91f8cdb50f-OSL X-Firefox-Spdy: h2

	qxbroker.com/site/img/main/dignity-4.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/dignity-4.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/dignity-4.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-1478" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af945b1fb500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/start-trading-2.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/start-trading-2.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/start-trading-2.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-1e46" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af946b2ab500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/start-trading-3.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/start-trading-3.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/start-trading-3.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-1e93" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af946b2cb500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/profile/images/spritemap.svg	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/profile/images/spritemap.svg IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /profile/images/spritemap.svg HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/en?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: empty Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/svg+xml last-modified: Wed, 22 Mar 2023 15:21:15 GMT etag: W/"641b1ceb-1541cb" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af955b97b500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	qxbroker.com/cdn-cgi/challenge-platform/h/g/cv/result/7ac3af930a8ab500	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/cdn-cgi/challenge-platform/h/g/cv/result/7ac3af930a8ab500 IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers POST /cdn-cgi/challenge-platform/h/g/cv/result/7ac3af930a8ab500 HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 367 Origin: https://qxbroker.com Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: text/plain; charset=UTF-8 set-cookie: __cf_bm=TEDB6_sqgX7870U1NaqMrS4BoiAeb.9pjHd20SsAQ64-1679543171-0-AYGQEbZAmTTCztqmZow/V7gAnyAdokB1jiQpjdXXooc1uA25m/vrxgl4MN1UY+icB+nXAZfYFWpgWTsBgfchU0sOT9XaA9rsHq8bs0RQFD6fvQh1CX6HVF3Q+fBhRTy/Qw==; path=/; expires=Thu, 23-Mar-23 04:16:11 GMT; domain=.qxbroker.com; HttpOnly; Secure; SameSite=None server: cloudflare cf-ray: 7ac3af975c61b500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/platform-mobile.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/platform-mobile.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/platform-mobile.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-f194" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af945b16b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/img/quotex_logo-white.svg	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/quotex_logo-white.svg IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/quotex_logo-white.svg HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/svg+xml last-modified: Wed, 31 Mar 2021 14:22:51 GMT etag: W/"606485bb-b5b" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af946b2fb500-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114	104.16.56.101	200 OK	0 B
URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 IP 104.16.56.101:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 HTTP/1.1 Host: static.cloudflareinsights.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://qxbroker.com Connection: keep-alive Referer: https://qxbroker.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: text/javascript;charset=UTF-8 access-control-allow-origin: * cache-control: public, max-age=86400 etag: W/2023.3.0 last-modified: Mon, 20 Mar 2023 17:58:49 GMT cross-origin-resource-policy: cross-origin vary: Accept-Encoding server: cloudflare cf-ray: 7ac3af94af5fb50c-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	qxbroker.com/site/img/main/appendix-bg.png	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/img/main/appendix-bg.png IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/img/main/appendix-bg.png HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/site/css/main.min.css?6 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: image/png last-modified: Mon, 23 May 2022 08:15:49 GMT vary: Accept-Encoding etag: W/"628b42b5-12a0e" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af958bb4b500-OSL X-Firefox-Spdy: h2`

	qxbroker.com/site/css/main.min.css?6	104.18.31.146	200 OK	0 B
URL HTTP/2 qxbroker.com/site/css/main.min.css?6 IP 104.18.31.146:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /site/css/main.min.css?6 HTTP/1.1 Host: qxbroker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://qxbroker.com/?click_id=wdppmshe4qksfrfn2vq99hao&lid=68751 Cookie: laravel_session=eyJpdiI6InVDeWR0NWdMWlZMNnlGeVZ1TkZIblE9PSIsInZhbHVlIjoiMkJTaWYya1JxbXJ5SU15c1lmazMyRnoySVhPZDMwcHZTWWRIbzBYNVR5cHZUemJLL2JlRm1WVWxFYUVBWDNvT3FFTXFIc1ZJZmtSU2RpOWFhaDRndGZycnJCQm80NGtiOGlpaWpySEp4T3V6OS9ITlRnSEVHeHl6UkFZeHMxOFAiLCJtYWMiOiJhNjY0NzNiNmYwZjZjNWY0M2YzYmZjMmJmMDFjYTk2NmE1YjBkNjg2Nzc2ZDQ3ZWRkMjY5YjhlYjk3NDNmMjg3IiwidGFnIjoiIn0%3D; lid=68751; cid=wdppmshe4qksfrfn2vq99hao; lang=en; __cf_bm=MDJlycjK3hDU9TcCE7fUznMlYsG9Y1RdtJ4NdmOedO0-1679543171-0-AWVxU+q//aeSwBGhqhs6CieOnNXBXL+TjwrVWzX9gaQUtx3Bp7j0GBGcWd2ViJqwKVxBeRhPVjw84mY3k3o/LwQ= Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 03:46:11 GMT content-type: text/css last-modified: Wed, 22 Mar 2023 15:21:15 GMT vary: Accept-Encoding etag: W/"641b1ceb-2bc04" strict-transport-security: max-age=63072000 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-encoding: gzip cf-cache-status: HIT expires: Thu, 23 Mar 2023 07:46:11 GMT cache-control: public, max-age=14400 server: cloudflare cf-ray: 7ac3af944b13b500-OSL X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML