__dcfduid__cf and having the d makes me think its something custom. I can't see any trace of that cookie being something known to us as one we useEveryone




From https://www.zoho.com/mail/help/email-forwarding.html
- A confirmation email will be sent to the added email address. Email forwarding will be enabled only after you verify the account.

score, in cf{} request header. Is that or anything else in cf header useful?
"fextemp.com" (including the quotes), on Google, leads to various sites confirming as you say, that they (@fextemp.com) are disposable emails.1.1.1.1.myzone.com to 1.1.1.1 through Cloudflare?
__dcfduid__cfdEveryonescorecf{}"fextemp.com"@fextemp.com1.1.1.1.myzone.com1.1.1.1