Report - nhthm.blogspot.is/

Report Overview

Submitted URL
nhthm.blogspot.is/
IP
216.58.207.225
ASN
#15169 GOOGLE
Submitted
2024-03-28 18:22:36
Access
public
Website Title
Узнaйте скoлько Вы смoжете зaрaбaтывaть на инвестициях?
Final URL
d2gk4.shop/nJD/yop06ZO
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
get.geojs.io	17418	2017-02-18	2017-03-30	2024-03-28	426 B	964 B	104.26.0.100
nhthm.blogspot.is	unknown	unknown	No data	No data	472 B	682 B	216.58.207.225
nhthm.blogspot.com	unknown	unknown	No data	No data	473 B	16 kB	216.58.207.193
sh4737904.c.had.su	unknown	2017-05-10	2023-11-16	2024-03-28	545 B	489 B	81.91.178.100
d2gk4.shop	unknown	2024-03-24	2024-03-24	2024-03-24	14 kB	4.9 MB	104.21.93.130
l2nv8.shop	unknown	2024-03-12	2024-03-12	2024-03-13	518 B	11 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	nhthm.blogspot.is/	Gazprom

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	nhthm.blogspot.is	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	d2gk4.shop/l/hello_kitty/assets/js/bootstrap.min.js	60 kB	2023-03-07	2024-04-28
Pretty URL d2gk4.shop/l/hello_kitty/assets/js/bootstrap.min.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-04-28 08:02:02 Times Seen6356 Hash 6bea60c34c5db6797150610dacdc6bce 544afefd148715da7dd52d368a414703390ca0e0 38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff Loading...

	d2gk4.shop/l/hello_kitty/js/custom.js	1.5 kB	2023-09-30	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/js/custom.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-30 06:33:49 Last Seen2024-03-31 20:17:20 Times Seen964 Hash 7e1a2668f51815ae6f958a894ad2952b bd109a14d6c33954760efb8387391485ee00a931 3b648ed95045a3f19d7b14f37b6532f51a100f7672afe92f325cab9a00b6ec15 Loading...

	d2gk4.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js	17 kB	2023-05-22	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:21 Times Seen1537 Hash d37c584165f7d01f34ba29f5852daacb 7607f09ab544c30e1942c834e54410d15043c60a d4fe2470c43d76c8d1be7f4cf8c835b1032d48641efbd071da6ab79fb506d786 Loading...

	d2gk4.shop/l/hello_kitty/js/jquery-3.1.1.min.js	87 kB	2023-03-07	2024-04-28
Pretty URL d2gk4.shop/l/hello_kitty/js/jquery-3.1.1.min.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-28 10:36:17 Times Seen264179 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	d2gk4.shop/l/hello_kitty/js/main.js	218 B	2023-03-12	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/js/main.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 22:04:51 Last Seen2024-03-31 20:17:20 Times Seen942 Hash d2cbe4b2dc5aa429de73bbcc5d5b9d55 ecbd45ad404bc33ba8618a991fa397a652860349 67ffe5d5aeacdc2c2d1df68ad8bd5fb8d07df0ba6d4982ae5c44a588c06ed520 Loading...

	d2gk4.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js	151 kB	2023-03-07	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-03-07 12:01:31 Last Seen2024-03-31 20:17:21 Times Seen1567 Hash 2f9ce5c0e6e3b112156a7ff05ba9e682 5da37b54f5ac446e0d72005a12fcd21dd86f3ac0 8c1d8308190d402fce06d8cd4119a3013d87f1599c65cc6b34a698ed093b191d Loading...

	d2gk4.shop/l/hello_kitty/form/js/libs/intlTelInput.js	97 kB	2023-05-22	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/libs/intlTelInput.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:20 Times Seen1030 Hash 6680c3e6c8ad99d661fd6e4d8b02b93c c9180217f601bcb8b24fd16e5842f4e27849194f 760829886ac05de7bb063d7df7821013bbda8aee258a12326d3e34077a5bf7fc Loading...

	d2gk4.shop/l/hello_kitty/form/js/libs/utils.js	382 kB	2023-05-22	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/libs/utils.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:21 Times Seen1525 Hash fa4d12a59a70432bcfea49469386291e 3b24fcc6ef44ca3635266a10530d68df4857e7a1 5084ebd7703c470e9e39d58de78661fa7780812d49bf2293217f278429b66c78 Loading...

	d2gk4.shop/l/hello_kitty/form/js/libs.js	136 B	2023-05-23	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/libs.js IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-23 13:43:09 Last Seen2024-03-31 20:17:21 Times Seen962 Hash f8bb29b6886202015e7f5d3e139c3452 2056a53c03c0c412b97eb971e1fc5fda6dc69d63 7a37931451de32846c093d2b676ea92e6d46461299e82b8d448d757fec1a17f3 Loading...

	d2gk4.shop/l/hello_kitty/form/js/functions.js?v=6	8.1 kB	2024-03-11	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/functions.js?v=6 IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2024-03-11 18:24:54 Last Seen2024-03-31 20:17:20 Times Seen166 Hash 45cb8b56592fca85d2d963dfee4fcf06 dd83aa93527864a1e70628006cba0d69dd8a15a7 77985e719c883be1a0274141e1d75522d6c0409951b6f1b2d44520bd3376ba75 Loading...

	d2gk4.shop/l/hello_kitty/form/js/main-form.js?v=3.2	11 kB	2024-03-28	2024-03-31
Pretty URL d2gk4.shop/l/hello_kitty/form/js/main-form.js?v=3.2 IP 104.21.93.130 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 04:38:56 Last Seen2024-03-31 17:50:17 Times Seen45 Hash 0d3f3895c801c582f062a7c3da87f7ee 092df80a92df02b4dd5084642d30947e42a32650 b7a72083d8d371d8d463405f694ff83c0f79f43463287c5413dafe834665044a Loading...

HTTP Transactions (35)

URL IP Response Size

nhthm.blogspot.is/

216.58.207.225

194 B

URL
nhthm.blogspot.is/
IP
216.58.207.225:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text
Size
194 B (194 bytes)
Hash
365c814f59fb6a1ab9060b55420fea79
65781ad7d6a8766bca79b9983c82d6c88345e7ed
ed6a5ad7f908666dac86b6e325e5084de29f0e0bda122bca6fe4e17158bef6c5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Gazprom
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: nhthm.blogspot.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://nhthm.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 28 Mar 2024 18:22:09 GMT
expires: Thu, 28 Mar 2024 18:22:09 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 194
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

nhthm.blogspot.com/

216.58.207.193

15 kB

URL
nhthm.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (7139)
Size
15 kB (15009 bytes)
Hash
daba48d0d92e39edb238737ae9370e58
b88ab74a41b2d63e5fc6f02dec0cee072b6f1149
96125d1516c89713f546cf1824a7f71b84ec134ed7f665e9f9132f27ddbdfd13

HTTP Headers

GET / HTTP/1.1
Host: nhthm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport
report-to: {"group":"blogspot","max_age":2592000,"endpoints":[{"url":"https://www.blogger.com/cspreport"}]}
content-type: text/html; charset=UTF-8
expires: Thu, 28 Mar 2024 18:22:10 GMT
date: Thu, 28 Mar 2024 18:22:10 GMT
cache-control: private, max-age=0
last-modified: Sat, 16 Mar 2024 00:52:44 GMT
etag: W/"47bef5e9d045d1b7afe5512266649f96bdce953b8f302fa794574be961019b2b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15009
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

sh4737904.c.had.su/auto_domain1700087633.php?sid=4185

81.91.178.100

302 Found

0 B

URL User Request GET HTTP/2
sh4737904.c.had.su/auto_domain1700087633.php?sid=4185
IP
81.91.178.100:443
ASN
#204601 Zomro B.V.

Certificate
IssuerLet's Encrypt
Subjectsh4737904.c.had.su
Fingerprint5D:B7:8A:F2:18:4B:ED:51:81:12:EC:64:12:69:EB:18:59:04:45:C6
ValidityTue, 05 Mar 2024 09:47:51 GMT - Mon, 03 Jun 2024 09:47:50 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /auto_domain1700087633.php?sid=4185 HTTP/1.1
Host: sh4737904.c.had.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nhthm.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: ddos-guard
set-cookie: __ddg1_=Hm5xI3vdU6fX8ysShlz7; Domain=.had.su; HttpOnly; Path=/; Expires=Fri, 28-Mar-2025 18:22:10 GMT
date: Thu, 28 Mar 2024 18:22:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.2.16
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
location: https://l2nv8.shop/ekW/go?sid=4185
X-Firefox-Spdy: h2

d2gk4.shop/l/hello_kitty/content/pic1.jpg

104.21.93.130

200 OK

243 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/content/pic1.jpg
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:41:51], progressive, precision 8, 800x445, components 3
Size
243 kB (242601 bytes)
Hash
48ed517d70ca58a35e227d3e25e64107
5c54f9779bfdda8386cb0af1a840e78064489691
cba9eadf9468d6d82ac193d4cb0572dd18d74176e7530c51aad772c243c23301

HTTP Headers

GET /l/hello_kitty/content/pic1.jpg HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/jpeg
content-length: 242601
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-3b3a9"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nCaTdZoEMBobum8P22m17rjrqc2lxDqSpUnl8NTK8jbC%2Bsh8w2dM%2BBpiCj0U8vwljRFt7olbLpTismb0bpSBWuN0%2BkOmqvJdAhFS%2FhQAhPr5NxKM%2FWqHQBVjAqi0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef1914569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/content/pic3.jpg

104.21.93.130

200 OK

97 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/content/pic3.jpg
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:09], progressive, precision 8, 1280x825, components 3
Size
97 kB (96572 bytes)
Hash
e9e5d8cd1cdeb5db6e9f501b195c3283
fb358c77d11a25a8da280f77e93774dc674aa1d0
c6286b4e9308fc8739e135e41e92e5bc1179e16fd58dff9154d34a90d935e0ed

HTTP Headers

GET /l/hello_kitty/content/pic3.jpg HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/jpeg
content-length: 96572
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1793c"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OzptcHPzPPilGfIncjMf39jqrZ%2FjkAhsti%2BfbUaLQb1XAG7MPmEoccj7DXpiXjWARPZdY4h5OpWSnWV2KIesQRzPqnBjMBg8au%2FGrg0swERXUYNeTNUINRW8kc2g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef291e569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/content/pic4.jpg

104.21.93.130

200 OK

82 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/content/pic4.jpg
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:34], progressive, precision 8, 1920x1080, components 3
Size
82 kB (82443 bytes)
Hash
ae6ee1525a40e1c166b09283750e34e0
a58ab378efe975a58e9b0de02d4c2b2343da21f7
ef88af929c5c577c591f70f6861b6ca529f632f117cf7411da608f9788e1accd

HTTP Headers

GET /l/hello_kitty/content/pic4.jpg HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/jpeg
content-length: 82443
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1420b"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5NGPXrU37%2B2WlltUivOyaoqSCiLk1cyEpzfHD4Ky6GsNhonJa%2FE159Nl1Oi%2B2RrWfCv78qYOrnwKuCcfF5FT2dw%2F7DtG5jkNeUnkiQPVDymS%2BFkCmCeNhQGrTql"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef2920569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/content/pic7.jpg

104.21.93.130

200 OK

57 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/content/pic7.jpg
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:43:32], progressive, precision 8, 870x400, components 3
Size
57 kB (56761 bytes)
Hash
7542a68aae41b4ae59282116aa30d25f
4280d7f3af29bc8b50e1c4ae5867987430b0bc8d
385a1331c683ecb36eeafb04c3ce3c63928c79600eda11cded327b0173b786f8

HTTP Headers

GET /l/hello_kitty/content/pic7.jpg HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/jpeg
content-length: 56761
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-ddb9"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVqcqgAKFHLGGPXJ3gyoVrDj21%2BtNWmueyUNwml3K4xV5%2FlWs1JDcVtTiH9bvuRWukUC2vZFYr182Ha%2BzcMp99BDilu9HjSleo6WGjxOqxShEOOOnjpRZcX9FO1M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef4969569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/content/pic5.jpg

104.21.93.130

200 OK

130 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/content/pic5.jpg
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:53], progressive, precision 8, 900x900, components 3
Size
130 kB (130185 bytes)
Hash
e3d0ad7562b050fe95e10a5b4a083d7b
3cd204be40b940753d0942379e77906853c350f6
16cc235730aaa390f75c2779d91a087dc2ed1ff3015ec3b1271d60559694f72f

HTTP Headers

GET /l/hello_kitty/content/pic5.jpg HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/jpeg
content-length: 130185
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1fc89"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8UcgIESJz7TmppBo%2FvilC8kPwxVbTwYvurjJOScaoj%2F77s7qFAistAGD7S7cl%2BEzVhcCN710e0zzZUJRUS4w62TeFYKJXnP1pIg5JVeF1CTlhqsj5up4L92KCVG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef4965569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/css/flags.css

104.21.93.130

200 OK

0 B

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/css/flags.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/css/flags.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
content-length: 0
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-0"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nryeTawan3GmnZ9%2FHkFDXiK2WUt9M1%2Bfd%2FZQyYVFBHM%2BgVU%2FSOMrv%2BXYlCfcRUs3vZ%2BfEsxiDk1w3pKUeQRb3t%2B7ps2i8H0nJyHLnAE1pM3xkTtuiJ2uA0QsTIWG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4efda0c569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js

104.21.93.130

200 OK

1.1 MB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (755)
Size
1.1 MB (1099113 bytes)
Hash
2f9ce5c0e6e3b112156a7ff05ba9e682
5da37b54f5ac446e0d72005a12fcd21dd86f3ac0
8c1d8308190d402fce06d8cd4119a3013d87f1599c65cc6b34a698ed093b191d

HTTP Headers

GET /l/hello_kitty/form/js/libs/jquery-3.6.0.min.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-24da1"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aqw%2FMt4w3hTWX9lmkUfKNn2qE%2BpKUtpdnLWhASNK3PKLGq3OybVzFZ0zs3LJmOQsHaLxshau4oXpYSC9xuckjJ50IW7I7Gc4ZBUOm1aqOpD7f%2Be4mNyoSb4i5%2FH%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f01a4e569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/favicon.ico

104.21.93.130

200 OK

0 B

URL GET HTTP/3
d2gk4.shop/favicon.ico
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/x-icon
content-length: 0
last-modified: Thu, 09 Feb 2023 00:38:17 GMT
etag: "63e44079-0"
expires: Sat, 27 Apr 2024 17:30:10 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3121
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lbw%2FvNtURoUpCT%2Fq53bL78Gw1tjBlnrQIRRqgfC%2F7OcXzzHb8%2Fjd3xebyXfFltXvRh%2FX7g0LOrQ7u6WAZxDKJESm3FSenH9q8LXOiHqv7KaNr3uOo8X0npPbPOlM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f18bec569a-OSL
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/img/flags.png

104.21.93.130

200 OK

71 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/img/flags.png
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Size
71 kB (70857 bytes)
Hash
416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55

HTTP Headers

GET /l/hello_kitty/form/img/flags.png HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/css/intlTelInput.css
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/png
content-length: 70857
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-114c9"
expires: Sat, 27 Apr 2024 17:30:10 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENNx4wftl1mzqIDeDe6qIRBZoGA2x%2Fe6m0An6Bg27B3sYMYLKLtgjKBEP3X9FGS53rTQTGLbJHB%2FTTjLTjx5PrFTAPvruBq%2B6Ghwtm%2F86zTL%2BEqi6H91FEeRv4VI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f18bfa569a-OSL
alt-svc: h3=":443"; ma=86400

l2nv8.shop/ekW/go?sid=4185

188.114.96.1

302 Found

10 kB

URL User Request GET HTTP/2
l2nv8.shop/ekW/go?sid=4185
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectl2nv8.shop
Fingerprint3C:C3:59:C8:F2:46:67:D3:91:0E:46:09:AB:7B:72:70:C2:C9:F0:C8
ValidityTue, 12 Mar 2024 21:44:20 GMT - Mon, 10 Jun 2024 21:44:19 GMT

File type
data
Size
10 kB (10349 bytes)
Hash
0ebb74328dcf6443e0977c34f1ea10cb
f1aeb622a2036285ae1fc6dddf70bef399ce5351
11cf7024809257cff475b16775f1deaa21f4ede891bf0e0bea38a5a05618da63

HTTP Headers

GET /ekW/go?sid=4185 HTTP/1.1
Host: l2nv8.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhthm.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 18:22:11 GMT
content-type: text/html; charset=UTF-8
location: https://d2gk4.shop/nJD/yop06ZO?sid=4185
x-powered-by: PHP/8.2.13
cache-control: max-age=0, must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttzndxhGBeumelhzXW9nDR2rLuODgQEBS%2B%2FN3ijcBvDqCC7qbPkjoleJ5Nzzz3D8Oj%2BYk4jQz%2B%2Bpq5V%2BroE9j8PbnEiJ4j8N5wunRBAGFhj2Jcu6QlHmnwZxMvkL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b9a4e6cfabb521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

d2gk4.shop/l/hello_kitty/form/css/intlTelInput.css

104.21.93.130

200 OK

71 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/css/intlTelInput.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text
Size
71 kB (70741 bytes)
Hash
a69aa970266649e0b08c2cb4bc166568
d9314a52085a2bb6d284421bb18a4c546ecb73d4
ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491

HTTP Headers

GET /l/hello_kitty/form/css/intlTelInput.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-62a6"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RDIchcwrbYp6Z9A6F2yimcOXVO530krz5ryAzskar%2Feq8HfvzRkBukTfIT1BziwbiDZNk4IyCKv3mt1PzRo8sMwRkLRCNpaeozNkkSiDpO1hmcDJVjzGgjvCmuSh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4efda10569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/nJD/yop06ZO?sid=4185

104.21.93.130

302 Found

62 kB

URL User Request GET HTTP/2
d2gk4.shop/nJD/yop06ZO?sid=4185
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
62 kB (61645 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /nJD/yop06ZO?sid=4185 HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhthm.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 18:22:11 GMT
content-type: text/html; charset=UTF-8
location: https://d2gk4.shop/nJD/yop06ZO
x-powered-by: PHP/8.2.13
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: sid=4185; expires=Mon, 13 Mar 2084 18:22:11 GMT; Max-Age=1892160000; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FvYQae%2BomqTOmsIRBvMyvt4F%2Ff91WbEhyAMVx0fPIUZ%2B9Ns56XvcC6ESkxGX6TeOzTfLZ2XGiY4IjP0lLCGSuepvetRR5ynl5LCL4NMs51fi60%2FeRdkXdpMLJp%2F3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b9a4eae85d56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

d2gk4.shop/l/hello_kitty/app.css

104.21.93.130

200 OK

251 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/app.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text
Size
251 kB (251074 bytes)
Hash
3f061abacbdb579fe29aa6abae07ed5b
76509d96931d3dca282186e041b33d59dafb89b2
18a3021390d85960612d0078549a0aa4587ba21088e30f49baf1090ee6e01738

HTTP Headers

GET /l/hello_kitty/app.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-3d4c2"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yq6mrSl%2BdH%2FPZr%2Bp9TnfNEScQ4OF4YENTWQv%2FMGpn7cHs8OoK9QkVLMTN2vwzqndf7eZzEPTJwejIs7MUJ%2BiNHVnic3Upl6JaXAXaENLi2b9BVBfJBYtmaC4PGqS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef190b569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/assets/js/bootstrap.min.js

104.21.93.130

200 OK

60 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/assets/js/bootstrap.min.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (59893)
Size
60 kB (60174 bytes)
Hash
6bea60c34c5db6797150610dacdc6bce
544afefd148715da7dd52d368a414703390ca0e0
38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff

HTTP Headers

GET /l/hello_kitty/assets/js/bootstrap.min.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-eb0e"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pdtXlVVz9HZ5E9ooX5%2Fy2%2Fvk9eOXCxO1JbfwC%2BAG8Hh19U3vloASQB2LEjN3zqAM0jfTFluXoY7f1LVG7CXpyufzQlzKE%2Be%2BU9LT%2FHqa8G5VgxA7AQi4rO5ci8gZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef496e569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/nJD/yop06ZO

104.21.93.130

200 OK

62 kB

URL User Request GET HTTP/2
d2gk4.shop/nJD/yop06ZO
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
62 kB (61645 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /nJD/yop06ZO HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nhthm.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: sid=4185
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.13
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rgw8X64o0jPcL%2Bg26QesF1GddEPhU94Xfr9Y8wrzXCZ2uTNHpEWwNEu7WJ8SAHcL4b%2BbWJ4DXgLSRw9Wt8l66eAm7qdwP%2Fy0Tg4ol62JHYX7YVNJVOwaNEqlFnbb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b9a4ecda1156c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

d2gk4.shop/l/hello_kitty/form/css/form.css

104.21.93.130

200 OK

6.7 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/css/form.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (7069), with no line terminators
Size
6.7 kB (6687 bytes)
Hash
6e7e4c67941295ea1ecae563daa4a932
2001dd163e53cda179c5bccfc0bd9665a77c2928
54dde84d93f7586c1de76072940a5f5d4d23729aaa1e61c094912cbaf8f8dbed

HTTP Headers

GET /l/hello_kitty/form/css/form.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1a1f"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GGrIt2gchCxg78JewgsasC9%2BWqhAEhHl2kA3EYz3Q3QpPlJ79Cf5DrQ8F2W77rAWTDVBggtERxKk9A4na9zDBgJUxSXZr5ZCzjXsJuAL15P5GwBVkA1Io%2F%2BYDKRF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef0900569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/js/jquery-3.1.1.min.js

104.21.93.130

200 OK

87 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/js/jquery-3.1.1.min.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (32030)
Size
87 kB (86709 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /l/hello_kitty/js/jquery-3.1.1.min.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-152b5"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a6lSsuYymRGK0Ags4pXI5dRTm2i0w13CVaf9ywkyKusv8NQjWJH1l9hVhlLQCaOQvhS1PGj9cCKAMU9E6%2BFifWfTL%2Bb1xFUq79qh8mStEQ%2FvQeQhZduDjC95qAS3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef496a569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js

104.21.93.130

200 OK

17 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text
Size
17 kB (16746 bytes)
Hash
d37c584165f7d01f34ba29f5852daacb
7607f09ab544c30e1942c834e54410d15043c60a
d4fe2470c43d76c8d1be7f4cf8c835b1032d48641efbd071da6ab79fb506d786

HTTP Headers

GET /l/hello_kitty/form/js/libs/jquery.maskedinput.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-416a"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HfJmsS3DN1e3zCFtpBN8UnZ8DnAvKpdBIUimDRQ0Z9A4Aq0dZxbchFRR0X5s861J%2BuHqWgXG1Ag8RJXS892ZPR%2FQrkKsn6pfUd0eHNXUbSMcVRvv%2FUNhCHP3XE5u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f01a53569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/functions.js?v=6

104.21.93.130

200 OK

8.1 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/functions.js?v=6
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
Unicode text, UTF-8 text, with very long lines (8264), with no line terminators
Size
8.1 kB (8074 bytes)
Hash
445d29b579d8c8891938596d87178172
d7aa070c8d6959f9dbff50dcb1861903fad8d677
4cecc898bea1e927ce0c3a773cc422ec25271d67d756a2b8536b2206739c8fbe

HTTP Headers

GET /l/hello_kitty/form/js/functions.js?v=6 HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/js/main-form.js?v=3.2
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1f8a"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3woZkU6vW%2BV%2Bwmo%2FDF5rttTF%2FgRsmX00%2FhRFycrDSs0tgzwAcSRGbIBSe9REoODLKQk3csCVBgkjPyWk1sHD417Y7KhUIyoK6D73ZFcchjEEyyGDZy%2FCyYOPCbxM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f02a65569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/libs.js

104.21.93.130

200 OK

136 B

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/libs.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with no line terminators
Size
136 B (136 bytes)
Hash
412b9a563a3527ea92c8acd0477d1256
a511a6b0e6feb8bcdec25e27404fa59a75bffd09
89e68d47f5ad24040ec77c8355be82213e9a0065f865a1d300d23125cadd8463

HTTP Headers

GET /l/hello_kitty/form/js/libs.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-88"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=alhpi2dcKgB0P5EeJ%2BA7DGhZz4uIHFnyPh9C1ogZ2s9aYxGvGcodGGltma5eBrlIAgo7EdTy6N1b0%2BuhJRuzMx1hd68PIZ2xoPjpq7gfsklEu16Oj%2F7JO3%2Bo6h%2Fo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef4972569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/libs/intlTelInput.js

104.21.93.130

200 OK

97 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/libs/intlTelInput.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
97 kB (96729 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/js/libs/intlTelInput.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-179d9"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgKEbseZ%2BL%2BQaHIs6SIsGwVkSvYXjJhLDWPVM38vh1lYK6UlKvBTvTbarI1yf9k7aeM%2FdqMP2f50P8P9ETOt12n9Oe%2F3eSYuBrS%2FpI6lOvLRGm0p%2BMxhd9AxP%2FX8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f01a50569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/style/app.css

104.21.93.130

200 OK

251 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/style/app.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text
Size
251 kB (251074 bytes)
Hash
3f061abacbdb579fe29aa6abae07ed5b
76509d96931d3dca282186e041b33d59dafb89b2
18a3021390d85960612d0078549a0aa4587ba21088e30f49baf1090ee6e01738

HTTP Headers

GET /l/hello_kitty/style/app.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-3d4c2"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L1OhehBJ3O5WWzwjRbq%2Bk%2Bp%2Fh%2FNZsxRbPRxAjo3VrYSgKBJk8o7uAa2xXHdYwvhPBAOZ5bE%2FQ5W8rlnKOJuOFbJqlKmXDSa%2FsTIF%2BP%2FbzexEswe1D%2FGPbFG3Y8AT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef0904569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/js/custom.js

104.21.93.130

200 OK

1.5 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/js/custom.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (1688), with no line terminators
Size
1.5 kB (1531 bytes)
Hash
a7dd43cd0a4faf3a5d7987968e5607b4
1fdb7a97bd6fe031f7417e97aa3a8c645396a338
17952283c6fc648b37d2fc23ad6ab2636392ab9d30f17545fb1b0cfe03ef834e

HTTP Headers

GET /l/hello_kitty/js/custom.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5fb"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PPqn35IaeNVHMQmzyGtFUN8PE3J2QHt%2B1866k7iX6kG1PerZwJs%2FrcDEAzaUsZjVGd6vGjwYO5hcN82L4YWJ%2F7YiaQzRdwYpNzstvYBRXCkI4Z4%2FQJDpOYOwd%2BS1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef4970569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/main-form.js?v=3.2

104.21.93.130

200 OK

11 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/main-form.js?v=3.2
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
11 kB (11167 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/js/main-form.js?v=3.2 HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 27 Mar 2024 19:42:54 GMT
etag: W/"660476be-2b9f"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VDeD4mDtnDVFRzgd%2BZOiTZtCr9WcmodtOofWSAfgspbyu6%2F7o%2FddqiAJO0EhRi1B1JR%2FsbUCP6Epk%2F%2FMjkdFed%2ByKqoye%2FZcieweHacC8nMhA9oOwfOBlwE9%2FHZw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef4975569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/css/modal-error.css

104.21.93.130

200 OK

4.0 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/css/modal-error.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (4209), with no line terminators
Size
4.0 kB (3971 bytes)
Hash
c690ad3206aec810e24ea2a2f90c023d
9b229c4d9ff6acdde231dd7b278f116713bda30b
d8202caf1c0d1d4d4e4199d8766f31f8dcb13d680d824d658df21e5812dfd3c8

HTTP Headers

GET /l/hello_kitty/form/css/modal-error.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-f83"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AnzLQLintKADhhl9RC1mHQbPw9WDcIdBrdINw1Xd7U5mGBZcrFg1hfWRt5EFOyx4FiY6e%2BfFo3o2mgYXrg57vl8d3Hy%2Fv8NTIYt%2BLnlXdwq3j6f8SRLIha7H4zVz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4efda14569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/content/video.gif

104.21.93.130

200 OK

1.1 MB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/content/video.gif
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
GIF image data, version 89a, 720 x 576
Size
1.1 MB (1060841 bytes)
Hash
1025f8e9a1f615a5c03a7a06aa363a9e
2be8a2708b15c29cce7c5183e2465ca104668090
58515f4ec9ad8e6356a40adf432c048ba64401e43dc81ac2b660a38b17912074

HTTP Headers

GET /l/hello_kitty/content/video.gif HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: image/gif
content-length: 1060841
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-102fe9"
expires: Sat, 27 Apr 2024 17:30:10 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=muVsJb55VBnwru%2BlJQO5DWsmU2vA9fVh5Q98I8YOQXokxiB5O9%2BIPqSPVR4HS8c63y%2BlxRRK9p0uH97quiLsLLfjgNTwuSPgHnHvke75RnTiEEM%2BPnV%2ByAFjTCei"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f03a77569a-OSL
alt-svc: h3=":443"; ma=86400

get.geojs.io/v1/ip/country.json

104.26.0.100

200 OK

71 B

URL GET HTTP/2
get.geojs.io/v1/ip/country.json
IP
104.26.0.100:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerLet's Encrypt
Subjectgeojs.io
FingerprintB4:9E:CC:F3:6D:DD:E3:68:A0:4A:B0:10:ED:5E:C2:60:0E:41:FE:36
ValidityMon, 11 Mar 2024 03:28:55 GMT - Sun, 09 Jun 2024 03:28:54 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
71 B (71 bytes)
Hash
c2e58ee58e944b511238efb5a3d9137f
a88d5d17096b9d989640717f15ff283d24518e05
f0c22e4edc2bd23e07eb0e2372551f213d59f46a4d32f76c3f106a04e4115043

HTTP Headers

GET /v1/ip/country.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d2gk4.shop
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/json
x-request-id: 74a01b99b92151f6f0407c0c33ba2210-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d42KZ9MqEpsR%2FaMjTDAuCqoiit9Tdc3G6xM5yVLCRIZFd5acyk5YbqqXBTWJmNDCYt8f6WX9H4CedxuqkGeCwDFTNM8suS6f2NEhSDe2kX%2FDMt4i8hCIjhlecah0NA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86b9a4f11ebfb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

d2gk4.shop/l/hello_kitty/final-page.css

104.21.93.130

200 OK

380 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/final-page.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (33105)
Size
380 kB (379794 bytes)
Hash
d406ae0e843fe32e24ebaa62af70dd7b
2d813e3c2d46dca714c2b61fd1fc31adb1e70be6
91db0ffc1c47bfb038af493e253458b15d956e53ca961dec3f343a5718e52b6a

HTTP Headers

GET /l/hello_kitty/final-page.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5cb92"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIKP%2B70uvIVSThsEcXS%2B5JqoAmN6dRvgpw1vfMePnMj2enZ7IgxrAhCETnW72NIWRSd0q0j%2BlQOC03Ga7LXLeZG5sIVeNxkRPfi88Txq9herIGGPMoEs7sgr6WKe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef190f569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/style/css_002.css

104.21.93.130

200 OK

7.6 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/style/css_002.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (7860), with no line terminators
Size
7.6 kB (7636 bytes)
Hash
dd7011d80d6cc455e39ee5c0dd22c5c9
9e2e1e309028ef62b252be4c0b75fc577155260b
018b57c2738888ac6c710457c47fbbe00e32d86c801817683ed9f6a931b77ef4

HTTP Headers

GET /l/hello_kitty/style/css_002.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1dd4"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X2XUBBUXqhsjDYNOBiz%2B1fME%2FjhGMEQL2GhC2TT8EBpj%2BU1A%2FUH1Yw%2FVMcchGfqqn1wGUBkQJqdPkpjvXLAtvDZvJE3gWCR6pg%2F%2B54ny3HDZ6WDXIL3FRHCjOEf2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef1911569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/form/js/libs/utils.js

104.21.93.130

200 OK

382 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/form/js/libs/utils.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (1338)
Size
382 kB (381683 bytes)
Hash
fa4d12a59a70432bcfea49469386291e
3b24fcc6ef44ca3635266a10530d68df4857e7a1
5084ebd7703c470e9e39d58de78661fa7780812d49bf2293217f278429b66c78

HTTP Headers

GET /l/hello_kitty/form/js/libs/utils.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5d2f3"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ruOF%2BhMRO%2BPKrQVg%2BRDejLYrLGPr3795obXVqfnfCifYuHFOzA29kqF%2F3CnP7WUVdiMglShXN0L%2B3H%2BqM4jNPYUPTNdP5Wx0fjanw6ICgXRsorQ%2Fi7%2FDqlSsLmJ%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4f01a52569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/chunk-vendors.css

104.21.93.130

200 OK

309 kB

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/chunk-vendors.css
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (58126)
Size
309 kB (308569 bytes)
Hash
db356a68a05b7743b166031b677190ab
c3327a043adb6bed2d1ebec33277bedb3a004750
c4c8b35ba21338214dcee8a9a9e26972fd8029cc9b8d26940cc654e459b51fac

HTTP Headers

GET /l/hello_kitty/chunk-vendors.css HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-4b559"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vYTnjWgMbJwTh8JE5weDYRqk4fnbB7UpmO62s03fTJB%2Frq8wcTXaBq2hALQne%2FsHwe7P%2FxtnS2MBQeC1WGdYd2QuMntJgiP6bThGGYu6PMZAvKkB%2BUg4chPpIFf3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef1907569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2gk4.shop/l/hello_kitty/js/main.js

104.21.93.130

200 OK

218 B

URL GET HTTP/3
d2gk4.shop/l/hello_kitty/js/main.js
IP
104.21.93.130:443
ASN
#13335 CLOUDFLARENET

Requested by
https://d2gk4.shop/nJD/yop06ZO
Certificate
IssuerGoogle Trust Services LLC
Subjectd2gk4.shop
FingerprintCD:58:03:C3:D3:14:E7:E1:72:50:2F:CF:EF:72:11:B5:00:15:58:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
218 B (218 bytes)
Hash
6744ee14a2ff901a384e836d91be6ae1
0b9fc1e6adba8dae4ee2701371e44b53196e806d
e3f909ec16da01389e2cd2ca61df466e355ccb3d4aece742bb1bc68460e7e846

HTTP Headers

GET /l/hello_kitty/js/main.js HTTP/1.1
Host: d2gk4.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2gk4.shop/nJD/yop06ZO
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 18:22:12 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-da"
expires: Sat, 27 Apr 2024 17:30:09 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RU0TGXqIk8bnEsvcpp5p6ivq4fwdB1l7oMWO4Li6jiRdhp5vOaHdn7YWLDkGz4tOVUxqqypb6kHZN4DqOupn9dM9KGRTumWNZgq3PjOFtNStIE8JMyC%2BiQlQ9Htq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b9a4ef4971569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML