| pngjxqq.work-shp.com/file/images/ehe.jpg | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/images/ehe.jpg IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 739x415, components 3 Hashd333c176094bb1b212ca5eebda63c288 3144183684aa06da4cfdb3584de69fa008c323b8 fb09b146ace6c742a7e536be388a9b3105a46a39cb3bd3edd8770e0206053a7b
GET /file/images/ehe.jpg HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: image/jpeg
content-length: 14903
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 14:20:27 GMT
last-modified: Tue, 05 Sep 2023 23:43:25 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 5073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2FEeMsrA%2Fc0C1iNlCEAE0xmBZA%2Bx%2BIjNSDilcIFHEtidgIc6Gma8c9%2Bqf8I3RQ6Mr2xQ0bzcDZo9kmHdm53KiHR7ViU%2FxKsNbYQ2%2B8oSLP58Ksnr%2FeW7orjd19xT8nfLS1Qqz7A4GQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28cdd28b4f9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/file/images/myt.png | 188.114.96.1 | 200 OK | 171 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/images/myt.png IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typePNG image data, 4198 x 4198, 8-bit/color RGBA, non-interlaced Size171 kB (171244 bytes) Hash1274ee71c0ab11c8c0e5438d43f4b2e8 6d10512f5c87504326a47604267558bc63e714f3 f0839d462f8f476c0ec2176a6cccbd5944d72ae2d65d9f7e8cef3c7766bc8021
GET /file/images/myt.png HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: image/png
content-length: 171244
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 14:20:27 GMT
last-modified: Tue, 05 Sep 2023 23:43:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 5072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y70Tdv4T5iEoHdmBUDQfWZuMKxY%2ByHsHLRx4%2F3RgI%2FGoN83SWg72N2oklu0fAz1Ti3AHT8hIEKXnHjCo90Kz3ZzhWStZy%2F2ssrY5YTMm%2BYPoX9PjpsIZdDhKtoQfbY6YE4IGqP699A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28ced37b4f9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/file/images/igx.png | 188.114.96.1 | 200 OK | 125 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/images/igx.png IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Size125 kB (124647 bytes) Hash7766998e111aec88e3ff4bfe0617dc65 061eeaab923db15019f26a5ea13293d6a0505b13 92116074b655ddf5166b94584275c36741d0b50d6eec56b0b19fffda36fe1aaf
GET /file/images/igx.png HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: image/png
content-length: 124647
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:44:12 GMT
last-modified: Tue, 05 Sep 2023 23:43:28 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 48
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ue8d9nW7zRvM5ZVYnMso6e0nz3gZOZEF9%2FQ6yyywo%2FrtIDPe%2FB0Z7ysT3hXr0yG%2FQMYwYj8OpvmOgZm0nrnZP8bQdkUR%2BDP6mmDnl0YQOSK%2BSfr4ryeOctWElc4rIAjL91phVNA6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28ced38b4f9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/file/images/mt.png | 188.114.96.1 | 200 OK | 22 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/images/mt.png IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typePNG image data, 320 x 241, 8-bit/color RGBA, non-interlaced Hasha8f05d434810de69566171bb296dc1e3 67b2ec3d2bcd24995959f9a495d2141980930563 c5dfdfc564c4ffcff3bf39bfe09b13c67eae0a1e262b8539bab309972393b0c9
GET /file/images/mt.png HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: image/png
content-length: 21533
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:44:11 GMT
last-modified: Tue, 05 Sep 2023 23:43:32 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 49
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hfhHXd%2F7hL%2Bv1YJRMvn1h1O%2FW9cZEfXbU07YaE%2BgwiU7UHF1NtoZZcbnjTnRFt2b2d0TDoVX5HdiIBazz0w41jH%2Fbi6g6KlLW0F4%2FAG%2B9cIKf5Sm1o0SQzOglrFnQAm628kGSOK3gQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28ced39b4f9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/fonts/logo-white.svg | 188.114.96.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3pngjxqq.work-shp.com/fonts/logo-white.svg IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /fonts/logo-white.svg HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:45:01 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xuys5J%2FL1bOTrWQCT%2BmWFLy5J6x%2FmdYoAyg97eIhX83SSR%2Fv8SV80Te8PIXz3C5yT60AZO%2F9A01M%2B5MAHZuDFUhE%2BJthal%2B4yXN4gHrGj6HgwFj8hBoGuE7Q7mfqeOtUVb2SYnccvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28ced2db4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/favicon.ico | 188.114.96.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3pngjxqq.work-shp.com/favicon.ico IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /favicon.ico HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751; PHPREFS=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:45:02 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=javUwdAl%2B%2FutqDRr53VgKuMX1uf0kmtUlQ8UeElAUPZH2HS2nutaWCWPt9xnwD5Z3vKnrw%2F%2B4J0arebAA49RcDHbgFTc4NyMrt%2FFTT1q79t2eJrpzT39KGvI3VC04UDPe0HfMCqsew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b2939d22b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.cdnmetric.com/get/static.js?referrer=https://pngjxqq.work-shp.com/verif1.php | 0.0.0.0 | | 0 B |
URL GET api.cdnmetric.com/get/static.js?referrer=https://pngjxqq.work-shp.com/verif1.php IP0.0.0.0:0
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectcdnmetric.com FingerprintB9:25:2C:FF:C1:BC:7A:C2:28:30:B3:3C:AE:23:9F:25:E3:6F:3B:18 ValiditySat, 30 Mar 2024 16:35:37 GMT - Fri, 28 Jun 2024 16:35:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/static.js?referrer=https://pngjxqq.work-shp.com/verif1.php HTTP/1.1
Host: api.cdnmetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:45:03 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/8.2.1
access-control-allow-origin: https://pngjxqq.work-shp.com
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0JHIkCPJIYTOd0PM6yBxMR%2FI3bNhuAjbUB6K3PrVxMLmNJ4IYmQVIyDjmRf84g5vMfkhs6ZMrhaoqnQdUVdX2trKUsv3G4QeGRdKXwnkSxQh5iB0cVcAKr1NWrlx4CTUwxYwMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b29a1c1b5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pngjxqq.work-shp.com/file/css/app.css | 188.114.96.1 | 200 OK | 137 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/css/app.css IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
Size137 kB (137291 bytes) Hashea2ee32cb3d18f457cebae38292d218a e81e23c9b8ebbcdfa44f136dc4747ec71503cec8 f653dfdb5b23d4cd46dc7809a32a6b11ed4179755c9872c6c04193b77a962aa8
GET /file/css/app.css HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 14:20:27 GMT
last-modified: Tue, 30 May 2023 03:14:45 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 5073
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8qRYkMLl3EABvvFTmbxEkgypvF1GkEBRQ%2BvGBE27HxVZjelphx1r3IuPVQw2fanbT5YebgiuYEkgTpkn0HmaeCihj4yVowedEVjCCi2pCPrmno4mJMCYtpe%2B6R8c87AgNdx7EX4%2BZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7b28cdd23b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/file/css/watermark.css | 188.114.96.1 | 200 OK | 104 B |
URL GET HTTP/3pngjxqq.work-shp.com/file/css/watermark.css IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeASCII text, with no line terminators Hash67874335471aa420e1656b72fe759a06 2ea83f40d873934064b86f48664eb0c05b31244f 1067b485ad7b76ed9339332cd5e7f5b922e0a210dc390d38a272598889cd2c72
GET /file/css/watermark.css HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 15:44:11 GMT
last-modified: Sun, 16 Jul 2023 00:13:47 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 49
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYeVbzrFwxwE5QQqn5YjOOduOWjtEVIkydhLVA%2BB%2BHB1z7851hVn%2B66QBdGXB%2BQyGDk2LGU3tXMtwnVd13H2QDiY9v2u9BEheQ%2Ff4t9IlHWc1ZqhVCNOFGYBOSgiGyVFRqPlsVtgXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28ced44b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/external.html?link=https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&display=swap | 188.114.96.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3pngjxqq.work-shp.com/external.html?link=https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&display=swap IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /external.html?link=https://fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700&display=swap HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/file/css/app.css
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:45:01 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Iyuie7m%2Fulh8eObSneXFx7FDe2se%2BZL%2FoZK%2FOtWcehxssOF5R%2F27b29gHLRgn6egjc2%2BpkJUeHmTTUBxwpgOEFgLyel%2BPDLW7nBAqS4%2F03OjdLCUlNopr2YVBGgOlVetLcCQxurtmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7b28d4daab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/file/images/bg-header.png | 188.114.96.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/images/bg-header.png IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /file/images/bg-header.png HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:45:01 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VTFTOAEk7v8TCJChRn%2F1xOipQK04N%2BrCMh%2FtX2UeIPb8NZUh%2BjoHCzW%2FMrM4gGnoEHIWrik%2B%2F0pGykSYsOevC7LpEhQsx4IZvt3IP9meVBOlTnGmS7aybz%2FlFXHBWBW6zrwBo60rjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28ced32b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/file/js/app.js | 188.114.96.1 | 200 OK | 159 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/js/app.js IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
Size159 kB (158995 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /file/js/app.js HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:01 GMT
content-type: text/javascript
last-modified: Tue, 30 May 2023 03:15:21 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE7VV58xnBRWMD%2FU%2FAT18l%2B7Di4OvnKYUKtk59VMtn4QMKx%2BS62uM4yAhlH5y1ISoPbRxWl90OGWKlt2dkdMTUONYjw%2F4KT3AFn8h53Y5Kmh%2Bgeezdko4RsKwujOtq5CCO9EBl63eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7b28ced3db4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/verif1.php | 188.114.96.1 | 200 OK | 6.0 kB |
URL User Request GET HTTP/2pngjxqq.work-shp.com/verif1.php IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6341), with no line terminators Hash5535a9909630da4bb5256d4c16b17442 37bd7a848830418ea65e43eb3eea49a7089ff3fe ab72efc68134475f0f7e3241e0278686d714d330d63714b2d2ae036a0688c4c1
Analyzer | Verdict | Alert | OpenPhish | phishing | Instagram |
GET /verif1.php HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:45:00 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAm1NMHXCu4x2dw1SbKTF5tbIHkeZ6hADutLLwIvSeYtfVnir3poR49yRU3knu6toNfxsQQK4DHAryIosd1GAqeuzyes7qGVeKXvdMuX%2BgEddYS5hj7H0HH6%2B3x%2F9kuvZu0K1JRGbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7b288bd7656ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pngjxqq.work-shp.com/file/js/common.js | 188.114.96.1 | 200 OK | 3.3 kB |
URL GET HTTP/3pngjxqq.work-shp.com/file/js/common.js IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeJavaScript source, ASCII text, with very long lines (3428), with no line terminators Hash48f3ed38f5e05765392493dc118abcb6 2f2b8f063381f11fa3e0b33518c982a0d7b95d07 95a686ad2786d03ea0a535c9a164102f2df6d5c720efd2bbe78e96bf066a8e98
GET /file/js/common.js HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:45:01 GMT
content-type: text/javascript
last-modified: Tue, 30 May 2023 03:15:22 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMpw5QXK9jzGFkYOBga%2FArAqimLD42MaQ2Yl0VU5bjcvosc4E6IkJ3dbXPVG%2Ffj1%2BnJmk%2FGreDqeBiXLX%2FvESOFKcNqnlzI37eXw%2FK94JKezMLVEcvYi7JCKj2hUsOeaWHddkfZ8Wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7b28ced41b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pngjxqq.work-shp.com/fonts/sprite.svg | 188.114.96.1 | 404 Not Found | 1.3 kB |
URL GET HTTP/3pngjxqq.work-shp.com/fonts/sprite.svg IP188.114.96.1:443
Requested byhttps://pngjxqq.work-shp.com/verif1.php CertificateIssuerGoogle Trust Services LLC Subjectwork-shp.com Fingerprint46:43:03:37:E8:F0:A4:7A:D7:D9:42:6C:16:70:DB:4D:9E:30:13:74 ValidityWed, 24 Apr 2024 00:36:35 GMT - Tue, 23 Jul 2024 00:36:34 GMT
File typeHTML document, ASCII text, with very long lines (1285), with no line terminators Hash94f08a3a6562f7f079c4f5a67b7260e2 cc5d03e17c41ee6bb2ebf0d26d4354a486ca1823 44ea069d9a3f7dcea953ac173384578b6185f4b2ece05a6f4513b9fda29c4c29
GET /fonts/sprite.svg HTTP/1.1
Host: pngjxqq.work-shp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pngjxqq.work-shp.com/verif1.php
Cookie: PHPSESSID=b8209ad6d0dc36e2e1612d399c0a6751
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 15:45:01 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jDLZaLDokRZdW8oUTZxvJH6oh81YcjuOp%2BFGQmnSHqYpC9NZXXFAdWs%2Be7IFgVKU1EyhuGXXoS78SpNDvlp%2FlmiC1zGlwEomXP8xzQPCMn1sVJWNz6npTcXp2K7OA%2BH4uS2uLT4rGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7b28d4da9b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|