{"report_id":"5c0bf569-4eaa-41d0-98d6-1197f9a6731e","version":0,"status":"done","tags":[],"date":"2026-06-25T08:09:59Z","url":{"schema":"http","addr":"www.ghotkshop.com/","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html#/","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"title":"ghotkshop.com/h5/index.html#/","dom":{"size":31991,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11651)","md5":"c1024304b2a8c0fdc2f2a28e6c899da5","sha1":"cb13375cf15cb1f1d1cdb74ce3e887b9032e1b0b","sha256":"c97314561cb0b2e703f01ea62d3d635ddf0a5d901563e522046d27c38f57ac8a","sha512":"525f1fe7a2a59fcec42a7a8ca482d4a8bad7c67a2a060d735badb5c7d0c3a5fe0191b008dd4270c0593f3938b1c7b648f26cc7ef27f945763eb883bc497dfbfa","ssdeep":"768:8RcdZXEn5TN699PFzBsausa1saKsab3W6YEJJS+:5dZXEnpN69tFzBsausa1saKsajW6YEJT","tlshash":"fde2c731b54d34166933cd01e4d4a72ab12bd363c52309d8b75d372a8fc7dea2a6239b","dom_hash":"domhashd1855295f9710b4d43d22cb9ae087d05","first_seen":"2026-06-25T08:10:14.39923Z","last_seen":"2026-06-25T08:10:14.39923Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.ghotkshop.com/","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T08:09:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ghotkshop.com","ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-05-08T15:42:50.815509Z","last_seen":"2026-05-31T06:11:11.719618Z","alert_count":110,"request_count":22,"received_data":1311761,"sent_data":11852,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-06-19T06:07:40.024347Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/68.992b99a8.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20e8534c19de621e29ffea85f9ff46d","sha1":"a0fbc42ba479dd6c0bb105fa8b0f8b332795be26","sha256":"c7fe7b7e669506f0319b22ecbf84ebbf8ac7c149913d4df184ebfb5f639bc62f","sha512":"6407b52696bd509d54df8d7d55f89506b9d5783257b7319662347c683e97aba2c238bba04fb1a764158dad17ac6c6d14bec125b37f23e0013534cfd2538fd19a","ssdeep":"384:0Fw7JvN21B66iKoepQCLETA17RbqHWlvRs1GQKnKKIub:MwmB66iKoeJLETA1dbqHWlZsMQjKIub","tlshash":"00628208a1dd1cbd8663f1dd244ef9a4502a065cdce81c3e4dca6b611ce4f9632abf79","size":15682,"data":"","first_seen":"2026-04-26T01:42:08.329067Z","last_seen":"2026-08-12T09:44:41.400706Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-12T09:44:41.414368Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-08-12T09:44:41.414909Z","times_seen":1449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-12T09:44:41.415384Z","times_seen":1564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-12T09:44:41.414368Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-08-12T09:44:41.414909Z","times_seen":1449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-12T09:44:41.415384Z","times_seen":1564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/chunk-vendors.4b180b0e.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5f65a5bdbc25701991d325bcf92d486","sha1":"a302c3fd306db33bf35696860578b5001f36ced4","sha256":"1c80cc162d31df04f5f81fe9ca6e89ac5f0f329edb70b71f5ae0198af46caede","sha512":"0e334d4a66ba9ece80ed2d8bd6219792baa56adac840b17a910d5ed14fcf35c7de827dc8587bd6acdb7736f313bac841b58fef289ed036fce02540d424c30809","ssdeep":"6144:8+neOnMfTNjrTy8DTbg1xDGiuAQAjvmU4iTtQwY/u8vaz8dHjho4XM70P0qH:8+nnMfTBrTvkxyium6iyvaziWF0MqH","tlshash":"4205198db282b0b60be760f1403f220bb2376959b80a95d4f675e4d4ad7898d5237f7c","size":843818,"data":"","first_seen":"2026-04-26T01:42:08.293154Z","last_seen":"2026-08-12T09:44:41.409653Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/pages-login-login.dd338760.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c554fcae6a6872db42c441f3b69e160a","sha1":"5335ac30f4f3a0837cdfdaff1ae8d284917b8bde","sha256":"f21ce6e113588daf391622637277089e3cec344be613361aa0520df87230292f","sha512":"587dd04df8085a422e10fb0e8cf7ecd407b479bf66c74b45ad00db0cf40e654a658e6f050a083a2ce0308cfadb35692cf83941414aa1841f1fd8de7a7d5ffecb","ssdeep":"192:vWydRyw+a/pDtmqwJgi7htxaHMWeLkikwYzyuCeYgi24:vWy/yw9pciijLZgmxez4","tlshash":"3f42d818a0ca744f8e57d430615f762490739f25b016e48affb599a15ea8cce2713bbc","size":12416,"data":"","first_seen":"2026-05-08T15:42:55.416607Z","last_seen":"2026-08-12T09:44:41.397244Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/51.8a10c624.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f9ac2cd75d92a8af979f62328655f6f","sha1":"0d7a0a7beaf55004908c26a49cae3f4d5aa1461c","sha256":"d87d5a3ce142132735fbbcc01b4d38d68dba45fa91c95e570580100c002eb50d","sha512":"68f26a70e7e9a2d52383bf5c0c3a1be5b5f7f4e7fe8df55a9305f827ea8d56db74b03a8dd4c256fd58cc27016d46017be958cb7b9da817c327bac92045745ff5","ssdeep":"192:o6UVazE/jLCBR7eknRTeknycJMOFaPuU5CeUcAqcJ7QIP3OfIponFx:o6fz4CBR1MOUuU5CO8QI/rpC7","tlshash":"6472d529f09eb8199ed3885041ef151161b57e43c8657ac8b3a7aa70cb735cc322af4f","size":16351,"data":"","first_seen":"2026-04-26T01:42:08.310601Z","last_seen":"2026-08-12T09:44:41.410622Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/common/js/touch-emulator.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f032873a6cc3919e5b8c755c82b5199","sha1":"afc5f497fb1ed019fa62cad2778c31688706b974","sha256":"6d3c3ffef36089084f90d7735446c795e5e3ca611ab0dcced49b5d7df7d732e3","sha512":"320ea9aa330c5344f1fea0102328527c923443f56c44c1f2fdbfaa680bf4a89143ca45d99d0f8393b7b4252532306d9f9426d380e578a7fb50268924a4593bc6","ssdeep":"","tlshash":"a17165d7378565f2529323a3f5dfe709b17f448154191808ac22c8aa39a4f7d43dbe08","size":3519,"data":"","first_seen":"2026-04-26T01:42:08.309551Z","last_seen":"2026-08-12T09:44:41.406618Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-12T09:44:41.414368Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-08-12T09:44:41.414909Z","times_seen":1449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-12T09:44:41.415384Z","times_seen":1564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/index.82c77a4a.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"449e3927afff4f6318f3778fb8fb5adf","sha1":"558147f26369257fa967ce970b9a9cb0a155bfb2","sha256":"b10464ff8785d55292ba28e482895b5adf92ede3ab0e9095721eeb77d601c3a0","sha512":"028f1412908b7eace424487cc2f8fa02f3c37271f2287fd439ed5219cd6aaf49617f3883ba0a35cfb7419eb2a622656efd1ed988ca10a9484d11786eeaf9cd7f","ssdeep":"3072:GuNThzZ4urrP4983aS+ILqQ9rFkbwE7KPe0/peDsbEJ+ih89ByXsk+hWsyyr9T:zHnPG8q7INpJAAih89Begd","tlshash":"06048e59724eb65f0783328690aff70be13a1d72250ee440e2259e713faf956c317b28","size":174853,"data":"","first_seen":"2026-05-31T06:11:12.708986Z","last_seen":"2026-06-25T08:10:14.424813Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/330.62272784.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"460d0c081f547cb7bdc814b6a385d232","sha1":"095e2f9894d2679fb304011b17aea7e9ec5caf21","sha256":"78e3cec431d983f9bae1bee59a6f593c61f6f4140187314ef9f533f04e796720","sha512":"3849dfd3892daed74fc312ef92cf2d66958a68f8629e5ee9fea526ef6e8377f1e8b5ed8bb3eee31c63e7f037813f1d1111bc925a6fd67305e4a62773d86a4c4a","ssdeep":"192:HQyM6hWV28HT+29AI84COcBTJFE1je5lmTt0mB:Hu6/KUXGJD","tlshash":"17220d6da4c9acb37fd968c8409ea102638ea611dee07d03727a8f55c7be205111ff64","size":10195,"data":"","first_seen":"2026-04-26T01:42:08.294762Z","last_seen":"2026-08-12T09:44:41.407482Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/726.a310a923.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d274831e63e404ac3d0186024f8ee9c","sha1":"1f4b9d1547b53380ea252fe91cbecdb75ba486ff","sha256":"eccc465482fa8800bb6b6bfbde1f1317bc606f0c4c2f8f6b7950078572576b94","sha512":"b6763c7ff8a7a2cd7379f10fee82ca45ebf2a6389d4c308a4b96f62851484f1614b6046014485811614d3f15ef12de9b6495759e249fda2f28e72bf91bb10884","ssdeep":"192:xYvXq51hULTXH4glJbt7uPOHLyo5TVdBS4XM9J929+PJv+evv9fgl4LV3W:xR1KTXHVbt7tLyMTVdwf2nkBnRm","tlshash":"2472865cf55e30110a93c541c5dd0206e23f7662b9354ac8b3e692ab8fa7bcd1171f9e","size":17032,"data":"","first_seen":"2026-04-26T01:42:08.295805Z","last_seen":"2026-08-12T09:44:41.411737Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"[system]can't access property \"system\", JSON.parse(...) is null","filename":"https://www.ghotkshop.com/h5/static/js/chunk-vendors.4b180b0e.js","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://www.ghotkshop.com/h5/static/js/pages-login-login.dd338760.js","line_number":0,"column_number":0},{"level":"log","text":"https://www.ghotkshop.com/upload/a9156996f9873062/760d2d57b9a08a81.png","filename":"https://www.ghotkshop.com/h5/static/js/pages-login-login.dd338760.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[en-fr:map[configurable:true enumerable:true value:Français writable:true] en-ww:map[configurable:true enumerable:true value:English writable:true] en-xa:map[configurable:true enumerable:true value:عربي writable:true] es-mx:map[configurable:true enumerable:true value:Español writable:true] pt-br:map[configurable:true enumerable:true value:Português writable:true]] ownPropertiesLength:5] sealed:false type:object]999","filename":"https://www.ghotkshop.com/h5/static/js/pages-login-login.dd338760.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj39 class:Array extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj41 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj42 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj44 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object]] kind:ArrayLike length:5] sealed:false type:object]888","filename":"https://www.ghotkshop.com/h5/static/js/pages-login-login.dd338760.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/chunk-vendors.4b180b0e.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:20.464Z","timestamp":1782374960464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/chunk-vendors.4b180b0e.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-ce02a\"\r\nexpires: Thu, 25 Jun 2026 20:09:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zvT%2FiS1j9XJ05Z61OR6QGGffuEY5nA1Xx%2FNWf7cvMc%2B1TXZm4R7c83MMY0wqNA%2BBTfyku%2BOqojZS5Qtf0ZfqlWChKyXfFL%2FFeIp%2FwVCHFVmrf0AL9TolmqquP62dJNxw%2BR4WQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d4ee81d712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":843818,"size_decoded":264277,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5f65a5bdbc25701991d325bcf92d486","sha1":"a302c3fd306db33bf35696860578b5001f36ced4","sha256":"1c80cc162d31df04f5f81fe9ca6e89ac5f0f329edb70b71f5ae0198af46caede","sha512":"0e334d4a66ba9ece80ed2d8bd6219792baa56adac840b17a910d5ed14fcf35c7de827dc8587bd6acdb7736f313bac841b58fef289ed036fce02540d424c30809","ssdeep":"6144:8+neOnMfTNjrTy8DTbg1xDGiuAQAjvmU4iTtQwY/u8vaz8dHjho4XM70P0qH:8+nnMfTBrTvkxyium6iyvaziWF0MqH","tlshash":"4205198db282b0b60be760f1403f220bb2376959b80a95d4f675e4d4ad7898d5237f7c","first_seen":"2026-04-26T01:42:08.293154Z","last_seen":"2026-08-12T09:44:41.409653Z","times_seen":14,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/726.a310a923.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.742Z","timestamp":1782374961742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/726.a310a923.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-4288\"\r\nexpires: Thu, 25 Jun 2026 20:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouGdnfJ14Ndh2MQPPUIVSOtgG%2BOXb42fQmTA4IuesuYp%2FQtS8GqrXfd79sA35CPg57OtZQrnet6UBQVeC6xlV%2FP%2BXKO0fc5jlw6WR%2FbhD7dZgAVuyAV2DK7hXFhg5ZmXbdAnyQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d56e872712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17032,"size_decoded":4579,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16900), with no line terminators","md5":"0d274831e63e404ac3d0186024f8ee9c","sha1":"1f4b9d1547b53380ea252fe91cbecdb75ba486ff","sha256":"eccc465482fa8800bb6b6bfbde1f1317bc606f0c4c2f8f6b7950078572576b94","sha512":"b6763c7ff8a7a2cd7379f10fee82ca45ebf2a6389d4c308a4b96f62851484f1614b6046014485811614d3f15ef12de9b6495759e249fda2f28e72bf91bb10884","ssdeep":"192:xYvXq51hULTXH4glJbt7uPOHLyo5TVdBS4XM9J929+PJv+evv9fgl4LV3W:xR1KTXHVbt7tLyMTVdwf2nkBnRm","tlshash":"2472865cf55e30110a93c541c5dd0206e23f7662b9354ac8b3e692ab8fa7bcd1171f9e","first_seen":"2026-04-26T01:42:08.295805Z","last_seen":"2026-08-12T09:44:41.411737Z","times_seen":14,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/bottom/sys.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.793Z","timestamp":1782374961793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/bottom/sys.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-bf3\"\r\nexpires: Sat, 25 Jul 2026 08:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GofsG3yNWesymXyTFa%2FIXQJT%2BQuFmhKiBMbilI35uxS%2BWQGnq%2BmECn5goAjWaEsQNJA0uPt3UsgIcJ1mi6cFR7pQsPkHeVk35PaMxh0Sj%2BWnHrW%2BOPqejjcAQl6VW7nHjrAAEA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d573878712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3059,"size_decoded":3213,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"612359e7819592b0ae22283bcc06a8dd","sha1":"8972c91c55c4d3042ab364d48f60f22ed6933bfa","sha256":"d5091665646f2033c6f717ae5e0d73cc6bd4f5e9806690c9f0bceb4c86cc02d1","sha512":"0b9ef7c82aaa07c4f8efe3e554238ba4c75c121c20fe674de4e81851d9725a49bfe77264ae916f349e7372d29425f0fad611a16666b48d7fb4b1dda401988b4f","ssdeep":"","tlshash":"9251f854f3e22d00738ce98658ea11a71f672588c6d0d863bcd9dd0354562f89a0c9eb","first_seen":"2026-04-26T01:42:08.299291Z","last_seen":"2026-08-12T09:44:41.413556Z","times_seen":14,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/bottom/trade.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.796Z","timestamp":1782374961796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/bottom/trade.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-a8c\"\r\nexpires: Sat, 25 Jul 2026 08:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K99dXiLYQ3%2FAgQBmnDzqPHw68k6aFmfRFqnMpCHr6p7yyJXKoo5UrWAM%2BggH8JviJpG7H89EbwIigM0cABpvDKdLlsv8ZHAwUAoIBkG7ZrtCxuuJFW10d78wtNst3cRt4n3bYQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d573879712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2700,"size_decoded":2823,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0a279b11745411cc18fa750551bf096f","sha1":"39763e0b3cf536c8ebc37eb79a36684f89d0270b","sha256":"5c8534f746d42dc77970a5968b85948e131086b667eb52bfd75aa9e53fffd91f","sha512":"cb2e89f250157cfb96c852b53ce9abeb2fe23ae03454e3efeafa9ba26ec845eec42eb5850c9ed38ceaf27de78b970a65f6f91ce92a85eb7cdfa8f6d198f5a6cf","ssdeep":"","tlshash":"1751d544e64239504356fe86aaf750a31f279ac0ca94e5a2fcdedc0364700f68d0e7d6","first_seen":"2026-04-26T01:42:08.331377Z","last_seen":"2026-08-12T09:44:41.405377Z","times_seen":14,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/api/index/appsetting?token=\u0026lang=","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:22.197Z","timestamp":1782374962197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /api/index/appsetting?token=\u0026lang= HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, Accept-Language, Origin, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6kjAyFp4565pY4vj9xzBbDHIFfxKjA1nUsywwvVY7TyrCIUBzmizGfAX34Bwex5AVmOBNFMmDV2VogrWT%2FEzzwKBP9ojAO%2Bc0Cb6qL%2FZlMbg1rfBUZ6FCyHfmhErTP4I3G%2FPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d59b897712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1076,"size_decoded":1649,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e39f418f99f19d8adb042ddc57b968df","sha1":"95a25e282f91dce3e9a6cfdd69bb901857075446","sha256":"7b12a0c2ee6486b6b360f0b895e840c3738be000ca67dd8df8b29c9a0eee2979","sha512":"1e45a0891d9b09766c6a82714ccfc2188c3132278db9824491be90caa8aff7a89a3bb618c1b482080d77e173f251405300061328c768aae5f1a59252c835a756","ssdeep":"","tlshash":"22111215903d8fae68b3a11d5ee8af0e17ec7a23020f2c5457f48f1c49c02eed152125","first_seen":"2026-05-31T06:11:12.726691Z","last_seen":"2026-06-25T08:10:14.415764Z","times_seen":8,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/eye.svg","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:22.287Z","timestamp":1782374962287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/eye.svg HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-557\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7KVrTWdFu3IVtpZAJD5GQEkFydmS0ieqGBuw606mXbsyNefEV3%2BA1wwcHT%2BrkBUyhtl5tUnHaYPLvu7c8TX%2BQpViNe9HJS%2BFfSMvEcaDu8zWJmHpRdsHWiyax03URigqQeSOQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d5a489d712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1367,"size_decoded":1449,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f95e63540ab9256560ae3f36edb0f914","sha1":"6c02210b8602478a7be456bb4f66c4b3d5cc5759","sha256":"231c4514fca44689b06339a31d4956e199c99776e9f0c55d739e5b95cb469c6a","sha512":"560c75ee82a41a8e67ba13242f1ca5ebf5200e65746fa21c0609cf66e4d8b246c6aae2b7501e15e6ff7bfe5fba04f0ae3f3cfb362047da94baf240df382f4822","ssdeep":"","tlshash":"df211dc8bb18f330ba8847f9a7b45868686f41e7b0605a6cc1f05b6ca192c99ed0042b","first_seen":"2025-09-16T07:05:47.22387Z","last_seen":"2026-08-12T09:44:41.402589Z","times_seen":97,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/upload/a9156996f9873062/760d2d57b9a08a81.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:22.364Z","timestamp":1782374962364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /upload/a9156996f9873062/760d2d57b9a08a81.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 11:35:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2a519-651a\"\r\nexpires: Sat, 25 Jul 2026 08:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ln%2BBcVzJg1kJ5b1EbXBAvsQFDYrpT7Jn%2B713OOuME2myqG3QJhI6QpJo1qd%2F6CdxvAOW0An3f6lnIZHikHQeCiyogfI5DDE3ynaTF9KqrrJPmxBpD6p1Byi5eHZ5EFS9bCijGg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d5ac8a5712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25882,"size_decoded":26691,"mime_type":"image/png","magic":"PNG image data, 408 x 120, 8-bit/color RGBA, non-interlaced","md5":"a9156996f9873062760d2d57b9a08a81","sha1":"ea84fbff56e77cfdd07b711b0c99d5f2004c3b2e","sha256":"033420881f80162d8afd660a0fc34e31d95e76f76c2a8817318a8405fb0f4aa7","sha512":"60185fe63451a2cdfb4aff19e4f065a160e89647d4e72c1f56d077ebf5e5a9b801113727e7d27a0203a0782dffee7dc9cb3b62e5d9f3b649ab9a02668b2ca2e9","ssdeep":"768:/S23mC3fTX5SlL3XvJ3NTtVHPp0/iAxlyy+:K2m2rXo3XvFNVxAx2","tlshash":"c7c2e08feddd0e1c644e155d724baf605d5ec32ad639792c9cb2420bd9b0cb12911ee2","first_seen":"2025-11-01T14:40:12.299573Z","last_seen":"2026-08-12T09:44:41.40866Z","times_seen":40,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T08:09:19.223Z","timestamp":1782374959223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: s=mlfgfiu5t1ddei9q2uk5udmli1; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /h5/index.html\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIkZAHr%2Bpa3eXPcjU00aSqZAv79hTBCEbYB4RzJa0rXWtL%2BFNcaOdHl4PrI0%2BEx%2Fypa8TszrWdUhdL1UYxbcQ%2FbcGC%2FzjExmg92R7mobJwMUvGtsoF43qOsIW%2BgtFHU29p6NMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a1127d475fdb712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T01:54:04.896448Z","times_seen":17864013,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":6,"connect":18,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T08:09:19.770Z","timestamp":1782374959770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/index.html HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:20 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 17 May 2026 13:19:58 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iO2WMSp%2FrBB0TjjzxJbuCgyYbH%2BaprBM3LskbOUJk2ofCsZuLOvAYDLz6kkNNi%2BGEvrSxk3YvqUKARYDMzaCL4MccQy0K4tHi8aL0nxjEu7ozk5fMrKC%2BNYXnU732NzAB1PXOA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1127d4a9fec712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1073,"size_decoded":1284,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (429)","md5":"29ee3b6cc3ea1edc8fa073f1cc3b7afc","sha1":"bcd8f75faef9b2e9b6792acccc2099fa54d06c10","sha256":"5791e840ba6282276a94f05fc8ddceaa98c0e6cfa052dd0f4774f2fc8824fda7","sha512":"8492160ac33127530d8575bf92de19a3962387510deb7cda9652584910c6204f30b5cfa3a7353e22e29ce649327b26d78d924245556bddf20355b1c2e895cc75","ssdeep":"","tlshash":"de11efd68c22c52c1360d628b9f9f34c48ae941a5c219c41f1dd15de0fe0fc84eaa558","first_seen":"2026-05-31T06:11:12.714366Z","last_seen":"2026-06-25T08:10:14.421466Z","times_seen":8,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/index.css","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:20.455Z","timestamp":1782374960455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/index.css HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-1793e\"\r\nexpires: Thu, 25 Jun 2026 20:09:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYEpEhhSqFlXyfVA2GcHd4QQMGdVXbGQPnLDEHv1ovm%2BJDKUILb5gwiwqDedcElWHD%2BdKNb7PfTh0mXv%2FjlO5Xv%2BAsTnDUTLe9rdUr5hCsP2rv8tmF%2F3xT3rhShoPWihCMo0yQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1127d4ed81c712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96574,"size_decoded":27288,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-13T01:08:15.965567Z","times_seen":5225,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/index.82c77a4a.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:20.469Z","timestamp":1782374960469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/index.82c77a4a.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-2ab05\"\r\nexpires: Thu, 25 Jun 2026 20:09:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ha1Z5Sj6UCO5ysAFEecocpIocP8FyoEyPKbVyz5bW3ZV7jFHMTXBkNpWTgLUA3Dc1zJXesRsWm9EkGJstLVVVc5SuluAbNtFwLmI0sJakRBox7QMc7iWDohK%2BTS1TSBsYsa%2BDA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d4ef81e712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174853,"size_decoded":67412,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57057), with no line terminators","md5":"449e3927afff4f6318f3778fb8fb5adf","sha1":"558147f26369257fa967ce970b9a9cb0a155bfb2","sha256":"b10464ff8785d55292ba28e482895b5adf92ede3ab0e9095721eeb77d601c3a0","sha512":"028f1412908b7eace424487cc2f8fa02f3c37271f2287fd439ed5219cd6aaf49617f3883ba0a35cfb7419eb2a622656efd1ed988ca10a9484d11786eeaf9cd7f","ssdeep":"3072:GuNThzZ4urrP4983aS+ILqQ9rFkbwE7KPe0/peDsbEJ+ih89ByXsk+hWsyyr9T:zHnPG8q7INpJAAih89Begd","tlshash":"06048e59724eb65f0783328690aff70be13a1d72250ee440e2259e713faf956c317b28","first_seen":"2026-05-31T06:11:12.708986Z","last_seen":"2026-06-25T08:10:14.424813Z","times_seen":8,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/pages-login-login.dd338760.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.753Z","timestamp":1782374961753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/pages-login-login.dd338760.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-3080\"\r\nexpires: Thu, 25 Jun 2026 20:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Md%2Bp7EmQZTokqxPdSuL9OSSAo5XVgqqFkp8f95zwCstGr3FnwpsI6VQmnFmroGavWcgmp8cZicmvDNQwNKTQw649ahWp3d2swiOD9dYWhk96AKevpBVnSHrkVlpeNPM%2B%2Fwbnkg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d570875712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12416,"size_decoded":4901,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12416), with no line terminators","md5":"c554fcae6a6872db42c441f3b69e160a","sha1":"5335ac30f4f3a0837cdfdaff1ae8d284917b8bde","sha256":"f21ce6e113588daf391622637277089e3cec344be613361aa0520df87230292f","sha512":"587dd04df8085a422e10fb0e8cf7ecd407b479bf66c74b45ad00db0cf40e654a658e6f050a083a2ce0308cfadb35692cf83941414aa1841f1fd8de7a7d5ffecb","ssdeep":"192:vWydRyw+a/pDtmqwJgi7htxaHMWeLkikwYzyuCeYgi24:vWy/yw9pciijLZgmxez4","tlshash":"3f42d818a0ca744f8e57d430615f762490739f25b016e48affb599a15ea8cce2713bbc","first_seen":"2026-05-08T15:42:55.416607Z","last_seen":"2026-08-12T09:44:41.397244Z","times_seen":11,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/bottom/home_cur.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.790Z","timestamp":1782374961790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/bottom/home_cur.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-a60\"\r\nexpires: Sat, 25 Jul 2026 08:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohYQzBiT3lrPR0BR30ICE2vqadf2EJQK%2FJ4QVHTiG3Xc9gyJNnRMDWXAXrVfDtV2q9GDeBxRY%2FokF4Oos0mo%2Fvlk3Ok3uoQpg3m%2FeoyrRf56gOuXPTaemNnmjiNs5ywieUFzRw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d573877712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2656,"size_decoded":2777,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"3e7dd76cca80423e7f2f0a9c357a511d","sha1":"f08ea5bb2e8d01c2baa9dc88b34bec8ec6679a0f","sha256":"da89c82016c92044e760d61b6ce16f546b34c93f811dad442e0c6b6e51e273a2","sha512":"3703026fbc5e8285dcaa29e18bcc462345409a63c82fbd2726975470758bece6db7e774c19f350a178a3d2653f0c95969f7c7ad60f635c0bd14a46b0a1d5ce1c","ssdeep":"","tlshash":"b351c888e7d1bc045188d99569f564abce271784c650f2e79cdec82388720f5656d7c3","first_seen":"2026-04-26T01:42:08.330221Z","last_seen":"2026-08-12T09:44:41.393517Z","times_seen":14,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/logo.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:22.282Z","timestamp":1782374962282,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/logo.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T01:54:04.896448Z","times_seen":17864013,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/common/js/touch-emulator.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:20.451Z","timestamp":1782374960451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/common/js/touch-emulator.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-dbf\"\r\nexpires: Thu, 25 Jun 2026 20:09:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zav6t3IWjF69AiFyQ9xiEFsnu6iqMnT69TgTpLFJ6Adj1xer8NPGaTUR4XOzVePbFvWjfW0oSLfWwMIYXRQBRHKwnCl%2FsucAxrSMjgov4%2F2yYe%2FN4r8mWdWJ4jx%2BC9%2FJEj0pLw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1127d4ed81b712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3519,"size_decoded":2261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3519), with no line terminators","md5":"9f032873a6cc3919e5b8c755c82b5199","sha1":"afc5f497fb1ed019fa62cad2778c31688706b974","sha256":"6d3c3ffef36089084f90d7735446c795e5e3ca611ab0dcced49b5d7df7d732e3","sha512":"320ea9aa330c5344f1fea0102328527c923443f56c44c1f2fdbfaa680bf4a89143ca45d99d0f8393b7b4252532306d9f9426d380e578a7fb50268924a4593bc6","ssdeep":"","tlshash":"a17165d7378565f2529323a3f5dfe709b17f448154191808ac22c8aa39a4f7d43dbe08","first_seen":"2026-04-26T01:42:08.309551Z","last_seen":"2026-08-12T09:44:41.406618Z","times_seen":14,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/330.62272784.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.735Z","timestamp":1782374961735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/330.62272784.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-27d3\"\r\nexpires: Thu, 25 Jun 2026 20:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2Fcbfp1V2vTWCMQIv58tNjcB5hVAvtxzk8rDRr6hohCkmTpUCOtUkS7%2Bkw2grOzB6CDbZnQ1%2F47015cOA9pxVoT62GZamZUl%2Bda5egduFs3xT2kyTSTSoT6uPv5SKXVoJB99gA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d56d871712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10195,"size_decoded":4063,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9771), with no line terminators","md5":"460d0c081f547cb7bdc814b6a385d232","sha1":"095e2f9894d2679fb304011b17aea7e9ec5caf21","sha256":"78e3cec431d983f9bae1bee59a6f593c61f6f4140187314ef9f533f04e796720","sha512":"3849dfd3892daed74fc312ef92cf2d66958a68f8629e5ee9fea526ef6e8377f1e8b5ed8bb3eee31c63e7f037813f1d1111bc925a6fd67305e4a62773d86a4c4a","ssdeep":"192:HQyM6hWV28HT+29AI84COcBTJFE1je5lmTt0mB:Hu6/KUXGJD","tlshash":"17220d6da4c9acb37fd968c8409ea102638ea611dee07d03727a8f55c7be205111ff64","first_seen":"2026-04-26T01:42:08.294762Z","last_seen":"2026-08-12T09:44:41.407482Z","times_seen":14,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/51.8a10c624.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.748Z","timestamp":1782374961748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/51.8a10c624.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-3fdf\"\r\nexpires: Thu, 25 Jun 2026 20:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hfa2uu6ddIr9i7Gozh7HwXC6LetO55zv8z8MHws83d3vFEsDG8yEabFfUVHlPjUUUytW9GrJMhAg2yOVoWaCUo5Ma2gEWMQKFIwx7BHUHK84e9MWaSqhfd1v2siounUJ2dYVNw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d56f873712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16351,"size_decoded":4703,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16351), with no line terminators","md5":"4f9ac2cd75d92a8af979f62328655f6f","sha1":"0d7a0a7beaf55004908c26a49cae3f4d5aa1461c","sha256":"d87d5a3ce142132735fbbcc01b4d38d68dba45fa91c95e570580100c002eb50d","sha512":"68f26a70e7e9a2d52383bf5c0c3a1be5b5f7f4e7fe8df55a9305f827ea8d56db74b03a8dd4c256fd58cc27016d46017be958cb7b9da817c327bac92045745ff5","ssdeep":"192:o6UVazE/jLCBR7eknRTeknycJMOFaPuU5CeUcAqcJ7QIP3OfIponFx:o6fz4CBR1MOUuU5CO8QI/rpC7","tlshash":"6472d529f09eb8199ed3885041ef151161b57e43c8657ac8b3a7aa70cb735cc322af4f","first_seen":"2026-04-26T01:42:08.310601Z","last_seen":"2026-08-12T09:44:41.410622Z","times_seen":14,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/js/68.992b99a8.js","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.750Z","timestamp":1782374961750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/js/68.992b99a8.js HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-3d42\"\r\nexpires: Thu, 25 Jun 2026 20:09:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SeftkcJwjsro609L5V5ZmeKvAoLMYKtiHttn87DZpbxZ%2BNjLAk0Lxf%2FRqbbx1BiOJE%2FX3xX9c09qBztE4UJqpjdPkNnbxhP%2BJP1emQvb3BADNGBWvJ42F8ieZig%2FRHEgil8zCg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1127d56f874712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15682,"size_decoded":8462,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14083), with no line terminators","md5":"d20e8534c19de621e29ffea85f9ff46d","sha1":"a0fbc42ba479dd6c0bb105fa8b0f8b332795be26","sha256":"c7fe7b7e669506f0319b22ecbf84ebbf8ac7c149913d4df184ebfb5f639bc62f","sha512":"6407b52696bd509d54df8d7d55f89506b9d5783257b7319662347c683e97aba2c238bba04fb1a764158dad17ac6c6d14bec125b37f23e0013534cfd2538fd19a","ssdeep":"384:0Fw7JvN21B66iKoepQCLETA17RbqHWlvRs1GQKnKKIub:MwmB66iKoeJLETA1dbqHWlZsMQjKIub","tlshash":"00628208a1dd1cbd8663f1dd244ef9a4502a065cdce81c3e4dca6b611ce4f9632abf79","first_seen":"2026-04-26T01:42:08.329067Z","last_seen":"2026-08-12T09:44:41.400706Z","times_seen":14,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/bottom/my.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:21.799Z","timestamp":1782374961799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/bottom/my.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-c84\"\r\nexpires: Sat, 25 Jul 2026 08:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3Kf0l%2FKjKaS9wAp0tpWyDftYCWySFZmNU7H4GcV6gpfZLrGXXGGiqtHjCpMgVJg8kTSrEArP9ZfSm3wN9LgmVFJtI%2FIdo%2Fe7QUSk87Gx7kNNhNuun8LzZ%2BErtb8yu4vlPbbrQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d57487b712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3204,"size_decoded":3332,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2ce2a1bd35e85bdbd6ccda8fc10d7748","sha1":"32624ab797f1394faac7e529d9c8bf849523a45f","sha256":"8495440182c8d0c48985e3a543128998aae3ccad66687c03ec71a7cf22c9f289","sha512":"be913d98abecbddde59931b1f0447e4c4a7f5fc664d3607d47155f813435ef7c94871d4d173d4e76a28937820bfe3e2dc99701a3acfa296881910fd1054bf8a4","ssdeep":"","tlshash":"4f611b49ff626d0005d9ecd67ef6a8931d17955cd5c8a88adcddc04180714fd829c7d3","first_seen":"2026-04-26T01:42:08.303076Z","last_seen":"2026-08-12T09:44:41.412597Z","times_seen":14,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/static/img/login_top.png","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:22.285Z","timestamp":1782374962285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/static/img/login_top.png HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 13:18:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09c017-f447\"\r\nexpires: Sat, 25 Jul 2026 08:09:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ca0hxIO1vti0UExveyVmzvqLA07FG7P6swuA2lwmBLqZyC0cXeaieJSp7N4gB15mXDNWG%2FD5Qxwh%2BHJhhRcbqsJmiReiGlO%2FEq07F7IM0KdB6Vvt8eeBqr8tUunhsx%2BZLR2rsQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1127d5a489c712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62535,"size_decoded":61779,"mime_type":"image/png","magic":"PNG image data, 798 x 821, 8-bit/color RGB, non-interlaced","md5":"b2a731b97ba429d4432b11e442f4dd4b","sha1":"527c4ba00595c8a88b0e6eea5ee0a069931c34bb","sha256":"bc8fd97f9cd6a03c6328540eeef5acee7a3050b6efef8de8a6a3a20ee8bb31a2","sha512":"246f3eb27510bbe2a7f662ae4afea3a709dfef36eaf30ae5acde2ee50ca4832d2c4c30293a753da596a319b9ab67beb3c859034aeca0ef249dcb477f5ca1c4d9","ssdeep":"1536:KIWT5afLxpStxRd4grYj8dkD4+KSmI3VVeor5Oi3NILtv:vWT5upyRd6Y0nBmIal","tlshash":"2353013bf6de58468b534ca42bef04127e5aeb27521994b48b54233b2b1250fbcf32c5","first_seen":"2025-09-16T07:05:47.211435Z","last_seen":"2026-08-12T09:44:41.399461Z","times_seen":116,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/favicon.ico","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:22.661Z","timestamp":1782374962661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /h5/index.html\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzMPwL54uowbSTjz80z5Uiw1SQhNvupu0pRpSPGIGGHPbIvhbVb7uqmN19iEJIiuvGz8CCfKIkW0%2Buqo8CFZuw3izbE2%2BEwieXiuQfsqbwepa%2BxGLRkctww2G925cy30CwUqgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1127d5ca8bb712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T01:54:04.896448Z","times_seen":17864013,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ghotkshop.com/h5/index.html","fqdn":"www.ghotkshop.com","domain":"ghotkshop.com","tld":"com"},"ip":{"addr":"104.21.18.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:23.062Z","timestamp":1782374963062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghotkshop.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:27:58 GMT","end":"Wed, 26 Aug 2026 10:27:57 GMT"},"fingerprint":{"sha1":"9F:5A:FA:A8:6D:AE:D2:A2:29:1D:86:21:32:0A:55:77:7B:B8:3F:1C","sha256":"AD:30:C5:B2:90:F9:8B:A3:8F:A8:77:DB:B3:99:4B:85:35:E6:91:05:8C:4C:CD:4E:2C:9F:CA:73:96:46:F5:AC"}}},"request":{"raw":"GET /h5/index.html HTTP/1.1\r\nHost: www.ghotkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.ghotkshop.com/h5/index.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: s=mlfgfiu5t1ddei9q2uk5udmli1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 08:09:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 17 May 2026 13:19:58 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtGZB0%2FpnDn7afuOr4FYf6OFv73%2FoytCyj7fCpbqkBBp3cl2GZRwwn%2FGydARIZK%2BopWb%2BdUfikCc51A9aCIFZpBtvVczu43JeUO6iK5NVIMiMQYBFGMza%2FV%2B23l0Ap8cX56VoQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1127d5f28e2712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1073,"size_decoded":1293,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (429)","md5":"29ee3b6cc3ea1edc8fa073f1cc3b7afc","sha1":"bcd8f75faef9b2e9b6792acccc2099fa54d06c10","sha256":"5791e840ba6282276a94f05fc8ddceaa98c0e6cfa052dd0f4774f2fc8824fda7","sha512":"8492160ac33127530d8575bf92de19a3962387510deb7cda9652584910c6204f30b5cfa3a7353e22e29ce649327b26d78d924245556bddf20355b1c2e895cc75","ssdeep":"","tlshash":"de11efd68c22c52c1360d628b9f9f34c48ae941a5c219c41f1dd15de0fe0fc84eaa558","first_seen":"2026-05-31T06:11:12.714366Z","last_seen":"2026-06-25T08:10:14.421466Z","times_seen":8,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"www.ghotkshop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"www.ghotkshop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ghotkshop.com/h5/index.html","date":"2026-06-25T08:09:24.321Z","timestamp":1782374964321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ghotkshop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 25 Jun 2026 08:09:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Thu, 25 Jun 2026 15:09:26 GMT\r\ncache-control: max-age=25200\r\nset-cookie: __uni__uid=rBEQa2o84jaN+95oAyhpAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-13T01:22:09.715596Z","times_seen":20217,"resource_available":false,"data":null}},"time_used":1861,"timings":{"blocked":0,"dns":3,"connect":204,"send":0,"wait":409,"receive":0,"ssl":1245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}