Report - mtjzq.blogspot.lu/

Report Overview

Submitted URL
mtjzq.blogspot.lu/
IP
216.58.207.193
ASN
#15169 GOOGLE
Submitted
2024-03-28 16:31:50
Access
public
Website Title
Узнaйте скoлько Вы смoжете зaрaбaтывaть на инвестициях?
Final URL
c7fv1.shop/9tYf/btJdxvuK
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mtjzq.blogspot.com	unknown	2000-07-31	2024-03-01	2024-03-04	473 B	16 kB	216.58.207.193
sh4737904.c.had.su	unknown	2017-05-10	2023-11-16	2024-03-28	545 B	490 B	81.91.178.100
c7fv1.shop	unknown	2024-03-24	2024-03-24	2024-03-25	14 kB	4.8 MB	172.67.215.85
get.geojs.io	17418	2017-02-18	2017-03-30	2024-03-28	424 B	955 B	104.26.0.100
g7fq9.shop	unknown	2024-03-12	2024-03-12	2024-03-27	519 B	10 kB	188.114.97.1
mtjzq.blogspot.lu	unknown	unknown	No data	No data	472 B	683 B	216.58.207.193

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	mtjzq.blogspot.lu/	Gazprom

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	c7fv1.shop/l/hello_kitty/assets/js/bootstrap.min.js	60 kB	2023-03-07	2024-04-27
Pretty URL c7fv1.shop/l/hello_kitty/assets/js/bootstrap.min.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-04-27 14:00:06 Times Seen6346 Hash 6bea60c34c5db6797150610dacdc6bce 544afefd148715da7dd52d368a414703390ca0e0 38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff Loading...

	c7fv1.shop/l/hello_kitty/js/custom.js	1.5 kB	2023-09-30	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/js/custom.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-30 06:33:49 Last Seen2024-03-31 20:17:20 Times Seen964 Hash 7e1a2668f51815ae6f958a894ad2952b bd109a14d6c33954760efb8387391485ee00a931 3b648ed95045a3f19d7b14f37b6532f51a100f7672afe92f325cab9a00b6ec15 Loading...

	c7fv1.shop/l/hello_kitty/js/main.js	218 B	2023-03-12	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/js/main.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 22:04:51 Last Seen2024-03-31 20:17:20 Times Seen942 Hash d2cbe4b2dc5aa429de73bbcc5d5b9d55 ecbd45ad404bc33ba8618a991fa397a652860349 67ffe5d5aeacdc2c2d1df68ad8bd5fb8d07df0ba6d4982ae5c44a588c06ed520 Loading...

	c7fv1.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js	151 kB	2023-03-07	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-03-07 12:01:31 Last Seen2024-03-31 20:17:21 Times Seen1567 Hash 2f9ce5c0e6e3b112156a7ff05ba9e682 5da37b54f5ac446e0d72005a12fcd21dd86f3ac0 8c1d8308190d402fce06d8cd4119a3013d87f1599c65cc6b34a698ed093b191d Loading...

	c7fv1.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js	17 kB	2023-05-22	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:21 Times Seen1537 Hash d37c584165f7d01f34ba29f5852daacb 7607f09ab544c30e1942c834e54410d15043c60a d4fe2470c43d76c8d1be7f4cf8c835b1032d48641efbd071da6ab79fb506d786 Loading...

	c7fv1.shop/l/hello_kitty/form/js/functions.js?v=6	8.1 kB	2024-03-11	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/functions.js?v=6 IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2024-03-11 18:24:54 Last Seen2024-03-31 20:17:20 Times Seen166 Hash 45cb8b56592fca85d2d963dfee4fcf06 dd83aa93527864a1e70628006cba0d69dd8a15a7 77985e719c883be1a0274141e1d75522d6c0409951b6f1b2d44520bd3376ba75 Loading...

	c7fv1.shop/l/hello_kitty/js/jquery-3.1.1.min.js	87 kB	2023-03-07	2024-04-27
Pretty URL c7fv1.shop/l/hello_kitty/js/jquery-3.1.1.min.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-27 17:36:14 Times Seen264050 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	c7fv1.shop/l/hello_kitty/form/js/libs/intlTelInput.js	97 kB	2023-05-22	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/libs/intlTelInput.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:20 Times Seen1030 Hash 6680c3e6c8ad99d661fd6e4d8b02b93c c9180217f601bcb8b24fd16e5842f4e27849194f 760829886ac05de7bb063d7df7821013bbda8aee258a12326d3e34077a5bf7fc Loading...

	c7fv1.shop/l/hello_kitty/form/js/libs/utils.js	382 kB	2023-05-22	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/libs/utils.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:21 Times Seen1525 Hash fa4d12a59a70432bcfea49469386291e 3b24fcc6ef44ca3635266a10530d68df4857e7a1 5084ebd7703c470e9e39d58de78661fa7780812d49bf2293217f278429b66c78 Loading...

	c7fv1.shop/l/hello_kitty/form/js/libs.js	136 B	2023-05-23	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/libs.js IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-23 13:43:09 Last Seen2024-03-31 20:17:21 Times Seen962 Hash f8bb29b6886202015e7f5d3e139c3452 2056a53c03c0c412b97eb971e1fc5fda6dc69d63 7a37931451de32846c093d2b676ea92e6d46461299e82b8d448d757fec1a17f3 Loading...

	c7fv1.shop/l/hello_kitty/form/js/main-form.js?v=3.2	11 kB	2024-03-28	2024-03-31
Pretty URL c7fv1.shop/l/hello_kitty/form/js/main-form.js?v=3.2 IP 172.67.215.85 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 04:38:56 Last Seen2024-03-31 17:50:17 Times Seen45 Hash 0d3f3895c801c582f062a7c3da87f7ee 092df80a92df02b4dd5084642d30947e42a32650 b7a72083d8d371d8d463405f694ff83c0f79f43463287c5413dafe834665044a Loading...

HTTP Transactions (35)

URL IP Response Size

mtjzq.blogspot.lu/

216.58.207.193

195 B

URL
mtjzq.blogspot.lu/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text
Size
195 B (195 bytes)
Hash
5d163740594d24e178caffe191a0e9d8
cdcb2b6be3f9d8ffff56e44d8b63b6d6d0c09e79
1e1a34f8d42fd943a48df1731e7c1e55a56ba2ab62f2f8e498649bf62ee9948d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Gazprom

HTTP Headers

GET / HTTP/1.1
Host: mtjzq.blogspot.lu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://mtjzq.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 28 Mar 2024 16:31:23 GMT
expires: Thu, 28 Mar 2024 16:31:23 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 195
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

mtjzq.blogspot.com/

216.58.207.193

15 kB

URL
mtjzq.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (7139)
Size
15 kB (15013 bytes)
Hash
6d5e0712c27c6d82a07a98904f84963c
36a8b7433b8eed76c8a9601325eadae745c3c2cb
64b2cce398d8546019cf6983b014939f5e2b3abe8044012174c11e9891c1a11b

HTTP Headers

GET / HTTP/1.1
Host: mtjzq.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 28 Mar 2024 16:31:24 GMT
date: Thu, 28 Mar 2024 16:31:24 GMT
cache-control: private, max-age=0
last-modified: Sat, 16 Mar 2024 00:52:59 GMT
etag: W/"728f5a336e1ec7a2ca9c0eabac70513fd488bd2fe38590eeb7096d55baefafb6"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15013
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

sh4737904.c.had.su/auto_domain1700087633.php?sid=4185

81.91.178.100

302 Found

0 B

URL User Request GET HTTP/2
sh4737904.c.had.su/auto_domain1700087633.php?sid=4185
IP
81.91.178.100:443
ASN
#204601 Zomro B.V.

Certificate
IssuerLet's Encrypt
Subjectsh4737904.c.had.su
Fingerprint5D:B7:8A:F2:18:4B:ED:51:81:12:EC:64:12:69:EB:18:59:04:45:C6
ValidityTue, 05 Mar 2024 09:47:51 GMT - Mon, 03 Jun 2024 09:47:50 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /auto_domain1700087633.php?sid=4185 HTTP/1.1
Host: sh4737904.c.had.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mtjzq.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: ddos-guard
set-cookie: __ddg1_=EWCqdJqWF8bX66vGkkxb; Domain=.had.su; HttpOnly; Path=/; Expires=Fri, 28-Mar-2025 16:31:24 GMT
date: Thu, 28 Mar 2024 16:31:24 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.2.16
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
location: https://g7fq9.shop/mbTJ/go?sid=4185
X-Firefox-Spdy: h2

c7fv1.shop/l/hello_kitty/content/pic1.jpg

172.67.215.85

200 OK

243 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/content/pic1.jpg
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:41:51], progressive, precision 8, 800x445, components 3
Size
243 kB (242601 bytes)
Hash
48ed517d70ca58a35e227d3e25e64107
5c54f9779bfdda8386cb0af1a840e78064489691
cba9eadf9468d6d82ac193d4cb0572dd18d74176e7530c51aad772c243c23301

HTTP Headers

GET /l/hello_kitty/content/pic1.jpg HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: image/jpeg
content-length: 242601
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-3b3a9"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jRXPFwf0v7Kc0%2B%2BL7DAqLrI91d9tNmGa3PATFa1lXA2IEBKLK6dFgbkVbUSG6bO%2BgM8rUjKeY00pcx1zcLNatLbAqiXj1cuM6gUF9bFmCMEnmT93qX%2FCDWna1tly"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cf85684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/content/pic3.jpg

172.67.215.85

200 OK

97 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/content/pic3.jpg
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:09], progressive, precision 8, 1280x825, components 3
Size
97 kB (96572 bytes)
Hash
e9e5d8cd1cdeb5db6e9f501b195c3283
fb358c77d11a25a8da280f77e93774dc674aa1d0
c6286b4e9308fc8739e135e41e92e5bc1179e16fd58dff9154d34a90d935e0ed

HTTP Headers

GET /l/hello_kitty/content/pic3.jpg HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: image/jpeg
content-length: 96572
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1793c"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcG105ieSWOLDMWgxu2UlvcgGH9F8ep4Sub3FGkwr%2BQqoxLajY%2Bu9QL3o3KLO7jKrS%2F053rcLME1Q6QodB3Kd2pOPLBdIzjf%2Bj8BkhygmDvj00EAe08qYzp2BW8O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cf95684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/content/pic4.jpg

172.67.215.85

200 OK

82 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/content/pic4.jpg
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:34], progressive, precision 8, 1920x1080, components 3
Size
82 kB (82443 bytes)
Hash
ae6ee1525a40e1c166b09283750e34e0
a58ab378efe975a58e9b0de02d4c2b2343da21f7
ef88af929c5c577c591f70f6861b6ca529f632f117cf7411da608f9788e1accd

HTTP Headers

GET /l/hello_kitty/content/pic4.jpg HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: image/jpeg
content-length: 82443
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1420b"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75AT4dmQD0h7yfEvhGxkcrTBvrgFM%2FRHVpOQQqz%2BIWvwFPj6DPGm7CmxtTSUOYushZS88208mOy346q37fDD2KbLUKYxE5y9l%2BMgMs7bJivb2LoXztkJp1R65l7I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cfc5684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/content/pic5.jpg

172.67.215.85

200 OK

130 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/content/pic5.jpg
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:53], progressive, precision 8, 900x900, components 3
Size
130 kB (130185 bytes)
Hash
e3d0ad7562b050fe95e10a5b4a083d7b
3cd204be40b940753d0942379e77906853c350f6
16cc235730aaa390f75c2779d91a087dc2ed1ff3015ec3b1271d60559694f72f

HTTP Headers

GET /l/hello_kitty/content/pic5.jpg HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: image/jpeg
content-length: 130185
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1fc89"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Scr3IuOWURA%2BSgE3lU0pf6xDg3SAR%2BFuIuH%2Bj0OMiAKwVenyJPX0vhQ19bTeHPoKJ6p970VNueIkhZgCsRfT9UMisLAL%2BydUmnDSWW%2BxABsk8i%2BE3zueErNMlTZS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cfd5684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/content/pic7.jpg

172.67.215.85

200 OK

57 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/content/pic7.jpg
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:43:32], progressive, precision 8, 870x400, components 3
Size
57 kB (56761 bytes)
Hash
7542a68aae41b4ae59282116aa30d25f
4280d7f3af29bc8b50e1c4ae5867987430b0bc8d
385a1331c683ecb36eeafb04c3ce3c63928c79600eda11cded327b0173b786f8

HTTP Headers

GET /l/hello_kitty/content/pic7.jpg HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: image/jpeg
content-length: 56761
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-ddb9"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6RKA1AoxG9h0zSnvAVlW8Xk3B8l5EpUZu9Mkuan3PFZiBCGX9XO6aKhSeD78VZyE1%2BTmQEVFTI0NDUVwb6G9Gx%2F%2BkPgDZXk9aF6219%2BmLiXMOIuJGsk9DvhKe0qY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11d005684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/css/form.css

172.67.215.85

200 OK

1.8 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/css/form.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (475)
Size
1.8 kB (1783 bytes)
Hash
95481761f3f85efb66fc286ee71e78c9
c81a7f1a536bdd711a8beb369ee561d66ef888f1
428cb8ead48d6fb8d12644a63cd104d772abfd7f16f7dc1ab2560778336be401

HTTP Headers

GET /l/hello_kitty/form/css/form.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1a1f"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4PdJCcaothYiCGJoDSEynmpGU7nmjUxBUIK93FUjKkKdRFTlJD8rhbJEqEOWmHKjvuuy4KGYEFeJ9JE1aBrxxe89rlBSz29k7OREeEQB0UDuX9t1uOBY7VsegG%2Bu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b10cee5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/style/app.css

172.67.215.85

200 OK

1.1 MB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/style/app.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text
Size
1.1 MB (1096564 bytes)
Hash
3f061abacbdb579fe29aa6abae07ed5b
76509d96931d3dca282186e041b33d59dafb89b2
18a3021390d85960612d0078549a0aa4587ba21088e30f49baf1090ee6e01738

HTTP Headers

GET /l/hello_kitty/style/app.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-3d4c2"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=md70npuXWFSB4%2B6dJYzR3QHa4uNpCtqT0Xezggc3dJ1lEa7lC1MXuQBwhhKn%2BHb%2BOaWEcV7oCHFzRHHcmowt0%2FZGoNqmwqhEY1v8llV7%2FALRRHbotfnVmN%2FiNvv5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b10cf05684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

get.geojs.io/v1/ip/country.json

104.26.0.100

200 OK

64 B

URL GET HTTP/2
get.geojs.io/v1/ip/country.json
IP
104.26.0.100:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerLet's Encrypt
Subjectgeojs.io
FingerprintB4:9E:CC:F3:6D:DD:E3:68:A0:4A:B0:10:ED:5E:C2:60:0E:41:FE:36
ValidityMon, 11 Mar 2024 03:28:55 GMT - Sun, 09 Jun 2024 03:28:54 GMT

File type
JSON text data
Size
64 B (64 bytes)
Hash
def59fc6cb6bb65e3a500e4a3c7e766b
dc2c5910a83c1af91ea826c06ea09e528a2f8939
0c50162b277443dad2bf7a44b16ebb01bb03a1d565f5099a9a5e6558bf77ba5f

HTTP Headers

GET /v1/ip/country.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c7fv1.shop
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: application/json
x-request-id: a5dc21a6ecc9f170259dfb035427f09a-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gNug59Q6MfyqgOm%2BDE6C79K97Hpzg4KE86hjGGFlFhil3uDrqZLvI1GEA4AngX0asIyGCzP1UVtWlixK0mzpWh%2FuUlZL5yfnwW9L1Dg75UoSfet1z7NFF2MhjwnrVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86b902b36f54712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

c7fv1.shop/l/hello_kitty/form/img/flags.png

172.67.215.85

200 OK

71 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/img/flags.png
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Size
71 kB (70857 bytes)
Hash
416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55

HTTP Headers

GET /l/hello_kitty/form/img/flags.png HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/css/intlTelInput.css
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: image/png
content-length: 70857
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-114c9"
expires: Sat, 27 Apr 2024 15:39:47 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3100
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zo%2FbK5vNhCyL8uMxqRbmdc48r99NkKAaKgjbUkDCLrWBCo5As2buP7FlSYOsTWHCePhQnBxg4NdbxHOo%2FX7zZwYBfpbwUWoozjOg58EKM184hxkQqOGDjKbq7Zhk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b3d8445684-OSL
alt-svc: h3=":443"; ma=86400

g7fq9.shop/mbTJ/go?sid=4185

188.114.97.1

302 Found

9.5 kB

URL User Request GET HTTP/2
g7fq9.shop/mbTJ/go?sid=4185
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectg7fq9.shop
Fingerprint42:C2:27:6A:FF:BA:FA:4E:66:DD:F3:4A:1B:59:87:29:15:CB:2A:6F
ValidityTue, 12 Mar 2024 21:45:23 GMT - Mon, 10 Jun 2024 21:45:22 GMT

File type
data
Size
9.5 kB (9500 bytes)
Hash
f5b0117accd3726888f841c9da91bb45
0a54f917d2db1efb8677878c1c8054029cee8578
95ed1f25d18d8702ca0d0bee3797127be6bd391354c21bcc20b56a2e1358ef45

HTTP Headers

GET /mbTJ/go?sid=4185 HTTP/1.1
Host: g7fq9.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mtjzq.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 16:31:25 GMT
content-type: text/html; charset=UTF-8
location: https://c7fv1.shop/9tYf/btJdxvuK?sid=4185
x-powered-by: PHP/8.2.13
cache-control: max-age=0, must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U3yGzK99H1ZXzkAb1GOQReigr3PusKFjpGBAxzn3hYI4%2FcI2%2BoqGBbsgOGaAqA1iNgcB%2FVskE2m3FWGgurzGGjzO1f18I8W0xojrNDY8WFRaYUwjPmDE2sD82wAb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b902a6c9fa712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

c7fv1.shop/l/hello_kitty/form/js/libs/utils.js

172.67.215.85

200 OK

382 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/libs/utils.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (1338)
Size
382 kB (381683 bytes)
Hash
fa4d12a59a70432bcfea49469386291e
3b24fcc6ef44ca3635266a10530d68df4857e7a1
5084ebd7703c470e9e39d58de78661fa7780812d49bf2293217f278429b66c78

HTTP Headers

GET /l/hello_kitty/form/js/libs/utils.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5d2f3"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3103
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jC5dwyVfXqpD1%2FMWgJHFsOcAFrGIjkijp2rbn7Xhb2bnv2r2VHpdUNrRAlZzu2oVS4d544Ikm7dW%2FGhatqv5RXGQaiX4CrUkkL9JhLhrx7kDJeAJcmrFI6tcrkI6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b27eb95684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/content/video.gif

172.67.215.85

200 OK

1.1 MB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/content/video.gif
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
GIF image data, version 89a, 720 x 576
Size
1.1 MB (1060841 bytes)
Hash
1025f8e9a1f615a5c03a7a06aa363a9e
2be8a2708b15c29cce7c5183e2465ca104668090
58515f4ec9ad8e6356a40adf432c048ba64401e43dc81ac2b660a38b17912074

HTTP Headers

GET /l/hello_kitty/content/video.gif HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: image/gif
content-length: 1060841
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-102fe9"
expires: Sat, 27 Apr 2024 15:39:45 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bEpyWfs2umnzG39x5b7DoENlY480n6byVJrNrWHSTWDATUiDZV9r1JWVGNRnkSaDh5Si090sfwA%2FpQkax2pDU8E70Qbh15h5uxkMFJpgo4evDHzUZ44SoSI8PpEJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b29eca5684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/final-page.css

172.67.215.85

200 OK

380 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/final-page.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (33105)
Size
380 kB (379794 bytes)
Hash
d406ae0e843fe32e24ebaa62af70dd7b
2d813e3c2d46dca714c2b61fd1fc31adb1e70be6
91db0ffc1c47bfb038af493e253458b15d956e53ca961dec3f343a5718e52b6a

HTTP Headers

GET /l/hello_kitty/final-page.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5cb92"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SiJOrzuM4%2FSbkRxUGHt%2FLsAJK4TofOe7ArBBXPmFqXKrNyVL%2FORxNPegUmqjsq9g2SyEIjcM5kuP8arldnQshXQrYRuV4dounTpH9LEZo1mkqXN9H33ibLSk3Zi%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cf45684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/css/intlTelInput.css

172.67.215.85

200 OK

25 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/css/intlTelInput.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text
Size
25 kB (25254 bytes)
Hash
a69aa970266649e0b08c2cb4bc166568
d9314a52085a2bb6d284421bb18a4c546ecb73d4
ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491

HTTP Headers

GET /l/hello_kitty/form/css/intlTelInput.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-62a6"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3103
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMS5OaPSmvrmI%2BKcEVtZvkztHSkP26n5bMDv%2FGd0FO3pvmSogRLDv4xGsgKCMzAqN2GqcfHfmcA3rIQrp4xB7I9SCumKkXMVqSjyAPlet4Op7qq6Z4mtujfIF459"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b22e005684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/js/jquery-3.1.1.min.js

172.67.215.85

200 OK

87 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/js/jquery-3.1.1.min.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (32030)
Size
87 kB (86709 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /l/hello_kitty/js/jquery-3.1.1.min.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-152b5"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UUKdDa5B3x9StgrCbJX93S8EhsdHfb1wEmQ3w6YEuAZB3laicfjBTa8PTYA2f4niPdSZXepiWmasATnxF7ZiJqWiEA99ePQ72PVoeT0y7JjGZkmflIRbUrAID2Wx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b12d055684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js

172.67.215.85

200 OK

151 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (755)
Size
151 kB (150945 bytes)
Hash
2f9ce5c0e6e3b112156a7ff05ba9e682
5da37b54f5ac446e0d72005a12fcd21dd86f3ac0
8c1d8308190d402fce06d8cd4119a3013d87f1599c65cc6b34a698ed093b191d

HTTP Headers

GET /l/hello_kitty/form/js/libs/jquery-3.6.0.min.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-24da1"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0fX9U8FEzztDWBrH%2FdIsGAGy%2FHtvEgoR9vPRSyHz7ly%2FUO9dvRuzLnHPFCPgMffvBC2C17jjpjeB6%2FFcGwHcEZkO0vzjygZ32WvGJtp4ZBSHwlLnJi7F%2FIGwSxmv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b27eb55684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/js/custom.js

172.67.215.85

200 OK

1.5 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/js/custom.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (1688), with no line terminators
Size
1.5 kB (1531 bytes)
Hash
a7dd43cd0a4faf3a5d7987968e5607b4
1fdb7a97bd6fe031f7417e97aa3a8c645396a338
17952283c6fc648b37d2fc23ad6ab2636392ab9d30f17545fb1b0cfe03ef834e

HTTP Headers

GET /l/hello_kitty/js/custom.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5fb"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2Bycmi5E9XexfKDqfjuNSmawnjLl%2FFBKrfLXqt3stCj2zjCreTj49HKF%2FABfbldhhlD0Gp2g%2BxQueVjb%2B%2FHLskvwqAZplp5gG45%2FeBoLkpV74OHTa%2B%2F%2B50K4%2BUeY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b12d0c5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js

172.67.215.85

200 OK

17 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text
Size
17 kB (16746 bytes)
Hash
d37c584165f7d01f34ba29f5852daacb
7607f09ab544c30e1942c834e54410d15043c60a
d4fe2470c43d76c8d1be7f4cf8c835b1032d48641efbd071da6ab79fb506d786

HTTP Headers

GET /l/hello_kitty/form/js/libs/jquery.maskedinput.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-416a"
expires: Sat, 27 Apr 2024 15:39:45 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RzkFf7gJxUN5ETg7u7ROZFUXFQ9bkYdUqIPKUPDVCz1g32lLn1PRhbNfLnGIhoDXnWjOiluZCghYdG3i6IfwzfuETxGW56V2j9TUW1Z7y0H57%2Fn5yuJc8MvDAf6y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b28eba5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/js/functions.js?v=6

172.67.215.85

200 OK

8.1 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/functions.js?v=6
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
Unicode text, UTF-8 text, with very long lines (8264), with no line terminators
Size
8.1 kB (8074 bytes)
Hash
445d29b579d8c8891938596d87178172
d7aa070c8d6959f9dbff50dcb1861903fad8d677
4cecc898bea1e927ce0c3a773cc422ec25271d67d756a2b8536b2206739c8fbe

HTTP Headers

GET /l/hello_kitty/form/js/functions.js?v=6 HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/js/main-form.js?v=3.2
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1f8a"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3103
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q4F7dkSvpem9giEdPI2cc4yJn7I8uWrueZfyqcTUJpGGUTATlibTzuuVZHe15dc95B61WJbdF5fFpDS7TEp6CdjhIaf8VBp1s7FsykqUGIpEzwl4ipGCqUL9JrG4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b28ebc5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/9tYf/btJdxvuK

172.67.215.85

200 OK

62 kB

URL User Request GET HTTP/2
c7fv1.shop/9tYf/btJdxvuK
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
62 kB (61645 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /9tYf/btJdxvuK HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mtjzq.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: sid=4185
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.13
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MTNLG0vedhAC5MVR40ZJFaBIaBPKt2rh889auvvAtXQH01ZDHSambfgG0322gzJNymMrN3FjfjoqQIbaq9O9J8ZFK2kojuDk6YYiiokHeevA44xQn5EtOrvdCX0W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b902aebabe56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

c7fv1.shop/l/hello_kitty/form/js/main-form.js?v=3.2

172.67.215.85

200 OK

11 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/main-form.js?v=3.2
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
11 kB (11167 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/js/main-form.js?v=3.2 HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 27 Mar 2024 19:42:54 GMT
etag: W/"660476be-2b9f"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tVdJ09usdMAOZgO7ooiQmSHVL41PqrrOZ1mnDLz3COY%2B002XlY%2B0wPPh04OoOkEe9L6UchM9yucHI2jcfn8xntyampq2ZwiOkdB3GNVds7G7RqQ2KShAJg0F0YG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b13d1e5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/css/modal-error.css

172.67.215.85

200 OK

4.0 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/css/modal-error.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (4209), with no line terminators
Size
4.0 kB (3971 bytes)
Hash
c690ad3206aec810e24ea2a2f90c023d
9b229c4d9ff6acdde231dd7b278f116713bda30b
d8202caf1c0d1d4d4e4199d8766f31f8dcb13d680d824d658df21e5812dfd3c8

HTTP Headers

GET /l/hello_kitty/form/css/modal-error.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-f83"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3103
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tzrIrsHDM8V9a2qHsr%2BtyDKfvG0SiH7rRVuLOvk2bmE6OKkWBhOitJRAyTvisoR%2FRIErrVfgViYmHhnoFdnF0rOGNMgciH1hB%2FD1aPVy4AG9v3lZbEQLh5BuDar3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b22e025684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/app.css

172.67.215.85

200 OK

251 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/app.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text
Size
251 kB (251074 bytes)
Hash
3f061abacbdb579fe29aa6abae07ed5b
76509d96931d3dca282186e041b33d59dafb89b2
18a3021390d85960612d0078549a0aa4587ba21088e30f49baf1090ee6e01738

HTTP Headers

GET /l/hello_kitty/app.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-3d4c2"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I9LqM9njc1g9v0FGydbRDnceAQcq8loBTwyZIbk8HZUXRXRF0hAXUvrauFfCqb0NkW0aJ82OtJIlLZ5qZeNAIhxHTwaF%2F1YzM0GcZQQl%2FjtDWrmvU6O3HibJZaGo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cf35684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/favicon.ico

172.67.215.85

200 OK

0 B

URL GET HTTP/3
c7fv1.shop/favicon.ico
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: image/x-icon
content-length: 0
last-modified: Thu, 09 Feb 2023 00:38:17 GMT
etag: "63e44079-0"
expires: Sat, 27 Apr 2024 14:18:00 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8007
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SF5eIrI4Yv1NKreJDy4Ljwq7g9%2FhJJULD2gHRIAKLbgBO5YlQRohQXuXmwDxfS4WQmiDRUG2jkbeb2FO4uJclrxSc1DcrOWw9m5XH63rp94QUh3YwBEakKxyxvTp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b3c83e5684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/chunk-vendors.css

172.67.215.85

200 OK

309 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/chunk-vendors.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (58126)
Size
309 kB (308569 bytes)
Hash
db356a68a05b7743b166031b677190ab
c3327a043adb6bed2d1ebec33277bedb3a004750
c4c8b35ba21338214dcee8a9a9e26972fd8029cc9b8d26940cc654e459b51fac

HTTP Headers

GET /l/hello_kitty/chunk-vendors.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-4b559"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OS8rqIlcTc1N7ONtebdXgSYKCpR3oy%2BWo%2FULzilZv8jocvGYyRD3Sq9QusjzXWjjg6xwCIlvO0IiPK4rAdbt6byNP0x%2BTAg0D%2FSmJPjO78IBdE7FdL%2BsoqcviHwJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b10cf25684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/assets/js/bootstrap.min.js

172.67.215.85

200 OK

60 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/assets/js/bootstrap.min.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
JavaScript source, ASCII text, with very long lines (59893)
Size
60 kB (60174 bytes)
Hash
6bea60c34c5db6797150610dacdc6bce
544afefd148715da7dd52d368a414703390ca0e0
38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff

HTTP Headers

GET /l/hello_kitty/assets/js/bootstrap.min.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-eb0e"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XnjqQeicLVrcWpYXgAoD1HIVJ4Z1PRpyA5HnphArV68GLrR8P9b6zfM%2Frhrj82SaevsO7qNi6B0l5k2Aetz3x1iUQvi9Zx9eHTeZ0MDLULx9f3o3hKcvm6%2FG1Pn5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b12d0b5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/css/flags.css

172.67.215.85

200 OK

0 B

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/css/flags.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/css/flags.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: text/css
content-length: 0
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-0"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3103
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TJT3NJEPx2awDfKV%2FlVZTbfHLnIhMgFpvl5rtxCatd4EyXajw39rVruSKbJfjCKMrz8ze4CylzKQmaHjZuRrYa5xeZ2RLvH1JufHS%2B%2FrXpzlYdzEhtgx8R7NgEv4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b22dff5684-OSL
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/js/libs.js

172.67.215.85

200 OK

136 B

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/libs.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with no line terminators
Size
136 B (136 bytes)
Hash
412b9a563a3527ea92c8acd0477d1256
a511a6b0e6feb8bcdec25e27404fa59a75bffd09
89e68d47f5ad24040ec77c8355be82213e9a0065f865a1d300d23125cadd8463

HTTP Headers

GET /l/hello_kitty/form/js/libs.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-88"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UqeknuTX08nZdaagz%2BdEAEENrN3dLSA6pfdd%2Fngi1HvV2BmVRLPureLbeCl07YVsyPDOtU497OSOLJmZ3leZ8cmR4N5UoSEb%2F%2BccELSoNwB1d6uRU%2BdZLBHCeFKD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b12d175684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/form/js/libs/intlTelInput.js

172.67.215.85

200 OK

97 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/form/js/libs/intlTelInput.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
97 kB (96729 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/js/libs/intlTelInput.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:27 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-179d9"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBty9r1%2BBPTghRtvixfmeq%2FZbBU7wTA1Wo94VhU1VI817sVtsvk6R6Pj%2FnYZ4kwQMGiqpo8S7uZqgPQF8U7h7aPGFj0EEoXS19DfEqBsrzcxFwTHQHJ06d4aQf1b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b27eb75684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/9tYf/btJdxvuK?sid=4185

172.67.215.85

302 Found

62 kB

URL User Request GET HTTP/2
c7fv1.shop/9tYf/btJdxvuK?sid=4185
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type

Size
62 kB (61645 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /9tYf/btJdxvuK?sid=4185 HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mtjzq.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/html; charset=UTF-8
location: https://c7fv1.shop/9tYf/btJdxvuK
x-powered-by: PHP/8.2.13
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: sid=4185; expires=Mon, 13 Mar 2084 16:31:26 GMT; Max-Age=1892160000; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ecrtrp1lsp3qCP1nV2iubKZ1KenDbzWC5Xd%2BD2ztPoelkUUcmUrhIJq6DK0OUG06euOuEPpaA9Yyni7ScegCHhShoKBcEFnuS7Ptio0GHgLOm6AiwhFs9%2FApH%2FMG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b902ad096556bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

c7fv1.shop/l/hello_kitty/style/css_002.css

172.67.215.85

200 OK

7.6 kB

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/style/css_002.css
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
ASCII text, with very long lines (7860), with no line terminators
Size
7.6 kB (7636 bytes)
Hash
dd7011d80d6cc455e39ee5c0dd22c5c9
9e2e1e309028ef62b252be4c0b75fc577155260b
018b57c2738888ac6c710457c47fbbe00e32d86c801817683ed9f6a931b77ef4

HTTP Headers

GET /l/hello_kitty/style/css_002.css HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1dd4"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SY12WNXHNz4w0k%2Fe9odEpq5Flmz2FR0U8MGbbpcNT%2B7dzJvCSW9A7kYH8LCs3UOtdsZIXwH0IGwL%2F%2F52PvPkrIc5dh%2B7vkHwwubehxhqYP63q6yUPcXwUI8MHyUh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b11cf65684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

c7fv1.shop/l/hello_kitty/js/main.js

172.67.215.85

200 OK

218 B

URL GET HTTP/3
c7fv1.shop/l/hello_kitty/js/main.js
IP
172.67.215.85:443
ASN
#13335 CLOUDFLARENET

Requested by
https://c7fv1.shop/9tYf/btJdxvuK
Certificate
IssuerGoogle Trust Services LLC
Subjectc7fv1.shop
Fingerprint94:61:B9:DB:89:0C:4A:BF:8A:40:B2:12:60:16:D3:95:CE:D8:AC:C8
ValiditySun, 24 Mar 2024 12:06:26 GMT - Sat, 22 Jun 2024 12:06:25 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
218 B (218 bytes)
Hash
6744ee14a2ff901a384e836d91be6ae1
0b9fc1e6adba8dae4ee2701371e44b53196e806d
e3f909ec16da01389e2cd2ca61df466e355ccb3d4aece742bb1bc68460e7e846

HTTP Headers

GET /l/hello_kitty/js/main.js HTTP/1.1
Host: c7fv1.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c7fv1.shop/9tYf/btJdxvuK
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 16:31:26 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-da"
expires: Sat, 27 Apr 2024 15:39:44 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 3102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BXFd0g54iB9ozAm2C%2BMExaHdYhEPnweT%2FFHcrYS7%2BTRiGxhAHopBH0cEZLp172PBlTHnYOuhfP%2FOi7jvYkd0lKtiqgbpgVPdODwjfh1ESIa2D%2FyglUEEouqi%2FwyJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b902b12d155684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML