Overview

URL4dkinghoki.me/
IP 151.139.128.10 (United States)
ASN#20446 STACKPATH-CDN
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-29 04:21:05 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (24)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
fonts.gstatic.com (4) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1930 115570 216.58.207.195
cdn.livechatinc.com (6) 6288 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2628 7329895 23.36.79.17
api.livechatinc.com (4) 5353 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2113 6875 23.36.79.17
secure.livechatinc.com (1) 6541 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 580 2739 23.36.79.17
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3245 59106 34.120.237.76
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
bit.ly (11) 8194 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4202 10852 67.199.248.10
cdn.jsdelivr.net (1) 439 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 422 11724 151.101.85.229
ocsp.globalsign.com (1) 2075 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 368 1919 104.18.20.226
blogger.googleusercontent.com (8) 16485 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4890 1802944 142.250.74.33
ocsp.digicert.com (12) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4092 8563 93.184.220.29
ocsp.sectigo.com (2) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 680 1926 172.64.155.188
ocsp.pki.goog (11) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3773 7700 142.250.74.35
img.pay4d.info (51) 93767 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 20287 929169 104.19.135.75
code.jquery.com (1) 634 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 396 31333 69.16.175.42
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.41.91.37
static.wixstatic.com (1) 5648 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 442 65123 34.102.176.152
accounts.livechatinc.com (1) 7698 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 492 1618 23.36.79.17
4dkinghoki.me (39) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 17539 2578222 151.139.128.10
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
i.ibb.co (1) 13485 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 403 2809273 162.19.58.156
fonts.googleapis.com (1) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 436 746 142.250.74.10
r3.o.lencr.org (5) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1690 4430 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 34.102.187.140

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-29 medium 4dkinghoki.me/ Phishing
2022-11-29 medium 4dkinghoki.me/js/webduo35.js Phishing
2022-11-29 medium 4dkinghoki.me/js/jquery.marquee.min.js Phishing
2022-11-29 medium 4dkinghoki.me/js/jquery.pause.min.js Phishing
2022-11-29 medium 4dkinghoki.me/fonts/glyphicons-halflings-regular.woff2 Phishing
2022-11-29 medium 4dkinghoki.me/webdata.php?content=desktopapp Phishing
2022-11-29 medium 4dkinghoki.me/webdata.php?content=broadcast Phishing
2022-11-29 medium 4dkinghoki.me/webdata.php?content=mobileapp Phishing
2022-11-29 medium 4dkinghoki.me/webdata.php?status=time Phishing
2022-11-29 medium 4dkinghoki.me/ Phishing
2022-11-29 medium 4dkinghoki.me/capimg.php?2756 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.139.128.10
Date UQ / IDS / BL URL IP
2023-06-02 20:51:37 UTC 0 - 0 - 21 dpsgp777.com/ 151.139.128.10
2023-06-01 03:54:03 UTC 0 - 0 - 0 www.techspot.com/ 151.139.128.10
2023-05-29 10:22:10 UTC 0 - 0 - 1 static.tweakbit.com/en/driver-updater/source/ (...) 151.139.128.10
2023-05-29 03:22:53 UTC 0 - 0 - 1 activationpanel.net/login.php 151.139.128.10
2023-05-27 21:54:00 UTC 0 - 4 - 0 leadway.com 151.139.128.10


Last 5 reports on ASN: STACKPATH-CDN
Date UQ / IDS / BL URL IP
2023-06-03 11:03:30 UTC 0 - 0 - 3 steamstore.map2.ssl.hwcdn.net/ 209.197.3.7
2023-06-02 20:51:37 UTC 0 - 0 - 21 dpsgp777.com/ 151.139.128.10
2023-06-02 19:05:29 UTC 0 - 2 - 0 adm4d.net/ 151.139.128.11
2023-06-02 13:53:28 UTC 0 - 1 - 0 cdn.anti-toolbar.com/ver/AntiToolbarPackage10 (...) 69.16.175.10
2023-06-02 04:31:37 UTC 0 - 3 - 0 sk-data.special-k.info/redist/D3DX9_43_64.7z 205.185.216.10


Last 1 reports on domain: 4dkinghoki.me
Date UQ / IDS / BL URL IP
2022-11-29 04:21:05 UTC 0 - 0 - 11 4dkinghoki.me/ 151.139.128.10


No other reports with similar screenshot

JavaScript

Executed Scripts (22)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 12785) - SHA256: d47e190bddb1d323f6603eb585cdc253d0bda83361762d0feef7498d461b53fa
< !DOCTYPE html >
    < html >
    < head >
    < style >

    /* cyrillic-ext */
    @font - face {
        font - family: 'Noto Sans';
        font - style: normal;
        font - weight: 400;
        font - display: swap;
        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6DRASf6M7VBj.woff2) format('woff2');
                unicode - range: U + 0460 - 052 F, U + 1 C80 - 1 C88, U + 20 B4, U + 2 DE0 - 2 DFF, U + A640 - A69F, U + FE2E - FE2F;
            }
            /* cyrillic */
            @
        font - face {
                font - family: 'Noto Sans';
                font - style: normal;
                font - weight: 400;
                font - display: swap;
                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr4TRASf6M7VBj.woff2) format('woff2');
                        unicode - range: U + 0301, U + 0400 - 045 F, U + 0490 - 0491, U + 04 B0 - 04 B1, U + 2116;
                    }
                    /* devanagari */
                    @
                font - face {
                        font - family: 'Noto Sans';
                        font - style: normal;
                        font - weight: 400;
                        font - display: swap;
                        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5DRASf6M7VBj.woff2) format('woff2');
                                unicode - range: U + 0900 - 097 F, U + 1 CD0 - 1 CF6, U + 1 CF8 - 1 CF9, U + 200 C - 200 D, U + 20 A8, U + 20 B9, U + 25 CC, U + A830 - A839, U + A8E0 - A8FB;
                            }
                            /* greek-ext */
                            @
                        font - face {
                                font - family: 'Noto Sans';
                                font - style: normal;
                                font - weight: 400;
                                font - display: swap;
                                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6TRASf6M7VBj.woff2) format('woff2');
                                        unicode - range: U + 1 F00 - 1 FFF;
                                    }
                                    /* greek */
                                    @
                                font - face {
                                        font - family: 'Noto Sans';
                                        font - style: normal;
                                        font - weight: 400;
                                        font - display: swap;
                                        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5jRASf6M7VBj.woff2) format('woff2');
                                                unicode - range: U + 0370 - 03 FF;
                                            }
                                            /* vietnamese */
                                            @
                                        font - face {
                                                font - family: 'Noto Sans';
                                                font - style: normal;
                                                font - weight: 400;
                                                font - display: swap;
                                                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6jRASf6M7VBj.woff2) format('woff2');
                                                        unicode - range: U + 0102 - 0103, U + 0110 - 0111, U + 0128 - 0129, U + 0168 - 0169, U + 01 A0 - 01 A1, U + 01 AF - 01 B0, U + 1E A0 - 1E F9, U + 20 AB;
                                                    }
                                                    /* latin-ext */
                                                    @
                                                font - face {
                                                        font - family: 'Noto Sans';
                                                        font - style: normal;
                                                        font - weight: 400;
                                                        font - display: swap;
                                                        src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr6zRASf6M7VBj.woff2) format('woff2');
                                                                unicode - range: U + 0100 - 024 F, U + 0259, U + 1E00 - 1E FF, U + 2020, U + 20 A0 - 20 AB, U + 20 AD - 20 CF, U + 2113, U + 2 C60 - 2 C7F, U + A720 - A7FF;
                                                            }
                                                            /* latin */
                                                            @
                                                        font - face {
                                                                font - family: 'Noto Sans';
                                                                font - style: normal;
                                                                font - weight: 400;
                                                                font - display: swap;
                                                                src: url(https: //cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2) format('woff2');
                                                                        unicode - range: U + 0000 - 00 FF, U + 0131, U + 0152 - 0153, U + 02 BB - 02 BC, U + 02 C6, U + 02 DA, U + 02 DC, U + 2000 - 206 F, U + 2074, U + 20 AC, U + 2122, U + 2191, U + 2193, U + 2212, U + 2215, U + FEFF, U + FFFD;
                                                                    }
                                                                    /* cyrillic-ext */
                                                                    @
                                                                font - face {
                                                                        font - family: 'Noto Sans';
                                                                        font - style: normal;
                                                                        font - weight: 700;
                                                                        font - display: swap;
                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVadyBx2pqPIif.woff2) format('woff2');
                                                                                unicode - range: U + 0460 - 052 F, U + 1 C80 - 1 C88, U + 20 B4, U + 2 DE0 - 2 DFF, U + A640 - A69F, U + FE2E - FE2F;
                                                                            }
                                                                            /* cyrillic */
                                                                            @
                                                                        font - face {
                                                                                font - family: 'Noto Sans';
                                                                                font - style: normal;
                                                                                font - weight: 700;
                                                                                font - display: swap;
                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVYNyBx2pqPIif.woff2) format('woff2');
                                                                                        unicode - range: U + 0301, U + 0400 - 045 F, U + 0490 - 0491, U + 04 B0 - 04 B1, U + 2116;
                                                                                    }
                                                                                    /* devanagari */
                                                                                    @
                                                                                font - face {
                                                                                        font - family: 'Noto Sans';
                                                                                        font - style: normal;
                                                                                        font - weight: 700;
                                                                                        font - display: swap;
                                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZdyBx2pqPIif.woff2) format('woff2');
                                                                                                unicode - range: U + 0900 - 097 F, U + 1 CD0 - 1 CF6, U + 1 CF8 - 1 CF9, U + 200 C - 200 D, U + 20 A8, U + 20 B9, U + 25 CC, U + A830 - A839, U + A8E0 - A8FB;
                                                                                            }
                                                                                            /* greek-ext */
                                                                                            @
                                                                                        font - face {
                                                                                                font - family: 'Noto Sans';
                                                                                                font - style: normal;
                                                                                                font - weight: 700;
                                                                                                font - display: swap;
                                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVaNyBx2pqPIif.woff2) format('woff2');
                                                                                                        unicode - range: U + 1 F00 - 1 FFF;
                                                                                                    }
                                                                                                    /* greek */
                                                                                                    @
                                                                                                font - face {
                                                                                                        font - family: 'Noto Sans';
                                                                                                        font - style: normal;
                                                                                                        font - weight: 700;
                                                                                                        font - display: swap;
                                                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZ9yBx2pqPIif.woff2) format('woff2');
                                                                                                                unicode - range: U + 0370 - 03 FF;
                                                                                                            }
                                                                                                            /* vietnamese */
                                                                                                            @
                                                                                                        font - face {
                                                                                                                font - family: 'Noto Sans';
                                                                                                                font - style: normal;
                                                                                                                font - weight: 700;
                                                                                                                font - display: swap;
                                                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVa9yBx2pqPIif.woff2) format('woff2');
                                                                                                                        unicode - range: U + 0102 - 0103, U + 0110 - 0111, U + 0128 - 0129, U + 0168 - 0169, U + 01 A0 - 01 A1, U + 01 AF - 01 B0, U + 1E A0 - 1E F9, U + 20 AB;
                                                                                                                    }
                                                                                                                    /* latin-ext */
                                                                                                                    @
                                                                                                                font - face {
                                                                                                                        font - family: 'Noto Sans';
                                                                                                                        font - style: normal;
                                                                                                                        font - weight: 700;
                                                                                                                        font - display: swap;
                                                                                                                        src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVatyBx2pqPIif.woff2) format('woff2');
                                                                                                                                unicode - range: U + 0100 - 024 F, U + 0259, U + 1E00 - 1E FF, U + 2020, U + 20 A0 - 20 AB, U + 20 AD - 20 CF, U + 2113, U + 2 C60 - 2 C7F, U + A720 - A7FF;
                                                                                                                            }
                                                                                                                            /* latin */
                                                                                                                            @
                                                                                                                        font - face {
                                                                                                                                font - family: 'Noto Sans';
                                                                                                                                font - style: normal;
                                                                                                                                font - weight: 700;
                                                                                                                                font - display: swap;
                                                                                                                                src: url(https: //cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2) format('woff2');
                                                                                                                                    unicode - range: U + 0000 - 00 FF, U + 0131, U + 0152 - 0153, U + 02 BB - 02 BC, U + 02 C6, U + 02 DA, U + 02 DC, U + 2000 - 206 F, U + 2074, U + 20 AC, U + 2122, U + 2191, U + 2193, U + 2212, U + 2215, U + FEFF, U + FFFD;
                                                                                                                                }

                                                                                                                                * {
                                                                                                                                    font - family: 'Noto Sans', sans - serif;
                                                                                                                                    box - sizing: border - box; - webkit - font - smoothing: antialiased; - moz - osx - font - smoothing: grayscale; - webkit - tap - highlight - color: transparent;
                                                                                                                                }
                                                                                                                                body {
                                                                                                                                    margin: 0;
                                                                                                                                } < /style> < style data - emotion = "css-global qw898r" > .css - qw898r {
                                                                                                                                    max - width: 100 % ;
                                                                                                                                    position: absolute;
                                                                                                                                    bottom: 0;
                                                                                                                                    z - index: 2;
                                                                                                                                    display: -webkit - box;
                                                                                                                                    display: -webkit - flex;
                                                                                                                                    display: -ms - flexbox;
                                                                                                                                    display: flex; - webkit - align - items: flex - end; - webkit - box - align: flex - end; - ms - flex - align: flex - end;
                                                                                                                                    align - items: flex - end;
                                                                                                                                    will - change: width, height, transform, opacity; - webkit - backface - visibility: hidden;
                                                                                                                                    backface - visibility: hidden;
                                                                                                                                    padding: 0.8e m 0.8e m 0 0.8e m;
                                                                                                                                    right: 0; - webkit - box - pack: end; - ms - flex - pack: end; - webkit - justify - content: flex - end;
                                                                                                                                    justify - content: flex - end;
                                                                                                                                    --primary - color: #427fe1;--secondary-color:# fbfbfb;
                                                                                                                                    --tertiary - color: # fff;
                                                                                                                                } < /style><style data-emotion="css-global adbqwp">.css-adbqwp{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;min-width:0;--primary-color:#427fe1;--secondary-color:#fbfbfb;--tertiary-color:#fff;}</style > < style data - emotion = "css-global 1lrwoq5" > .css - 1 lrwoq5 {
                                                                                                                                    display: -webkit - box;display: -webkit - flex;display: -ms - flexbox;display: flex;min - width: 0;--primary - color: #427fe1;--secondary-color:# fbfbfb;--tertiary - color: # fff;
                                                                                                                                } < /style><style data-emotion="css-global unhb1p">.css-unhb1p{position:relative;width:255px;height:50px;box-shadow:0 4px 12px rgba(0,0,0,0.3);background:#FFFFFF;border-radius:8px 8px 0px 0px;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;padding:0 0.9em;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;--primary-color:#427fe1;--secondary-color:#fbfbfb;--tertiary-color:#fff;border-radius:4px 4px 0px 0px;height:40px;color:#FFFFFF;background-color:#F01500;}.css-unhb1p:hover{cursor:pointer;}.css-unhb1p:focus{outline-style:auto;}</style > < style data - emotion = "css-global 1t5h7yy" > .css - 1 t5h7yy {
                                                                                                                                    margin: 1e m 0;--primary - color: #427fe1;--secondary-color:# fbfbfb;--tertiary - color: # fff;white - space: nowrap;overflow: hidden;text - overflow: ellipsis; - webkit - box - flex: 1; - webkit - flex - grow: 1; - ms - flex - positive: 1;flex - grow: 1;font - weight: 700;font - size: 0.9e m;margin - right: 4 px;--primary - color: #427fe1;--secondary-color:# fbfbfb;--tertiary - color: # fff;white - space: nowrap;overflow: hidden;text - overflow: ellipsis;
                                                                                                                                } < /style><style data-emotion="css-global 1f0le8r">.css-1f0le8r{-webkit-appearance:none;-moz-appearance:none;-ms-appearance:none;appearance:none;background:transparent;border:0;display:inline-block;margin:0;padding:0.5em;color:inherit;cursor:pointer;--primary-color:#427fe1;--secondary-color:#fbfbfb;--tertiary-color:#fff;padding:0 .5em;padding:0;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;border:0;border-radius:4px;--primary-color:#427fe1;--secondary-color:#fbfbfb;--tertiary-color:#fff;}.css-1f0le8r:disabled{cursor:not-allowed;}.css-1f0le8r:focus{outline-style:auto;}</style > < style data - emotion = "css-global kvf2v3" > .css - kvf2v3 {
                                                                                                                                    position: relative;display: -webkit - box;display: -webkit - flex;display: -ms - flexbox;display: flex;width: 24 px;height: 24 px; - webkit - align - items: center; - webkit - box - align: center; - ms - flex - align: center;align - items: center; - webkit - box - pack: center; - ms - flex - pack: center; - webkit - justify - content: center;justify - content: center;--primary - color: #427fe1;--secondary-color:# fbfbfb;--tertiary - color: # fff;
                                                                                                                                } < /style><style data-emotion="css-global 1usdo54">.css-1usdo54{display:inline-block;-webkit-flex-shrink:0;-ms-flex-negative:0;flex-shrink:0;width:1em;height:1em;font-size:1.5rem;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;fill:currentColor;}</style > < style data - emotion = "css-global 1arh9bj" > .css - 1 arh9bj {
                                                                                                                                    opacity: 1; - webkit - transform: scale(1); - moz - transform: scale(1); - ms - transform: scale(1);transform: scale(1);transform - origin: 50 % 50 % ; - webkit - transition: 200 ms cubic - bezier(0.18, 0.89, 0.32, 1.28) 50 ms;transition: 200 ms cubic - bezier(0.18, 0.89, 0.32, 1.28) 50 ms;--primary - color: #427fe1;--secondary-color:# fbfbfb;--tertiary - color: # fff;
                                                                                                                                } < /style><style data-emotion="css-global 11h0104">.css-11h0104{position:absolute;z-index:1;left:0;right:0;bottom:1px;-webkit-transition:opacity 150ms cubic-bezier(0.33, 0, 0.67, 1) 50ms;transition:opacity 150ms cubic-bezier(0.33, 0, 0.67, 1) 50ms;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:24px;height:24px;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;opacity:0;--primary-color:#427fe1;--secondary-color:#fbfbfb;--tertiary-color:#fff;}</style > < style data - emotion = "css " > < /style> < /head> < body > < div dir = "ltr"
                                                                                                                                role = "main"
                                                                                                                                data - lc - id = "0"
                                                                                                                                data - lc - event = "mouseover:pccndppgf48;focus:brf629xrkqg;blur:136gy8ueuqte"
                                                                                                                                class = "css-qw898r eqd5v0k0" > < div class = "css-adbqwp ek650k30" > < div class = "css-1lrwoq5 e108e6fy0" > < /div><div class="css-1lrwoq5 e108e6fy0"><div data-lc-id="1" data-lc-event="click:158iwbddkys;mouseleave:n9tbwvlk50f;mouseenter:tf8ivhfpfbd;focus:g4oam9a41tt;blur:f5hroxapht" class="css-unhb1p e16i86ec1"><p class="css-1t5h7yy e16i86ec0">Ngobrol sekarang</p > < button type = "button"
                                                                                                                                aria - label = "Open LiveChat chat widget"
                                                                                                                                class = "e1mwfyk10 css-1f0le8r e1m5b1js0" > < div class = "css-kvf2v3 e1dmt1bi3" > < svg color = "inherit"
                                                                                                                                viewBox = "0 0 32 32"
                                                                                                                                class = "css-1usdo54" > < path fill = "#FFFFFF"
                                                                                                                                d = "M12.63,26.46H8.83a6.61,6.61,0,0,1-6.65-6.07,89.05,89.05,0,0,1,0-11.2A6.5,6.5,0,0,1,8.23,3.25a121.62,121.62,0,0,1,15.51,0A6.51,6.51,0,0,1,29.8,9.19a77.53,77.53,0,0,1,0,11.2,6.61,6.61,0,0,1-6.66,6.07H19.48L12.63,31V26.46" > < /path><path fill="#F01500" d="M19.57,21.68h3.67a2.08,2.08,0,0,0,2.11-1.81,89.86,89.86,0,0,0,0-10.38,1.9,1.9,0,0,0-1.84-1.74,113.15,113.15,0,0,0-15,0A1.9,1.9,0,0,0,6.71,9.49a74.92,74.92,0,0,0-.06,10.38,2,2,0,0,0,2.1,1.81h3.81V26.5Z" class="css-1arh9bj eam5rsy0"></path > < /svg><div class="css-11h0104 e1dmt1bi2"></div > < /div></button > < /div></div > < /div></div > < /body> < /html>


HTTP Transactions (172)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             151.139.128.10
HTTP/1.1 301 Moved Permanently
                                            
Date: Tue, 29 Nov 2022 04:20:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=0
Location: https://4dkinghoki.me/
X-HW: 1669695651.cds244.sk1.h2,1669695651.cds238.sk1.c
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5472
Expires: Tue, 29 Nov 2022 05:52:03 GMT
Date: Tue, 29 Nov 2022 04:20:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5355
Cache-Control: max-age=113985
Date: Tue, 29 Nov 2022 04:20:51 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 12:00:36 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3194
Expires: Tue, 29 Nov 2022 05:14:05 GMT
Date: Tue, 29 Nov 2022 04:20:51 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 04:17:51 GMT
cache-control: public,max-age=3600
age: 180
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: jkrqTxpkz4nChcHIRFxtjngabOlYF14AxN/UQUNJA3ke0ZOXL3vrD0ji6YMYjV5FFdzpCDJ2ZsE=
x-amz-request-id: XZE1SG39HEJXZTJM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 03:42:21 GMT
age: 2310
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:51 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css/bootstrap.min.css HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: text/css
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201287"
cache-control: max-age=514
content-encoding: gzip
content-length: 21757
last-modified: Mon, 29 Nov 2021 15:54:47 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds010.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65230)
Size:   21757
Md5:    99b3142abe0d7154bf83b2d69a1a23e6
Sha1:   aa13092a53ed3220321d7c0ee15876cb65aa17bf
Sha256: 1f51dcb62a711c82e3881592cd1da417108e1f909c4f818aa0a0aa2fd9d6cb06
                                        
                                            GET /css/webduo.css HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: text/css
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201372"
cache-control: max-age=514
content-encoding: gzip
content-length: 1551
last-modified: Mon, 29 Nov 2021 15:56:12 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds261.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1551
Md5:    253510f77887ccc2b1701477ad6ada13
Sha1:   c3680d821eac3fbfa9917f28af23f50c352360d7
Sha256: e594f33f7b0cc5dfd0e140f04c31e39803dea99969764df237e86b6e58fa5543
                                        
                                            GET /css/mediaduo.css HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: text/css
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030885"
cache-control: max-age=514
content-encoding: gzip
content-length: 2405
last-modified: Mon, 10 Aug 2020 03:41:25 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds009.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2405
Md5:    cab590faa4c7bf3bbb9d9260e4b1d1a8
Sha1:   116c39b6e3fe28e385bdb8fc43f01f9981ab189b
Sha256: b1925f374734cf2ed7fc5cd8a1b7344ba248ed7245ace6174a8d37b73ff72944
                                        
                                            GET /images/logo.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1639549134"
cache-control: max-age=514
content-length: 23616
last-modified: Wed, 15 Dec 2021 06:18:54 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds243.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   23616
Md5:    e7e3372c54066ce6e3aeaebffc9b9503
Sha1:   e853c92d812b25c4a6a33fbbfae3f0d51bdae416
Sha256: c91d9d311f59a55e4b0c4459350d9d8c5e3ab8d19fa8fb988e0533a728483c67
                                        
                                            GET /images/bgline3.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201269"
cache-control: max-age=514
content-length: 1687
last-modified: Mon, 29 Nov 2021 15:54:29 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds202.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 404 x 6, 8-bit/color RGB, non-interlaced\012- data
Size:   1687
Md5:    ab700dd732af7bb9826a3914814c410b
Sha1:   f8a08fc3b9eaeda0b3fc57be4885ea195a8c9214
Sha256: 3efa76a1fd8b826f55b4983517d7b6479706c464eb886e67a02a83c5f4840e06
                                        
                                            GET /images/upload-Promo-20220822205609.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1661176569"
cache-control: max-age=514
content-length: 146491
last-modified: Mon, 22 Aug 2022 13:56:09 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds263.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:08:22 20:55:55], progressive, precision 8, 900x180, components 3\012- data
Size:   146491
Md5:    661937efc0231a92da9c05f83da86e80
Sha1:   00661e153e6a971631fde98a0d8496efa5dae412
Sha256: 114ffbc2f3cd325c7b05a31497df133ec89e8f32049eccb96c310c1d0a4ff7be
                                        
                                            GET /images/upload-SlidesMobile-20220726135507.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1658818507"
cache-control: max-age=514
content-length: 114130
last-modified: Tue, 26 Jul 2022 06:55:07 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds252.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:07:25 21:41:14], progressive, precision 8, 600x250, components 3\012- data
Size:   114130
Md5:    18120a2f44c07457ab3a6c9f67e0a714
Sha1:   e23cb68245748b744b489caa1916e24e5290c087
Sha256: 38bfe08d64f01b5321769467a01dac14901f0ec5957a51363e8bbb4082de5225
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5059
Cache-Control: max-age=166979
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63855e24-1d7"
Expires: Thu, 01 Dec 2022 02:43:51 GMT
Last-Modified: Tue, 29 Nov 2022 01:19:32 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /images/psr-sg.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030847"
cache-control: max-age=514
content-length: 5752
last-modified: Mon, 10 Aug 2020 03:40:47 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds016.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   5752
Md5:    62f2ba4b9e6571ffa4aaff9df88a1363
Sha1:   062d797e0b0e5d72fe4c67326da651e98120d997
Sha256: eb3dba84673c3872ef5b868fd31ad9eff4138e566609cfd9fea427d218bb1413
                                        
                                            GET /images/psr-syd.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030848"
cache-control: max-age=514
content-length: 8399
last-modified: Mon, 10 Aug 2020 03:40:48 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds210.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   8399
Md5:    800604d968f4fdb72ac93a188918275d
Sha1:   be4dc446ba5b728b6d906fe2f3b811fdaa2e377f
Sha256: ad48f6be01b64f903c38c4b4ea9913d88527fcdd6053144f4627663eb9918770
                                        
                                            GET /images/psr-sg45.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030853"
cache-control: max-age=514
content-length: 8126
last-modified: Mon, 10 Aug 2020 03:40:53 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds013.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   8126
Md5:    6695ded7228c5186a1c05e22b5a8092e
Sha1:   8e5b4aa31d42ccb07f9e1dc27c682f33c509e3bf
Sha256: 783b3df894b29f8406169dd624348405e8b448788ae37531252ed14b8a57cf86
                                        
                                            GET /images/psr-gy.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030864"
cache-control: max-age=514
content-length: 6190
last-modified: Mon, 10 Aug 2020 03:41:04 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds215.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   6190
Md5:    c538f837462d48ad40a82443df9fac67
Sha1:   286af4805ac4b365407246e27d9a7fc032120519
Sha256: b646b7ebf38ec833a3847694a797ace86c2928e694252d1ee2573bf9597a69e4
                                        
                                            GET /images/psr-ml.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030859"
cache-control: max-age=514
content-length: 4858
last-modified: Mon, 10 Aug 2020 03:40:59 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds229.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   4858
Md5:    454f08364c0db1f09432aa24d7b7c531
Sha1:   0f768d3ed56a3a021ba99fdf03897f230e7afbb8
Sha256: d65c174a12b842e01c052d4a152402457f44e843636a0b18af8cbd8094ad1129
                                        
                                            GET /images/psr-mc.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030849"
cache-control: max-age=514
content-length: 9814
last-modified: Mon, 10 Aug 2020 03:40:49 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds219.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   9814
Md5:    d093550c7bd08bcb99652e7bb88977b1
Sha1:   5c0c0eded056026a9f41220bd6c1a5505a01bc47
Sha256: 330039c52b34aea1e536891e1deb20c8f93f64381e5dce35b4b20c8374845584
                                        
                                            GET /images/psr-qtr.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030853"
cache-control: max-age=514
content-length: 4525
last-modified: Mon, 10 Aug 2020 03:40:53 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds236.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   4525
Md5:    94b7c4d77007d1d2874c8dfeeea13ba3
Sha1:   758e6d6396b4cc34483e97c4e2fd89819ef51501
Sha256: 3c6d1ffbbbf8bbed2ca10803e6715b5ff1885aa984e50e648ca1a73961dea64a
                                        
                                            GET /images/psr-hk.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030848"
cache-control: max-age=514
content-length: 5800
last-modified: Mon, 10 Aug 2020 03:40:48 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds243.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   5800
Md5:    6b33466f1596c700cabc4b5aa0fdeddc
Sha1:   96ca4f0aca9bc2e4d28d9e8ee94868b1413e5199
Sha256: 80eaeccf24ccdf4a13dc2a1c1b0780681678cee4c40e3d13bb55e9f16e8240d9
                                        
                                            GET /images/logoweb.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1639549135"
cache-control: max-age=515
content-length: 23616
last-modified: Wed, 15 Dec 2021 06:18:55 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds026.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   23616
Md5:    b69537e9e52a70c786025eb174a8637c
Sha1:   76f43a3346f4303dca019b160d89911fcd6a76e5
Sha256: 703b07d7c079c5bca1ab4927d9ea7ebd75c1f3cf4c56490bd469ea0f776c1d89
                                        
                                            GET /images/upload-Slides-20221110000121.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1668013281"
cache-control: max-age=515
content-length: 290591
last-modified: Wed, 09 Nov 2022 17:01:21 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds252.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:11:07 18:38:27], progressive, precision 8, 1900x380, components 3\012- data
Size:   290591
Md5:    4e5db3a027901756088adebaacf38c1a
Sha1:   0e354af77b3c25de89d1f16d4ddb04db3d9f8e8b
Sha256: d3a4d51f8c5dd3d1c9dd287431b5e6bbd47e2805ed9fffd640dcace1920db0ab
                                        
                                            GET /images/upload-Slides-20221105165014.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1667641814"
cache-control: max-age=515
content-length: 271336
last-modified: Sat, 05 Nov 2022 09:50:14 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds219.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:11:05 16:49:01], progressive, precision 8, 1900x380, components 3\012- data
Size:   271336
Md5:    7b4f237db8f7d6490eed0e1cdfd106ab
Sha1:   907267c14005db9c1af6ed3a15ab477e230a39ef
Sha256: e65b2cd6a62e0ef5ba9e3cebaef4a4649c7e60502690845dfdbeb40f3df3b49b
                                        
                                            GET /images/upload-Slides-20221023142621.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1666509981"
cache-control: max-age=515
content-length: 367213
last-modified: Sun, 23 Oct 2022 07:26:21 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds203.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:10:23 14:24:27], progressive, precision 8, 1900x380, components 3\012- data
Size:   367213
Md5:    f3d033d2f5f0fddd950d5cfc40c825f0
Sha1:   2125caae81e5c7402ab1675aa58eccf6f452ca64
Sha256: cf7ee8f3625c49eb2678979dd3ed5695a3bb1e3de8b5f83be46e5eb2fa2430de
                                        
                                            GET /images/upload-Slides-20221021184123.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1666352483"
cache-control: max-age=515
content-length: 296938
last-modified: Fri, 21 Oct 2022 11:41:23 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds259.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:10:21 17:42:05], progressive, precision 8, 1900x380, components 3\012- data
Size:   296938
Md5:    7153a5d2a509701fa917fedd4a951afe
Sha1:   ad0c14c80b811374bd22d36d08f0d5069de6c261
Sha256: 02161503004d781458c5a14e98c603e450254076b269cdf57cdd51ee1c97f14c
                                        
                                            GET /images/upload-Slides-20221021184159.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1666352519"
cache-control: max-age=514
content-length: 391065
last-modified: Fri, 21 Oct 2022 11:41:59 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds261.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:10:21 17:45:01], progressive, precision 8, 1900x380, components 3\012- data
Size:   391065
Md5:    3cb5f947cb2416c6da703fda5fb12f52
Sha1:   3c428a75ecdef94c6f826b870b4e22e15fdb957f
Sha256: 0bccd272a301ac91d0c8d65a7281f4d6737d1c5c64a29e3dbe8a5f5a7931647c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5059
Cache-Control: max-age=166979
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63855e24-1d7"
Expires: Thu, 01 Dec 2022 02:43:51 GMT
Last-Modified: Tue, 29 Nov 2022 01:19:32 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /images/bgline.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201268"
cache-control: max-age=514
content-length: 1876
last-modified: Mon, 29 Nov 2021 15:54:28 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds263.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 576 x 4, 8-bit/color RGB, non-interlaced\012- data
Size:   1876
Md5:    3e5167119e8d5b6fcd7a74aaff61f61a
Sha1:   9998b71da4890328d4320b2b97d4d7d892705198
Sha256: 19706dadd6bba8f57d59712fe62261dfd3a07babd5f928e4f7271bea67b9f681
                                        
                                            GET /images/bgline2.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201268"
cache-control: max-age=515
content-length: 1752
last-modified: Mon, 29 Nov 2021 15:54:28 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds018.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1228 x 6, 8-bit/color RGB, non-interlaced\012- data
Size:   1752
Md5:    0d15fa3842932b1bc70554ef555713d6
Sha1:   d6248685710f9088a1dd25f5242cf0326c782cd1
Sha256: 03628dbdcee5a734d95436c612a8a4da0fc02f9e6b64a24b410e2e6ef8a00f78
                                        
                                            GET /images/kontak.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201270"
cache-control: max-age=515
content-length: 4995
last-modified: Mon, 29 Nov 2021 15:54:30 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds024.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 69 x 287, 8-bit/color RGBA, non-interlaced\012- data
Size:   4995
Md5:    cc9ff1f22490e2cca070a57979aea150
Sha1:   c41c924a335152f8e6b07543ff4384e750e114f5
Sha256: d13562a3a1a8c4e5dedebdc1924ce73f2944c82937d3f247d087caa16cb565f7
                                        
                                            GET /images/bg.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1638201267"
cache-control: max-age=515
content-length: 37177
last-modified: Mon, 29 Nov 2021 15:54:27 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds251.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1901x488, components 3\012- data
Size:   37177
Md5:    1145bd8ece028a6dc860d6e4c9beb381
Sha1:   4b4428b004dd6417e8bb8a7b233b96699fbcb77f
Sha256: 1f7cdee463b68622bb20abd385228dabcf18affbdc355eed47ea84d656f42fe1
                                        
                                            GET /js/webduo35.js HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1663822205"
cache-control: max-age=514
content-encoding: gzip
content-length: 4562
last-modified: Thu, 22 Sep 2022 04:50:05 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds010.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4562
Md5:    d867abc52913e0d7169f71ede1f337e3
Sha1:   d41b3120017ec99363ceebd4e9f76aa3c907c821
Sha256: be0e32719a66a371074c3d7611333dc9bb40ca5dd288b5b7f0bb538f2dc29c1a

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/jquery.marquee.min.js HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1599594288"
cache-control: max-age=515
content-encoding: gzip
content-length: 2400
last-modified: Tue, 08 Sep 2020 19:44:48 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds234.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1219)
Size:   2400
Md5:    987016506912abc9454e75abf4f6a90e
Sha1:   8e16e257e3664ef63f5823332e84920a0dc04bb9
Sha256: 0d7b78b5d87fd06ee3620491ab569d4bfed6f043821e2a9b06e1dab71254d4fb

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/jquery.pause.min.js HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1599594774"
cache-control: max-age=515
content-encoding: gzip
content-length: 870
last-modified: Tue, 08 Sep 2020 19:52:54 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds026.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (762)
Size:   870
Md5:    81c62fc185800b2b39185caaaaf0778d
Sha1:   e6ce709ce12fb92b0af00e7d90ae178c56b68076
Sha256: 3a38a819e0d00bc695624e1991fd25f70b4fd644ea08fd3108dd0b41cc7ecb67

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5994
Cache-Control: max-age=153839
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63852729-1d7"
Expires: Wed, 30 Nov 2022 23:04:51 GMT
Last-Modified: Mon, 28 Nov 2022 21:24:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4062
Cache-Control: max-age=151907
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63852729-1d7"
Expires: Wed, 30 Nov 2022 22:32:39 GMT
Last-Modified: Mon, 28 Nov 2022 21:24:57 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /images/upload-Popup-20221116125812.jpg HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1668578292"
cache-control: max-age=515
content-length: 159835
last-modified: Wed, 16 Nov 2022 05:58:12 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds001.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2022:11:16 12:57:49], progressive, precision 8, 600x300, components 3\012- data
Size:   159835
Md5:    8d22ba913fa4980fdd401a32c02fd2d1
Sha1:   e97d1865319796f7c07dd35c05c06f7437114ce6
Sha256: b804a4337f0eb751dc7eee840b2ae0412253b2e889459a6bb2e761ea484678e7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4707
Cache-Control: max-age=108270
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:25:22 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=141384
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63850dec-117"
Expires: Wed, 30 Nov 2022 19:37:16 GMT
Last-Modified: Mon, 28 Nov 2022 19:37:16 GMT
Server: nginx
Content-Length: 279

                                        
                                            GET /fonts/glyphicons-halflings-regular.woff2 HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://4dkinghoki.me/css/bootstrap.min.css
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: font/woff2
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
etag: "1597030870"
cache-control: max-age=516
content-length: 18028
last-modified: Mon, 10 Aug 2020 03:41:10 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695652.cds219.sk1.hn,1669695652.cds065.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Size:   18028
Md5:    448c34a56d699c29117adc64c43affeb
Sha1:   ca35b697d99cae4d1b60f2d60fcd37771987eb07
Sha256: fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=141384
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63850dec-117"
Expires: Wed, 30 Nov 2022 19:37:16 GMT
Last-Modified: Mon, 28 Nov 2022 19:37:16 GMT
Server: nginx
Content-Length: 279

                                        
                                            GET /picleft.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 22128
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=26042
content-disposition: inline; filename="picleft.webp"
last-modified: Fri, 04 Nov 2022 13:42:48 GMT
vary: Accept
cf-cache-status: HIT
age: 5679
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff96b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 404x194, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   22128
Md5:    2b1bdc85cc48c85f6033c7ddca833b0c
Sha1:   df9589d7051fba1a5c2fd15b81b11f72f24caee0
Sha256: 7e599adfbea9fa50b6139eae70f7ee2214c9a0fd14a718f1d07bfd4b955ae63d
                                        
                                            GET /3CQqHzL HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj27DTNPL8ENceRq_1R0r0yMo6n7RGTOnDQGcRRIjtwqtXTaZYSWzxRVhLnnRfjUmk-O06LEhU6Ol1dNjnwrXhWz-fshZ2Em9hsoHVP2gcltGDiZxF05eyQrn2IofN8_l1-EWa08sS7Q2B-bYoEsAac9jEweWMlrKa03QGzGuInAwxxaTm8G0oeZIZe/s1600/2.jpg
set-cookie: _bit=mat4kQ-7e45301aa67dd43aa4-00p; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    21036b3ba445990780d9b6614e547e3e
Sha1:   8b590692e326e65bd2cdca2a3463ca7e2d6171e1
Sha256: db9425578918ece38c8d24548695f0671fc8560d9adf6062a4cd93f7d17df931
                                        
                                            GET /picrightsport.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 28289
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=33880, status=webp_bigger
last-modified: Fri, 18 Nov 2022 06:57:55 GMT
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77188da6ff97b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 404x194, components 3\012- data
Size:   28289
Md5:    ebedde0e62ada787a6ccc5cd81ba82e6
Sha1:   eab61df9caa7b3789ddfe4ff5744ed5ffa4da68b
Sha256: 461fb8ca2eda5e25e9002bffe6111739faa6cf991167cd2578632c1f90d791ca
                                        
                                            GET /3zoKPYX HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUpbi2VIHyKf9ZTnXIOH2L58bs0de_MLqfBYjRukiJ_-o4r-3KI3Ed9SLITfgve_JT5k7ibxqE0aX4PKkwbf9EOwg3WmSMDkYMlLQH3Kfo_k_8pT9Kc5zM0nEyIAZPWKS6Cf-XWxR3lV9JdEPEIInKtterBNwVvCPhmgDh40_QDPFrnD6jlVOtgf0B/s1600/9.jpg
set-cookie: _bit=mat4kQ-1253151025e3d0bc22-00y; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    e8ebdbd0e8dc692e42fb4f2316b9e700
Sha1:   7cccbb064012a17d5ccf5f88d1411534a0651204
Sha256: 7fced6fe235cd5001aca54af8161fa73b557c40a8696a2de050f4a4f2fee8f49
                                        
                                            GET /picright.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 23329
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=26379, status=webp_bigger
last-modified: Fri, 04 Nov 2022 13:42:48 GMT
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77188da6ff98b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 404x194, components 3\012- data
Size:   23329
Md5:    4d21cb6ce4fcf78445d50ec994697f8b
Sha1:   df4d5433b0acbf6ee3a0db62663f071b2fb01275
Sha256: b267ac51d20c09b4e5bb4f90f30fac9fb72c024f4448eff75cbccdba316da2e6
                                        
                                            GET /3Ff56Bc HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 323
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/a/AVvXsEgKDNy1X7EHk7CsPCmUM5SxPi9tr8cCTWWpUxCRLDCebun-2Q9uXBc0ZKtOCtBLIMhRLdO8S02jdjDNrrIBBIjDTc1w3Rto2nse9wLjUA4Y93_BdECqWK3daBqd1s6dSjzbHOZsZqkLY8SHvcs0DWduwl3UOJEGCBS50t80gSUO2KZfsMmNfuK4pY2H
set-cookie: _bit=mat4kQ-71d6027bdbd1276624-00a; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   323
Md5:    62d6ba14678d3298c0a1b686910f0433
Sha1:   548ebdb4ed00e03f309efc204c7c33b566de5a56
Sha256: fbc00bee34f6c0ce9c800952f5383701366676d4302b9ef77c35a7cbb34240ab
                                        
                                            GET /mobile-tembakikan.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 2106
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5201
content-disposition: inline; filename="mobile-tembakikan.webp"
last-modified: Mon, 01 Feb 2021 07:21:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5679
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff9db50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2106
Md5:    bfdeefb05e569edf1028afb65895653c
Sha1:   97478d745112e48f9400eaeab7e84c41c60ceec2
Sha256: 02f0b6b2e6ee24f5bf2774b69109e9f1f0c5d1deafda081ed4c48d62b90ab9dd
                                        
                                            GET /mobile-togel.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 2816
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=6237
content-disposition: inline; filename="mobile-togel.webp"
last-modified: Mon, 01 Feb 2021 07:21:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff9bb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2816
Md5:    24ee8246bf5b00f82e391b3de2c9530d
Sha1:   44b86adefeab3260148aadfa367cf35c602b6761
Sha256: 04ea1ba435c65231d96bea3e735c0bc193beb05f7e921a354ef593dbfd7528fb
                                        
                                            GET /mobile-slot.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 3002
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=6674
content-disposition: inline; filename="mobile-slot.webp"
last-modified: Mon, 01 Feb 2021 07:21:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5679
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff9cb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3002
Md5:    bd496c55acc5fdb1ebe53c18e7b78a2e
Sha1:   256827a0c6474898129d22b1cfa7fadc88d96b70
Sha256: 414beef5dd52d21ddb304d58eedf9a6503a42523de9f54922c76f567343cdfc3
                                        
                                            GET /3NQvEgS HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 353
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhAbE84b4Zy3tnFHu8pI5x2EiQwBQ9OO5mpig2Bs2PWCn_KZ5wNjl7wEyz11q60z1UvrTOkrlWd9STKfH5HTIzBS73BLYAWFIH7g_V8dBdZoaPSURZ6zGcXbTgo7SVCrYqxBEnNeMi1H0gBxnoCmRw_eZZY-uIkfY5YAcr6F_E2SSvYKjIMwBp1R9J/s1600/LUCKY SPIN.gif
set-cookie: _bit=mat4kQ-5c57a75b483b749574-00w; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (304)
Size:   353
Md5:    1bb882b28d6b3369bde9a4f9dc0f88bf
Sha1:   8cf9fba12207a5f60584a48a984a275a3072426d
Sha256: a4633ace1a9113c0f533f768a5a1d622bd92a403510f9984f96ffec301ec3978
                                        
                                            GET /mobile-sport.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 2730
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=6408
content-disposition: inline; filename="mobile-sport.webp"
last-modified: Mon, 01 Feb 2021 07:21:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff9eb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2730
Md5:    02a8a80face04e69f3bfa68f686f57bb
Sha1:   61f8a41a95694c27a307199407af513dde0dc43e
Sha256: d9cd2cc3ba7a11673f072f321e83694c7da5979c0adda00e26de15d9a1f43797
                                        
                                            GET /icon-kontak.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 12922
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=28713
content-disposition: inline; filename="icon-kontak.webp"
last-modified: Fri, 13 Nov 2020 07:38:15 GMT
vary: Accept
cf-cache-status: HIT
age: 5678
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff99b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   12922
Md5:    03428e550c367a0b470f6fe70d6d55c0
Sha1:   80b591a03333d4bec9e5ab54a0c3f4c1ed45367e
Sha256: 277e7027c4afd477229e58b7a992d3c43ec2b1406693a3283a8d5a59ceb09b1a
                                        
                                            GET /icon-promo.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 15448
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=35857
content-disposition: inline; filename="icon-promo.webp"
last-modified: Fri, 13 Nov 2020 07:11:14 GMT
vary: Accept
cf-cache-status: HIT
age: 5679
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff9ab50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   15448
Md5:    11a8e2c003ba77a68232b9d691a26bec
Sha1:   44a0551575e11d99ba5af824dffa53da30ae290c
Sha256: e5090f48858bf3a2ffc2caf8463340102846ca61ebeced2378f1749525e3be52
                                        
                                            GET /3SnpUvC HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGX-4kJhimBQiL4hqVuQP5MDuoG5covOSjQ9WEENVO0aCgZs1OM6ZC0lwYymZUrtBAu7BgHM0zNeY5NGtRrW8vth4AwFEgh3cIl9cPA4fTXtF2L-sANPFjw9WwcWE2pop26K-LxsRGuwMIE3VM_rNHNUyZJInXdSyOZC6pkz9j2nr9YzXjI7ZbU-FY/s1600/3.jpg
set-cookie: _bit=mat4kQ-2cd6c3596931aa572e-00s; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    c986e5e17acdcbb7435eb31b5b85a9fe
Sha1:   5386546727b38255d29f3a637262f6def3f813e9
Sha256: d73827720c8e4abf726b96fbbfc5680eb92e9e4a20e3fa4ced0055dc1833f805
                                        
                                            GET /3MSAPfJ HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNdmRuwVAKRbNTMkU8SQwya8Xv2gZUJLus8c6XLjAnafDvoe6Y9brnK7bnvintK2sKBWJ6iiKNot6JHPDnBcBgf50Gl__bpRMangK1geFReFORY1YPPURIx87oTxH0-zcnLvrJs-HJKs-OlislBFYdMOld01X3mVOJmJk9sQtay9jflY401c1ptAs0/s1600/5.jpg
set-cookie: _bit=mat4kQ-e23b004baabc65c70c-00n; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    04dab565e4a9d47639ec807d0572066f
Sha1:   d63b5c515f478d6c27196f4da8ca201dbb6af4aa
Sha256: 9258abdd578b2727cc74d1da5d602bf132aeedeef249eac102e00ed2231f2531
                                        
                                            GET /picleft-b.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 11550
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=40621
content-disposition: inline; filename="picleft-b.webp"
last-modified: Wed, 23 Nov 2022 11:19:42 GMT
vary: Accept
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ff9fb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 404x194, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   11550
Md5:    ea02b87d5efe916e0d1fd689245bafa9
Sha1:   d515d56084f09ed372c254188e6fd75a74ae5543
Sha256: 1a84b9a6f066b825d388f044e0012bfe7922a9ca9a4400c2fa33cac082bfc91d
                                        
                                            GET /mobile-casino.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 3982
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=8816
content-disposition: inline; filename="mobile-casino.webp"
last-modified: Mon, 01 Feb 2021 07:21:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5679
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa2b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3982
Md5:    a4ec13dedac773682a95ad0357c883d9
Sha1:   ac08067b8b14c320590fd8e0d9f46fee95c98064
Sha256: 34d33f63decd18d046d7ce1eaa41df45fd546a36c020d1aa2460c68d4e382a05
                                        
                                            GET /buku-mimpi.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 734
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3014
content-disposition: inline; filename="buku-mimpi.webp"
last-modified: Sat, 30 Jan 2021 10:28:57 GMT
vary: Accept
cf-cache-status: HIT
age: 5673
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa4b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   734
Md5:    47e11b51ac743eaa8cf239317b274ed5
Sha1:   2f8e7efe94b9a2bc33e4a2cfa5d56c767e53f2b6
Sha256: e102b58cf346532436c7e47dc3e2e29fc53b5b550e0fcd1c4200aadce03bb7e6
                                        
                                            GET /informasi.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 496
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2507
content-disposition: inline; filename="informasi.webp"
last-modified: Sat, 30 Jan 2021 10:28:59 GMT
vary: Accept
cf-cache-status: HIT
age: 5673
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa6b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   496
Md5:    55734ca433dd15622f992f24a3750a77
Sha1:   625812100e07a5b85b1dca90d622c0deafa3410d
Sha256: 0b31e72e9209648652af2a9e36541fb4ca4015cdbca7f29ae1993824d379c395
                                        
                                            GET /kontak/wa.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 378
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1628
content-disposition: inline; filename="wa.webp"
last-modified: Mon, 09 Sep 2019 19:19:48 GMT
vary: Accept
cf-cache-status: HIT
age: 5678
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa9b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   378
Md5:    18d9883e1a072905361ca73d34a57734
Sha1:   c9dcf63a7866cd530f7615bd220e7ce4e81aad0d
Sha256: a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5
                                        
                                            GET /kontak/telegram.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 614
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2630
content-disposition: inline; filename="telegram.webp"
last-modified: Fri, 08 Jan 2021 06:31:05 GMT
vary: Accept
cf-cache-status: HIT
age: 5678
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffaab50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   614
Md5:    d5f471c7a8ea7c845c4a70b7fbd1f4db
Sha1:   617ae465abfaad2cc119cd2a8c89d2ca2537ea23
Sha256: df11d4b82ea7a8c0af512e349cc780001f85879c7f865b1f89c48015ee5aa2ed
                                        
                                            GET /picmid-b.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 14152
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=15488
content-disposition: inline; filename="picmid-b.webp"
last-modified: Fri, 04 Nov 2022 13:42:48 GMT
vary: Accept
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa0b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 404x194, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   14152
Md5:    3c37b7fb71f105f8b8672c66677a0b85
Sha1:   9a507c9d9c2909c55c080df7e4a63ff82c8b357c
Sha256: 51b7b166d8e3ae02de88cb7af8209160e491478c8d00c93900f85e6e7886f716
                                        
                                            GET /picrightsport-b.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 11588
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=13092
content-disposition: inline; filename="picrightsport-b.webp"
last-modified: Fri, 04 Nov 2022 13:42:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa1b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 404x194, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   11588
Md5:    b384a638dc5c10281228cd681469b5db
Sha1:   bf8625ff8f2a683d21cd384f671ce379b9a7c76d
Sha256: 0dc4e717442c9585c855bc2dcaa9d621be9fee18d541f724f0af33b3e57137ff
                                        
                                            GET /footern.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 10240
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=11983
content-disposition: inline; filename="footern.webp"
last-modified: Fri, 04 Nov 2022 13:47:10 GMT
vary: Accept
cf-cache-status: HIT
age: 5672
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa8b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   10240
Md5:    c874f595389f01e778067dff5bc5d1f0
Sha1:   c5f3cb0b0a03bb0cc41cea7d1bc24b630eaab4bf
Sha256: 84097f8df21211e36d200017ce5dbb571569bbd5d21d7dfb1067d0b75567b17f
                                        
                                            GET /slot-prag.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 1416
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5251
content-disposition: inline; filename="slot-prag.webp"
last-modified: Wed, 18 Dec 2019 05:38:15 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70faeb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1416
Md5:    8e7ecdf154298edbc92186de70734ff7
Sha1:   10402bf0a46147d1b1e6e41ded452c24faa6dce6
Sha256: b13a36e2d82b2cd019af41f40af642d37641573770e11980ecc12e2dce55d713
                                        
                                            GET /slot-pg.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 1740
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5084
content-disposition: inline; filename="slot-pg.webp"
last-modified: Tue, 08 Jun 2021 09:18:38 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fafb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1740
Md5:    86ec152055228538f1a8f8943f179a97
Sha1:   ef30830c693272695c7cf5f2ac12679c75a2db18
Sha256: a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b
                                        
                                            GET /slot-hab.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 1888
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5768
content-disposition: inline; filename="slot-hab.webp"
last-modified: Wed, 18 Dec 2019 05:38:14 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fb0b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1888
Md5:    158c1eeabbd166126f46035ec5e6d457
Sha1:   83fa7159d10da9989fc9853ee6f96ab57b065e83
Sha256: 11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0
                                        
                                            GET /slot-cq9.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 1182
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4157
content-disposition: inline; filename="slot-cq9.webp"
last-modified: Wed, 10 Nov 2021 17:01:06 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fb1b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1182
Md5:    c1a383f5c29c2a1abb0146f00f976edd
Sha1:   d044fc1b18c28a0129ef1ffbeba52166614d057e
Sha256: cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701
                                        
                                            GET /slot-spad.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 1258
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4945
content-disposition: inline; filename="slot-spad.webp"
last-modified: Wed, 18 Dec 2019 05:38:16 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fb2b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1258
Md5:    d6290e499ede13e741045d26dfbd95bf
Sha1:   73a41f0d753bb0843be9bfb147e1999ced0e30d5
Sha256: ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89
                                        
                                            GET /picright-b.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 20622
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=24384
content-disposition: inline; filename="picright-b.webp"
last-modified: Fri, 04 Nov 2022 13:42:49 GMT
vary: Accept
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa3b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 404x194, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   20622
Md5:    11b3651cddd57d137ad1f9f632ca7360
Sha1:   7ac7d221ec9c1865dc06138b53fe870e6bccdb97
Sha256: 43c4b555f21c351bdd7b5953b63d93078c02def41fe3b333c85822aaca5bf5ef
                                        
                                            GET /logo_providernewn.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 22986
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=65682
content-disposition: inline; filename="logo_providernewn.webp"
last-modified: Wed, 23 Nov 2022 11:16:43 GMT
vary: Accept
cf-cache-status: HIT
age: 5672
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da6ffa7b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   22986
Md5:    7d6a7641bdff382fd00a6f9c21a42aa1
Sha1:   8c3a482d06391d155e232d844c61a321e8f74dbb
Sha256: fa1d88846de93439c5603d97da37187779c37879e3ba8312c9a36ed6d8b0520f
                                        
                                            GET /slot-mg.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 1092
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4064
content-disposition: inline; filename="slot-mg.webp"
last-modified: Tue, 15 Mar 2022 06:24:42 GMT
vary: Accept
cf-cache-status: HIT
age: 5675
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fb3b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1092
Md5:    ab217824849c8bc2f05240458ef55574
Sha1:   06b015108c8fc22469d8e5a4c371e6d05c04b624
Sha256: 326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72
                                        
                                            GET /slot-jok.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 2000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=7983
content-disposition: inline; filename="slot-jok.webp"
last-modified: Wed, 18 Dec 2019 05:38:14 GMT
vary: Accept
cf-cache-status: HIT
age: 5675
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fb5b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2000
Md5:    c3d6ce73337d8098402370b95ce184d6
Sha1:   f82824809e6fc6b5bc0696c7dce5942ab17abac5
Sha256: 21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3
                                        
                                            GET /slot-ttg.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 356
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2467
content-disposition: inline; filename="slot-ttg.webp"
last-modified: Sat, 14 Mar 2020 09:33:42 GMT
vary: Accept
cf-cache-status: HIT
age: 5675
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fb6b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   356
Md5:    3ce52bfdf47ac5aeec429c7d844f8309
Sha1:   20ecca3cdae26598825aca9d3180721585936d76
Sha256: 574449c76cb20fb822d17cec93a25ed069371c78d8f6e9efb0daa4924a411a56
                                        
                                            GET /pop/mobile-opus.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 30134
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=61371
content-disposition: inline; filename="mobile-opus.webp"
last-modified: Fri, 25 Nov 2022 06:26:05 GMT
vary: Accept
cf-cache-status: HIT
age: 5677
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fadb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 600x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   30134
Md5:    8d191b6393109de875275c79f178e863
Sha1:   89c1f1c6b4968a6d6f1bcb13ce4500f1e7f71711
Sha256: 4c554e5ffc7c633b4e881338c2b83789ada0b84a3083808c4f72368e121edd28
                                        
                                            GET /picmid.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 34044
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=36646, status=webp_bigger
last-modified: Fri, 04 Nov 2022 13:42:48 GMT
cf-cache-status: HIT
age: 5680
expires: Tue, 29 Nov 2022 06:20:52 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77188da6ff95b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 404x194, components 3\012- data
Size:   34044
Md5:    9ff8825bea0abb9177794729b5932760
Sha1:   9424c5ff2b125bc8d319313875c90c5393183b36
Sha256: 18179e3e611fdec3356c387f78b85ff7201fd7ee6166eb5aff06aa851cbe4b82
                                        
                                            GET /3TljBtW HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYV_l2XNJKUiq1AXSbAuY_aev4JzrpBnQSqeuyKqSFIxtSWnoeDSJCfYuyjvNuqp5s4ZiVwr6YB4KbQukfz58Btc9_uiQ5KvY2uZQ68Z5dG9XglK4PFWDYgghaZifUkGeFFvLhuAbUZeaflNdphEgeC5U5c7tfai4xnIr8HSH1wmf2GxVlt1FxK6Qq/s1600/6.jpg
set-cookie: _bit=mat4kQ-6cbfba381b50ca7a72-00A; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    ba3ea5fae3a08230aa69ad0497b53687
Sha1:   bdf20486e2b7a0b83af3de26dd2b453abac58c7c
Sha256: bcf840a7eeef624251b5c32fd51b8f14429962a0891255795dbd361bb2f33b80
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 08:16:26 GMT
Expires: Sat, 03 Dec 2022 08:16:25 GMT
Etag: "180a7f43e5feb59d01e5a10e2f6ea82cb345121a"
Cache-Control: max-age=359132,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77188da60b4c1bfe-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=141384
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "63850dec-117"
Expires: Wed, 30 Nov 2022 19:37:16 GMT
Last-Modified: Mon, 28 Nov 2022 19:37:16 GMT
Server: nginx
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 04:20:52 GMT
Etag: "6383bc71-118"
Server: ECS (amb/6BB4)
Content-Length: 279

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 04:11:13 GMT
cache-control: public,max-age=3600
age: 580
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /jquery-3.6.0.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4dkinghoki.me
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             69.16.175.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-encoding: gzip
content-length: 30875
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669695653.dop013.sk1.t,1669695653.cds261.sk1.hn,1669695653.cds210.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30875
Md5:    899f0189aaf034bbba5340f724d91dfa
Sha1:   210ea9de03968edb9d839ba4a0ce2d48666a8ab8
Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
                                        
                                            GET /live-evo.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 1866
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5224
content-disposition: inline; filename="live-evo.webp"
last-modified: Wed, 23 Nov 2022 11:55:02 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da7c804b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1866
Md5:    5cb96d1f84e38795c3f22b92bc122592
Sha1:   34b8d1a7ec29283b962233ffc9a0dea48ba3a2e4
Sha256: 6c5acbaf9f4b55c013e541f7885469169bb34227ccb554f3501f82fa29c3b3c8
                                        
                                            GET /vQNwwS0/rtp-slot-gacor.gif HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             162.19.58.156
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 2808910
last-modified: Fri, 23 Sep 2022 06:46:00 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 300\012- data
Size:   2808910
Md5:    b12aac9a201a711fd21420b44c6f8934
Sha1:   2edb6000fbf777e708220767ee46cfe3038c164f
Sha256: 802596a3b734705559b0d66c86402238c2a084b1de23acbc1f1616a7d518f678
                                        
                                            GET /3FWU7zj HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 348
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1TXm4y66F-dgmQjGiWUPAtDRCu5RzmkDahPZHjoZMdgJ3S7VvgRMpfY7Pn62XVPMI-McJx7SYwzaSmi5wfrDijcrgwN9N1UbfJGwAlBpfV5OjTFma6ZWYbwWuu6kk1cznhM1H7l6_SMRjWZI9sbHh9I0-aAbMflO0vdBCq73AgTKXcNJjzYNsSQ_m/s1600/1 (1).jpg
set-cookie: _bit=mat4kQ-5440339e8b90134c46-008; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   348
Md5:    8a44e704f448ef884da8a97e1ffba0f9
Sha1:   3182a3b37a870cf18a9b65d63dec90fe492d8589
Sha256: 08237d1b1ee7f4d9baa5f49f0c34ac423a37ddfce9b05df566964996c3b004a8
                                        
                                            GET /live-pp.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 1418
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=7765
content-disposition: inline; filename="live-pp.webp"
last-modified: Fri, 26 Jun 2020 07:51:40 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da7c803b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1418
Md5:    1f1aa38c5a91ca20b6bfdee9245eebc2
Sha1:   5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf
Sha256: 57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65
                                        
                                            GET /npm/bootstrap@3.4.1/dist/js/bootstrap.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4dkinghoki.me
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.85.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 3.4.1
x-jsd-version-type: version
etag: W/"9b00-sW/YImvWv7COVo8bHQoh1gJHzvs"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 29 Nov 2022 04:20:53 GMT
age: 17557929
x-served-by: cache-fra19167-FRA, cache-bma1633-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10942
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (39553)
Size:   10942
Md5:    3d7736f3e0093bfcece832c8a1dced40
Sha1:   4421527237d7cf60ab3a8605e131d90370d59f8e
Sha256: 9bfb0fe335300ad7521ccc87e8a1d7be601958e3a9b9f0ea8f98cc7fa3946e70
                                        
                                            GET /3Ss59ip HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:52 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3Hr8IMEjok35wKNxeVhdg3KbC_U97QA8L89j_J5sUpb6zNsMlJusGnbU7-KQXesnWtrKCEcvrwgIAnmn15EUtnyP9O2_3tPwTKeUfqM78JqSNRDfyvQAPfpfyKy3jTQOMNgCpgMuATcv0n7cDEfp_kiR6izoEPESHUizErppp5r_C7elULH3y1-Ct/s1600/8.jpg
set-cookie: _bit=mat4kQ-01a01d95bfadc6ae52-00D; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:52 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    d60519bd0d69544eea2fb9e62c0b7101
Sha1:   3f6a377ce31c6ba979078fa0ec33ca1fbe3ff864
Sha256: 31bba134dc1cef9662d5556e7cac729b1b9e0481958bf56c19801331f1778470
                                        
                                            GET /live-ion.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2434
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=6674
content-disposition: inline; filename="live-ion.webp"
last-modified: Fri, 26 Jun 2020 07:51:41 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da7c806b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2434
Md5:    1a48e4a72414e5587b22eb4ac4ae959b
Sha1:   a3ac92a04917abab71a98503dcfff52be3af7cdb
Sha256: e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hb5n1mZF/m0rCvOlRlJxbA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.41.91.37
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Syt3EbziMOPm5DT4WqQFSozXkyk=

                                        
                                            GET /3z2YhBg HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwCyKgLxFbY1NQIlt4GwYDZrU1qXhCQEWcH52ofktoh8tVT4QJ_KVzW4ofBvS2gi8zMa3okJZcur9rKLRtPe9suCDZhNJo6UBmfHVEI-iK-A6FxbWf4CesLGHoDZ0QSbJcj8KGG3LgJwCGM7I96LYLFtt6ge9TyTU3GkMkKR--t787j3Cod_zn6iyZ/s1600/7.jpg
set-cookie: _bit=mat4kR-5aeaf952f3e2416add-00L; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:53 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    f4c402481c0ec4f5a1ef04cdab5a4cde
Sha1:   8a2f89a6ef6428c6eb5baadef7d5683db011acf8
Sha256: b69350f6cd92c9796d842ce820553da044590baa125cbf0daa29ec480610f6ca
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /3TEq7vJ HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             67.199.248.10
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 344
cache-control: private, max-age=90
location: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5Mu2G83EkVJWPU9KwT4N8HwEoPN7eBq4VMadIidUh0jtC9d8oQtzRk4otjCPTEA_cac-1nOUO09e_ZOhMD3SR68xllFs1cpRU84tmGXUlYh8MT13lHgtIikJGPwZhkrgS83E7jC46k9YNCW_-CQ3WcmKSZ44rvm9Wfj4KOOwFt5Bix3-hPTJ5xAlT/s1600/4.jpg
set-cookie: _bit=mat4kR-c8120c7257981d4da0-00s; Domain=bit.ly; Expires=Sun, 28 May 2023 04:20:53 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   344
Md5:    580b347db345fa58756110af6f53be82
Sha1:   c12f607294a7a564b2634efcd057c01a7b6ca386
Sha256: c7108d72b8afa24e0abce78bddf7a7217dd7996b46cbdc081cf20201b46e5e38
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5060
Cache-Control: max-age=166979
Date: Tue, 29 Nov 2022 04:20:53 GMT
Etag: "63855e24-1d7"
Expires: Thu, 01 Dec 2022 02:43:52 GMT
Last-Modified: Tue, 29 Nov 2022 01:19:32 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /live-mg.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 1092
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4064
content-disposition: inline; filename="live-mg.webp"
last-modified: Tue, 15 Mar 2022 06:24:43 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da87858b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1092
Md5:    ab217824849c8bc2f05240458ef55574
Sha1:   06b015108c8fc22469d8e5a4c371e6d05c04b624
Sha256: 326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /kontak/sms.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 414
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3655
content-disposition: inline; filename="sms.webp"
last-modified: Mon, 09 Sep 2019 19:19:33 GMT
vary: Accept
cf-cache-status: HIT
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70fabb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   414
Md5:    ab01bf284d3245dad051381855a39f35
Sha1:   51de83afc1fe4a2cba4aeb647d260a7e3fa32001
Sha256: ab5418701d478deee3c36600c7d7101b44d902461008cecd4eef93d882eca238
                                        
                                            GET /live-opus.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 1330
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4303
content-disposition: inline; filename="live-opus.webp"
last-modified: Fri, 26 Aug 2022 10:55:33 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da87859b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1330
Md5:    ff58f7baf1903414b9e121fa194c01a0
Sha1:   9686d2811e39d923e00d3573d187e84dda29fdba
Sha256: d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a
                                        
                                            GET /kontak/fb.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 300
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3295
content-disposition: inline; filename="fb.webp"
last-modified: Mon, 09 Sep 2019 19:19:33 GMT
vary: Accept
cf-cache-status: HIT
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da70facb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   300
Md5:    9daa0755bb1f7cbea82e2d506d355535
Sha1:   09438e3bc734c47538cf70f11dc8450dc3471ea5
Sha256: b7216eb923bbb92bb47ea39c84e2f84a8fc7daad9bb77d9f89fa3528d3a59f78
                                        
                                            GET /fish-fishing-war.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 4158
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=10616
content-disposition: inline; filename="fish-fishing-war.webp"
last-modified: Tue, 30 Mar 2021 09:18:46 GMT
vary: Accept
cf-cache-status: HIT
age: 5675
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d890b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4158
Md5:    5de4388ad28949bab321d81e8afd639b
Sha1:   320c986e3c630e937333639364dcf80ef7dc19a2
Sha256: 54d4dfa543f1b8e4c544ce229b644b2671722eca476c6b8cb9df759e2375561f
                                        
                                            GET /live-all.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2548
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9511
content-disposition: inline; filename="live-all.webp"
last-modified: Mon, 07 Sep 2020 10:34:19 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d887b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2548
Md5:    80ab66e968b68828f745dbd67b94dfc8
Sha1:   18d70a225ba9f5c51d79d286178312966d339f76
Sha256: bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f
                                        
                                            GET /fish-alien-hunter.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2884
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9071
content-disposition: inline; filename="fish-alien-hunter.webp"
last-modified: Wed, 07 Jul 2021 11:05:14 GMT
vary: Accept
cf-cache-status: HIT
age: 5675
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d891b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2884
Md5:    44ed1c2cb6486482db8d337636bd9494
Sha1:   7d7f1961857c405b2d72078ee512626a79ce2504
Sha256: 165db214f71fc24501cec62e40869ad284f2ef1fddae90933b570a605608b2a3
                                        
                                            GET /fish-fishing-god.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 4084
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=8579
content-disposition: inline; filename="fish-fishing-god.webp"
last-modified: Tue, 30 Mar 2021 09:18:46 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d88fb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4084
Md5:    a0948f83578f51b07453a73d2e7feb0e
Sha1:   0e3f824762ed0f79c93200f05b8b631535e62d50
Sha256: 294f599a73342736676eb2d36724e27f9ace65053d1eec0d5267318608dcb49d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5995
Cache-Control: max-age=153839
Date: Tue, 29 Nov 2022 04:20:53 GMT
Etag: "63852729-1d7"
Expires: Wed, 30 Nov 2022 23:04:52 GMT
Last-Modified: Mon, 28 Nov 2022 21:24:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4dkinghoki.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47048
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 22:54:25 GMT
expires: Sat, 25 Nov 2023 22:54:25 GMT
cache-control: public, max-age=31536000
age: 278788
last-modified: Wed, 27 Apr 2022 16:55:54 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 47048, version 1.0\012- data
Size:   47048
Md5:    87a1556b696ae2cb1a726bd8c4584a2f
Sha1:   1be0f6f39e0cf316f9827f945eeeaef8294cc37b
Sha256: 141f0c53e457585d4ac7426eb3d757666d250ee6fbf0e9c0878128e4c627f0b1
                                        
                                            GET /banner/slide-evo.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 94810
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=153063
content-disposition: inline; filename="slide-evo.webp"
last-modified: Fri, 25 Nov 2022 06:26:29 GMT
vary: Accept
cf-cache-status: HIT
age: 5674
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d893b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x380, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   94810
Md5:    eb02c8af01265c17cd6bfa916b8590cd
Sha1:   87454568859bcc81562d916edd29f90c19259641
Sha256: 8fdc207822dfe9352613272cf9c76839eb1ab306e4bdd2446213f132cf3d4087
                                        
                                            GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4dkinghoki.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:03 GMT
expires: Thu, 23 Nov 2023 18:51:03 GMT
cache-control: public, max-age=31536000
age: 466190
last-modified: Wed, 27 Apr 2022 16:11:08 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 45300, version 1.0\012- data
Size:   45300
Md5:    5fe660c3a23b871807b0e1d3ee973d23
Sha1:   62a9dd423b30b6ee3ab3dd40d573545d579af10a
Sha256: e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d
                                        
                                            GET /sport-saba.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 3166
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=8019
content-disposition: inline; filename="sport-saba.webp"
last-modified: Fri, 18 Nov 2022 07:12:18 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d88bb50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   3166
Md5:    ca905a05925915a6aeae1dff933661ea
Sha1:   e4432529d8665c323809db7b6bd7fd1412862de2
Sha256: 27f3a57f120ec304c41c368c4ff779c9310968a53be66f0b1a1eb6a61d61629a
                                        
                                            GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4dkinghoki.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 23:14:30 GMT
expires: Sat, 25 Nov 2023 23:14:30 GMT
cache-control: public, max-age=31536000
age: 277583
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Size:   9840
Md5:    afda6e429fd299054de28e1f157c683d
Sha1:   c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
Sha256: 81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
                                        
                                            GET /live-sg.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2814
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=11259
content-disposition: inline; filename="live-sg.webp"
last-modified: Thu, 10 Dec 2020 08:44:39 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d889b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2814
Md5:    5fde10bbbfdf170112f4bc9859955ed5
Sha1:   e73a68c4221288b52a848a67801f9bcd387ba2ea
Sha256: 60bb4f59c40e9ef9f1d2be56a2a7324a8750e339de1efb9b96840314b8581628
                                        
                                            GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4dkinghoki.me
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:49:46 GMT
expires: Fri, 24 Nov 2023 16:49:46 GMT
cache-control: public, max-age=31536000
age: 387067
last-modified: Tue, 19 Apr 2022 18:29:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9588, version 1.0\012- data
Size:   9588
Md5:    55d912c794126956bb1e8f41597c131f
Sha1:   f7ade582dbe9d0efe97ae105cab313c6e45904d4
Sha256: 8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699
                                        
                                            GET /sport-sbo.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2566
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=7368
content-disposition: inline; filename="sport-sbo.webp"
last-modified: Fri, 18 Nov 2022 07:12:18 GMT
vary: Accept
cf-cache-status: HIT
age: 5676
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d88db50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2566
Md5:    6264eff1bd0d1cb19031119953556ab5
Sha1:   5ba02b770ec3c704549a90c1619624ab41afad29
Sha256: 5b4e3f622d5aec3c70df461c3aa9a3a4b200b2b8c92f0c13e0b03395bd655d51
                                        
                                            GET /fish-zombie.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2760
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9384
content-disposition: inline; filename="fish-zombie.webp"
last-modified: Thu, 05 Aug 2021 09:13:00 GMT
vary: Accept
cf-cache-status: HIT
age: 5674
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d892b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2760
Md5:    88304eeaf81e9ebd296a0d0e2ddb7be2
Sha1:   32c2c254dfa81406883e0507339c538a4af5ce3b
Sha256: fab65eee93acd119c34e221f22ca4029d06a9fa9a5d93b56be894e4247ff7d81
                                        
                                            GET /banner/slide-pp-nv.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 181314
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=267909
content-disposition: inline; filename="slide-pp-nv.webp"
last-modified: Mon, 21 Nov 2022 12:45:21 GMT
vary: Accept
cf-cache-status: HIT
age: 5674
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d896b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x380, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   181314
Md5:    f05e4ec58442c20d7dcb6bf38f1856be
Sha1:   e1d63b5ffda7e54a46e97f0c3fb1548f6350f1d8
Sha256: 874343455cdd0ba9d33b598954a620e53ac23740ec5e584323df8a56efedc34e
                                        
                                            GET /banner/slider-wc-2022.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 156456
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=205412
content-disposition: inline; filename="slider-wc-2022.webp"
last-modified: Mon, 21 Nov 2022 12:44:35 GMT
vary: Accept
cf-cache-status: HIT
age: 5674
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d895b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x380, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   156456
Md5:    9ae983754e7c56256e6f7cae8438ef58
Sha1:   04978cb727dbe83b821e9bfd1e890514363cd144
Sha256: 144ce72837f5bb04407c7b4ea75c956c1fd7b0affda81f14690b33e8a64c68b5
                                        
                                            GET /banner/slide-mg-dec.jpg HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 149274
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=212690
content-disposition: inline; filename="slide-mg-dec.webp"
last-modified: Mon, 21 Nov 2022 12:44:48 GMT
vary: Accept
cf-cache-status: HIT
age: 5673
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188da8d897b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1900x380, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   149274
Md5:    265e473e8f7e5eb3b308c1e987cb397d
Sha1:   0adb86a1dff882ddfa5000f93f76528ae3e6158b
Sha256: f0ddd0ed56976938fd320181ff5455761b41cd88abcd460f196bce06b32cae42
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1A3D5D0E5226A82489DEDA46B9A51A4CE11B5190"
Expires: Tue, 29 Nov 2022 16:00:00 GMT
Last-Modified: Tue, 29 Nov 2022 04:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 692
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77188da97e3db503-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    1f183668f6f7e5a0ce0aa053dfd04a4f
Sha1:   8871f36a4147d786a43a3fc14ea022998040c45d
Sha256: a464121bd461656e8e890636b196a617675fd53cbb1d6e65de46ed072be7de36
                                        
                                            GET /tracking.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
last-modified: Thu, 17 Nov 2022 13:08:42 GMT
x-amz-version-id: XiT9l9I6GGKdmfwcYLWex5TUwoVUOWV5
server: AmazonS3
content-encoding: br
etag: W/"72abe41f23b1a5d3b25350cc7025a805"
vary: Accept-Encoding
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: D3KEkfL4U2Yk1ikvSs7spz9_JmtUYKdfxg54PQ9go4a6WarOC0Sz5A==
content-length: 26070
cache-control: max-age=28800
expires: Tue, 29 Nov 2022 12:20:53 GMT
date: Tue, 29 Nov 2022 04:20:53 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   26070
Md5:    fdb3fbabc9d0fdd42c1230d360cd2d44
Sha1:   3968a4d120665750710b64068c0af871d1a149d5
Sha256: b774ad6e513f484794d2f3985d3b42667e11c38c6def308bcce6b3d81ebff9c7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /media/920b3d_b125656fc1aa4854a8a6bd380e97c29a~mv2.gif HTTP/1.1 
Host: static.wixstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.102.176.152
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty/1.21.4.1
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 63897
x-guploader-uploadid: ADPycdtxgVMrelFcYCPQlWbpVn-WhaKJua39F_7zrMPxNCfyokpOdkknutA7-VzqOWPwZgYBJK0DyNVa2bIxNgz8oNQE1w
expires: Tue, 29 Nov 2022 05:20:53 GMT
cache-control: public, max-age=15552000, immutable
last-modified: Tue, 14 Jun 2022 12:17:34 GMT
etag: "309afb212b1fcf641984c128c85561c9"
x-goog-generation: 1655209054095329
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63897
x-goog-meta-wix-basic: eyJ3aWR0aCI6IDczOCwgImhlaWdodCI6IDI1NiwgImZvcm1hdCI6ICJnaWYiLCAiY29sb3JzcGFjZSI6ICJzUkdCIiwgIm9yaWVudGF0aW9uIjogMH0=
x-goog-meta-wix-generation: 0
x-goog-hash: crc32c=PCCxVw==, md5=MJr7ISsfz2QZhMEoyFVhyQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Content-Length
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-765d45dbd8-tr4xq
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 738 x 256\012- data
Size:   63897
Md5:    309afb212b1fcf641984c128c85561c9
Sha1:   f5d27adec78df591e184b7f16fcfbd356c02581c
Sha256: 58aacc1941517fd71dcbe3c8d84831ea756552abe50520a91c2ad39fee43e199
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:53 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 08:16:26 GMT
Expires: Sat, 03 Dec 2022 08:16:25 GMT
Etag: "180a7f43e5feb59d01e5a10e2f6ea82cb345121a"
Cache-Control: max-age=359131,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77188daa2c3b1bfe-OSL

                                        
                                            GET /android.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 1096
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3351
content-disposition: inline; filename="android.webp"
last-modified: Sat, 30 Jan 2021 10:29:07 GMT
vary: Accept
cf-cache-status: HIT
age: 5672
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188dacca80b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   1096
Md5:    0b02cd52bbd4c1164b94f9c21050e6be
Sha1:   8941f921796a98fc8fabb4c0cec157c34d4e4276
Sha256: a7c62c2757c85f7b8edb8bddd7f3b0472c851452daceb20485ddffa6ea9703fb
                                        
                                            GET /dlandroid.png HTTP/1.1 
Host: img.pay4d.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.135.75
HTTP/2 200 OK
content-type: image/webp
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
content-length: 2520
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5781
content-disposition: inline; filename="dlandroid.webp"
last-modified: Wed, 11 Sep 2019 07:36:31 GMT
vary: Accept
cf-cache-status: HIT
age: 5673
expires: Tue, 29 Nov 2022 06:20:53 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 77188dad2aa8b50f-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   2520
Md5:    a74bb516386bf584bbcb42de349db17c
Sha1:   8bb9f72b4f8d077bbe7319cb341bd9ef7ea8136a
Sha256: 5ddce943f364942ee30b1398175472ab116b19119a3fa7eb2815944162ccfb51
                                        
                                            GET /v3.3/customer/action/get_dynamic_configuration?license_id=13812945&url=https%3A%2F%2F4dkinghoki.me%2F&channel_type=code&jsonp=__nrbnpxwo4um HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
content-security-policy: frame-ancestors https://4dkinghoki.me/;
legacy: 2023-06-30
vary: Accept-Encoding
x-frame-options: allow-from https://4dkinghoki.me/
content-length: 230
date: Tue, 29 Nov 2022 04:20:53 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   230
Md5:    f18313098b9456e64f4f80acc894ac96
Sha1:   ce85569259672687d87429ecb782bad8d236648e
Sha256: e01677ce39d45642604e87d09116d9d4266422c2c103602dc8ef747ab0dde898
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 29 Nov 2022 04:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v3.3/customer/action/get_configuration?license_id=13812945&version=335.3.3.386.59.23.7.6.1.1.1.4.0&group_id=0&jsonp=__lc_static_config HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
content-encoding: gzip
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 1492
cache-control: public, max-age=600
expires: Tue, 29 Nov 2022 04:30:54 GMT
date: Tue, 29 Nov 2022 04:20:54 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4417), with no line terminators
Size:   1492
Md5:    054895d28efdffd3c899d489f40bcbc6
Sha1:   9d4004ff62797c3140eea79cf921be18527ccd70
Sha256: e4da201b53431a7b63cb2ddfda31e646cef9172acd7130b11db492443e06269d
                                        
                                            GET /v3.3/customer/action/get_localization?license_id=13812945&version=13159fb2ee05429e3ae48a4031b3d0e0&language=id&group_id=0&jsonp=__lc_localization HTTP/1.1 
Host: api.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
content-encoding: gzip
legacy: 2023-06-30
vary: Accept-Encoding
cache-control: public, max-age=600
expires: Tue, 29 Nov 2022 04:30:54 GMT
date: Tue, 29 Nov 2022 04:20:54 GMT
content-length: 3981
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11610), with no line terminators
Size:   3981
Md5:    64f54875fb1ea33bd3522216e43406bc
Sha1:   0337f503d9e0e1cc31d870f7feab515c2d2eda57
Sha256: e3e9091c1ec31cba75b02c4f4637090404c4723f010f43a8ff6c02aa5e5be732
                                        
                                            GET /customer/action/open_chat?license_id=13812945&group=0&embedded=1&widget_version=3&unique_groups=0 HTTP/1.1 
Host: secure.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 29 Nov 2022 04:20:54 GMT
content-length: 2558
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8824), with no line terminators
Size:   2558
Md5:    2af834d2c1666ed80bdf535ba7baf0cf
Sha1:   f83744b1d09476acd71ce975971ace5404982232
Sha256: 1727455617bd6865da97b3dfba29fae5b9b7f43662bf5b57d9bde8f5a987dc67
                                        
                                            GET /widget/static/js/0.0f55d8dd.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
last-modified: Thu, 10 Nov 2022 13:27:43 GMT
x-amz-version-id: FTaBdM5aPM6e3Wa0SH3EvXHWpAST4v3U
server: AmazonS3
content-encoding: br
etag: W/"10a3d7ac1ed37325d3341c379ee0de69"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: KgvNFtC8e1Ondp6OM2DSbEHtkwN5kS2GkPwb0uCzLz2iu3P1-YllZA==
content-length: 14934
cache-control: max-age=31536000
expires: Wed, 29 Nov 2023 04:20:54 GMT
date: Tue, 29 Nov 2022 04:20:54 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (47599), with no line terminators
Size:   14934
Md5:    59df903a307f8661bd53313a1a1ec2dd
Sha1:   c1b075479edfeed640cea3038d08915f5eedb9a8
Sha256: 6a19cca29c349c638cdb3a4f5103fe14562c865fc49184f33770f0f87b87bb7c
                                        
                                            GET /widget/static/js/1.1e075a8f.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
last-modified: Thu, 10 Nov 2022 13:27:43 GMT
x-amz-version-id: o8X.laUPCA4HbBkhv_.0.rtHv1UEzu8S
server: AmazonS3
content-encoding: br
etag: W/"add645219cc09aca44e90ff2cb69482a"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: wQvKSpsPRy26in0iJkcMTYfNv8UaYE7ghU0BTCtCVHFylj64oG5eMQ==
content-length: 66502
cache-control: max-age=31536000
expires: Wed, 29 Nov 2023 04:20:54 GMT
date: Tue, 29 Nov 2022 04:20:54 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65462)
Size:   66502
Md5:    524812952e0af015a7b1f7621b66446d
Sha1:   52de20770b835fc95c42ee8fb8c929ce889f1f41
Sha256: 9c6a9bc16e05afce31697dd6ef2530653501be1ea8af90e1905d9949d014a9ba
                                        
                                            GET /widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/octet-stream
                                            
content-length: 12852
last-modified: Tue, 18 Oct 2022 07:22:37 GMT
etag: "3b5df7e947d77201eaf22f3dbdac08cc"
x-amz-version-id: 4jMtpmrTh3NU2il.eSSLRODO9UYgvJk9
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HAM50-C2
x-amz-cf-id: KM8abeyaVeSEIxlLTJcUkoNH7_q4l1PlUQolOkL0_K8Ml-Hn8lULcg==
cache-control: max-age=31536000
expires: Wed, 29 Nov 2023 04:20:54 GMT
date: Tue, 29 Nov 2022 04:20:54 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12852, version 1.0\012- data
Size:   12852
Md5:    3b5df7e947d77201eaf22f3dbdac08cc
Sha1:   21989ca07e4afe32d48982b816b8fac85ce3e668
Sha256: 4a46d61a9aed90cea010dbabcdb510b9ceff1b729a06b169cdbe142f66cbc86f
                                        
                                            GET /widget/static/js/iframe.5a8c73ef.chunk.js HTTP/1.1 
Host: cdn.livechatinc.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        
                                             23.36.79.17
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
last-modified: Thu, 17 Nov 2022 13:08:45 GMT
x-amz-version-id: P0PTNAbmnutUEWx5JwIuKC0qV1oD8pjU
server: AmazonS3
content-encoding: br
etag: W/"662ab831ab34600ffa4072f565bdfd64"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: 1Ip4wPazEkF_uHKhUPZDS0tSsxvZSsZmEMk6Zoy43CtXbndWYhSu6A==
content-length: 206714
cache-control: max-age=31536000
expires: Wed, 29 Nov 2023 04:20:54 GMT
date: Tue, 29 Nov 2022 04:20:54 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   12688
Md5:    d9f5998f47f6f22cb66e7dbf428c76ab
Sha1:   86b993baf91f867a03ea62e0d0adc9488530efaa
Sha256: e94ba9c6df7a149b4b3c590bcc484ce24ce7c0f15c6f7f43479035a6311211d6
                                        
                                            GET /favicon.png HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Tue, 29 Nov 2022 04:20:54 GMT
etag: "1605078644"
cache-control: max-age=3600
content-length: 48205
last-modified: Wed, 11 Nov 2020 07:10:44 GMT
accept-ranges: bytes
server: Apache
x-hw: 1669695654.cds219.sk1.hn,1669695654.cds015.sk1.sc,1669695654.cds015.sk1.pr
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Size:   48205
Md5:    e50fad8da64b84507a51ed62555359cd
Sha1:   c9ece9e9308f6c227cbc98d35cca4bdef82da3d9
Sha256: 93ae19259c03e6a1ff0f273e5b077ef4823d8ff36fc2aa57460c9a7443060dbc
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEg5Mu2G83EkVJWPU9KwT4N8HwEoPN7eBq4VMadIidUh0jtC9d8oQtzRk4otjCPTEA_cac-1nOUO09e_ZOhMD3SR68xllFs1cpRU84tmGXUlYh8MT13lHgtIikJGPwZhkrgS83E7jC46k9YNCW_-CQ3WcmKSZ44rvm9Wfj4KOOwFt5Bix3-hPTJ5xAlT/s1600/4.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4dkinghoki.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.33
HTTP/2 200 OK
content-type: image/jpeg
                                            
access-control-expose-headers: Content-Length
etag: "v43b"
expires: Wed, 30 Nov 2022 04:20:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="4.jpg"
vary: Origin
x-content-type-options: nosniff
date: Tue, 29 Nov 2022 04:20:54 GMT
server: fife
content-length: 101651
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], progressive, precision 8, 900x158, components 3\012- data
Size:   101651
Md5:    3a4a806391544ad7c649874b89a09740
Sha1:   677cd74694490d59bb8f1941233be004c25ca1e7
Sha256: 6949dc16f177e8eb2355d46b327233fc724019ca977b85708385385cb88b0a26
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3737
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:20:54 GMT
Connection: keep-alive

                                        
                                            GET /webdata.php?content=desktopapp HTTP/1.1 
Host: 4dkinghoki.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://4dkinghoki.me/
Cookie: PHPSESSID=gcu20oaiataq4cre49d4ucg0o0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             151.139.128.10
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Tue, 29 Nov 2022 04:20:53 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
vary: Accept-Encoding
x-hw: 1669695653.cds219.sk1.hn,1669695653.cds253.sk1.sc,1669695653.cds253.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   93173
Md5:    44bbf88f25590ec4756c6c0adc402ac5
Sha1:   bb2feb9c8697bc51108ea5b138a8b864087d7e2b
Sha256: 437a417963634b051f04ce779eba4e442ad4472b8496a5bf6a8343b60dca4723

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEjUpbi2VIHyKf9ZTnXIOH2L58bs0de_MLqfBYjRukiJ_-o4r-3KI3Ed9SLITfgve_JT5k7ibxqE0aX4PKkwbf9EOwg3WmSMDkYMlLQH3Kfo_k_8pT9Kc5zM0nEyIAZPWKS6Cf-XWxR3lV9JdEPEIInKtterBNwVvCPhmgDh40_QDPFrnD6jlVOtgf0B/s1600/9.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4dkinghoki.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.33
HTTP/2 200 OK
content-type: image/jpeg