Report - hnrvq.blogspot.md/

Report Overview

Submitted URL
hnrvq.blogspot.md/
IP
142.250.74.65
ASN
#15169 GOOGLE
Submitted
2024-03-29 06:22:03
Access
public
Website Title
Узнaйте скoлько Вы смoжете зaрaбaтывaть на инвестициях?
Final URL
g1jm3.shop/43nRFLo/D
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hnrvq.blogspot.md	unknown	unknown	No data	No data	472 B	682 B	142.250.74.65
hnrvq.blogspot.com	unknown	unknown	No data	No data	473 B	16 kB	216.58.207.193
sh4737904.c.had.su	unknown	2017-05-10	2023-11-16	2024-03-28	545 B	489 B	81.91.178.100
g1jm3.shop	unknown	2024-03-24	2024-03-24	2024-03-24	14 kB	4.2 MB	172.67.217.61
l2nv8.shop	unknown	2024-03-12	2024-03-12	2024-03-13	518 B	84 kB	172.67.204.254
get.geojs.io	17418	2017-02-18	2017-03-30	2024-03-28	426 B	976 B	104.26.0.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	hnrvq.blogspot.md/	Gazprom

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-03-29	medium	hnrvq.blogspot.md	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	g1jm3.shop/l/hello_kitty/js/jquery-3.1.1.min.js	87 kB	2023-03-07	2024-04-29
Pretty URL g1jm3.shop/l/hello_kitty/js/jquery-3.1.1.min.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-29 09:30:18 Times Seen264400 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	g1jm3.shop/l/hello_kitty/assets/js/bootstrap.min.js	60 kB	2023-03-07	2024-04-29
Pretty URL g1jm3.shop/l/hello_kitty/assets/js/bootstrap.min.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-04-29 08:59:40 Times Seen6374 Hash 6bea60c34c5db6797150610dacdc6bce 544afefd148715da7dd52d368a414703390ca0e0 38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff Loading...

	g1jm3.shop/l/hello_kitty/form/js/libs/intlTelInput.js	97 kB	2023-05-22	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/libs/intlTelInput.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:20 Times Seen1030 Hash 6680c3e6c8ad99d661fd6e4d8b02b93c c9180217f601bcb8b24fd16e5842f4e27849194f 760829886ac05de7bb063d7df7821013bbda8aee258a12326d3e34077a5bf7fc Loading...

	g1jm3.shop/l/hello_kitty/form/js/libs/utils.js	382 kB	2023-05-22	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/libs/utils.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:21 Times Seen1525 Hash fa4d12a59a70432bcfea49469386291e 3b24fcc6ef44ca3635266a10530d68df4857e7a1 5084ebd7703c470e9e39d58de78661fa7780812d49bf2293217f278429b66c78 Loading...

	g1jm3.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js	17 kB	2023-05-22	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-05-22 08:52:07 Last Seen2024-03-31 20:17:21 Times Seen1537 Hash d37c584165f7d01f34ba29f5852daacb 7607f09ab544c30e1942c834e54410d15043c60a d4fe2470c43d76c8d1be7f4cf8c835b1032d48641efbd071da6ab79fb506d786 Loading...

	g1jm3.shop/l/hello_kitty/form/js/functions.js?v=6	8.1 kB	2024-03-11	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/functions.js?v=6 IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2024-03-11 18:24:54 Last Seen2024-03-31 20:17:20 Times Seen166 Hash 45cb8b56592fca85d2d963dfee4fcf06 dd83aa93527864a1e70628006cba0d69dd8a15a7 77985e719c883be1a0274141e1d75522d6c0409951b6f1b2d44520bd3376ba75 Loading...

	g1jm3.shop/l/hello_kitty/form/js/main-form.js?v=3.2	11 kB	2024-03-28	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/main-form.js?v=3.2 IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 04:38:56 Last Seen2024-03-31 17:50:17 Times Seen45 Hash 0d3f3895c801c582f062a7c3da87f7ee 092df80a92df02b4dd5084642d30947e42a32650 b7a72083d8d371d8d463405f694ff83c0f79f43463287c5413dafe834665044a Loading...

	g1jm3.shop/l/hello_kitty/js/custom.js	1.5 kB	2023-09-30	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/js/custom.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-30 06:33:49 Last Seen2024-03-31 20:17:20 Times Seen964 Hash 7e1a2668f51815ae6f958a894ad2952b bd109a14d6c33954760efb8387391485ee00a931 3b648ed95045a3f19d7b14f37b6532f51a100f7672afe92f325cab9a00b6ec15 Loading...

	g1jm3.shop/l/hello_kitty/js/main.js	218 B	2023-03-12	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/js/main.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 22:04:51 Last Seen2024-03-31 20:17:20 Times Seen942 Hash d2cbe4b2dc5aa429de73bbcc5d5b9d55 ecbd45ad404bc33ba8618a991fa397a652860349 67ffe5d5aeacdc2c2d1df68ad8bd5fb8d07df0ba6d4982ae5c44a588c06ed520 Loading...

	g1jm3.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js	151 kB	2023-03-07	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by importedModule Embedded in HTML false Observations First Seen2023-03-07 12:01:31 Last Seen2024-03-31 20:17:21 Times Seen1567 Hash 2f9ce5c0e6e3b112156a7ff05ba9e682 5da37b54f5ac446e0d72005a12fcd21dd86f3ac0 8c1d8308190d402fce06d8cd4119a3013d87f1599c65cc6b34a698ed093b191d Loading...

	g1jm3.shop/l/hello_kitty/form/js/libs.js	136 B	2023-05-23	2024-03-31
Pretty URL g1jm3.shop/l/hello_kitty/form/js/libs.js IP 172.67.217.61 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-23 13:43:09 Last Seen2024-03-31 20:17:21 Times Seen962 Hash f8bb29b6886202015e7f5d3e139c3452 2056a53c03c0c412b97eb971e1fc5fda6dc69d63 7a37931451de32846c093d2b676ea92e6d46461299e82b8d448d757fec1a17f3 Loading...

HTTP Transactions (35)

URL IP Response Size

hnrvq.blogspot.md/

142.250.74.65

194 B

URL
hnrvq.blogspot.md/
IP
142.250.74.65:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text
Size
194 B (194 bytes)
Hash
8ab34517586a32fc8b73404156a70ed7
ebe46f59e458518d812600c6a2dd1a12340776e3
784fbbfd97706e2e31a7195381cf2845a4cf91a3fb5c412bc4783070452dcbeb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Gazprom
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: hnrvq.blogspot.md
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://hnrvq.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Fri, 29 Mar 2024 06:21:36 GMT
expires: Fri, 29 Mar 2024 06:21:36 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 194
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

hnrvq.blogspot.com/

216.58.207.193

15 kB

URL
hnrvq.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (7139)
Size
15 kB (15008 bytes)
Hash
6d91cdb6f1e2fd4faf6216fc7fc36b1e
034dc931bfb68284c5ab4ec042ffe579b9975d80
f18a6cc72a75e679a666d73bd5a13b5a09be7eb47809919e1645f9a5a5ee9c6c

HTTP Headers

GET / HTTP/1.1
Host: hnrvq.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 29 Mar 2024 06:21:36 GMT
date: Fri, 29 Mar 2024 06:21:36 GMT
cache-control: private, max-age=0
last-modified: Sat, 16 Mar 2024 00:52:55 GMT
etag: W/"ad211cc8a85d0730403c53ef07be6a9b1349a7fc6200398b1bcc37a6cd9b9733"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15008
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

sh4737904.c.had.su/auto_domain1700087633.php?sid=4185

81.91.178.100

302 Found

0 B

URL User Request GET HTTP/2
sh4737904.c.had.su/auto_domain1700087633.php?sid=4185
IP
81.91.178.100:443
ASN
#204601 Zomro B.V.

Certificate
IssuerLet's Encrypt
Subjectsh4737904.c.had.su
Fingerprint5D:B7:8A:F2:18:4B:ED:51:81:12:EC:64:12:69:EB:18:59:04:45:C6
ValidityTue, 05 Mar 2024 09:47:51 GMT - Mon, 03 Jun 2024 09:47:50 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /auto_domain1700087633.php?sid=4185 HTTP/1.1
Host: sh4737904.c.had.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hnrvq.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: ddos-guard
set-cookie: __ddg1_=9GlZlRWyzSORthPPRMNk; Domain=.had.su; HttpOnly; Path=/; Expires=Sat, 29-Mar-2025 06:21:37 GMT
date: Fri, 29 Mar 2024 06:21:37 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.2.16
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
location: https://l2nv8.shop/LAR/go?sid=4185
X-Firefox-Spdy: h2

g1jm3.shop/l/hello_kitty/content/pic1.jpg

172.67.217.61

200 OK

243 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/content/pic1.jpg
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:41:51], progressive, precision 8, 800x445, components 3
Size
243 kB (242601 bytes)
Hash
48ed517d70ca58a35e227d3e25e64107
5c54f9779bfdda8386cb0af1a840e78064489691
cba9eadf9468d6d82ac193d4cb0572dd18d74176e7530c51aad772c243c23301

HTTP Headers

GET /l/hello_kitty/content/pic1.jpg HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: image/jpeg
content-length: 242601
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-3b3a9"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XenCoIFij5qTOvvKjvuyoD9UvA3kEq2NkU1VcshdDn6VYqQPNCjBWpXbtxqycD9AMJ4fOU5rG%2B2EPsMlKsuTmW8jp4xBVwtgcW%2Fmll1vhsRNmHcTdVYWOvuEP8Xf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8cdc81c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/content/pic3.jpg

172.67.217.61

200 OK

97 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/content/pic3.jpg
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:09], progressive, precision 8, 1280x825, components 3
Size
97 kB (96572 bytes)
Hash
e9e5d8cd1cdeb5db6e9f501b195c3283
fb358c77d11a25a8da280f77e93774dc674aa1d0
c6286b4e9308fc8739e135e41e92e5bc1179e16fd58dff9154d34a90d935e0ed

HTTP Headers

GET /l/hello_kitty/content/pic3.jpg HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: image/jpeg
content-length: 96572
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1793c"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vht1jvZxN6B0D%2FSITGg6npTAVqoiskXqZa9gSSGM53L1VwPPM1XDwYlqCcPl34%2FUEuV%2FSS1uoPX%2FUglJccg7iQVsAIN7OMJxIwze6AO0762lC8vPqaYkINGdTm4%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8cdc91c16-OSL
alt-svc: h3=":443"; ma=86400

l2nv8.shop/LAR/go?sid=4185

172.67.204.254

302 Found

83 kB

URL User Request GET HTTP/2
l2nv8.shop/LAR/go?sid=4185
IP
172.67.204.254:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectl2nv8.shop
Fingerprint3C:C3:59:C8:F2:46:67:D3:91:0E:46:09:AB:7B:72:70:C2:C9:F0:C8
ValidityTue, 12 Mar 2024 21:44:20 GMT - Mon, 10 Jun 2024 21:44:19 GMT

File type
data
Size
83 kB (82837 bytes)
Hash
1b1e5c5269683c1885953cded72a595f
25ebce5b743ea294ce03e8b905c795ebd6fbf296
191d3504f2c4d81b59ef898748015ed6e4203f2508e80b15764b17cbc1c951f7

HTTP Headers

GET /LAR/go?sid=4185 HTTP/1.1
Host: l2nv8.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hnrvq.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 29 Mar 2024 06:21:39 GMT
content-type: text/html; charset=UTF-8
location: https://g1jm3.shop/43nRFLo/D?sid=4185
x-powered-by: PHP/8.2.13
cache-control: max-age=0, must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ksr5VXpRo08nEsvMApSzdkcANAEQScQ3fBFCtgXNntoX7yUcn3ST5ooL70pW54%2BLV20m6wPeQTqQ0Qi1p9O9jw9obd6PiLcBMH1U%2FKMsCx9hr8fDfh5%2B2TZpi5ZW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bdc2c53a97b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

g1jm3.shop/l/hello_kitty/style/app.css

172.67.217.61

200 OK

33 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/style/app.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text
Size
33 kB (32947 bytes)
Hash
3f061abacbdb579fe29aa6abae07ed5b
76509d96931d3dca282186e041b33d59dafb89b2
18a3021390d85960612d0078549a0aa4587ba21088e30f49baf1090ee6e01738

HTTP Headers

GET /l/hello_kitty/style/app.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-3d4c2"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZrOcQF9YIhLlsvVrF52DmVyo0XY0585On%2BOlC4bA1AWCuVzoBE3YiErhH3Fyo2UTYGWV9NCsNPfxuKu9nBySvqHmfK6oHdJ3TOLnR3mJTDMi4YK7vYcGl%2BoXJIaB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8bdbd1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/chunk-vendors.css

172.67.217.61

200 OK

169 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/chunk-vendors.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text, with very long lines (58126)
Size
169 kB (169208 bytes)
Hash
db356a68a05b7743b166031b677190ab
c3327a043adb6bed2d1ebec33277bedb3a004750
c4c8b35ba21338214dcee8a9a9e26972fd8029cc9b8d26940cc654e459b51fac

HTTP Headers

GET /l/hello_kitty/chunk-vendors.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-4b559"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ShjsimTDupqgBWaIYuWnIzz4PX73v%2BuQ18%2FbZQMj%2FqTDfzrjqlGJ%2Bcays9VFqJiPWNlcw3s70CPFNQSIMM2eQ07u3YCK%2Fg8HCtf12dYxqK7lMz5p1u1fzD%2BBfX13"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8cdc11c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/content/pic7.jpg

172.67.217.61

200 OK

57 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/content/pic7.jpg
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:43:32], progressive, precision 8, 870x400, components 3
Size
57 kB (56761 bytes)
Hash
7542a68aae41b4ae59282116aa30d25f
4280d7f3af29bc8b50e1c4ae5867987430b0bc8d
385a1331c683ecb36eeafb04c3ce3c63928c79600eda11cded327b0173b786f8

HTTP Headers

GET /l/hello_kitty/content/pic7.jpg HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: image/jpeg
content-length: 56761
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-ddb9"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F9TSdvDIWjvmLiLKqpNlxlIYN5gpxKJmqLcUFauA6BC7XycqYU0GgMr%2Fe3eu9qS61KAP3ffnYF2apWGAR0Enh61KAzOuRWKPg2BHDd9Um%2FIZNMKwftahbthKjJ9g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9be0c1c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/43nRFLo/D?sid=4185

172.67.217.61

302 Found

1.1 MB

URL User Request GET HTTP/2
g1jm3.shop/43nRFLo/D?sid=4185
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
data
Size
1.1 MB (1066630 bytes)
Hash
b74769af3ff424b064d4c74105e691dd
f08bc7e86a82cf788d2ebf85a3e08eb950fe6f42
ebff9a5d9cc467c919b820ac01e1cb3dceb616a41ad7d2245e6e66afbf89648d

HTTP Headers

GET /43nRFLo/D?sid=4185 HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hnrvq.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/html; charset=UTF-8
location: https://g1jm3.shop/43nRFLo/D
x-powered-by: PHP/8.2.13
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: sid=4185; expires=Tue, 14 Mar 2084 06:21:40 GMT; Max-Age=1892160000; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bvRRdu3GC09A84PRWL%2BHEVh2%2F1HnR59X5sFPXM8Ez9%2FPjDYcXiUQBzUNb4CEqYLzlHV%2Ft19HNf4n%2FMnZ04VajjwKzY%2F%2Bbg63jau7GNYGD2JR1Eb%2F%2BqE5nNZUtIyW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bdc2d50d33b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

g1jm3.shop/l/hello_kitty/form/js/libs/utils.js

172.67.217.61

200 OK

64 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/libs/utils.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, ASCII text, with very long lines (1338)
Size
64 kB (64033 bytes)
Hash
fa4d12a59a70432bcfea49469386291e
3b24fcc6ef44ca3635266a10530d68df4857e7a1
5084ebd7703c470e9e39d58de78661fa7780812d49bf2293217f278429b66c78

HTTP Headers

GET /l/hello_kitty/form/js/libs/utils.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5d2f3"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ue5M1HuZ2rG%2ByfdijDJLwY2Vbl65pFDzzovG%2FI1jSF8X0b3OYiF8mLh1o%2B1SuMs0aTGihYMck2So4oNy2Xyf%2BLRuTA0LEye41erE2RYlSLpEAvZDAz1IKAukipJ2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2da8e511c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/final-page.css

172.67.217.61

200 OK

319 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/final-page.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text, with very long lines (33105)
Size
319 kB (319410 bytes)
Hash
d406ae0e843fe32e24ebaa62af70dd7b
2d813e3c2d46dca714c2b61fd1fc31adb1e70be6
91db0ffc1c47bfb038af493e253458b15d956e53ca961dec3f343a5718e52b6a

HTTP Headers

GET /l/hello_kitty/final-page.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5cb92"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2T6dfkmjz6H3sAXLaWyLhc4BGsvb3tE1gKZn3kMJM4W1TAncVTa%2BbTOxW7h%2FO0S3DDDhlFsOaVxk%2FQxOk4m4NOxOc4Y7SelWyF%2B%2B8un3cVu2hGYYJ3byI1nY5DuS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8cdc41c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/js/libs/intlTelInput.js

172.67.217.61

200 OK

34 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/libs/intlTelInput.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (333)
Size
34 kB (34244 bytes)
Hash
6680c3e6c8ad99d661fd6e4d8b02b93c
c9180217f601bcb8b24fd16e5842f4e27849194f
760829886ac05de7bb063d7df7821013bbda8aee258a12326d3e34077a5bf7fc

HTTP Headers

GET /l/hello_kitty/form/js/libs/intlTelInput.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-179d9"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IdaO8CwJZceC7QpmuDV2x5baPKa6S5hEbOZPV9hhsc3j6Y8Yy4FfssrAMI8iO0PfOwo9hwgwU%2BQjMxmPGVqEv25XHiyABDxW2CgS4jAFwdDSfAPno50gHtO34aTt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2da8e501c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/js/custom.js

172.67.217.61

200 OK

14 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/js/custom.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, ASCII text
Size
14 kB (13737 bytes)
Hash
7e1a2668f51815ae6f958a894ad2952b
bd109a14d6c33954760efb8387391485ee00a931
3b648ed95045a3f19d7b14f37b6532f51a100f7672afe92f325cab9a00b6ec15

HTTP Headers

GET /l/hello_kitty/js/custom.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-5fb"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cEdV6rT07gpKMf6XAFvfi2HsX3ieD3p3U3JzNsLEmQIldJJdwk6rwdV8WSnSBW1EHnH2aoixrUe3vF8EPkX0T29bL%2FlyLTsije2hMfFG9x1SdAF7ivllu8zzE7f8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9ce0f1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/43nRFLo/D

172.67.217.61

200 OK

62 kB

URL User Request GET HTTP/2
g1jm3.shop/43nRFLo/D
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type

Size
62 kB (61645 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /43nRFLo/D HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hnrvq.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: sid=4185
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.13
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d13ZbbCkG259ZtEtSFPkMZVzWw9yW4Zw%2FuIB%2BPLhYlBOxarPm9cx8J6A764lSKnfOE4Mnpgc0YesNyTW2v49PvBQ%2Fe7U5DdD9wIT7%2B%2B0ypB%2BtckuQoHVtA421EEF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bdc2d6ce0ab4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

g1jm3.shop/l/hello_kitty/style/css_002.css

172.67.217.61

200 OK

7.6 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/style/css_002.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text, with very long lines (7860), with no line terminators
Size
7.6 kB (7636 bytes)
Hash
dd7011d80d6cc455e39ee5c0dd22c5c9
9e2e1e309028ef62b252be4c0b75fc577155260b
018b57c2738888ac6c710457c47fbbe00e32d86c801817683ed9f6a931b77ef4

HTTP Headers

GET /l/hello_kitty/style/css_002.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1dd4"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yByxtQtHDZNDJgcDMJ06vXhn6ieor5lStAD922tZJWu%2BmbGsTh0uHeKhGLFHNdbUu0kLJN%2F2yYRduaNsN7zhctuVZB9LtTJD8WjlnWumVN%2FiF%2B94hpIJ7IutUsAr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8cdc51c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/app.css

172.67.217.61

200 OK

251 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/app.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text
Size
251 kB (251074 bytes)
Hash
3f061abacbdb579fe29aa6abae07ed5b
76509d96931d3dca282186e041b33d59dafb89b2
18a3021390d85960612d0078549a0aa4587ba21088e30f49baf1090ee6e01738

HTTP Headers

GET /l/hello_kitty/app.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-3d4c2"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIkKcUV180mZ6yofzDi3qbP315x8KKDRfmdZb1vbE7ldWL%2FPvKqCbdI%2B8hJ1XVV2XOXq6D%2Ft9o5j1etVplM2u%2Fkta4FBoee7kj5Tb8JOrXQd%2FLZhsLvB2qhDJnuf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8cdc31c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/js/jquery-3.1.1.min.js

172.67.217.61

200 OK

87 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/js/jquery-3.1.1.min.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, ASCII text, with very long lines (32030)
Size
87 kB (86709 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /l/hello_kitty/js/jquery-3.1.1.min.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-152b5"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YAtC3QxcV3wAX8K70fY6PKVMSkANNyAQ1GDkhuoNDGHxz1MIOjvtXY5Gi5JuwJXELLpQahnUR9E3J4iefoUkqhlXuMqkB5umOhU6TlcEOnlRT8Fbygtt1rM6qB%2FP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9be0d1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/js/libs.js

172.67.217.61

200 OK

136 B

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/libs.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text, with no line terminators
Size
136 B (136 bytes)
Hash
412b9a563a3527ea92c8acd0477d1256
a511a6b0e6feb8bcdec25e27404fa59a75bffd09
89e68d47f5ad24040ec77c8355be82213e9a0065f865a1d300d23125cadd8463

HTTP Headers

GET /l/hello_kitty/form/js/libs.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-88"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PT7nwNiAZUSDfACyHiwaF3blAUAPRbNmIzIY%2BsE1CaYQ9XgkZJBFm7lwT%2Byac66lErLT6TEZg7hIvcXavAg5amUKQmyy09EHdx6gtR%2Fd3j05vX8abn2%2Bs75JXbm0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9ce111c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/js/main-form.js?v=3.2

172.67.217.61

200 OK

11 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/main-form.js?v=3.2
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type

Size
11 kB (11167 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/js/main-form.js?v=3.2 HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 27 Mar 2024 19:42:54 GMT
etag: W/"660476be-2b9f"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SZqkQL39Qx15jTuUhfctvebvyJBlpuRH6HxCwDZx1OQ%2Bwm5Wln0uATPRwUaFCF5z%2BaphYKpxdNdoUldaVGQf5JTaxpkwsne6KU5wRwGClil%2Bud9sQEIwfL4vD9qG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9ce121c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/css/intlTelInput.css

172.67.217.61

200 OK

25 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/css/intlTelInput.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text
Size
25 kB (25254 bytes)
Hash
a69aa970266649e0b08c2cb4bc166568
d9314a52085a2bb6d284421bb18a4c546ecb73d4
ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491

HTTP Headers

GET /l/hello_kitty/form/css/intlTelInput.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-62a6"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WJR9nCJhmP6%2FuGxF77VUpESieCqhRBt%2F5kDDfVyxJ%2BKW%2Ba%2B4hHdOcX%2BW%2Buy1LEFBAyIWvKDN1%2Fwrs9%2BL2jRr1DAsnKNx7gisI5vMPuUR32viwfN%2BanmQe10qCwih"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d95dec1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/assets/js/bootstrap.min.js

172.67.217.61

200 OK

60 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/assets/js/bootstrap.min.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, ASCII text, with very long lines (59893)
Size
60 kB (60174 bytes)
Hash
6bea60c34c5db6797150610dacdc6bce
544afefd148715da7dd52d368a414703390ca0e0
38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff

HTTP Headers

GET /l/hello_kitty/assets/js/bootstrap.min.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-eb0e"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uFfKwW9%2FFffkw0UaiuzwnzaaC6nbzVVytuH6t0wK41SLDR0FGpDeqWpNw8c0q9rA48kIPiPOf0BX77mcqe%2F6YmFHKNmeCRe3W3l7cTDkKkIQ5o5vOK4%2Fj0DqB90F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9be0e1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/content/video.gif

172.67.217.61

200 OK

1.1 MB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/content/video.gif
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
GIF image data, version 89a, 720 x 576
Size
1.1 MB (1060841 bytes)
Hash
1025f8e9a1f615a5c03a7a06aa363a9e
2be8a2708b15c29cce7c5183e2465ca104668090
58515f4ec9ad8e6356a40adf432c048ba64401e43dc81ac2b660a38b17912074

HTTP Headers

GET /l/hello_kitty/content/video.gif HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: image/gif
content-length: 1060841
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-102fe9"
expires: Sun, 28 Apr 2024 04:05:28 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8172
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eU5bSrWUh0PhWT0e6AhpnWcz9%2Fi5f9hr1yoJh6umzDPLGraWJjxjSoqo8tSu9CfvIzSNzaBLqCyRtozWy8BXn5zXAS8H4AqTfrQpPDGHtRqiBBQyhQu0kFd3%2FOqo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2da4e391c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/content/pic4.jpg

172.67.217.61

200 OK

82 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/content/pic4.jpg
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:34], progressive, precision 8, 1920x1080, components 3
Size
82 kB (82443 bytes)
Hash
ae6ee1525a40e1c166b09283750e34e0
a58ab378efe975a58e9b0de02d4c2b2343da21f7
ef88af929c5c577c591f70f6861b6ca529f632f117cf7411da608f9788e1accd

HTTP Headers

GET /l/hello_kitty/content/pic4.jpg HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: image/jpeg
content-length: 82443
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1420b"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pOoDtVBVQWtiIdozw%2FXPFLOaAZnjq%2F8cqjWbox7RHpjzKxL68mUSei6sxbxhic38ppU%2BDotgorZjJ41ME%2F8iL5ngZrvwL1Z%2Bd7eiwI2oNoLzgrMbnTjxt%2BTeyOxY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8ddcf1c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js

172.67.217.61

200 OK

151 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/libs/jquery-3.6.0.min.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, ASCII text, with very long lines (755)
Size
151 kB (150945 bytes)
Hash
2f9ce5c0e6e3b112156a7ff05ba9e682
5da37b54f5ac446e0d72005a12fcd21dd86f3ac0
8c1d8308190d402fce06d8cd4119a3013d87f1599c65cc6b34a698ed093b191d

HTTP Headers

GET /l/hello_kitty/form/js/libs/jquery-3.6.0.min.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-24da1"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETrDhEVIon%2F4H4IZ8N61GNJMz%2FNIszzwc0%2FisUf6J8aMR5DQOL5mN6x98VjkBToOJoaN4hexxqYBwdkwpY7c32iSJcydiPUN8UP%2B84zHxCG2iCOH3uk7Pqj08amM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2da8e4f1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/js/functions.js?v=6

172.67.217.61

200 OK

8.1 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/functions.js?v=6
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
Unicode text, UTF-8 text, with very long lines (8264), with no line terminators
Size
8.1 kB (8074 bytes)
Hash
445d29b579d8c8891938596d87178172
d7aa070c8d6959f9dbff50dcb1861903fad8d677
4cecc898bea1e927ce0c3a773cc422ec25271d67d756a2b8536b2206739c8fbe

HTTP Headers

GET /l/hello_kitty/form/js/functions.js?v=6 HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/js/main-form.js?v=3.2
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1f8a"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B7wH6i1IGy%2FXMhEdm0qIOrFQIVZRWovVlr%2F6FnTFOTVgrjIGEUFus7HewhUb9BGjYPofZRzn%2BtxDjoTPNtG08zRQj0FOy8bW7GNmgTwqwCPvEw%2FP5CRv61OkuWiz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2da8e541c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/js/main.js

172.67.217.61

200 OK

218 B

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/js/main.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
218 B (218 bytes)
Hash
6744ee14a2ff901a384e836d91be6ae1
0b9fc1e6adba8dae4ee2701371e44b53196e806d
e3f909ec16da01389e2cd2ca61df466e355ccb3d4aece742bb1bc68460e7e846

HTTP Headers

GET /l/hello_kitty/js/main.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-da"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dw56ndGHE9IYFB%2BlpsthTVFjsp8ifjCn%2FRfkYeHLGDJ6AB1ub96BQseg%2F%2Fq%2FWjhTGLwwYu2Kql87grvcE8FCL%2FXZ8rMpPbZEYqch2V1FnaCSGiKQNNc2keMFuhGM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d9ce101c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js

172.67.217.61

200 OK

17 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/js/libs/jquery.maskedinput.js
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JavaScript source, ASCII text
Size
17 kB (16746 bytes)
Hash
d37c584165f7d01f34ba29f5852daacb
7607f09ab544c30e1942c834e54410d15043c60a
d4fe2470c43d76c8d1be7f4cf8c835b1032d48641efbd071da6ab79fb506d786

HTTP Headers

GET /l/hello_kitty/form/js/libs/jquery.maskedinput.js HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/js/libs.js
Cookie: sid=4185
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: application/javascript; charset=utf8
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-416a"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFUfA%2BJQtx7YB5W4VVwpEyICCuIUm9yAgSjo7kpj8C2HLdcaj2sLygyNqP8PGMfsyRBLbQ%2BbTO9zndMltV4wkPfeoUEtGUKLv8FlAE%2BkYXMftP6dbrL%2B440OO%2BvF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2da8e521c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/css/flags.css

172.67.217.61

200 OK

0 B

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/css/flags.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /l/hello_kitty/form/css/flags.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
content-length: 0
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-0"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GPi0DfazI%2FmPmhIcEulrXlaH9oC0%2FZmVQwXTQb%2FoiB0a5znPZLff4sgHKW82Uq%2BA7H8nLqoXb5p1DBQETpBBGYw%2FvHctARGMBMb5NhbeMYQLOFf64tYRqdlpZlLT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d95deb1c16-OSL
alt-svc: h3=":443"; ma=86400

get.geojs.io/v1/ip/country.json

104.26.0.100

200 OK

71 B

URL GET HTTP/2
get.geojs.io/v1/ip/country.json
IP
104.26.0.100:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerLet's Encrypt
Subjectgeojs.io
FingerprintB4:9E:CC:F3:6D:DD:E3:68:A0:4A:B0:10:ED:5E:C2:60:0E:41:FE:36
ValidityMon, 11 Mar 2024 03:28:55 GMT - Sun, 09 Jun 2024 03:28:54 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
71 B (71 bytes)
Hash
c2e58ee58e944b511238efb5a3d9137f
a88d5d17096b9d989640717f15ff283d24518e05
f0c22e4edc2bd23e07eb0e2372551f213d59f46a4d32f76c3f106a04e4115043

HTTP Headers

GET /v1/ip/country.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://g1jm3.shop
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 29 Mar 2024 06:21:41 GMT
content-type: application/json
x-request-id: 33e2ebd18c667e5cb607a9ae2583b750-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Fn5%2B3Nm%2FmuySM5Oq0zjXmCz%2BqUo%2BGdt5%2BSVOCuicNLDzHa%2FmeiHry39ZrLj7OJtG9Q8lJGcV0HyRZ97lUgdYTwOUktFV%2Bq3tz0TYPu590nw9%2BbjxbpgLpthxXc9YA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bdc2dd0beb56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

g1jm3.shop/l/hello_kitty/form/img/flags.png

172.67.217.61

200 OK

71 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/img/flags.png
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Size
71 kB (70857 bytes)
Hash
416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55

HTTP Headers

GET /l/hello_kitty/form/img/flags.png HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/css/intlTelInput.css
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:41 GMT
content-type: image/png
content-length: 70857
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-114c9"
expires: Sun, 28 Apr 2024 04:05:29 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8172
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kbYzTOiyxov90JxFFRgfTbzLismwGoxKQRVx81DpwTCG5Fi9L7fBN5vWgBH1TH2TRgIEhOU%2Bbzc3YqsqQbBr24qr9GzXFLCllvjsJsCdDFYX6I07ji9h876iRvPu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2dd7f2d1c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/css/form.css

172.67.217.61

200 OK

6.7 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/css/form.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text, with very long lines (7069), with no line terminators
Size
6.7 kB (6687 bytes)
Hash
6e7e4c67941295ea1ecae563daa4a932
2001dd163e53cda179c5bccfc0bd9665a77c2928
54dde84d93f7586c1de76072940a5f5d4d23729aaa1e61c094912cbaf8f8dbed

HTTP Headers

GET /l/hello_kitty/form/css/form.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-1a1f"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xfF7UWxR5217w70KZR9R0ZWHLYvsob1J4jOFv4t4Ylm8Wdl%2FpZPY%2Bnj2k9fxxlYKKgnN%2FgZOWjyM3FA%2BZ0gi9Cc5h2yCZ2iQACkW%2BGVl175lAXAlamvU2IswJMlo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d8bdbc1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/content/pic5.jpg

172.67.217.61

200 OK

130 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/content/pic5.jpg
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Macintosh), datetime=2024:03:15 23:42:53], progressive, precision 8, 900x900, components 3
Size
130 kB (130185 bytes)
Hash
e3d0ad7562b050fe95e10a5b4a083d7b
3cd204be40b940753d0942379e77906853c350f6
16cc235730aaa390f75c2779d91a087dc2ed1ff3015ec3b1271d60559694f72f

HTTP Headers

GET /l/hello_kitty/content/pic5.jpg HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: image/jpeg
content-length: 130185
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: "65f4c59b-1fc89"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BVsMB7KhriNUsyHCBpO3vx8mlAm%2BQsL6Wd0tf6KZxsvn2xauIX4D11kd30wUofsyil%2F2lfOJ0%2FK5ucGZAQZAaIEsCQeLAFxjLDwji%2BvvveObFtbOeFQBF62BtnZw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d95def1c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/favicon.ico

172.67.217.61

200 OK

0 B

URL GET HTTP/3
g1jm3.shop/favicon.ico
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/43nRFLo/D
Cookie: sid=4185
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:41 GMT
content-type: image/x-icon
content-length: 0
last-modified: Thu, 09 Feb 2023 00:38:17 GMT
etag: "63e44079-0"
expires: Sun, 28 Apr 2024 04:05:29 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8172
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8mavOKOFVoudpkuKyAwKMPYxNJbRCxdZTBZ8SP0bSCbaIeW7eRow9krgwDRdkKCIckpk8D3V%2Bc8iKp2Rneyi9y9kkIHMZ9xntjrfp2HiXs6p5XQttYpfEWjDTdlk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2dbceb71c16-OSL
alt-svc: h3=":443"; ma=86400

g1jm3.shop/l/hello_kitty/form/css/modal-error.css

172.67.217.61

200 OK

4.0 kB

URL GET HTTP/3
g1jm3.shop/l/hello_kitty/form/css/modal-error.css
IP
172.67.217.61:443
ASN
#13335 CLOUDFLARENET

Requested by
https://g1jm3.shop/43nRFLo/D
Certificate
IssuerGoogle Trust Services LLC
Subjectg1jm3.shop
Fingerprint41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE
ValiditySun, 24 Mar 2024 12:06:25 GMT - Sat, 22 Jun 2024 12:06:24 GMT

File type
ASCII text, with very long lines (4209), with no line terminators
Size
4.0 kB (3971 bytes)
Hash
c690ad3206aec810e24ea2a2f90c023d
9b229c4d9ff6acdde231dd7b278f116713bda30b
d8202caf1c0d1d4d4e4199d8766f31f8dcb13d680d824d658df21e5812dfd3c8

HTTP Headers

GET /l/hello_kitty/form/css/modal-error.css HTTP/1.1
Host: g1jm3.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g1jm3.shop/l/hello_kitty/form/css/form.css
Cookie: sid=4185
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 29 Mar 2024 06:21:40 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 22:03:07 GMT
etag: W/"65f4c59b-f83"
expires: Sun, 28 Apr 2024 04:05:27 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 8173
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TfL5ZVOAPN%2BomrrV4rJ6vfYPj%2BLBrwy6ZhsUPtPlwilESE%2BdK0Z88aG1kg4ENLnikpuqRtQHwtRLQ9LdyK0vXIq4fslrO5GSzQUlQWD56a7gf5LrT57db47pg1Ra"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bdc2d95dee1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML