www.portmacau.com/
783 B IP
File type JavaScript source, ISO-8859 text, with CRLF line terminators
Hash ba689ddbb0da6eb2ad3d184f2f1c7781
887dcd870effd79e674f8063e74f3addadd04c20
f510659853353a515d8288f30a49e3ee15e3be798f4c1119cd756ea92e2d1534
GET / HTTP/1.1
Host: www.portmacau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:59:57 GMT
Content-Length: 783
Content-Type: text/html
Server: nginx
www.portmacau.com/gaj/news_show.asp?id=24&classid=9
200 OK 783 B URL User Request GET HTTP/1.1 www.portmacau.com/gaj/news_show.asp?id=24&classid=9
IP
File type JavaScript source, ISO-8859 text, with CRLF line terminators
Hash ba689ddbb0da6eb2ad3d184f2f1c7781
887dcd870effd79e674f8063e74f3addadd04c20
f510659853353a515d8288f30a49e3ee15e3be798f4c1119cd756ea92e2d1534
GET /gaj/news_show.asp?id=24&classid=9 HTTP/1.1
Host: www.portmacau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:59:58 GMT
Content-Length: 783
Content-Type: text/html
Server: nginx
www.portmacau.com/common.js
200 OK 2.7 kB URL GET HTTP/1.1 www.portmacau.com/common.js
IP
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
File type JavaScript source, ASCII text, with very long lines (389), with CRLF line terminators
Hash 88b2668d32ab9687d94bfa2bda93b813
2dcaf3cf77befb708fe15e6faf0cbab44642f23a
40225f0d6e25594b0dfc4629059f9be20beee0321a47599ca5960d87d84e5fe1
GET /common.js HTTP/1.1
Host: www.portmacau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:59:58 GMT
Content-Length: 2673
Content-Type: application/x-javascript
Server: nginx
www.portmacau.com/tj.js
200 OK 364 B IP
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 7bef30b858e0c0ebd1c6a9700ddd9531
4f2a535cdf685dba011ca7681ae74b4d1086b4a8
73d8279e8a8423776cc3ffbf75ab8a3df8f9fa086ac80521a5fd529b7925c586
GET /tj.js HTTP/1.1
Host: www.portmacau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:59:58 GMT
Content-Length: 364
Content-Type: application/x-javascript
Server: nginx
js.users.51.la/21850753.js
200 OK 4.9 kB URL GET HTTP/1.1 js.users.51.la/21850753.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Certificate IssuerGlobalSign nv-sa
Subject*.users.51.la
Fingerprint8E:9F:59:98:28:F2:49:A9:E1:19:45:C2:49:ED:B2:F6:B8:E1:C6:39
ValidityFri, 14 Apr 2023 03:17:41 GMT - Wed, 15 May 2024 03:17:40 GMT
File type JavaScript source, ASCII text, with very long lines (4898), with no line terminators
Hash a241f61d0f1c8bfdebba6727c200a5f7
f44fbc3696557b719ae57dffc0fcd0087049a35e
b568c930ed63ac7123439607c6f72f03f2d3b6375edb9cd28cb0c1f77850b2a6
GET /21850753.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 05 May 2024 02:59:58 GMT
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Ali-Swift-Global-Savetime: 1714877998
Via: cache23.l2de2[144,144,200-0,M], cache10.l2de2[145,0], ens-cache6.se2[167,167,200-0,M], ens-cache12.se2[168,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 05 May 2024 02:59:58 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62ca017148779983012571e
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL GET HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
File type ASCII text, with no line terminators
Hash 1bb5a3267c9865ad4abe8d937734b62b
b5478dd2edb3e64242eced1db2dbd945ef81f592
674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Sun, 05 May 2024 02:59:58 GMT
Etag: "4078521116"
Expires: Mon, 05 May 2025 02:59:58 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=562F58992C2E2C8E7D3D95DA4C631B01:FG=1; max-age=31536000; expires=Mon, 05-May-25 02:59:58 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
hm.baidu.com/hm.js?7a37b6e9b27b2ce034bdf33f5fa35154
200 OK 12 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?7a37b6e9b27b2ce034bdf33f5fa35154
IP
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type JavaScript source, ASCII text, with very long lines (619)
Hash b27ee8a71a65793bb0f1eb3758664fb3
955f12d81347cf94b9b55819cc123eb344b45c68
24acae63fa7e4a55a195cda19440b78736289771280bdb883f69e28ba2d5bd4b
GET /hm.js?7a37b6e9b27b2ce034bdf33f5fa35154 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11456
Content-Type: application/javascript
Date: Sun, 05 May 2024 02:59:58 GMT
Etag: da86e6df8f705bc18880523f931459ad
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=AF4D81E7AA1BE048; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ia.51.la/go1?id=21850753&rt=1714877998619&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1714877998619&tt=%25E6%25B7%25B1%25E5%259C%25B3%25E5%258F%25B3%25E4%25BA%25A4%25E7%2589%25A9%25E6%25B5%2581%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8&kw=&cu=http%253A%252F%252Fwww.portmacau.com%252Fgaj%252Fnews_show.asp%253Fid%253D24~_~classid%253D9&pu=
200 0 B URL GET HTTP/1.1 ia.51.la/go1?id=21850753&rt=1714877998619&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1714877998619&tt=%25E6%25B7%25B1%25E5%259C%25B3%25E5%258F%25B3%25E4%25BA%25A4%25E7%2589%25A9%25E6%25B5%2581%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8&kw=&cu=http%253A%252F%252Fwww.portmacau.com%252Fgaj%252Fnews_show.asp%253Fid%253D24~_~classid%253D9&pu=
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21850753&rt=1714877998619&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1714877998619&tt=%25E6%25B7%25B1%25E5%259C%25B3%25E5%258F%25B3%25E4%25BA%25A4%25E7%2589%25A9%25E6%25B5%2581%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8&kw=&cu=http%253A%252F%252Fwww.portmacau.com%252Fgaj%252Fnews_show.asp%253Fid%253D24~_~classid%253D9&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 05 May 2024 02:59:59 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=a9c1f07bdd587e9292e7ff9dc4741efef8c8c969ddb8cede68997b4fe2bc2caf; Path=/; HttpOnly
acw_tc=ac11000117148779991493288e536838a261d21ac8ec397cef3e2faf892fde;path=/;HttpOnly;Max-Age=1800
api.share.baidu.com/s.gif?l=http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
200 OK 0 B URL GET HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9 HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Sun, 05 May 2024 02:59:59 GMT
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1191755691&si=7a37b6e9b27b2ce034bdf33f5fa35154&v=1.2.83&lv=1&sn=23654&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.portmacau.com%2Fgaj%2Fnews_show.asp%3Fid%3D24%26classid%3D9&tt=%E6%B7%B1%E5%9C%B3%E5%8F%B3%E4%BA%A4%E7%89%A9%E6%B5%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1191755691&si=7a37b6e9b27b2ce034bdf33f5fa35154&v=1.2.83&lv=1&sn=23654&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.portmacau.com%2Fgaj%2Fnews_show.asp%3Fid%3D24%26classid%3D9&tt=%E6%B7%B1%E5%9C%B3%E5%8F%B3%E4%BA%A4%E7%89%A9%E6%B5%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1191755691&si=7a37b6e9b27b2ce034bdf33f5fa35154&v=1.2.83&lv=1&sn=23654&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.portmacau.com%2Fgaj%2Fnews_show.asp%3Fid%3D24%26classid%3D9&tt=%E6%B7%B1%E5%9C%B3%E5%8F%B3%E4%BA%A4%E7%89%A9%E6%B5%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 05 May 2024 02:59:59 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=8ACBD8F1DCB6F714; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
www.portmacau.com/favicon.ico
200 OK 783 B URL GET HTTP/1.1 www.portmacau.com/favicon.ico
IP
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
File type JavaScript source, ISO-8859 text, with CRLF line terminators
Hash ba689ddbb0da6eb2ad3d184f2f1c7781
887dcd870effd79e674f8063e74f3addadd04c20
f510659853353a515d8288f30a49e3ee15e3be798f4c1119cd756ea92e2d1534
GET /favicon.ico HTTP/1.1
Host: www.portmacau.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
Cookie: __tins__21850753=%7B%22sid%22%3A%201714877998619%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201714879798619%7D; __51cke__=; __51laig__=1; Hm_lvt_7a37b6e9b27b2ce034bdf33f5fa35154=1714877999; Hm_lpvt_7a37b6e9b27b2ce034bdf33f5fa35154=1714877999
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:00 GMT
Content-Length: 783
Content-Type: text/html
Server: nginx
yinghua14.top/
200 OK 4.8 kB IP
ASN #133199 SonderCloud Limited
Requested by http://www.portmacau.com/gaj/news_show.asp?id=24&classid=9
File type HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 6014b6c0f0baaf6ee12514d60d884230
ad12a303d00deed99f902a3b9573dde22275f776
c79b628fd59d99d4afd73db2572d4397d3824868b878a7bacd30b84034241dfa
GET / HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.portmacau.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:02 GMT
Content-Type: text/html;Charset=utf-8;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=2jk0s56j4ittn6ptequ95839r5; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
Server: qq.com
js.users.51.la/21806445.js
200 OK 4.9 kB URL GET HTTP/1.1 js.users.51.la/21806445.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type JavaScript source, ASCII text, with very long lines (4898), with no line terminators
Hash 9edb3f9dc0fe6d126e16897bdc8af4ed
c9d4d62a1ffc4d98f70da5ac123b91876db39cb4
5d0b5ee92fa7c37c53a8562061cbd4c554ab0522ec52efe120da98e8776217c4
GET /21806445.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 05 May 2024 03:00:03 GMT
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Ali-Swift-Global-Savetime: 1714878003
Via: cache10.l2de2[167,167,200-0,M], cache12.l2de2[168,0], ens-cache4.se2[189,188,200-0,M], ens-cache3.se2[190,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 05 May 2024 03:00:03 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9717148780029684544e
yinghua14.top/template/m1938/css/ate.css
200 OK 6.0 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/css/ate.css
IP
ASN #133199 SonderCloud Limited
File type ASCII text, with CRLF line terminators
Hash 507a51f8b1d147fcf60eb2a898690259
e630900e6a1a0434719c5bdaf655362313e7e33c
9a9afeb3b64f2b7ccce5b842929a2fed579e24450e6c436386e7956b2de8e12a
GET /template/m1938/css/ate.css HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:03 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 07 Mar 2021 04:24:42 GMT
Vary: Accept-Encoding
ETag: W/"6044558a-126e5"
Expires: Sun, 05 May 2024 14:57:42 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/yhys/tb.js
200 OK 729 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/tb.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text
Hash b18577a406a943937492052e70f45a69
1c88e7842b78801fe9e025881a6d27cd2b1bd778
6f8b4b22b3cdcedff0db228f290b4b079aa0e18792fb0911b2677e8ba40a6291
GET /template/m1938/yhys/tb.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 04 May 2024 11:14:04 GMT
Vary: Accept-Encoding
ETag: W/"6636187c-9d2"
Expires: Sun, 05 May 2024 14:58:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/yhys/sp1.js
200 OK 615 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/sp1.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash b00c952601fbcda316bb32196a20328b
b6fd26ce3fb211d12ea99314f94edc64528ddcea
a21cb064e776a9a1e9e6a58cb5d467aa0e0bbbc12891549e3105149d6ed56893
GET /template/m1938/yhys/sp1.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:27:37 GMT
Vary: Accept-Encoding
ETag: W/"6634ca29-735"
Expires: Sun, 05 May 2024 14:58:41 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
img01.whatfugui.com:59888/img/covers/772CB0623B996624.jpg
200 OK 21 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/772CB0623B996624.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:19 18:41:19], baseline, precision 8, 310x208, components 3
Hash c2bb690e79a2c3d0904e79481782e841
d9eaa28d9cedac898a37f6d813c2a4c2ceb14dbb
d193b92236e551cc702571e6738c33751c69fd6827b4416cf1dc495120e0e1de
GET /img/covers/772CB0623B996624.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 21139
last-modified: Fri, 26 Apr 2024 18:49:36 GMT
etag: "662bf740-5293"
expires: Mon, 03 Jun 2024 22:14:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/cpa/gg.js
200 OK 107 B URL GET HTTP/1.1 yinghua14.top/template/m1938/cpa/gg.js
IP
ASN #133199 SonderCloud Limited
File type Unicode text, UTF-8 text, with no line terminators
Hash 0fbb83ebbc2dfae809bc7dfe75c5a95b
bbc0d00c28871258daf31ad9df6371852393a030
3921da18edff6bb51de8246295aa8040614be426d9f2b260c29c7786d9e67601
GET /template/m1938/cpa/gg.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:04 GMT
Content-Type: application/javascript
Content-Length: 107
Connection: keep-alive
Last-Modified: Wed, 13 Sep 2023 18:47:21 GMT
ETag: "650203b9-6b"
Expires: Sun, 05 May 2024 14:58:57 GMT
Cache-Control: max-age=43200
Server: qq.com
X-Cache-Status: HIT
Accept-Ranges: bytes
img01.whatfugui.com:59888/img/covers/8F1116A2C6384F1C.jpg
200 OK 34 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/8F1116A2C6384F1C.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:14 18:17:31], baseline, precision 8, 310x208, components 3
Hash f1e493320e9545b6726d288fac0adc6a
cf1354515794498a1dc94662685a5b70e203a7f0
096a1fa1e91004cdcf04d9807ddfa9ad00d11a624c162b1e00006eecbccf722d
GET /img/covers/8F1116A2C6384F1C.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 33597
last-modified: Tue, 23 Apr 2024 07:56:48 GMT
etag: "662769c0-833d"
expires: Sun, 02 Jun 2024 17:11:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/cpa/dl.js
200 OK 5.1 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/cpa/dl.js
IP
ASN #133199 SonderCloud Limited
File type JavaScript source, ASCII text, with very long lines (8611), with CRLF line terminators
Hash 514e73a61e06e5e0dfce50fc166454d7
8b87fe4d354d2ea22e1968fd04c61c4f2873a950
2a8fddcf4e1c8fcf969080a9cf41179797d648d375a0a90a3356530c9bfecc5b
GET /template/m1938/cpa/dl.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 02 May 2024 10:17:58 GMT
Vary: Accept-Encoding
ETag: W/"66336856-3abd"
Expires: Sun, 05 May 2024 14:57:39 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
img01.whatfugui.com:59888/img/covers/96D931D8491A261C.jpg
200 OK 44 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/96D931D8491A261C.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash 0c09577536a06f3a56d5a739358bd5cb
40cd0874cd2a68e3b330102708e68645f58de6ad
bbccc771d6b167b479aba2bc5ef76a645b66d8ad1ec0e71075a50e050bfa0b74
GET /img/covers/96D931D8491A261C.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 44357
last-modified: Fri, 26 Apr 2024 18:50:20 GMT
etag: "662bf76c-ad45"
expires: Mon, 03 Jun 2024 18:11:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/60CCA2D2282C9A5E.jpg
200 OK 44 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/60CCA2D2282C9A5E.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash 13de10f99425a83b4d28aa9a8f941c46
4f23c781b2a468f2648831998fabe3d69630ac06
a8ab3c5e52dbaedf77e086a0185e286e291315bad6a701205dab1328cfba4536
GET /img/covers/60CCA2D2282C9A5E.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 44213
last-modified: Tue, 23 Apr 2024 07:56:11 GMT
etag: "6627699b-acb5"
expires: Sun, 02 Jun 2024 19:11:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/2D7DA311123FDCBE.jpg
200 OK 24 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/2D7DA311123FDCBE.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:19 20:19:26], baseline, precision 8, 310x208, components 3
Hash 352c17abbc55b602461c0070c15513d6
827b32ae7eb25d0c9212237cd3eae4c439853893
c266b4293c1e5c500e071dedf879cc02d230120c5ead53214d5240118619c6b9
GET /img/covers/2D7DA311123FDCBE.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 23585
last-modified: Fri, 26 Apr 2024 18:47:30 GMT
etag: "662bf6c2-5c21"
expires: Mon, 03 Jun 2024 23:11:41 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/0CE601D7E1374646.jpg
200 OK 31 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/0CE601D7E1374646.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, height=867, bps=0, PhotometricInterpretation=RGB, width=1292], baseline, precision 8, 310x208, components 3
Hash 21b0cd99085576d96806abaa0ba6e259
905939cd4521a283e35b62e0c41b6a8dee019dc9
74140cbc0f2d2186c97011a11d7ffa86876f86b47b932726e79c187dd6e47533
GET /img/covers/0CE601D7E1374646.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 31189
last-modified: Tue, 23 Apr 2024 07:56:01 GMT
etag: "66276991-79d5"
expires: Sun, 02 Jun 2024 22:11:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/B0F44D3D3662422D.jpg
200 OK 23 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/B0F44D3D3662422D.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:19 19:05:49], baseline, precision 8, 310x208, components 3
Hash ccd51dc3eebf683d828a14f2d75b05f6
254f7b84df90ce654cd0ea38fb5929916911f23a
db86e63d83964478702501637f0478a77d3c90e82fe2481900cbc694b6a9e9c3
GET /img/covers/B0F44D3D3662422D.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 22927
last-modified: Fri, 26 Apr 2024 18:45:19 GMT
etag: "662bf63f-598f"
expires: Tue, 04 Jun 2024 00:11:27 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/css/zui.css
200 OK 30 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/css/zui.css
IP
ASN #133199 SonderCloud Limited
File type assembler source, Unicode text, UTF-8 text
Hash 9b05d5213505072a40e3bac4b73741e3
0b3ba0454e50727e00938b0bd7dbeb2092d72cb7
2ede126db1f1759772526a4c72d743486846933a290d666dc694e46c6f9ced2e
GET /template/m1938/css/zui.css HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:04 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 05 Apr 2023 19:03:49 GMT
Vary: Accept-Encoding
ETag: W/"642dc615-1c23d"
Expires: Sun, 05 May 2024 14:57:16 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/yhys/qq1.js
200 OK 782 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/qq1.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text
Hash 69850da2e6b85fb87dcd4d12d9e971be
5397a75c965954bc951f76834258ce95d87101fb
3dc93c4ce337fd86a305732fff884baee710c259d0e7738c8aba2f585c09aa33
GET /template/m1938/yhys/qq1.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:33:33 GMT
Vary: Accept-Encoding
ETag: W/"6634cb8d-9e5"
Expires: Sun, 05 May 2024 14:58:15 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/yhys/sp.js
200 OK 764 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/sp.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 633faa57a1b74b1230f36e8b956d6a07
cfbfeee4cc5d0873118e0dcd4dbaf42ffffce3dd
42a4e086ce7f570b78c7e3a0eb33891cd12592ef5b9e5324c98632a8eca13abe
GET /template/m1938/yhys/sp.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:27:29 GMT
Vary: Accept-Encoding
ETag: W/"6634ca21-94a"
Expires: Sun, 05 May 2024 14:59:25 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
img01.whatfugui.com:59888/img/covers/3DEE471AFBF4B80C.jpg
200 OK 47 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/3DEE471AFBF4B80C.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash 9e7e1ad711acf0c3f58aa383ca3d48b6
3906b82d526544ca575fdc86dbf918e28ffac1f7
df25fa1d1e3dcc9896907b0154c69585ae4a7c72e0d588ca0b733a84ee1e55dd
GET /img/covers/3DEE471AFBF4B80C.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 46687
last-modified: Tue, 23 Apr 2024 07:56:55 GMT
etag: "662769c7-b65f"
expires: Sun, 02 Jun 2024 21:11:39 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/0DE51B967CED69F2.jpg
200 OK 29 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/0DE51B967CED69F2.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:19 18:35:42], baseline, precision 8, 310x208, components 3
Hash 22eb7c787d0c0e815adf32ef385ba632
9e34b7372c91cfd5ac27078437b78cde43cc9a4b
8d04c21674b3956b81660c1fe746106d00a3dd3073148d276b55776fdd5a8f66
GET /img/covers/0DE51B967CED69F2.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 28684
last-modified: Fri, 26 Apr 2024 18:48:38 GMT
etag: "662bf706-700c"
expires: Mon, 03 Jun 2024 21:13:04 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/124C568476AC52B6.jpg
200 OK 28 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/124C568476AC52B6.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:14 19:01:21], baseline, precision 8, 310x208, components 3
Hash ddf106bceb9fd2c513afa52dd8e6054a
16cfb90ac983a0ceb9412757cd5f1830d620453f
66641c3e19393ea6ae95ece334c5e13050cee57e31667024ab1bc99c1c437d98
GET /img/covers/124C568476AC52B6.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 27763
last-modified: Tue, 23 Apr 2024 07:56:34 GMT
etag: "662769b2-6c73"
expires: Sun, 02 Jun 2024 23:11:29 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/96510EDDF3784F70.jpg
200 OK 43 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/96510EDDF3784F70.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash be7da36ecff10d110faeb33751d3e8e3
c6ace23532b58020faaaf5934907465df19d2a3e
d53b77d9ddf8c828f2ea0993e2a8e4ce6e22682fdd4df67f1705d2e27a7bfe00
GET /img/covers/96510EDDF3784F70.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 42769
last-modified: Fri, 26 Apr 2024 18:29:52 GMT
etag: "662bf2a0-a711"
expires: Mon, 03 Jun 2024 19:11:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/0C19BB5C529B8848.jpg
200 OK 24 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/0C19BB5C529B8848.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2024:04:19 18:31:41], baseline, precision 8, 310x208, components 3
Hash baaa6e816a3a63a6dededb125ca26669
37fc77701136b94a03c7e7186885aa4cea8471fd
ce603905bc7ec795b9b3359eec53425054445957f74f13c994f262e0390764a8
GET /img/covers/0C19BB5C529B8848.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 24300
last-modified: Fri, 26 Apr 2024 18:46:55 GMT
etag: "662bf69f-5eec"
expires: Tue, 04 Jun 2024 01:11:27 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/A62ADCECEFE1C905.jpg
200 OK 25 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/A62ADCECEFE1C905.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, height=417, bps=0, PhotometricInterpretation=RGB, width=768], baseline, precision 8, 310x208, components 3
Hash 6141213e11927d44f63eb70eb72fb552
150552f1662424eff3a491ba4b81a8537d1ed105
1127a706da9fb5ad679817615b06220cf72200b2bf2be3741355922257029327
GET /img/covers/A62ADCECEFE1C905.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 24584
last-modified: Tue, 23 Apr 2024 07:56:17 GMT
etag: "662769a1-6008"
expires: Mon, 03 Jun 2024 00:11:34 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/B8F55DEE61FB4468.jpg
200 OK 44 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/B8F55DEE61FB4468.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash 405e12b82dc7282cd5893fb9125788d2
52e7fadd0c5034ef9c66a3d4fe18576ff0ee3849
1e340373b5b022211060373ea1985484aa9b289e25926df9704a014918b00ee2
GET /img/covers/B8F55DEE61FB4468.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 44461
last-modified: Fri, 26 Apr 2024 18:38:34 GMT
etag: "662bf4aa-adad"
expires: Mon, 03 Jun 2024 20:11:37 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/yhys/tj/z2.js
200 OK 102 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/tj/z2.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, ASCII text, with no line terminators
Hash 4c859fd7e4d8f0d9cd4802b72c427761
4aae28632e13fe0bd1d62c80808ee5ecde68843e
0942498be59a440069f86a0ffc39b60044043cb8ec36a1cc1bec0592cad9db68
GET /template/m1938/yhys/tj/z2.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:05 GMT
Content-Type: application/javascript
Content-Length: 102
Connection: keep-alive
Last-Modified: Tue, 18 Jul 2023 08:14:58 GMT
ETag: "64b64a02-66"
Expires: Sun, 05 May 2024 14:58:41 GMT
Cache-Control: max-age=43200
Server: qq.com
X-Cache-Status: HIT
Accept-Ranges: bytes
yinghua14.top/template/m1938/yhys/qq2.js
200 OK 2.2 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/qq2.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text, with very long lines (302), with CRLF line terminators
Hash 3230bf5869aa2cbd08ce6c64cfed9c5a
b3b29c6517ea4917aaf996d4ef9d7ade186974d1
b26e924c3c1f868b8428c48dbceda6d66c72d53ccec418b7a31f9584bda4c7fa
GET /template/m1938/yhys/qq2.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 04 May 2024 11:13:51 GMT
Vary: Accept-Encoding
ETag: W/"6636186f-3037"
Expires: Sun, 05 May 2024 14:55:26 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/cpa/qq3.js
200 OK 873 B URL GET HTTP/1.1 yinghua14.top/template/m1938/cpa/qq3.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 5cdcd6b73aab3fbe552689be2a8a6c80
97945e37000d202f29e3eb547a279e133082b788
d36e186a28a5eaa433f949ffae314f84d7860e592d4488e6d3eed340bcb084e5
GET /template/m1938/cpa/qq3.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 25 Aug 2023 06:53:56 GMT
Vary: Accept-Encoding
ETag: W/"64e85004-1457"
Expires: Sun, 05 May 2024 14:57:16 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/yhys/dh.js
200 OK 1.6 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/dh.js
IP
ASN #133199 SonderCloud Limited
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a71c77653b94e1ebe3d623d732896c27
8d11c170dd676662ce305933125af8cd3384c59d
21623e19fb3d36a599be1a3291201251aff8c3d5f2c049b3ff24b4f0ba5e19c2
GET /template/m1938/yhys/dh.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:27:09 GMT
Vary: Accept-Encoding
ETag: W/"6634ca0d-439a"
Expires: Sun, 05 May 2024 14:57:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
img01.whatfugui.com:59888/img/covers/9D89DBE3D2B58106.jpg
200 OK 32 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/9D89DBE3D2B58106.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, height=867, bps=0, PhotometricInterpretation=RGB, width=1292], baseline, precision 8, 310x208, components 3
Hash 634acc9645ab074007c46ace52a55f8b
96f983f5447fd441afc83fcf503ced7f937d5879
c1aa19c9dd4346cbb739b6e8c50c371f7db22356e9e0582ff225417a3bc46e67
GET /img/covers/9D89DBE3D2B58106.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 32483
last-modified: Tue, 23 Apr 2024 07:57:06 GMT
etag: "662769d2-7ee3"
expires: Sun, 02 Jun 2024 20:11:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/903C9FB0863258CF.jpg
200 OK 125 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/903C9FB0863258CF.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Size 125 kB (125401 bytes)
Hash 211ba40635dfc933a805aeadab6b9032
3858fc616afa48fe0366d6252357bd4da137bde0
9aae5ef6358e334a28ecbc3749f1c3d53f77bc980b4d61e9f9da4fdb064cd17d
GET /img/covers/903C9FB0863258CF.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:06 GMT
content-type: image/jpeg
content-length: 125401
last-modified: Tue, 23 Apr 2024 07:58:52 GMT
etag: "66276a3c-1e9d9"
expires: Sun, 02 Jun 2024 18:11:56 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/yhys/dht.js
200 OK 630 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/dht.js
IP
ASN #133199 SonderCloud Limited
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash c3344ffdd182a7e17a409bfb8175862d
d08b680c77880a1f148902b4be96a82bf677bd17
2b09b510e59e4b7ca67f92b954d01dd4e71eea8ccfc0981603c464b198a63065
GET /template/m1938/yhys/dht.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:27:21 GMT
Vary: Accept-Encoding
ETag: W/"6634ca19-f62"
Expires: Sun, 05 May 2024 14:58:15 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
yinghua14.top/template/m1938/images/1.gif
200 OK 254 B URL GET HTTP/1.1 yinghua14.top/template/m1938/images/1.gif
IP
ASN #133199 SonderCloud Limited
File type GIF image data, version 89a, 16 x 17
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /template/m1938/images/1.gif HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:06 GMT
Content-Type: image/gif
Content-Length: 254
Connection: keep-alive
Last-Modified: Mon, 04 Apr 2022 14:58:54 GMT
ETag: "624b07ae-fe"
Expires: Mon, 03 Jun 2024 11:45:32 GMT
Cache-Control: max-age=2592000
Server: qq.com
X-Cache-Status: HIT
Accept-Ranges: bytes
img01.whatfugui.com:59888/img/covers/591616360EC4FBE5.jpg
200 OK 24 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/591616360EC4FBE5.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2023:10:20 14:48:56], baseline, precision 8, 310x208, components 3
Hash dff0da4d2882197c48667b4941d141d7
b62a03e771f3f02730c7d81549b7924542413716
ef44bbccf09e6a67ea9c88e2f04070d4f501724953ad767f225e40e00daba750
GET /img/covers/591616360EC4FBE5.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:08 GMT
content-type: image/jpeg
content-length: 24057
last-modified: Wed, 08 Nov 2023 08:19:06 GMT
etag: "654b447a-5df9"
expires: Sat, 11 May 2024 14:01:11 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/23A3025CD2E30C26.jpg
200 OK 32 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/23A3025CD2E30C26.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash 976dda541d59f82f5119c22ea67462b7
ab64e9a01206d4c7e24bba43260ae837caf745a4
ce9e87dc0b19c2c7a3d4fd1f6623c01f31b24e6363f3cc30f1cd0f7183bccc16
GET /img/covers/23A3025CD2E30C26.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:08 GMT
content-type: image/jpeg
content-length: 32101
last-modified: Thu, 30 Nov 2023 06:43:34 GMT
etag: "65682f16-7d65"
expires: Mon, 03 Jun 2024 09:20:50 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
img01.whatfugui.com:59888/img/covers/E1F2F55F2FD1E635.jpg
200 OK 52 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/E1F2F55F2FD1E635.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=867, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1292], baseline, precision 8, 310x208, components 3
Hash 1d6865c2a9008866daeee12c222f9650
cf738363a3c366efb7de1fa92b6d6ad262e7cad9
a2c9154834c1c47009c260a173982a2275e33f28d02946e71bb22206a458d3a8
GET /img/covers/E1F2F55F2FD1E635.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:08 GMT
content-type: image/jpeg
content-length: 51616
last-modified: Sat, 22 Jul 2023 14:33:01 GMT
etag: "64bbe89d-c9a0"
expires: Wed, 22 May 2024 21:27:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/images/video-play.png
200 OK 1.6 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/images/video-play.png
IP
ASN #133199 SonderCloud Limited
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/m1938/images/video-play.png HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/template/m1938/css/zui.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:06 GMT
Content-Type: image/png
Content-Length: 1567
Connection: keep-alive
Last-Modified: Fri, 29 May 2020 05:44:40 GMT
ETag: "5ed0a148-61f"
Expires: Mon, 03 Jun 2024 11:45:32 GMT
Cache-Control: max-age=2592000
Server: qq.com
X-Cache-Status: HIT
Accept-Ranges: bytes
768guangg1.oss-cn-guangzhou.aliyuncs.com/vip80.gif
200 OK 202 kB URL GET HTTP/1.1 768guangg1.oss-cn-guangzhou.aliyuncs.com/vip80.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectcn-heyuan.oss.aliyuncs.com
FingerprintCF:72:A8:CB:91:50:14:3B:85:4D:51:58:3E:D8:93:FA:15:F6:02:94
ValidityFri, 15 Mar 2024 08:50:03 GMT - Sat, 26 Oct 2024 02:16:02 GMT
File type GIF image data, version 89a, 960 x 80
Size 202 kB (201828 bytes)
Hash 0ffdf64783f6a6ca7d5273dee681ef23
900757d89d008d92c43ce0aa035c1c84e867b4e9
a8075421e4647269a7f58ae6d51ebbd79a4c54c1e62243ba2e92be93b612b390
GET /vip80.gif HTTP/1.1
Host: 768guangg1.oss-cn-guangzhou.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sun, 05 May 2024 03:00:05 GMT
Content-Type: image/gif
Content-Length: 201828
Connection: keep-alive
x-oss-request-id: 6636F635F6D659383742388F
Accept-Ranges: bytes
ETag: "0FFDF64783F6A6CA7D5273DEE681EF23"
Last-Modified: Sat, 04 Mar 2023 08:09:36 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3255087339911631825
x-oss-storage-class: Standard
Content-MD5: D/32R4P2psp9UnPe5oHvIw==
x-oss-server-time: 0
ia.51.la/go1?id=21806445&rt=1714878006353&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25A6%2582%25E6%2582%25A8%25E6%259C%25AA%25E6%25BB%25BF%25E5%258D%2581%25E5%2585%25AB%25E6%25AD%25B2%25E6%2588%2596%25E7%2595%25B6%25E5%259C%25B0%25E6%25B3%2595%25E5%25BE%258B%25E8%25A8%25B1%25E5%258F%25AF%25E4%25B9%258B%25E5%25B9%25B4%25E9%25BD%25A1%25E3%2580%2581%25E4%25BA%25A6%25E6%2588%2596%25E8%2580%2585%25E6%2582%25A8%25E5%25B0%258D%25E6%259C%25AC%25E7%25AB%2599%25E5%2586%2585%25E5%25AE%25B9%25E5%258F%258D%25E6%2584%259F%25EF%25BC%258C&ing=1&ekc=&sid=1714878006353&tt=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&cu=http%253A%252F%252Fyinghua14.top%252F&pu=http%253A%252F%252Fwww.portmacau.com%252F
200 0 B URL GET HTTP/1.1 ia.51.la/go1?id=21806445&rt=1714878006353&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25A6%2582%25E6%2582%25A8%25E6%259C%25AA%25E6%25BB%25BF%25E5%258D%2581%25E5%2585%25AB%25E6%25AD%25B2%25E6%2588%2596%25E7%2595%25B6%25E5%259C%25B0%25E6%25B3%2595%25E5%25BE%258B%25E8%25A8%25B1%25E5%258F%25AF%25E4%25B9%258B%25E5%25B9%25B4%25E9%25BD%25A1%25E3%2580%2581%25E4%25BA%25A6%25E6%2588%2596%25E8%2580%2585%25E6%2582%25A8%25E5%25B0%258D%25E6%259C%25AC%25E7%25AB%2599%25E5%2586%2585%25E5%25AE%25B9%25E5%258F%258D%25E6%2584%259F%25EF%25BC%258C&ing=1&ekc=&sid=1714878006353&tt=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&cu=http%253A%252F%252Fyinghua14.top%252F&pu=http%253A%252F%252Fwww.portmacau.com%252F
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21806445&rt=1714878006353&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25A6%2582%25E6%2582%25A8%25E6%259C%25AA%25E6%25BB%25BF%25E5%258D%2581%25E5%2585%25AB%25E6%25AD%25B2%25E6%2588%2596%25E7%2595%25B6%25E5%259C%25B0%25E6%25B3%2595%25E5%25BE%258B%25E8%25A8%25B1%25E5%258F%25AF%25E4%25B9%258B%25E5%25B9%25B4%25E9%25BD%25A1%25E3%2580%2581%25E4%25BA%25A6%25E6%2588%2596%25E8%2580%2585%25E6%2582%25A8%25E5%25B0%258D%25E6%259C%25AC%25E7%25AB%2599%25E5%2586%2585%25E5%25AE%25B9%25E5%258F%258D%25E6%2584%259F%25EF%25BC%258C&ing=1&ekc=&sid=1714878006353&tt=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&cu=http%253A%252F%252Fyinghua14.top%252F&pu=http%253A%252F%252Fwww.portmacau.com%252F HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 05 May 2024 03:00:06 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=99ce11491e7689737c0a780205261168d213131a4e60d38177dfa15bfb932bfd; Path=/; HttpOnly
acw_tc=ac11000117148780064803868e53684a8c0fac4c393410570ce0516755afe5;path=/;HttpOnly;Max-Age=1800
yinghua14.top/template/m1938/cpa/tz.js
404 Not Found 106 B URL GET HTTP/1.1 yinghua14.top/template/m1938/cpa/tz.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /template/m1938/cpa/tz.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 03:00:06 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: qq.com
X-Cache-Status: MISS
Content-Encoding: gzip
42188887.cc/img/SEOu/YfGsQR0qd.gif
73 kB URL GET 42188887.cc/img/SEOu/YfGsQR0qd.gif
IP
ASN #59371 Dimension Network & Communication Limited
Certificate IssuerGoDaddy.com, Inc.
Subjectapp2weimanode8.yb876.com
FingerprintB7:B5:BB:4B:D2:24:9E:EF:6D:C8:2E:CF:8F:B5:71:D4:07:CC:A5:8E
ValidityThu, 02 May 2024 03:22:01 GMT - Mon, 03 Jun 2024 06:24:49 GMT
File type GIF image data, version 89a, 960 x 60
Hash ea1818089c7b655cff9272c608fbdab4
a89aa8cf503752408ea355a86656ef5f544b2c1d
89b9b0054367d0999cd1936c773058e855e3686c2178cae57f078723754bb926
GET /img/SEOu/YfGsQR0qd.gif HTTP/1.1
Host: 42188887.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 03:00:06 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"143246-1710753569000"
Last-Modified: Mon, 18 Mar 2024 09:19:29 GMT
Expires: Mon, 20 May 2024 03:00:06 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip
Nginx-Cache: HIT, HIT
status.rapidssl.com/
471 B IP
Hash 32bfe69a43ba7faa92d90b2878c0b212
4c1cd7845682fc7cf5b43143703f603aaef09a16
0e4c18ae87f537a57197ff3f80ab65471baaee9d26427eee404a52eff3d54676
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6103
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Sun, 05 May 2024 03:00:07 GMT
Last-Modified: Sun, 05 May 2024 01:18:24 GMT
Server: ECAcc (amb/6B53)
X-Cache: HIT
Content-Length: 471
m1170.top/68a7807de3933bf7079116fa9df99e6f.gif
372 kB URL GET m1170.top/68a7807de3933bf7079116fa9df99e6f.gif
IP
Certificate IssuerLet's Encrypt
Subjectm1170.top
Fingerprint5C:AE:EA:6E:22:90:AF:20:2D:0A:72:D3:46:BD:EB:86:77:47:02:6D
ValidityMon, 25 Mar 2024 18:09:57 GMT - Sun, 23 Jun 2024 18:09:56 GMT
File type GIF image data, version 89a, 960 x 60
Size 372 kB (371825 bytes)
Hash b628d35b166cd75820e0bd342e61f667
8a58f7d5b365395cea9b6d9c8b2b421437c393d7
2038ad0819381f8c02b5091414d357df87adfc5e5a327b61cbf2973d72d6bca5
GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1
Host: m1170.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=2592000
content-encoding: gzip
content-type: image/gif
date: Sun, 05 May 2024 02:24:21 GMT
etag: W/"662ccb27-59ad0"
expires: Tue, 04 Jun 2024 02:24:21 GMT
last-modified: Sun, 05 May 2024 02:24:21 GMT
server: nginx
vary: Accept-Encoding
x-cache: HIT, server, disk
X-Firefox-Spdy: h2
yinghua14.top/template/m1938/cpa/tz.js
404 Not Found 106 B URL GET HTTP/1.1 yinghua14.top/template/m1938/cpa/tz.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /template/m1938/cpa/tz.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 03:00:08 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: qq.com
X-Cache-Status: MISS
Content-Encoding: gzip
hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=316989185&si=c8deb86c0ddf06f88ebe5afbc86500cf&su=http%3A%2F%2Fwww.portmacau.com%2F&v=1.3.0&lv=1&sn=23663&r=0&ww=1280&u=http%3A%2F%2Fyinghua14.top%2F&tt=%E6%A8%B1%E8%8A%B1%E5%BD%B1%E8%A7%86
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=316989185&si=c8deb86c0ddf06f88ebe5afbc86500cf&su=http%3A%2F%2Fwww.portmacau.com%2F&v=1.3.0&lv=1&sn=23663&r=0&ww=1280&u=http%3A%2F%2Fyinghua14.top%2F&tt=%E6%A8%B1%E8%8A%B1%E5%BD%B1%E8%A7%86
IP
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=316989185&si=c8deb86c0ddf06f88ebe5afbc86500cf&su=http%3A%2F%2Fwww.portmacau.com%2F&v=1.3.0&lv=1&sn=23663&r=0&ww=1280&u=http%3A%2F%2Fyinghua14.top%2F&tt=%E6%A8%B1%E8%8A%B1%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 05 May 2024 03:00:08 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=EF7202F226DF9573; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
cdn.sekio.top/k9-ky960x80.gif
200 OK 579 kB URL GET HTTP/1.1 cdn.sekio.top/k9-ky960x80.gif
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerSectigo Limited
Subjectcdn.sekio.top
Fingerprint5E:00:4C:89:B1:0E:68:45:3E:CC:50:9B:6B:86:8B:65:14:30:17:D3
ValidityTue, 31 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 80
Size 579 kB (579375 bytes)
Hash 0f72ad3adfe85c100129aa6795e426b7
1d21297cc9e037e28261cc452e74ecdadece456f
010fb5f955c41df27edab955aa4b91b021adc90daa72f04659828126fe4f5c11
GET /k9-ky960x80.gif HTTP/1.1
Host: cdn.sekio.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Sat, 02 Dec 2023 15:46:11 GMT
Etag: "0f72ad3adfe85c100129aa6795e426b7"
Content-Type: image/gif
Date: Tue, 16 Apr 2024 09:57:09 GMT
Server: tencent-cos
x-cos-hash-crc64ecma: 15402162106086210806
x-cos-request-id: NjYxZTRiNzVfZjg4ZjI3MDlfNTllOV80NzNjNTU4
Content-Length: 579375
Accept-Ranges: bytes
X-NWS-LOG-UUID: 11894488802003918501
Connection: keep-alive
X-Cache-Lookup: Cache Hit
Cache-Control: max-age=3600
js.users.51.la/21732387.js
200 OK 4.9 kB URL GET HTTP/1.1 js.users.51.la/21732387.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.users.51.la
Fingerprint8E:9F:59:98:28:F2:49:A9:E1:19:45:C2:49:ED:B2:F6:B8:E1:C6:39
ValidityFri, 14 Apr 2023 03:17:41 GMT - Wed, 15 May 2024 03:17:40 GMT
File type JavaScript source, ASCII text, with very long lines (4898), with no line terminators
Hash 69a8de63a87c56415f2c47b3a14aab3c
d6df00f43327b422c8918e2ea19c94c05524a905
3e289badd3ef1bc0b4f6c3e7bec132625cea7128f980c33b360ced78f99db5b8
GET /21732387.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 05 May 2024 03:00:08 GMT
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Ali-Swift-Global-Savetime: 1714878008
Via: cache17.l2de2[288,288,200-0,M], cache15.l2de2[289,0], ens-cache6.se2[312,311,200-0,M], ens-cache12.se2[313,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 05 May 2024 03:00:08 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62ca017148780082807100e
casisi119.vip/18/180180.gif
200 OK 246 kB URL GET HTTP/1.1 casisi119.vip/18/180180.gif
IP
Certificate IssuerLet's Encrypt
Subjectcasisi119.vip
Fingerprint6A:2B:45:44:C5:A8:D3:02:FE:E9:FB:BB:3B:E6:BE:0C:E4:D3:2C:E6
ValiditySat, 06 Apr 2024 05:52:03 GMT - Fri, 05 Jul 2024 05:52:02 GMT
File type GIF image data, version 89a, 100 x 100
Size 246 kB (245681 bytes)
Hash 8410d45b2bc678e3d3f6bace277f0194
a34fdab4212014ce03f99c3e15a7a29575e17015
ade534d1d48ad181eb469060240e069ed836e853d47a9c7ff49fb7c32eaf315c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /18/180180.gif HTTP/1.1
Host: casisi119.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 05 May 2024 03:00:08 GMT
Content-Type: image/gif
Content-Length: 245681
Connection: keep-alive
Last-Modified: Wed, 05 Jul 2023 18:14:43 GMT
ETag: "64a5b313-3bfb1"
Expires: Fri, 26 Apr 2024 04:26:43 GMT
Cache-Control: max-age=2592000
Via: mycdn
CDN-Cache: HIT
Accept-Ranges: bytes
loadimg.cdn-xxx.com/images/gif/88.gif
200 OK 219 kB URL GET HTTP/2 loadimg.cdn-xxx.com/images/gif/88.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-xxx.com
Fingerprint3B:63:53:AC:40:B2:C4:4B:37:61:1E:F8:DE:1C:3A:95:C2:AB:8B:DD
ValidityTue, 19 Mar 2024 20:12:51 GMT - Mon, 17 Jun 2024 20:12:50 GMT
File type RIFF (little-endian) data, Web/P image
Size 219 kB (218810 bytes)
Hash fbeb7e79063aa0c56040de40262fdaf5
e0dd1e196df183893ffc34eb1aca5ca5912e7768
68d48ab8f0bf436948da5caa7e4172206b7e997a2ad66ce5d1128c5cb73ae4f1
GET /images/gif/88.gif HTTP/1.1
Host: loadimg.cdn-xxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:00:08 GMT
content-type: image/webp
content-length: 218810
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=gif, origSize=628554
content-disposition: inline; filename="88.webp"
vary: Accept
etag: "63144b7b-9974a"
expires: Sun, 26 May 2024 02:56:34 GMT
last-modified: Sun, 04 Sep 2022 06:53:47 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 370917
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FHsoqr%2BiZz7BqtQ3cvjoL41IH%2BfYgy%2B1cIRkY3GjzNnmMo8qTBgcBB8dk0QTXlqA0jMNVDlI1DFrvIRhS0mGS2RFOMJzwjgZj%2FoIwqA63IRkP1jHoBNLol25t2DTykynxsmzbHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ed7a82f966b515-OSL
X-Firefox-Spdy: h2
gif.cdn-xxx.com/images/gif/82.gif
200 OK 65 kB URL GET HTTP/2 gif.cdn-xxx.com/images/gif/82.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcdn-xxx.com
Fingerprint3B:63:53:AC:40:B2:C4:4B:37:61:1E:F8:DE:1C:3A:95:C2:AB:8B:DD
ValidityTue, 19 Mar 2024 20:12:51 GMT - Mon, 17 Jun 2024 20:12:50 GMT
File type RIFF (little-endian) data, Web/P image
Hash 73a4658ca182ce2b9db84558d5db50d9
38136dec8c83c36e97da1c9b9081a693b5391aa3
9066678938135aad67edb9015099f6cfcfce6ebc0bd7e593d4487a7ee00d4001
GET /images/gif/82.gif HTTP/1.1
Host: gif.cdn-xxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:00:08 GMT
content-type: image/webp
content-length: 64932
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=gif, origSize=332578
content-disposition: inline; filename="82.webp"
vary: Accept
etag: "63144b63-51322"
expires: Sun, 26 May 2024 04:16:48 GMT
last-modified: Sun, 04 Sep 2022 06:53:23 GMT
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 1063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YrJLG%2FJ7qHn%2B5i1NGI8zi4MNy%2FRNnA6N0EAGGshkUWaWt%2FpTTf4AiGuGKmiqfVERgM4ckkfCOjQC5EGFJVC4NwGurXqU91R3N7vhLKYBeXok4VjN1OqzbTff4j6PFXijNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ed7a830db57131-OSL
X-Firefox-Spdy: h2
accessing.thecloudimages.com/file/p789801.gif
200 OK 184 kB URL GET HTTP/2 accessing.thecloudimages.com/file/p789801.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectaccessing.thecloudimages.com
FingerprintD8:EF:FE:19:36:24:37:99:EE:15:19:27:C0:6B:08:53:67:57:F0:05
ValidityMon, 01 Apr 2024 08:16:03 GMT - Sun, 30 Jun 2024 08:16:02 GMT
File type GIF image data, version 89a, 150 x 150
Size 184 kB (184507 bytes)
Hash 018b6a34e249ec5f57830a74bf238086
07c278b188004a36ff6ca81a5dd0c677c39dd7b8
48f500c6c3edfdcca5ff014aca91aaf428b0f14318ff0c92cce660ad40e5b2cf
GET /file/p789801.gif HTTP/1.1
Host: accessing.thecloudimages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:00:08 GMT
content-type: image/gif
content-length: 184507
last-modified: Thu, 19 Oct 2023 06:24:25 GMT
etag: "6530cb99-2d0bb"
expires: Fri, 31 May 2024 18:37:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 289330
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dSmPeviWK%2FTcKAhbTREQZN3GgP5SURCF1eBcAsbk0CQg4Sw%2F6vZeAqTFL8OnIzI4F9oyBv%2FsqX2CPFE51BFOz2Bn7t036wSby9f79x%2FSU%2FYwZ2AX5dXUelREwHvQpOXCZBgAmsxTZ1s1A7Pcaii%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed7a832ff91bfa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accessing.thecloudimages.com/file/x789801.gif
200 OK 255 kB URL GET HTTP/2 accessing.thecloudimages.com/file/x789801.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subjectaccessing.thecloudimages.com
FingerprintD8:EF:FE:19:36:24:37:99:EE:15:19:27:C0:6B:08:53:67:57:F0:05
ValidityMon, 01 Apr 2024 08:16:03 GMT - Sun, 30 Jun 2024 08:16:02 GMT
File type GIF image data, version 89a, 150 x 150
Size 255 kB (254807 bytes)
Hash 748fa6bc0423c81332735374c8ce1382
c3c054fa59e4f5541f27b539c21d9ed8a820756d
74f9897e3079d2ff2d4b90f1f53250ff1ca34dce75b1cb7dda4ca7e963f5a1c0
GET /file/x789801.gif HTTP/1.1
Host: accessing.thecloudimages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:00:08 GMT
content-type: image/gif
content-length: 254807
last-modified: Thu, 19 Oct 2023 06:24:26 GMT
etag: "6530cb9a-3e357"
expires: Fri, 31 May 2024 18:37:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 289330
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0HT3hJmOb3lLAZ7hQfBMCilPJgGuy3pfGelS8z25hD%2Fs9TCNCTtVqQPMa5DjeOI9Rlavd2GZmOIFiKW0FSKY5fhOu72WWbeqOIPHh%2FpJxFAqrIh5t7GP8ZKNT97kIqs8XkRtMk56MP9vVPUxz3TB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed7a8388111bfa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
imagedelivery.net/Kz7w6sM-tcFcT2aFx07o0w/d5135118-7c25-4491-78cf-05276e71ad00/public
200 OK 15 kB URL GET HTTP/2 imagedelivery.net/Kz7w6sM-tcFcT2aFx07o0w/d5135118-7c25-4491-78cf-05276e71ad00/public
IP
Certificate IssuerLet's Encrypt
Subjectimagedelivery.net
FingerprintEE:8E:09:E7:B9:DC:AF:EC:24:03:16:CC:B2:8E:68:96:17:97:0D:8F
ValiditySat, 27 Apr 2024 23:14:44 GMT - Fri, 26 Jul 2024 23:14:43 GMT
File type RIFF (little-endian) data, Web/P image
Hash 7076a1f7d121566b3e0aa090b16de4aa
7022144909ab2aa03149658d24cc88447409e3fd
8ac9c109bd142e58df0f058e063bb4f741e6ac1ff648f97aded9518a9c726ae8
GET /Kz7w6sM-tcFcT2aFx07o0w/d5135118-7c25-4491-78cf-05276e71ad00/public HTTP/1.1
Host: imagedelivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:00:08 GMT
content-type: image/webp
content-length: 15186
cf-ray: 87ed7a837beab4ff-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public,max-age=172800,stale-while-revalidate=7200
etag: "cfKvoTgkvtaAFL2OPXJANkC1u1jd5qBhL2PMzHT3n-DQ"
vary: Accept, Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-images: internal=ok/- q=0 n=42+96 c=1+13 v=2024.4.1 l=15186
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
warning: cf-images 299 "AVIF anim not supported"
x-content-type-options: nosniff
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.usertrust.com/
472 B IP
Hash 80af699e2c90d21eeecc28ca446f094a
a05ebf71071548a77b97242fb2a25a2f53dcdb62
49ba29b4292567dbe22402db47d7fe254fdf15a74bdace154dfaefb15845b6f2
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 02 May 2024 20:53:31 GMT
Expires: Thu, 09 May 2024 20:53:30 GMT
Etag: "a05ebf71071548a77b97242fb2a25a2f53dcdb62"
Cache-Control: max-age=602707,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 360
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ed7a83893756c6-OSL
ia.51.la/go1?id=21732387&rt=1714878008646&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25A6%2582%25E6%2582%25A8%25E6%259C%25AA%25E6%25BB%25BF%25E5%258D%2581%25E5%2585%25AB%25E6%25AD%25B2%25E6%2588%2596%25E7%2595%25B6%25E5%259C%25B0%25E6%25B3%2595%25E5%25BE%258B%25E8%25A8%25B1%25E5%258F%25AF%25E4%25B9%258B%25E5%25B9%25B4%25E9%25BD%25A1%25E3%2580%2581%25E4%25BA%25A6%25E6%2588%2596%25E8%2580%2585%25E6%2582%25A8%25E5%25B0%258D%25E6%259C%25AC%25E7%25AB%2599%25E5%2586%2585%25E5%25AE%25B9%25E5%258F%258D%25E6%2584%259F%25EF%25BC%258C&ing=1&ekc=&sid=1714878008646&tt=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&cu=http%253A%252F%252Fyinghua14.top%252F&pu=http%253A%252F%252Fwww.portmacau.com%252F
200 0 B URL GET HTTP/1.1 ia.51.la/go1?id=21732387&rt=1714878008646&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25A6%2582%25E6%2582%25A8%25E6%259C%25AA%25E6%25BB%25BF%25E5%258D%2581%25E5%2585%25AB%25E6%25AD%25B2%25E6%2588%2596%25E7%2595%25B6%25E5%259C%25B0%25E6%25B3%2595%25E5%25BE%258B%25E8%25A8%25B1%25E5%258F%25AF%25E4%25B9%258B%25E5%25B9%25B4%25E9%25BD%25A1%25E3%2580%2581%25E4%25BA%25A6%25E6%2588%2596%25E8%2580%2585%25E6%2582%25A8%25E5%25B0%258D%25E6%259C%25AC%25E7%25AB%2599%25E5%2586%2585%25E5%25AE%25B9%25E5%258F%258D%25E6%2584%259F%25EF%25BC%258C&ing=1&ekc=&sid=1714878008646&tt=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&cu=http%253A%252F%252Fyinghua14.top%252F&pu=http%253A%252F%252Fwww.portmacau.com%252F
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21732387&rt=1714878008646&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E5%25A6%2582%25E6%2582%25A8%25E6%259C%25AA%25E6%25BB%25BF%25E5%258D%2581%25E5%2585%25AB%25E6%25AD%25B2%25E6%2588%2596%25E7%2595%25B6%25E5%259C%25B0%25E6%25B3%2595%25E5%25BE%258B%25E8%25A8%25B1%25E5%258F%25AF%25E4%25B9%258B%25E5%25B9%25B4%25E9%25BD%25A1%25E3%2580%2581%25E4%25BA%25A6%25E6%2588%2596%25E8%2580%2585%25E6%2582%25A8%25E5%25B0%258D%25E6%259C%25AC%25E7%25AB%2599%25E5%2586%2585%25E5%25AE%25B9%25E5%258F%258D%25E6%2584%259F%25EF%25BC%258C&ing=1&ekc=&sid=1714878008646&tt=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&kw=%25E6%25A8%25B1%25E8%258A%25B1%25E5%25BD%25B1%25E8%25A7%2586&cu=http%253A%252F%252Fyinghua14.top%252F&pu=http%253A%252F%252Fwww.portmacau.com%252F HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 05 May 2024 03:00:08 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=2e4d2eec4770f9daff5986ad2507d71be3f46609851e46a79756e016a16c63a4; Path=/; HttpOnly
acw_tc=ac11000117148780087854040e53689d57cb3dfb46452f1df03b19cc727749;path=/;HttpOnly;Max-Age=1800
yinghua14.top/template/m1938/yhys/dh.js
200 OK 1.6 kB URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/dh.js
IP
ASN #133199 SonderCloud Limited
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a71c77653b94e1ebe3d623d732896c27
8d11c170dd676662ce305933125af8cd3384c59d
21623e19fb3d36a599be1a3291201251aff8c3d5f2c049b3ff24b4f0ba5e19c2
GET /template/m1938/yhys/dh.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:27:09 GMT
Vary: Accept-Encoding
ETag: W/"6634ca0d-439a"
Expires: Sun, 05 May 2024 14:57:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
ocsp.sectigochina.com/
600 B IP
Hash 4cfa91fdd72d3fbc735aa2c94f3fa8a9
72933eebacf39616b95343c3f063a9ac85ce6bcd
214b683f3d2fffe96747874871a8dfe47bb45723d33e2ed9ba1354d04a7d06e5
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:09 GMT
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Last-Modified: Sat, 04 May 2024 07:59:07 GMT
Expires: Sat, 11 May 2024 07:59:06 GMT
Etag: "72933eebacf39616b95343c3f063a9ac85ce6bcd"
Cache-Control: max-age=537172,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87ed7a858fb456b4-OSL
ocsp.sectigochina.com/
600 B IP
Hash 4cfa91fdd72d3fbc735aa2c94f3fa8a9
72933eebacf39616b95343c3f063a9ac85ce6bcd
214b683f3d2fffe96747874871a8dfe47bb45723d33e2ed9ba1354d04a7d06e5
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:09 GMT
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Last-Modified: Sat, 04 May 2024 07:59:07 GMT
Expires: Sat, 11 May 2024 07:59:06 GMT
Etag: "72933eebacf39616b95343c3f063a9ac85ce6bcd"
Cache-Control: max-age=537172,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87ed7a8588a9b4f1-OSL
img01.whatfugui.com:59888/img/covers/B7971B7A8654653E.jpg
200 OK 27 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/B7971B7A8654653E.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, height=867, bps=0, PhotometricInterpretation=RGB, width=1292], baseline, precision 8, 310x208, components 3
Hash 25505bff4afd7ece8b6190e87611a143
66f91dd2550e1389ebb37cda9025628ca030e7a6
c7fa6f43a20c60376ae0d48c950517ca0ce6783436067111b9cc1c6be2699ba0
GET /img/covers/B7971B7A8654653E.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:11 GMT
content-type: image/jpeg
content-length: 27294
last-modified: Mon, 31 Jul 2023 12:07:11 GMT
etag: "64c7a3ef-6a9e"
expires: Fri, 31 May 2024 12:18:41 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
5013a5dd49e3b932kg.yfhtbdn.com:8008/sc/2019?n=lqyxzaic
200 OK 9.8 kB URL GET HTTP/1.1 5013a5dd49e3b932kg.yfhtbdn.com:8008/sc/2019?n=lqyxzaic
IP
ASN #140224 STARCLOUD GLOBAL PTE., LTD.
Certificate IssuerCerSign Technology Limited
Subject*.peyadqb.com
Fingerprint3D:9C:DD:22:94:8D:8C:B9:51:CB:9F:C3:C1:14:29:B3:C5:C5:69:C5
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (9805), with CRLF line terminators
Hash 5e84b58173467f74e4d01d16b4b947de
eef9dda6f7ba256a3b2c54c41cb6e10ae1132b7f
5f706a77428fe5e2b761c56815f52a6346ad353fc9594545bdbb97ab05cf8951
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sc/2019?n=lqyxzaic HTTP/1.1
Host: 5013a5dd49e3b932kg.yfhtbdn.com:8008
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 05 May 2024 03:00:09 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Origin: *
Cache-Control: max-age=1800
Pragma: max-age=1800
img01.whatfugui.com:59888/img/covers/4AD5D879EFAEAEC2.jpg
200 OK 84 kB URL GET HTTP/2 img01.whatfugui.com:59888/img/covers/4AD5D879EFAEAEC2.jpg
IP
ASN #56046 China Mobile communications corporation
Certificate IssuerSectigo Limited
Subject*.whatfugui.com
Fingerprint5F:F2:DD:55:EC:7F:96:38:9E:6E:44:BF:55:79:25:A2:C5:92:0D:1E
ValidityWed, 24 Jan 2024 00:00:00 GMT - Thu, 23 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 310x208, components 3
Hash a10ac65fcb9f8b68c70385bf837516ba
cc9344effdbec2d382d2ce850d243f2e61050530
203b4148a5cc7606f58caf60566b907d825142a14ee01ed265a50afb30cad303
GET /img/covers/4AD5D879EFAEAEC2.jpg HTTP/1.1
Host: img01.whatfugui.com:59888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 02:52:11 GMT
content-type: image/jpeg
content-length: 83532
last-modified: Fri, 16 Sep 2022 19:44:21 GMT
etag: "6324d215-1464c"
expires: Sat, 13 Apr 2024 00:03:41 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
thumbs4.imagebam.com/94/6d/b4/MEQ0PZ3_t.gif
200 OK 2.2 MB URL GET HTTP/1.1 thumbs4.imagebam.com/94/6d/b4/MEQ0PZ3_t.gif
IP
ASN #50827 SpaceDump IT AB
Certificate IssuerGoGetSSL
Subject*.imagebam.com
FingerprintC5:CD:16:6E:B3:3F:39:C6:11:94:2C:AA:7F:3E:E6:2C:FC:68:07:8A
ValidityFri, 20 Oct 2023 00:00:00 GMT - Tue, 19 Nov 2024 23:59:59 GMT
File type GIF image data, version 89a, 250 x 250
Size 2.2 MB (2233398 bytes)
Hash 35fb13639051be37e30bce3d078c819b
42dee35ea9ce1c2ee0f3cd26c337a0da1531ce0b
a35f0b3e1356417a652bb6df751ed2fc948b6343b0532cd2131b0d0e6c182c55
GET /94/6d/b4/MEQ0PZ3_t.gif HTTP/1.1
Host: thumbs4.imagebam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx/1.22.1
date: Sun, 05 May 2024 03:00:09 GMT
content-type: image/gif
content-length: 2233398
vary: x-s-token
last-modified: Thu, 09 Nov 2023 11:24:38 GMT
etag: "221436-609b673055447"
x-cache: HIT
x-whom: srv1535
accept-ranges: bytes
yinghua14.top/template/m1938/yhys/qq1.js
200 OK 782 B URL GET HTTP/1.1 yinghua14.top/template/m1938/yhys/qq1.js
IP
ASN #133199 SonderCloud Limited
File type HTML document, Unicode text, UTF-8 text
Hash 69850da2e6b85fb87dcd4d12d9e971be
5397a75c965954bc951f76834258ce95d87101fb
3dc93c4ce337fd86a305732fff884baee710c259d0e7738c8aba2f585c09aa33
GET /template/m1938/yhys/qq1.js HTTP/1.1
Host: yinghua14.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 03 May 2024 11:33:33 GMT
Vary: Accept-Encoding
ETag: W/"6634cb8d-9e5"
Expires: Sun, 05 May 2024 14:58:15 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
Server: qq.com
X-Cache-Status: HIT
im.jk8.me/img/VutX/YhuQFIDtf.gif
1.4 MB URL GET im.jk8.me/img/VutX/YhuQFIDtf.gif
IP
ASN #59371 Dimension Network & Communication Limited
Certificate IssuerGoDaddy.com, Inc.
Subjectyj6.me
Fingerprint51:C9:FA:72:F7:2B:6A:04:FA:81:FC:49:E7:F4:A2:56:BE:8D:7C:E9
ValidityTue, 19 Dec 2023 08:18:57 GMT - Sun, 19 Jan 2025 08:18:57 GMT
File type GIF image data, version 89a, 1920 x 902
Size 1.4 MB (1358736 bytes)
Hash eb126db32cf16f211967bc2021152874
951b1bc9f577c6702215ab16e787de77e0151d9d
9933f942c5a19a02605b399f49ebbe79e9d56f0c61ddb45d25676c944469d562
GET /img/VutX/YhuQFIDtf.gif HTTP/1.1
Host: im.jk8.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 03:00:07 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"1361882-1712923383000"
Last-Modified: Fri, 12 Apr 2024 12:03:03 GMT
Expires: Mon, 20 May 2024 03:00:07 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Nginx-Cache: HIT, HIT
d.dtcchs.xyz/ty/sv?gp=b73fcRXGHgrGupzpcR7NkyvP2ToDR5Uoock1WoY1vROZx4udfSqBA+oAkLtpYibNqmGmtuPYd6nicg4anF3NKEXFYtAFDvQUEX7X+8y/5t6zIlYKthQE9gvvs3pVm+Z4TvfhQLfCw6Aps9FA9/FPCgCWnXRoI/0CwY9Fxb58wOQ91/9frnWp/ao+wrdGXw&u_fv=0&u_url=aHR0cCUzQSUyRiUyRnd3dy5wb3J0bWFjYXUuY29tJTJG&r_url=aHR0cCUzQSUyRiUyRnlpbmdodWExNC50b3AlMkY=&u_sw=1280&u_sh=1024&u_scd=24&plat=Linux%20x86_64&os=Linux%20x86_64&lang=en-US&enjc=11&u_bw=1280&u_bh=1024&iv=hnwxc.1714878008&u_utz=0&yd=ZGNjPSZkY2w9JmNwbj0mZ3ZkPSZncnI9JmN0PTEmZGlpdD0mZGl0PSZjbW49
200 OK 460 kB URL GET HTTP/2 d.dtcchs.xyz/ty/sv?gp=b73fcRXGHgrGupzpcR7NkyvP2ToDR5Uoock1WoY1vROZx4udfSqBA+oAkLtpYibNqmGmtuPYd6nicg4anF3NKEXFYtAFDvQUEX7X+8y/5t6zIlYKthQE9gvvs3pVm+Z4TvfhQLfCw6Aps9FA9/FPCgCWnXRoI/0CwY9Fxb58wOQ91/9frnWp/ao+wrdGXw&u_fv=0&u_url=aHR0cCUzQSUyRiUyRnd3dy5wb3J0bWFjYXUuY29tJTJG&r_url=aHR0cCUzQSUyRiUyRnlpbmdodWExNC50b3AlMkY=&u_sw=1280&u_sh=1024&u_scd=24&plat=Linux%20x86_64&os=Linux%20x86_64&lang=en-US&enjc=11&u_bw=1280&u_bh=1024&iv=hnwxc.1714878008&u_utz=0&yd=ZGNjPSZkY2w9JmNwbj0mZ3ZkPSZncnI9JmN0PTEmZGlpdD0mZGl0PSZjbW49
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectd.dayhtr.xyz
Fingerprint91:22:52:4C:17:97:CE:59:4A:AB:54:CF:4C:56:2F:CA:6E:6E:8D:A5
ValiditySat, 25 Nov 2023 11:26:42 GMT - Sun, 24 Nov 2024 11:26:41 GMT
Size 460 kB (460327 bytes)
Hash 1be7da254810b7968c4705fabd85887b
9798cb06ab371d8beaaefc06a88a9c379024b3b6
61ff4ad46dd4a317d1eec4d291c2f3732a312ae9b006bcdf02dd5b8409c4fd50
GET /ty/sv?gp=b73fcRXGHgrGupzpcR7NkyvP2ToDR5Uoock1WoY1vROZx4udfSqBA+oAkLtpYibNqmGmtuPYd6nicg4anF3NKEXFYtAFDvQUEX7X+8y/5t6zIlYKthQE9gvvs3pVm+Z4TvfhQLfCw6Aps9FA9/FPCgCWnXRoI/0CwY9Fxb58wOQ91/9frnWp/ao+wrdGXw&u_fv=0&u_url=aHR0cCUzQSUyRiUyRnd3dy5wb3J0bWFjYXUuY29tJTJG&r_url=aHR0cCUzQSUyRiUyRnlpbmdodWExNC50b3AlMkY=&u_sw=1280&u_sh=1024&u_scd=24&plat=Linux%20x86_64&os=Linux%20x86_64&lang=en-US&enjc=11&u_bw=1280&u_bh=1024&iv=hnwxc.1714878008&u_utz=0&yd=ZGNjPSZkY2w9JmNwbj0mZ3ZkPSZncnI9JmN0PTEmZGlpdD0mZGl0PSZjbW49 HTTP/1.1
Host: d.dtcchs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:00:08 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
imgsrc.baidu.com/forum/pic/item/0ff41bd5ad6eddc408a6b9ca7fdbb6fd526633b9.gif
200 OK 1.1 kB URL GET HTTP/2 imgsrc.baidu.com/forum/pic/item/0ff41bd5ad6eddc408a6b9ca7fdbb6fd526633b9.gif
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 4 x 4
Hash 845336ca80754d6c0cc00307d88520d1
2fba01f9b116d45af426591113289a532f0cb931
6723dd61debb18f765a49a7ea34875b8144c4eabed0892bfc1d142cccf3c0a7a
GET /forum/pic/item/0ff41bd5ad6eddc408a6b9ca7fdbb6fd526633b9.gif HTTP/1.1
Host: imgsrc.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sun, 05 May 2024 03:00:11 GMT
content-type: image/gif
content-length: 1103
access-control-allow-origin: *
etag: 845336ca80754d6c0cc00307d88520d1
expires: Tue, 04 Jun 2024 03:00:10 GMT
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
cooann.top/3a87920b4cee28032f50be4654642900.gif
305 kB URL GET cooann.top/3a87920b4cee28032f50be4654642900.gif
IP
Certificate IssuerLet's Encrypt
Subjectcooann.top
FingerprintA9:B2:45:84:BB:96:EB:00:F0:1B:11:ED:EF:99:AB:CF:29:06:42:BC
ValidityWed, 24 Apr 2024 23:39:14 GMT - Tue, 23 Jul 2024 23:39:13 GMT
File type gzip compressed data, from Unix
Size 305 kB (304918 bytes)
Hash 9494586ce06db010ca9e20d95c80fa43
451ca870fdb5bb1bf8add0042fcf6513bfeada9e
d077388c36f4073a7a4920e97a9c3918dfb2d2ea335202fc2af3f8be7f0efd12
GET /3a87920b4cee28032f50be4654642900.gif HTTP/1.1
Host: cooann.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=2592000
content-encoding: gzip
content-type: image/gif
date: Sun, 05 May 2024 00:14:24 GMT
etag: W/"6624fdc6-4afa8"
expires: Tue, 04 Jun 2024 00:14:24 GMT
last-modified: Sun, 05 May 2024 02:46:42 GMT
server: nginx
vary: Accept-Encoding
x-cache: HIT, server, memory
X-Firefox-Spdy: h2
ocsp.sectigochina.com/
600 B IP
Hash 694e8f6539d61acf80530b19a07b9e36
67318933ecc02d2b8a54c559052bd8f590961959
4202766a0ac668281f73be44073ceb964081800d3b0e02dcb226ce7c584e32a8
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 03:00:11 GMT
Content-Type: application/ocsp-response
Content-Length: 600
Connection: keep-alive
Last-Modified: Sat, 04 May 2024 13:03:54 GMT
Expires: Sat, 11 May 2024 13:03:53 GMT
Etag: "67318933ecc02d2b8a54c559052bd8f590961959"
Cache-Control: max-age=554021,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87ed7a91bcd756b4-OSL
picx.zhimg.com/v2-ccf7f85f786a68a0d696210fbabc040b
200 OK 116 kB URL GET HTTP/2 picx.zhimg.com/v2-ccf7f85f786a68a0d696210fbabc040b
IP
Certificate IssuerDigiCert Inc
Subject*.zhimg.com
FingerprintE7:3A:00:06:DF:93:E5:F9:95:01:2A:0E:94:4A:E6:7B:A4:C6:B6:B0
ValidityMon, 08 Jan 2024 00:00:00 GMT - Thu, 06 Feb 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Size 116 kB (116344 bytes)
Hash c89cf140b6fc73975ecec92b9d03b2d7
16527d013de3cda70ba16435ddf5ec086b8a5f1d
a973410d48b41229117a75b35b6c9110e61b691618a8e6660bb367f446ee102f
GET /v2-ccf7f85f786a68a0d696210fbabc040b HTTP/1.1
Host: picx.zhimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/webp
content-length: 116344
access-control-allow-origin: *
age: 1722608
cache-control: max-age=31536000
imagex-fmt: awebp2awebp
last-modified: Mon, 15 Apr 2024 04:30:05 GMT
nw-session-id: 2024041512300444AD9365D2799E5405B14cvpd02ff
nw-session-trace: 2024-04-15T12:30:05.136840365+08:00 230
server-timing: inner; dur=232
x-bdcdn-cache-status: TCP_HIT
x-length: 116344
x-powered-by: ImageX
x-request-id: 79308cef067bf659030670892b434d0c
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-response-date: Mon, 15 Apr 2024 12:30:05 GMT
x-tt-logid: 2024041512300444AD9365D2799E5405B1
x-tt-trace-host: 01700f10fc448551696beb31bf0f72b79f7f77ab20cc53078f6b9a50e2eb1c24142603c231ca959ca581460f897d6ce5837c9a2b4f5724c2683b92d8a2f1bb6213725b256fed6a44a68829547a1aa55fe22e3720367bd622933701ae4876466f450a9088feefc7f614402775e77948ef523fe40ddc949a82cc3f058828c11007bb
x-tt-trace-id: 20240415123004010173091050083C1782
x-tt-trace-tag: id=5
x-wavemesh-backendresp: 200 OK
date: Sun, 05 May 2024 03:00:11 GMT
via: cache08.oversea-GM-FRA6
X-Firefox-Spdy: h2
zhibo128x.xyz/18/180180.gif
200 OK 246 kB URL GET HTTP/1.1 zhibo128x.xyz/18/180180.gif
IP
Certificate IssuerLet's Encrypt
Subjectzhibo128x.xyz
Fingerprint67:A6:C6:63:35:88:F1:1A:13:2E:04:66:4B:FD:55:0A:1E:E1:37:79
ValidityMon, 04 Mar 2024 15:14:07 GMT - Sun, 02 Jun 2024 15:14:06 GMT
File type GIF image data, version 89a, 100 x 100
Size 246 kB (245681 bytes)
Hash 8410d45b2bc678e3d3f6bace277f0194
a34fdab4212014ce03f99c3e15a7a29575e17015
ade534d1d48ad181eb469060240e069ed836e853d47a9c7ff49fb7c32eaf315c
GET /18/180180.gif HTTP/1.1
Host: zhibo128x.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 05 May 2024 03:00:10 GMT
Content-Type: image/gif
Content-Length: 245681
Connection: keep-alive
Last-Modified: Wed, 05 Jul 2023 18:14:43 GMT
ETag: "64a5b313-3bfb1"
Expires: Sun, 05 May 2024 15:41:48 GMT
Cache-Control: max-age=2592000
Via: mycdn
CDN-Cache: HIT
Accept-Ranges: bytes
0511kc.saigmpl.com:8008/d/2019?t=0.2095623723091269
200 OK 1.1 kB URL GET HTTP/1.1 0511kc.saigmpl.com:8008/d/2019?t=0.2095623723091269
IP
ASN #140224 STARCLOUD GLOBAL PTE., LTD.
Certificate IssuerCerSign Technology Limited
Subject*.irwtghk.com
Fingerprint0F:43:4C:61:BE:1F:AF:34:F9:4C:2B:9B:91:68:D3:77:DC:68:47:17
ValidityTue, 19 Mar 2024 00:00:00 GMT - Mon, 17 Jun 2024 23:59:59 GMT
Hash 4640cea164215351f8728471bd3faea3
6f63d3bba1f66db193ff799f9d92d9e78efaf9a3
46e61c3a3a775a1c7ef15116df5dd00998f731216019cdf7126941a7adf679fe
GET /d/2019?t=0.2095623723091269 HTTP/1.1
Host: 0511kc.saigmpl.com:8008
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: http://yinghua14.top
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 05 May 2024 03:00:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Origin: *
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
zhibo128x.xyz/18/180180.gif
200 OK 246 kB URL GET HTTP/1.1 zhibo128x.xyz/18/180180.gif
IP
Certificate IssuerLet's Encrypt
Subjectzhibo128x.xyz
Fingerprint67:A6:C6:63:35:88:F1:1A:13:2E:04:66:4B:FD:55:0A:1E:E1:37:79
ValidityMon, 04 Mar 2024 15:14:07 GMT - Sun, 02 Jun 2024 15:14:06 GMT
File type GIF image data, version 89a, 100 x 100
Size 246 kB (245681 bytes)
Hash 8410d45b2bc678e3d3f6bace277f0194
a34fdab4212014ce03f99c3e15a7a29575e17015
ade534d1d48ad181eb469060240e069ed836e853d47a9c7ff49fb7c32eaf315c
GET /18/180180.gif HTTP/1.1
Host: zhibo128x.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 05 May 2024 03:00:11 GMT
Content-Type: image/gif
Content-Length: 245681
Connection: keep-alive
Last-Modified: Wed, 05 Jul 2023 18:14:43 GMT
ETag: "64a5b313-3bfb1"
Expires: Sun, 05 May 2024 15:41:48 GMT
Cache-Control: max-age=2592000
Via: mycdn
CDN-Cache: HIT
Accept-Ranges: bytes
5013a5dd49e3b932kcc.oiwlnlu.com:8008/d/2019?c=1&n=lqyxzaic
200 OK 21 B URL GET HTTP/1.1 5013a5dd49e3b932kcc.oiwlnlu.com:8008/d/2019?c=1&n=lqyxzaic
IP
ASN #140224 STARCLOUD GLOBAL PTE., LTD.
Certificate IssuerCerSign Technology Limited
Subject*.peyadqb.com
Fingerprint3D:9C:DD:22:94:8D:8C:B9:51:CB:9F:C3:C1:14:29:B3:C5:C5:69:C5
ValidityMon, 22 Apr 2024 00:00:00 GMT - Sun, 21 Jul 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 04e1a941422dc232954f88d4276c3fd2
71555e19b29f0f61fdeec7c366c5f1ccf9072f5f
0ca6774226f81a6d35d440c8a3dac1423784a73542e01ac3bb69047fb417270a
GET /d/2019?c=1&n=lqyxzaic HTTP/1.1
Host: 5013a5dd49e3b932kcc.oiwlnlu.com:8008
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 05 May 2024 03:00:13 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.31
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Pragma: max-age=0
imgsrc.baidu.com/forum/pic/item/e850352ac65c10384b48f8f9f4119313b07e89d2.gif
200 OK 586 kB URL GET HTTP/2 imgsrc.baidu.com/forum/pic/item/e850352ac65c10384b48f8f9f4119313b07e89d2.gif
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 640 x 200
Size 586 kB (586277 bytes)
Hash 23fe430f2d23d30667fcd714eee23203
532b9d1c15581ed95d911e1f6a29fe1945b70806
f09fe59d6e955f236100636ce5037256bf7003e0da532a730ff2943d5f96407f
GET /forum/pic/item/e850352ac65c10384b48f8f9f4119313b07e89d2.gif HTTP/1.1
Host: imgsrc.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sun, 05 May 2024 03:00:11 GMT
content-type: image/gif
content-length: 586277
access-control-allow-origin: *
etag: 23fe430f2d23d30667fcd714eee23203
expires: Tue, 04 Jun 2024 03:00:11 GMT
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
www.jyh88802.cc:2022/template/smt/ggtp/6.gif
0 B URL GET www.jyh88802.cc:2022/template/smt/ggtp/6.gif
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectwww.mry-1997.cc
Fingerprint92:B9:81:A5:41:98:3F:E6:87:50:77:EE:4C:ED:07:82:E4:B4:55:CE
ValiditySat, 20 Jan 2024 13:14:59 GMT - Tue, 18 Feb 2025 13:14:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /template/smt/ggtp/6.gif HTTP/1.1
Host: www.jyh88802.cc:2022
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
im.jk8.me/img/VutX/YYfPlc64t.gif
0 B URL GET im.jk8.me/img/VutX/YYfPlc64t.gif
IP
Certificate IssuerGoDaddy.com, Inc.
Subjectyj6.me
Fingerprint51:C9:FA:72:F7:2B:6A:04:FA:81:FC:49:E7:F4:A2:56:BE:8D:7C:E9
ValidityTue, 19 Dec 2023 08:18:57 GMT - Sun, 19 Jan 2025 08:18:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/VutX/YYfPlc64t.gif HTTP/1.1
Host: im.jk8.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 03:00:08 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"464410-1708758018000"
Last-Modified: Sat, 24 Feb 2024 07:00:18 GMT
Expires: Mon, 20 May 2024 03:00:08 GMT
Cache-Control: max-age=1296000
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Nginx-Cache: HIT, EXPIRED
pv.dakawm.cc/pv.php?op=pv&ext=b73fcRXGHgrGupzpcR7NkyvP2ToDR5Uoock1WoY1vROZx4udfSqBA+oAkLtpYibNqmGmtuPYd6nicg4anF3NKEXFYtAFDvQUEX7X+8y/5t6zIlYKthQE9gvvs3pVm+Z4TvfhQLfCw6Aps9FA9/FPCgCWnXRoI/0CwY9Fxb58wOQ91/9frnWp/ao+wrdGXw
200 OK 9 B URL GET HTTP/2 pv.dakawm.cc/pv.php?op=pv&ext=b73fcRXGHgrGupzpcR7NkyvP2ToDR5Uoock1WoY1vROZx4udfSqBA+oAkLtpYibNqmGmtuPYd6nicg4anF3NKEXFYtAFDvQUEX7X+8y/5t6zIlYKthQE9gvvs3pVm+Z4TvfhQLfCw6Aps9FA9/FPCgCWnXRoI/0CwY9Fxb58wOQ91/9frnWp/ao+wrdGXw
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectpv.dakawm.cc
Fingerprint27:D7:4A:70:3E:86:35:C0:D1:30:BA:E8:6A:42:4E:CC:C3:04:81:C1
ValidityThu, 02 May 2024 03:33:38 GMT - Sun, 01 Jun 2025 03:33:37 GMT
File type ASCII text, with no line terminators
Hash 7731cef4bf3d39d9965e8a81c27d68fa
e7d74baa2c0622135813dae0cbece8bbee3996fa
dbe20082027196a795667ffa6caa1d838a472e5f9de8deffdf0272b2a8aa2f72
GET /pv.php?op=pv&ext=b73fcRXGHgrGupzpcR7NkyvP2ToDR5Uoock1WoY1vROZx4udfSqBA+oAkLtpYibNqmGmtuPYd6nicg4anF3NKEXFYtAFDvQUEX7X+8y/5t6zIlYKthQE9gvvs3pVm+Z4TvfhQLfCw6Aps9FA9/FPCgCWnXRoI/0CwY9Fxb58wOQ91/9frnWp/ao+wrdGXw HTTP/1.1
Host: pv.dakawm.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://yinghua14.top
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:00:12 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
d.dtcchs.xyz/ty/09165644-CBA7-12340-34-22EDFF205DC2.61734
0 B URL GET d.dtcchs.xyz/ty/09165644-CBA7-12340-34-22EDFF205DC2.61734
IP
Certificate IssuerUnizeto Technologies S.A.
Subjectd.dayhtr.xyz
Fingerprint91:22:52:4C:17:97:CE:59:4A:AB:54:CF:4C:56:2F:CA:6E:6E:8D:A5
ValiditySat, 25 Nov 2023 11:26:42 GMT - Sun, 24 Nov 2024 11:26:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ty/09165644-CBA7-12340-34-22EDFF205DC2.61734 HTTP/1.1
Host: d.dtcchs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:00:07 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Sun, 05 May 2024 03:00:07 GMT
expires: Sun, 05 May 2024 03:15:07 GMT
cache-control: max-age=900
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
kpic.xn--czr93rxry.com/2024/01/23192157285.txt
200 OK 110 kB URL GET HTTP/2 kpic.xn--czr93rxry.com/2024/01/23192157285.txt
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerLet's Encrypt
Subject*.xn--czr93rxry.com
Fingerprint4D:2A:C3:C2:8C:BF:8C:8C:15:9E:AD:36:0D:C8:BA:2B:46:72:C5:D5
ValidityWed, 01 May 2024 08:10:09 GMT - Tue, 30 Jul 2024 08:10:08 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (110180 bytes)
Hash ab4aec4c1a07964f8281df64724af6ff
2cc0c38eb46bf9a5c1a3fcc3a0cfb34a9ed67e46
dcd40cbc933523c9dd82bacbeb2342ecd883aeff14d739b701e6119caad2ca01
GET /2024/01/23192157285.txt HTTP/1.1
Host: kpic.xn--czr93rxry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://yinghua14.top
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NgxFence
date: Sun, 05 May 2024 03:00:13 GMT
content-type: text/plain
last-modified: Tue, 23 Jan 2024 11:21:57 GMT
etag: W/"65afa155-1ae64"
expires: Wed, 20 Mar 2024 17:58:03 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?c8deb86c0ddf06f88ebe5afbc86500cf
200 OK 30 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?c8deb86c0ddf06f88ebe5afbc86500cf
IP
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type JavaScript source, ASCII text, with very long lines (620)
Hash 7c37ad6ed4c32a88a683f7cd5bf8c80d
1b26f254ed2c519991ce5f0d3549f0cc7590cd37
f622b0239259f3460462691e2f13ce6b7cebb1fd6cbfd47d18a0240f659cb33b
GET /hm.js?c8deb86c0ddf06f88ebe5afbc86500cf HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Sun, 05 May 2024 03:00:07 GMT
Etag: eaf736dc3bf5aa9be4768c1e3b6396e5
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=62BFB8C5A63AF25A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
200 OK 678 kB URL GET HTTP/2 p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
IP
ASN #4837 CHINA UNICOM China169 Backbone
Certificate IssuerDigiCert Inc
Subject*.toutiaoimg.com
FingerprintCB:21:8E:2E:42:E3:6B:FE:94:24:45:3C:0C:20:5A:F4:E4:EE:6D:66
ValidityFri, 30 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 270 x 160
Size 678 kB (677521 bytes)
Hash 94051cb1d1b77200b4462281a864b96e
e5b468a1b2f4bbdda1b6a3a0df2dcce6b3de7e06
d44d0d2dd188024b60ec38cb3f3ea10c080690175e923f90c9c2a2e862670c84
GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 03:00:07 GMT
content-type: image/gif
content-length: 677521
server: openresty
imagex-fmt: gif2gif
last-modified: Thu, 16 Nov 2023 11:25:21 GMT
nw-session-id: 202311161925213DED0BB3377CA6C26CA5wj6l402tt
nw-session-trace: 2023-11-16T19:25:21.402161021+08:00 145
x-bdcdn-cache-status: TCP_MISS
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 16 Nov 2023 19:25:21 GMT
x-tt-logid: 202311161925213DED0BB3377CA6C26CA5
via: CHN-HEshijiazhuang-AREACUCC6-CACHE16[3],CHN-HEshijiazhuang-AREACUCC6-CACHE35[0,TCP_HIT,1],CHN-HEshijiazhuang-GLOBAL1-CACHE82[35],CHN-HEshijiazhuang-GLOBAL1-CACHE35[0,TCP_HIT,33],CHN-HElangfang-GLOBAL7-CACHE4[6],CHN-HElangfang-GLOBAL7-CACHE81[0,TCP_HIT,4],n150-055-208
x-request-ip: fdbd:dc02:19:809::34
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT, edge;dur=3
x-tt-trace-host: 01e38e3224a7572d2d869e8d7593bb4ac184f5cb6bfb627a348bd157018203ebc6469222d34463b7e24c995972015c3749a1d9661dce4c28972b85dc463f107aa7b70b5d17ffcbe08cb4d7be208b184484dd8bd8a6bd9c19a467049d7fb7193d8c9badf269e3a660caf9409dd3e8426b577d51ec174cd0cc49146dd80a5d60a82f
x-response-lb: image
x-hcs-proxy-type: 1
x-ccdn-cachettl: 31536000
nginx-hit: 1
age: 908557
cache-control: max-age=31536000
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
simp712.top/c1b63913ca51e1dca32fc7807a646eb1.gif
0 B URL GET simp712.top/c1b63913ca51e1dca32fc7807a646eb1.gif
IP
Certificate IssuerLet's Encrypt
Subjectsimp712.top
Fingerprint30:7B:55:4D:55:A0:87:1C:13:86:47:A7:19:7D:E8:83:95:1E:C7:EE
ValidityTue, 30 Apr 2024 12:27:42 GMT - Mon, 29 Jul 2024 12:27:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c1b63913ca51e1dca32fc7807a646eb1.gif HTTP/1.1
Host: simp712.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://yinghua14.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=2592000
content-encoding: gzip
content-type: image/gif
date: Thu, 02 May 2024 10:47:21 GMT
etag: W/"64e9adaf-c0c2"
expires: Sat, 01 Jun 2024 10:47:21 GMT
last-modified: Fri, 03 May 2024 18:39:37 GMT
server: nginx
vary: Accept-Encoding
x-cache: HIT, server, disk
X-Firefox-Spdy: h2
206.238.208.153
14.215.182.161
66.232.4.87
104.27.195.88
172.64.149.23
212.63.223.226