r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10534
Expires: Fri, 13 Jan 2023 23:07:12 GMT
Date: Fri, 13 Jan 2023 20:11:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cab5b63e128895128726181aff42e42e
d39c36237554fcd41addec0664d7fe7f7d157c06
18e82a5b82eb8f2d8b49df824c336015f19367c5a05467ad139a56db59f88852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2250
Expires: Fri, 13 Jan 2023 20:49:08 GMT
Date: Fri, 13 Jan 2023 20:11:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64765d3d978fd74d7bc47d55d4f097cf
92eb3f0d55ba99be28105c0b28ef7dd456817f1f
761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12959
Expires: Fri, 13 Jan 2023 23:47:37 GMT
Date: Fri, 13 Jan 2023 20:11:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 19:48:52 GMT
content-type: application/json
age: 1366
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cuvKmQ5Ta/f2J4MLh6XaSXVswZ5my/mrXoJeGyzWIHBBALkla5zVo13rIDeBAOQq7h8K5W8mM4g=
x-amz-request-id: PZK3TMNQEJRPF6AC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 19:54:39 GMT
age: 1019
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 20:11:38 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
200 OK 17 kB URL HTTP/1.1 12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (321)
Hash 2d6494f7a80656bdd43a10b593e1e968
92738c00b76568aad15e99d0c51c8a926a9ca141
b569f2cb3b494540916a9a4c5f3c196f8e40f7eeee1d7d5946ac23842c6c741c
Analyzer Verdict Alert fortinet Malware
GET /down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 19:17:25 GMT
age: 3254
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4044
Cache-Control: max-age=136951
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 20:11:39 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 10:14:10 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
12803.url.tudown.com/template/company/duote-xiazai/css/jquery-ui.min.css
200 OK 8.9 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/jquery-ui.min.css
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (29165), with CRLF line terminators
Hash fd0bdc561b4f37fa8e4539d86c5fd0e4
663b932af8ef82dff4cfeb56351bd32853e54804
98161b22bc6e6613ecf1c230ff9664ba032c3abfe8d6a4079263f9daeb1829db
GET /template/company/duote-xiazai/css/jquery-ui.min.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:39 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:21:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e6d-7d6e"
Expires: Sat, 14 Jan 2023 08:11:39 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/js/orsxg5a.script
200 OK 531 B URL HTTP/1.1 12803.url.tudown.com/js/orsxg5a.script
IP
ASN #137951 Clayer Limited
File type HTML document, ASCII text, with CRLF line terminators
Hash 39fd4f4c17d424445d9f437c99c9d40a
84a56ab95c669d43c757a5f9a312d5f3a37f73fa
45f58e7b2e72c9f2734889b73ef5c3f2d3e1fb9ac69995afe1561ec4a7943d15
GET /js/orsxg5a.script HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nEOxQMVBbJC9GNlEG3GUvg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jPdhyiJCfODRcCY89arjGUs1coQ=
12803.url.tudown.com/template/company/duote-xiazai/css/message.css
200 OK 1.6 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/message.css
IP
ASN #137951 Clayer Limited
Hash 90d699f8127fe2e7210c0f31f0b90bb0
245191b7026614b76c7234e8e82724d463d4adf1
50d4eaf1d089edb739f43068f78330d22700b47f9ea8acb14fa5606637aeaf23
GET /template/company/duote-xiazai/css/message.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:21:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e6d-17a8"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/css/teach.css
200 OK 4.1 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/teach.css
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (499)
Hash 16ca38b11b525a142c6086c2c2802545
88ed9d1c7088344b24f18132ad025ed63623bb7e
c7d5eef240fb383c039b0141854336a78a07597b0bff022ae71514e913351d7a
GET /template/company/duote-xiazai/css/teach.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:21:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e70-503f"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
200 OK 8.6 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
IP
ASN #137951 Clayer Limited
Hash 952b2841668e8303c2ee8bc817394790
1e7d159d8d75df0112f06eedab3ecd62b7075a52
51c463da96c71adce2a234968d1e46949fa82804f680861cb6562da84239e209
GET /template/company/duote-xiazai/css/soft.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:21:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e6e-a090"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/css/scrollbar.css
200 OK 353 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/scrollbar.css
IP
ASN #137951 Clayer Limited
Hash 6fc35ccb15b461bc6b549a85ea398894
21581ad4fc3db4acc99bb2fb4ed2fde1dfa50049
8d88f6d1d76a2cf300e9378742dc29f48060c9747cfdeb6b05050cf25cc5ebfb
GET /template/company/duote-xiazai/css/scrollbar.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Content-Length: 353
Last-Modified: Sun, 06 Nov 2022 08:21:02 GMT
Connection: keep-alive
ETag: "63676e6e-161"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
12803.url.tudown.com/template/company/duote-xiazai/css/scrollStyle.css
404 Not Found 146 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/scrollStyle.css
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /template/company/duote-xiazai/css/scrollStyle.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
12803.url.tudown.com/template/company/duote-xiazai/css/global.css
200 OK 7.6 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/global.css
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (710)
Hash b2502d4c36bc519e47bce519ffb3a295
d252dd5c34dbd231f5c120d8f45ded16e0aa3f4c
10bec4c97bde3cac4a43e4d86604e1ff2c54926ec350419e404435f0616d1a1a
GET /template/company/duote-xiazai/css/global.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:20:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e6b-935f"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
bdcode.2345.com/source/g/common/by/ht_jy_qx.js
200 OK 2.1 kB URL HTTP/1.1 bdcode.2345.com/source/g/common/by/ht_jy_qx.js
IP
File type ASCII text, with very long lines (5138), with no line terminators
Hash ada063f7374a4bd3db4d51b52a6ffcb6
c3f2c2a1a1f0df758f2d96e18b949421f275b7e5
f26d36b95ecd67b518a0b0f2ba7789bb25a96030c2dc164461b0e9e4350bb2cc
Analyzer Verdict Alert fortinet Malware
GET /source/g/common/by/ht_jy_qx.js HTTP/1.1
Host: bdcode.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 2142
Connection: keep-alive
Cache-Control: max-age=14400
Content-Encoding: gzip
Expires: Sat, 14 Jan 2023 00:11:40 GMT
Last-Modified: Wed, 11 Jan 2023 16:31:43 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
YJS-ID: c0e7a6da4b4237e8-143
Server: yunjiasu
bdcode.2345.com/common/xsoa-r/openjs/pu/ao.js
200 OK 2.1 kB URL HTTP/1.1 bdcode.2345.com/common/xsoa-r/openjs/pu/ao.js
IP
File type ASCII text, with very long lines (5137), with no line terminators
Hash 4c59c7e8aad989ada00b702df95ccac7
be6b40f8afd7d67092e646f74af292a2da5c16a2
16ec631c00d91b9341f53361f3db1a26cc73ecb40f31dbca10eaf448f047144c
Analyzer Verdict Alert fortinet Malware
GET /common/xsoa-r/openjs/pu/ao.js HTTP/1.1
Host: bdcode.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 2139
Connection: keep-alive
Cache-Control: max-age=3600
Content-Encoding: gzip
Expires: Fri, 13 Jan 2023 21:11:40 GMT
Last-Modified: Wed, 11 Jan 2023 16:31:43 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
YJS-ID: c0e7a6da671a37e3-143
Server: yunjiasu
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b690db27e489d93de5ef093aa14e94cc
bfde72a2eee1aac4dcc08d050c4b995cfec1de13
2d0244c10f78aacb493adc000f659f11393483ee956adb25f378634a2b843951
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Tue, 17 Jan 2023 17:48:37 GMT
ETag: "bfde72a2eee1aac4dcc08d050c4b995cfec1de13"
Last-Modified: Fri, 13 Jan 2023 17:48:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3053
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7890c8499ff9b51e-OSL
12803.url.tudown.com/template/company/duote-xiazai/css/index.css
200 OK 3.6 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/index.css
IP
ASN #137951 Clayer Limited
Hash fbfd831dee308c5094076e0b4022a222
fa69c04bf3f0c911d2b1697717e05706362f0c57
ab5a9d33745256917eb22abecd3d8ed4790e612720f2a743206d00b85aa5ff4f
GET /template/company/duote-xiazai/css/index.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:21:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e6c-42b3"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/js/duotecommon_top.js
200 OK 799 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/duotecommon_top.js
IP
ASN #137951 Clayer Limited
Hash ac93d373f5090fbc3e8a7152aab7170d
160c0bc3072bccced250979b7999ae060941eb06
e15e1cefcdcd40db68eecbd7a02af32a8a97e5749791b07b434f8454408c1570
GET /template/company/duote-xiazai/js/duotecommon_top.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e96-a0b"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/js/super_slider.js
200 OK 741 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/super_slider.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (1844)
Hash 64d8d6bbbe2129e883c5af163b76600d
5c0f7df223f7f0ca25cc5c8247ae8b8f0cae4805
66f01728ee43d433d4fd4c0409354667cc543ae51cd362376d3f053da321369b
GET /template/company/duote-xiazai/js/super_slider.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676ea0-763"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/js/index.js
200 OK 2.3 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/index.js
IP
ASN #137951 Clayer Limited
File type Unicode text, UTF-8 text, with very long lines (8638)
Hash a1f3815ea981db7480ca3c4d5d54aac6
f3961cccb17dc2190e2a8c249d936d0b1185fd7e
7adb4d2ea2856125d829deeabfc70e92f87a5e50f84187ed8d570b810c807d6f
GET /template/company/duote-xiazai/js/index.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e97-223b"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash d611e649e138d81ca6cb6658561dfa34
74db60310006b15d9814626a32a102e6c051e9ed
f648a2f552b3425274287bac44a88f639420356d0389695ff45a3c780c3d8455
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 13 Jan 2023 20:11:40 GMT
Last-Modified: Fri, 13 Jan 2023 07:12:31 GMT
ETag: "63c1045f-1d7"
Expires: Sun, 15 Jan 2023 07:12:31 GMT
Cache-Control: max-age=126051
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1673640700
Via: cache21.l2de2[4,3,200-0,M], cache21.l2de2[6,0], cache4.nl2[12,12,200-0,M], cache4.nl2[13,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:40 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309816736407006427275e
12803.url.tudown.com/template/company/duote-xiazai/js/soft_comment.js
200 OK 1.4 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/soft_comment.js
IP
ASN #137951 Clayer Limited
Hash 33db5499343abb12f6c7d980cfdf5af0
ca9f7d2be1dd0f229f709b2effd22d57413fc7d4
3ca1208b56597372cccafd9817375f08e7e85ab84b310cb882ff8a76bac1c388
GET /template/company/duote-xiazai/js/soft_comment.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676ea0-f1c"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
ocsp.trust-provider.cn/
200 OK 599 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash c88329ea42c15130f3b7163aea5229bd
e8983928c301e7031ede02457f16db1995aeeb2b
4a1e20f947b2deb338dcadd91f0fa9f977c6213b248f5d6a2fa6f54c334c2af5
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Fri, 13 Jan 2023 19:44:13 GMT
last-modified: Tue, 10 Jan 2023 16:54:59 GMT
expires: Tue, 17 Jan 2023 16:54:58 GMT
etag: "e8983928c301e7031ede02457f16db1995aeeb2b"
cache-control: max-age=602887,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 7890a01599cd5c38-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1673639053
via: cache2.l2de2[0,0,304-0,H], cache2.l2de2[0,0], cache3.se1[0,0,200-0,H], cache4.se1[1,0], cache8.se1[3,0]
age: 1647
x-cache: HIT TCP_MEM_HIT dirn:1:299013577
x-swift-savetime: Fri, 13 Jan 2023 19:46:31 GMT
x-swift-cachetime: 1662
timing-allow-origin: *, *
eagleid: 2ff62c9c16736407006803767e, 2ff62c9c16736407006803767e
ocsp.trust-provider.cn/
200 OK 599 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash c88329ea42c15130f3b7163aea5229bd
e8983928c301e7031ede02457f16db1995aeeb2b
4a1e20f947b2deb338dcadd91f0fa9f977c6213b248f5d6a2fa6f54c334c2af5
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Fri, 13 Jan 2023 19:44:13 GMT
last-modified: Tue, 10 Jan 2023 16:54:59 GMT
expires: Tue, 17 Jan 2023 16:54:58 GMT
etag: "e8983928c301e7031ede02457f16db1995aeeb2b"
cache-control: max-age=602887,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 7890a01599cd5c38-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1673639053
via: cache2.l2de2[0,0,304-0,H], cache15.l2de2[1,0], cache4.se1[0,0,200-0,H], cache4.se1[1,0], cache8.se1[2,0]
age: 1647
x-cache: HIT TCP_MEM_HIT dirn:8:862686662
x-swift-savetime: Fri, 13 Jan 2023 19:46:31 GMT
x-swift-cachetime: 1662
timing-allow-origin: *, *
eagleid: 2ff62c9c16736407006813768e, 2ff62c9c16736407006813768e
ocsp.trust-provider.cn/
200 OK 599 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash c88329ea42c15130f3b7163aea5229bd
e8983928c301e7031ede02457f16db1995aeeb2b
4a1e20f947b2deb338dcadd91f0fa9f977c6213b248f5d6a2fa6f54c334c2af5
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Fri, 13 Jan 2023 19:44:13 GMT
last-modified: Tue, 10 Jan 2023 16:54:59 GMT
expires: Tue, 17 Jan 2023 16:54:58 GMT
etag: "e8983928c301e7031ede02457f16db1995aeeb2b"
cache-control: max-age=602887,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb4
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 7890a01599cd5c38-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1673639053
via: cache2.l2de2[0,0,304-0,H], cache15.l2de2[1,0], cache4.se1[0,0,200-0,H], cache4.se1[0,0], cache5.se1[5,0]
age: 1647
x-cache: HIT TCP_MEM_HIT dirn:8:862686662
x-swift-savetime: Fri, 13 Jan 2023 19:46:31 GMT
x-swift-cachetime: 1662
timing-allow-origin: *, *
eagleid: 2ff62c9916736407006828956e, 2ff62c9916736407006828956e
12803.url.tudown.com/template/company/duote-xiazai/js/clickdown_stat_ajax.js
200 OK 577 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/clickdown_stat_ajax.js
IP
ASN #137951 Clayer Limited
Hash d2fd0ff89c3e773f8cfb6e5e57ae2909
537114b9b969f30770ba619a17d217bb69efb759
9665a3c5c2aa7e032819815b24dccc0dd5fbfbbef8876d7d42dfe2751e06d8f7
GET /template/company/duote-xiazai/js/clickdown_stat_ajax.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e96-57a"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/js/jquery.min.js
200 OK 37 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/jquery.min.js
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d4e282e0e1e69d378568eac0d45bfd24
8b62528373788e473676aa025a72aae45ec17d01
b5bbdf5ae69bfc2b39919ac018f41b27efac22f98ab92848db65022eb03dfd12
GET /template/company/duote-xiazai/js/jquery.min.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e99-16f44"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/js/new_global.js
200 OK 592 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/new_global.js
IP
ASN #137951 Clayer Limited
Hash 232fd4a41f68cb95c02a365b6aca84e9
4d17747184f32abc1b922759c510bdbab4eccedd
0d50c1f4db8f330ef99775e40dadb29b531eb33314540560567b1f2623d4885e
GET /template/company/duote-xiazai/js/new_global.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e9d-685"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/js/keyword_new.js
200 OK 63 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/keyword_new.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with no line terminators
Hash 827609f4f6b6dbef37e7bbb2c6cb8535
09929f83133df43c4ec28623065e3af7647a1f11
f7f82084b7a593e189a56487ea3179a61e6d8c93ec6ffdfada18e8c5e8863375
GET /template/company/duote-xiazai/js/keyword_new.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Content-Length: 63
Last-Modified: Sun, 06 Nov 2022 08:21:47 GMT
Connection: keep-alive
ETag: "63676e9b-3f"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7aacfc63418f7d03ad3fde3dcd01cd72
cdf642213ff9a4743c6032af9e7279a407a15e42
be0ffd8bac8686d620ce6953e7c951c5e47394df152f0d2cd4c00eab689f361c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE0FFD8BAC8686D620CE6953E7C951C5E47394DF152F0D2CD4C00EAB689F361C"
Last-Modified: Thu, 12 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16990
Expires: Sat, 14 Jan 2023 00:54:50 GMT
Date: Fri, 13 Jan 2023 20:11:40 GMT
Connection: keep-alive
union2.50bang.org/js/duoteall
200 OK 370 B URL HTTP/1.1 union2.50bang.org/js/duoteall
IP
ASN #138950 Jiangsu Wuxi International IDC network
File type ASCII text, with very long lines (370), with no line terminators
Hash 8013b951880b7be9d1fb916cd39fd687
4e650e759d664bf7af503e9462afec3833b57a10
6a7124ad7c0c17bd57e02729f5cb78ccbb0643a9a6e6e346fc21ed4a22d455f4
GET /js/duoteall HTTP/1.1
Host: union2.50bang.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Length: 370
s5.cnzz.com/z_stat.php?id=1277770517&web_id=1277770517
200 OK 20 B URL HTTP/2 s5.cnzz.com/z_stat.php?id=1277770517&web_id=1277770517
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /z_stat.php?id=1277770517&web_id=1277770517 HTTP/1.1
Host: s5.cnzz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 20
date: Fri, 13 Jan 2023 19:36:29 GMT
vary: Accept-Encoding
x-powered-by: PHP/5.5.25
last-modified: Fri, 13 Jan 2023 19:36:29 GMT
cache-control: max-age=1800,s-maxage=3600
content-encoding: gzip
ali-swift-global-savetime: 1673638589
via: cache80.l2cn3032[0,0,200-0,H], cache62.l2cn3032[1,0], ens-cache32.cn4461[0,0,200-0,H], ens-cache18.cn4461[0,0]
age: 2111
x-cache: HIT TCP_MEM_HIT dirn:9:255320622
x-swift-savetime: Fri, 13 Jan 2023 19:36:31 GMT
x-swift-cachetime: 3598
timing-allow-origin: *
eagleid: 968a62a616736407008175208e
X-Firefox-Spdy: h2
img4.duote.com/duoteimg/dtnew_assets/pc/js/searchCode/transcoding.js
200 OK 895 B URL HTTP/2 img4.duote.com/duoteimg/dtnew_assets/pc/js/searchCode/transcoding.js
IP
Hash f8f676d38231dad63dfc1144b4739051
978c21f9675780eb755412efc1ddc8fe098c5d7f
2ab62b8459e616fbc36456facba7af14984e90a3a5522a317d46cdb6f133f871
GET /duoteimg/dtnew_assets/pc/js/searchCode/transcoding.js HTTP/1.1
Host: img4.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/x-javascript
content-length: 895
date: Thu, 08 Dec 2022 06:30:46 GMT
x-oss-request-id: 63918496AFFD703338923AEB
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "4C7F46FF62D37B2CC7456F8F9EB96611"
last-modified: Thu, 10 Sep 2020 02:00:56 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13670043018340852857
x-oss-storage-class: Standard
x-oss-meta-mode: 33188
x-oss-meta-mtime: 1599017058
x-oss-expiration: expiry-date="Fri, 11 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
vary: Accept-Encoding
content-md5: TH9G/2LTeyzHRW+PnrlmEQ==
x-oss-server-time: 24
content-encoding: gzip
ali-swift-global-savetime: 1670481046
via: cache8.l2cn3037[0,0,200-0,H], cache8.l2cn3037[1,0], ens-vcache24.cn5274[0,0,200-0,H], ens-vcache9.cn5274[1,0]
age: 3159654
x-cache: HIT TCP_MEM_HIT dirn:12:169637919
x-swift-savetime: Sun, 01 Jan 2023 07:02:50 GMT
x-swift-cachetime: 13476476
timing-allow-origin: *
eagleid: deba119c16736407008241058e
X-Firefox-Spdy: h2
12803.url.tudown.com/template/company/duote-xiazai/js/scrollbar.js
200 OK 738 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/scrollbar.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (1755)
Hash 941e223b206b2f389ba88e5c62146e05
1ea47333441413a3afd2fbc6e335810513cd3b5f
c0034343dbd842fc5ba9dfae6be7145ec000eb017fc0ca9a7fd6e245811df660
GET /template/company/duote-xiazai/js/scrollbar.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e9e-707"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/css/news.css
200 OK 1.5 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/css/news.css
IP
ASN #137951 Clayer Limited
Hash 4d5f155ee78bab18dd989f8fedda8ebc
d3e3353e7a3da786e2a1342ca13407fd432e3398
6754cc7b30008e41d53b0ebfb6b52a0c59712348880d235a77a07c3af02d9886
GET /template/company/duote-xiazai/css/news.css HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: text/css
Last-Modified: Sun, 06 Nov 2022 08:21:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e6d-16fd"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
img4.duote.com/duoteimg/js/front_ad.js
200 OK 0 B URL HTTP/2 img4.duote.com/duoteimg/js/front_ad.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /duoteimg/js/front_ad.js HTTP/1.1
Host: img4.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 0
date: Thu, 12 Jan 2023 14:15:38 GMT
x-oss-request-id: 63C0160AD2368136310F1F13
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "D41D8CD98F00B204E9800998ECF8427E"
last-modified: Wed, 02 Sep 2020 01:55:56 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 0
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Thu, 03 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: 1B2M2Y8AsgTpgAmY7PhCfg==
ali-swift-global-savetime: 1673532938
via: cache8.l2cn3037[0,0,200-0,H], cache17.l2cn3037[1,0], ens-vcache22.cn5274[0,0,200-0,H], ens-vcache9.cn5274[1,0]
age: 107762
x-cache: HIT TCP_MEM_HIT dirn:9:131780256
x-swift-savetime: Fri, 13 Jan 2023 05:19:47 GMT
x-swift-cachetime: 15497751
timing-allow-origin: *
eagleid: deba119c16736407008681072e
X-Firefox-Spdy: h2
img1.2345.com/duoteimg/js/base64.js?_vtim=2014122301
404 Not Found 146 B URL HTTP/2 img1.2345.com/duoteimg/js/base64.js?_vtim=2014122301
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /duoteimg/js/base64.js?_vtim=2014122301 HTTP/1.1
Host: img1.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: Tengine
content-type: text/html; charset=gb2312
content-length: 146
date: Fri, 13 Jan 2023 20:11:40 GMT
ali-swift-global-savetime: 1673640700
via: cache78.l2cn3037[15,15,404-1280,M], cache44.l2cn3037[16,0], cache44.l2cn3037[16,0], ens-vcache18.cn5274[68,68,404-1280,M], ens-vcache7.cn5274[70,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Fri, 13 Jan 2023 20:11:40 GMT
x-swift-cachetime: 1
x-swift-error: orig response 4XX error
timing-allow-origin: *
eagleid: deba119a16736407008216269e
X-Firefox-Spdy: h2
img4.duote.com/duoteimg/dtnew_assets/pc/js/soft/auto_complete.js
200 OK 1.0 kB URL HTTP/2 img4.duote.com/duoteimg/dtnew_assets/pc/js/soft/auto_complete.js
IP
Hash 8c6a6de562181b71d2867e2711f31df9
6e3aed7b36431b15293f6a3a1c66567a6fec5334
f65233dc7f87033f78a736238467c78ce1973af259b67f932c285a0f180174ee
GET /duoteimg/dtnew_assets/pc/js/soft/auto_complete.js HTTP/1.1
Host: img4.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 1015
date: Wed, 19 Oct 2022 02:18:07 GMT
vary: Accept-Encoding
x-oss-request-id: 634F5E5F9F5C5134319809A9
x-oss-cdn-auth: success
last-modified: Wed, 19 Oct 2022 02:15:25 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3181168464323094172
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Thu, 20 Oct 2022 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: CAEQVRiBgICaq4y4nxgiIDJjNjljMDkwMWY0MjQ4N2JhZTA2NmEwOWJkZmNhMWYx
content-md5: 5qfmF/GrELbus726BAkyLQ==
x-oss-server-time: 11
content-encoding: gzip
ali-swift-global-savetime: 1666145887
via: cache71.l2cn3037[0,0,200-0,H], cache1.l2cn3037[1,0], ens-vcache29.cn5274[0,0,200-0,H], ens-vcache9.cn5274[1,0]
age: 7494813
x-cache: HIT TCP_MEM_HIT dirn:11:296498382
x-swift-savetime: Sun, 01 Jan 2023 07:31:10 GMT
x-swift-cachetime: 9139617
timing-allow-origin: *
eagleid: deba119c16736407009061082e
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash d611e649e138d81ca6cb6658561dfa34
74db60310006b15d9814626a32a102e6c051e9ed
f648a2f552b3425274287bac44a88f639420356d0389695ff45a3c780c3d8455
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 13 Jan 2023 20:11:41 GMT
Last-Modified: Fri, 13 Jan 2023 07:12:31 GMT
ETag: "63c1045f-1d7"
Expires: Sun, 15 Jan 2023 07:12:31 GMT
Cache-Control: max-age=126050
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1673640701
Via: cache1.l2de2[461,460,200-0,M], cache1.l2de2[462,0], cache8.nl2[468,468,200-0,M], cache8.nl2[469,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309c16736407006321354e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash d611e649e138d81ca6cb6658561dfa34
74db60310006b15d9814626a32a102e6c051e9ed
f648a2f552b3425274287bac44a88f639420356d0389695ff45a3c780c3d8455
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 13 Jan 2023 20:11:41 GMT
Ali-Swift-Global-Savetime: 1673640701
Via: cache3.l2de2[467,467,200-0,M], cache3.l2de2[468,0], cache5.nl2[475,474,200-0,M], cache5.nl2[478,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309916736407006477785e
12803.url.tudown.com/template/company/duote-xiazai/js/jquery-ui.min.js
200 OK 80 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/js/jquery-ui.min.js
IP
ASN #137951 Clayer Limited
File type ASCII text, with very long lines (32074), with CRLF line terminators
Hash e81ec1034a64ade1aa8b290326108e91
67aa74b0a4d0039f59acacca2ee6eee5ebaa312e
825cd708c0562c4b038d007351af36e0c4b34a32c0a1e8fd5852206417cbf94e
GET /template/company/duote-xiazai/js/jquery-ui.min.js HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:40 GMT
Content-Type: application/javascript
Last-Modified: Sun, 06 Nov 2022 08:21:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63676e99-3def1"
Expires: Sat, 14 Jan 2023 08:11:40 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
12803.url.tudown.com/template/company/duote-xiazai/images/stars.png
200 OK 409 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/stars.png
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 513adea23e19785779ef24441cbdb356
acaf0cd2ec302562b27850b970523d96ac5a120c
b78bf1490ecfe58446b32e59b0e6505d2d18f75f8676809753830b66a8dee298
GET /template/company/duote-xiazai/images/stars.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/global.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 409
Last-Modified: Sun, 06 Nov 2022 08:21:35 GMT
Connection: keep-alive
ETag: "63676e8f-199"
Accept-Ranges: bytes
12803.url.tudown.com/uploads/images/843280.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/843280.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/843280.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=2726795237,2395944025&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/327964.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/327964.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/327964.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1972996059,3553985259&fm=253&fmt=auto&app=138&f=JPEG?w=502&h=500
www.2345.com/js/index/activity/20171111/widget.min.js
301 Moved Permanently 262 B URL HTTP/1.1 www.2345.com/js/index/activity/20171111/widget.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 72fa0fca20c82853e6dbbc1f13c78100
4e9b01e3ad0b56c9409bb02e5700430792fecacd
4555de589ff9b307e20c708d6f112bc47bb377df29ff0a5914f8fb0932926887
GET /js/index/activity/20171111/widget.min.js HTTP/1.1
Host: www.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: text/html
Content-Length: 262
Connection: keep-alive
Location: https://www.2345.com/js/index/activity/20171111/widget.min.js
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Via: cache5.se1[,0]
Timing-Allow-Origin: *
EagleId: 2ff62c9916736407012971608e
12803.url.tudown.com/uploads/images/272432.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/272432.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/272432.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500
img4.duote.com/duoteimg/js/baidu_js_push.js
200 OK 359 B URL HTTP/2 img4.duote.com/duoteimg/js/baidu_js_push.js
IP
File type ASCII text, with CRLF line terminators
Hash f63ef5e096ef52af0cb95b8d2f3fda32
8d6dcc307c816618f7b26e1482d16d447f382e51
e0679eaf3f94f9353f167a1ebe1a8424c61631cc9be2d5a5445ba35e77f58932
GET /duoteimg/js/baidu_js_push.js HTTP/1.1
Host: img4.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 359
date: Mon, 19 Dec 2022 17:16:09 GMT
x-oss-request-id: 63A09C59AFFD70313763EF54
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "F63EF5E096EF52AF0CB95B8D2F3FDA32"
last-modified: Tue, 21 Jun 2022 08:41:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2603761381065918884
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Wed, 22 Jun 2022 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: CAEQUxiBgID4uNiVjBgiIDdjODgyMTExYzA2OTQ5NmU4NjMxZTI4MDZmMTc2NGEx
content-md5: 9j714JbvUq8MuVuNLz/aMg==
x-oss-server-time: 5
ali-swift-global-savetime: 1671470169
via: cache17.l2cn3037[0,0,200-0,H], cache43.l2cn3037[1,0], ens-vcache19.cn5274[0,0,200-0,H], ens-vcache9.cn5274[1,0]
age: 2170532
x-cache: HIT TCP_MEM_HIT dirn:12:232271878
x-swift-savetime: Sun, 01 Jan 2023 05:15:12 GMT
x-swift-cachetime: 14472057
timing-allow-origin: *
eagleid: deba119c16736407012401174e
X-Firefox-Spdy: h2
img4.duote.com/duoteimg/dtnew_recom_img/duoteself/softdown_1.js
200 OK 361 B URL HTTP/2 img4.duote.com/duoteimg/dtnew_recom_img/duoteself/softdown_1.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (361), with no line terminators
Hash d7877f2308efe72c7913b65816859daa
755606b601ae85ebcbf0dd47660fb028d1bf30d7
3af5e226f01cd0faf44433ba44517cc6b0fe9596de061a613c8d719227cc2c1a
GET /duoteimg/dtnew_recom_img/duoteself/softdown_1.js HTTP/1.1
Host: img4.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 361
date: Wed, 04 Jan 2023 10:48:37 GMT
x-oss-request-id: 63B55985341EC4383238B58D
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "D7877F2308EFE72C7913B65816859DAA"
last-modified: Wed, 04 Jan 2023 09:53:30 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13587884656729146177
x-oss-storage-class: Standard
x-oss-meta-mtime: 1672826010
x-oss-expiration: expiry-date="Thu, 05 Jan 2023 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: CAEQVxiBgMCnu.bwqxgiIGMwYmRlOGE3NDQ3MjQxYmY4Y2NiYWYyOWExMzU2Zjdi
content-md5: 14d/Iwjv5yx5E7ZYFoWdqg==
x-oss-server-time: 26
ali-swift-global-savetime: 1672829317
via: cache42.l2cn3037[0,0,200-0,H], cache35.l2cn3037[1,0], ens-vcache1.cn5274[0,0,200-0,H], ens-vcache9.cn5274[1,0]
age: 811384
x-cache: HIT TCP_MEM_HIT dirn:12:207588523
x-swift-savetime: Wed, 04 Jan 2023 11:29:37 GMT
x-swift-cachetime: 15549540
timing-allow-origin: *
eagleid: deba119c16736407012441175e
X-Firefox-Spdy: h2
12803.url.tudown.com/template/company/duote-xiazai/images/softfastdownbtn.png
200 OK 409 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/softfastdownbtn.png
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 513adea23e19785779ef24441cbdb356
acaf0cd2ec302562b27850b970523d96ac5a120c
b78bf1490ecfe58446b32e59b0e6505d2d18f75f8676809753830b66a8dee298
GET /template/company/duote-xiazai/images/softfastdownbtn.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 409
Last-Modified: Sun, 06 Nov 2022 08:21:33 GMT
Connection: keep-alive
ETag: "63676e8d-199"
Accept-Ranges: bytes
12803.url.tudown.com/template/company/duote-xiazai/images/icon-sprites.png
200 OK 1.2 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/icon-sprites.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cc3e19fad8a144bf1e7bf400678f99cb
6ac3ec9a26fdec416640a98d24564ddee9886999
1725f9122ad4ec5075cd0967aef3ef5aff312d90e17a33b854d71434f7cbba4c
GET /template/company/duote-xiazai/images/icon-sprites.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 1160
Last-Modified: Sun, 06 Nov 2022 08:21:18 GMT
Connection: keep-alive
ETag: "63676e7e-488"
Accept-Ranges: bytes
12803.url.tudown.com/template/company/duote-xiazai/images/like.png
200 OK 409 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/like.png
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 513adea23e19785779ef24441cbdb356
acaf0cd2ec302562b27850b970523d96ac5a120c
b78bf1490ecfe58446b32e59b0e6505d2d18f75f8676809753830b66a8dee298
GET /template/company/duote-xiazai/images/like.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 409
Last-Modified: Sun, 06 Nov 2022 08:21:22 GMT
Connection: keep-alive
ETag: "63676e82-199"
Accept-Ranges: bytes
12803.url.tudown.com/template/company/duote-xiazai/images/dislike.png
200 OK 295 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/dislike.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash a23e4dc6044953a149d0eb87aa9df5a4
48ab906d07b8d3265c0de7255d41d5352df29b9d
0342c264fcaac6c9fb4c0ea801d56145043dcd37613bddc633a6333c783eb2b9
GET /template/company/duote-xiazai/images/dislike.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 295
Last-Modified: Sun, 06 Nov 2022 08:21:09 GMT
Connection: keep-alive
ETag: "63676e75-127"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2430
Expires: Fri, 13 Jan 2023 20:52:11 GMT
Date: Fri, 13 Jan 2023 20:11:41 GMT
Connection: keep-alive
12803.url.tudown.com/common/ipnotice/
200 OK 17 kB URL HTTP/1.1 12803.url.tudown.com/common/ipnotice/
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 0c76224aff6b4b1c16a0ec9b09052093
9cb09b9880832cc3d7f2719e6256b6ae8221feb8
bf8309fe22da14bd4eada763bfeaff44137ffb90b584662613880f06784955b2
GET /common/ipnotice/ HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
12803.url.tudown.com/uploads/images/283693.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/283693.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/283693.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3511172545,1345624513&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb3062f9905c7c6f159cd203f5fdfe64
bcf17c475a27fae03369d1677dc0bedf6793e6b2
33dc1a810207f498c28b764cc26afa00b16594629ae6777957ccffd8e2c51f8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9432
x-amzn-requestid: 2835c1c8-0a8e-4985-be89-d641d5425971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph50HONIAMF3vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d0b-53c6156514cdb1a463add03b;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EOLxwKB_KBf_zkLlBLFn9nrDGM-FfONoTWUGR2093kLhka3wkb6yhg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:02:02 GMT
age: 79779
etag: "bcf17c475a27fae03369d1677dc0bedf6793e6b2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51f29fa68742d72a5ad8ad54a973424d
4941e01c8718adfe7ce13d551e80549236e561df
83b4e946e058ae662e559703f64896ce4c5de969045cf8e3e00806297eab0007
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6895
x-amzn-requestid: 9367b7b5-6904-4308-85ca-69231b2d6fc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eXnqzFBlIAMFcQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b95311-5774375508659511014974c0;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 11:10:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iVPiVZnh-zRlIEguoiOssDfs0bg74oM1nZyUNfY5XqRIsE_KArUZhA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 21:46:34 GMT
age: 80707
etag: "4941e01c8718adfe7ce13d551e80549236e561df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba61442e6ededd7b49f6244613df0e63
385f45b5920174ca20bcc2d9c02eedb4641f48a9
5e5cd1fd026dc72d0c3c5032fbae17f3383c64ee2714808c892c094353f31012
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5990
x-amzn-requestid: 54a83ca0-eb61-4212-8c98-e1e182b860ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ejsZiEeBoAMF7kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63be2770-3565b4d43d28ee3c0fd16ed0;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 03:05:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SUICoi37lPgXPQu4PTLCmc-6l2G9SHKz8f2qhZgHBMEbuuSi5zMiaQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:38:24 GMT
age: 59597
etag: "385f45b5920174ca20bcc2d9c02eedb4641f48a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e514f1b711f68a1699f9d0d269ca9a8a
71621fabcc4ae2a8c3180e22e63fac1217c4032f
cc10cadc4477cc6faa1973343b9019b1b4bc94e5ec9fab114a4b755f24872f35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9697
x-amzn-requestid: 6279e4e0-7268-422a-878c-3983bffa37d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: edG9MHqjoAMF3dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bb8521-59063fac03eb407d74cabd38;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 03:08:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LdM05QUvlJcxt8IaDM9Wr4_CM5-SrhsBRAkVcdkVxNiyrJveNFHK9g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 05:12:42 GMT
age: 53939
etag: "71621fabcc4ae2a8c3180e22e63fac1217c4032f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 06:50:08 GMT
age: 48093
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c276d1876bfcc6ec4dfb94bcdd2f6c8
177a80d7d4d3fc273a712cada41abdd87b138a6c
abceeefeec2fc658e285a2898e38a36643501bfa1d66f33e216f100e456a8c06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8785
x-amzn-requestid: 4844b27a-1080-4d95-9a35-c8ab7cdd9acb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph7sEajoAMF_gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d17-2520efc6579a4fbc25cdb515;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RKH9tjX9MxE-NWDVWa4KZqrXKnzx-2200m_vm18DyYeWII0U6NgsVA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:00:02 GMT
etag: "177a80d7d4d3fc273a712cada41abdd87b138a6c"
content-type: image/jpeg
age: 79899
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.2345.com/js/index/activity/20171111/widget.min.js
200 OK 5.0 kB URL HTTP/2 www.2345.com/js/index/activity/20171111/widget.min.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type ASCII text, with very long lines (19539), with no line terminators
Hash 0e7edf8d2eb2744217cb8f80f74d57f7
b8b31c32c1f6498f116ff9ab2ff2d8cf88e2fb00
958180a347a29de6cf4629aee20e043b87cf74e61ac020c6f4354338cca440d8
GET /js/index/activity/20171111/widget.min.js HTTP/1.1
Host: www.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
strict-transport-security: max-age=5184000
date: Fri, 13 Jan 2023 20:07:55 GMT
last-modified: Wed, 06 Nov 2019 08:19:39 GMT
etag: W/"5dc2821b-4c53"
vary: Accept-Encoding, Accept-Encoding
expires: Tue, 22 Nov 2022 14:45:06 GMT
cache-control: max-age=600
ali-swift-global-savetime: 1673640475
via: cache1.l2de2[403,403,304-0,M], cache8.l2de2[404,0], cache8.se1[0,0,200-0,H], cache8.se1[1,0]
age: 226
x-cache: HIT TCP_MEM_HIT dirn:4:175331669
x-swift-savetime: Fri, 13 Jan 2023 20:07:55 GMT
x-swift-cachetime: 600
content-encoding: br
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
timing-allow-origin: *
eagleid: 2ff62c9c16736407014044352e
X-Firefox-Spdy: h2
12803.url.tudown.com/template/company/duote-xiazai/images/right.png
200 OK 409 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/right.png
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 513adea23e19785779ef24441cbdb356
acaf0cd2ec302562b27850b970523d96ac5a120c
b78bf1490ecfe58446b32e59b0e6505d2d18f75f8676809753830b66a8dee298
GET /template/company/duote-xiazai/images/right.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 409
Last-Modified: Sun, 06 Nov 2022 08:21:30 GMT
Connection: keep-alive
ETag: "63676e8a-199"
Accept-Ranges: bytes
12803.url.tudown.com/template/company/duote-xiazai/images/newbtnbg.png
200 OK 1.3 kB URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/newbtnbg.png
IP
ASN #137951 Clayer Limited
File type PNG image data, 178 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e22e63af128066b4d249bec71934fa7
09313b9c9717d049883d7c82b3b87f1a4af28408
ea827b6f53f2f091eb1a9ab83c5f53c5f4215e5a14721037af0b50dc47ffe5b0
GET /template/company/duote-xiazai/images/newbtnbg.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/soft.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Content-Length: 1308
Last-Modified: Sun, 06 Nov 2022 08:21:23 GMT
Connection: keep-alive
ETag: "63676e83-51c"
Accept-Ranges: bytes
12803.url.tudown.com/uploads/images/logo.png?n=465y3zmfwts3raxfxo5oplmr4w32lz5irptjzcpjtgiornfd4s53xzmfvtsy7oa&w=250
200 OK 3.5 kB URL HTTP/1.1 12803.url.tudown.com/uploads/images/logo.png?n=465y3zmfwts3raxfxo5oplmr4w32lz5irptjzcpjtgiornfd4s53xzmfvtsy7oa&w=250
IP
ASN #137951 Clayer Limited
File type PNG image data, 250 x 66, 8-bit colormap, non-interlaced\012- data
Hash 0b272865b931d7cfab7bfe782830ddd4
4c4c4035f4affc241a0ce63ce88dc09e2409c9f2
8948ca81266e22f7fc964a94dca0732959723a13ef8818daa286c20c13da5adf
GET /uploads/images/logo.png?n=465y3zmfwts3raxfxo5oplmr4w32lz5irptjzcpjtgiornfd4s53xzmfvtsy7oa&w=250 HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
bdcode.2345.com/xtvzuvo.js
200 OK 38 kB URL HTTP/1.1 bdcode.2345.com/xtvzuvo.js
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash ce38d2b5c83cae8301782a83b240927e
16df7d9834814abfc742a741f2d691694eeeee8e
0afb23848a758db307769b0f6e1cc4d56e895fde0c9570ff0ee412ac6427775c
Analyzer Verdict Alert fortinet Malware
GET /xtvzuvo.js HTTP/1.1
Host: bdcode.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 38081
Connection: keep-alive
Cache-Control: max-age=3600
Content-Encoding: gzip
Expires: Fri, 13 Jan 2023 21:11:41 GMT
Last-Modified: Wed, 21 Dec 2022 05:54:50 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
YJS-ID: c0e7a6e64b5937e8-143
Server: yunjiasu
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash ddb18dec9c3e93423123bea55488f3dc
82dad6abec39ad5b33da236390f0812fd92b0139
c07ca6f0246a88a8f7c09b272861cf7cbb1cfb17f7737fbacd9746b0f144c194
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 17 Jan 2023 16:38:33 GMT
ETag: "82dad6abec39ad5b33da236390f0812fd92b0139"
Last-Modified: Fri, 13 Jan 2023 16:38:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3049
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7890c85329260b69-OSL
12803.url.tudown.com/uploads/images/308948.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/308948.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/308948.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1536563237,947815639&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=729
12803.url.tudown.com/uploads/images/247914.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/247914.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/247914.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=3547934588,425058143&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
img1.2345.com/duoteimg/js/base64.js?_vtim=2014122301
404 Not Found 146 B URL HTTP/2 img1.2345.com/duoteimg/js/base64.js?_vtim=2014122301
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /duoteimg/js/base64.js?_vtim=2014122301 HTTP/1.1
Host: img1.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: Tengine
content-type: text/html; charset=gb2312
content-length: 146
date: Fri, 13 Jan 2023 20:11:41 GMT
ali-swift-global-savetime: 1673640701
via: cache78.l2cn3037[22,22,404-1280,M], cache60.l2cn3037[23,0], cache60.l2cn3037[23,0], ens-vcache18.cn5274[47,46,404-1280,M], ens-vcache7.cn5274[48,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Fri, 13 Jan 2023 20:11:41 GMT
x-swift-cachetime: 1
x-swift-error: orig response 4XX error
timing-allow-origin: *
eagleid: deba119a16736407017876548e
X-Firefox-Spdy: h2
ocsp.trust-provider.cn/
200 OK 600 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 5b94c0648153a97963759599907d19bb
d2fe22fc0092aba047a2960630bddb4033083818
afaf429b95d541c5d3f6f7f1c918090c05357299b093022ebad4aa63e01d97e9
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Fri, 13 Jan 2023 20:07:56 GMT
last-modified: Thu, 12 Jan 2023 04:39:52 GMT
expires: Thu, 19 Jan 2023 04:39:51 GMT
etag: "d2fe22fc0092aba047a2960630bddb4033083818"
cache-control: max-age=595549,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb6
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
cf-ray: 7890c2d1ea896958-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1673640476
via: cache9.l2de2[19,19,304-0,M], cache16.l2de2[20,0], cache8.se1[0,0,200-0,H], cache4.se1[1,0], cache8.se1[2,0]
age: 225
x-cache: HIT TCP_MEM_HIT dirn:11:31856323
x-swift-savetime: Fri, 13 Jan 2023 20:07:56 GMT
x-swift-cachetime: 1800
timing-allow-origin: *, *
eagleid: 2ff62c9c16736407019664829e, 2ff62c9c16736407019664829e
12803.url.tudown.com/uploads/images/272180.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/272180.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/272180.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=2243551898,683398045&fm=253&app=120&f=JPEG?w=1422&h=800
12803.url.tudown.com/uploads/images/165650.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/165650.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/165650.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3557108674,2596093384&fm=253&fmt=auto&app=138&f=JPEG?w=642&h=500
12803.url.tudown.com/uploads/images/979131.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/979131.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/979131.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=946290660,1722004426&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=889
img1.duote.com/duoteimg/zhuanti/comment/images/3.gif
200 OK 3.0 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/3.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 2ea694cf637a163c094f4e88ae235ec7
8c80f708bc2b9ade2838743d1ec2f779662054e4
8824766f185db8f093dabd01f47636740f26f1a0340b8ed170e4268f36488a44
GET /duoteimg/zhuanti/comment/images/3.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 3011
date: Wed, 27 Jul 2022 13:57:53 GMT
x-oss-request-id: 62E14461A70130303428621A
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "2EA694CF637A163C094F4E88AE235EC7"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8455495457239003797
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: LqaUz2N6FjwJT06IriNexw==
x-oss-server-time: 40
ali-swift-global-savetime: 1658930273
via: cache74.l2cn3037[0,0,304-0,H], cache20.l2cn3037[1,0], vcache5.cn4732[0,0,200-0,H], vcache9.cn4732[1,0]
age: 14710428
x-cache: HIT TCP_MEM_HIT dirn:10:232409100
x-swift-savetime: Wed, 27 Jul 2022 14:00:56 GMT
x-swift-cachetime: 15551817
timing-allow-origin: *
eagleid: b465c61d16736407019285676e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/8.gif
200 OK 1.8 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/8.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 15c10a442a7bd8384cd17ed420cf21e9
477ba29d0b04ec0a2950d715b58abe2db4d68cdd
153b9c74c5a92e7ec480365537cd43c9973840f3b6c72dad3032f5aeb0a4d30e
GET /duoteimg/zhuanti/comment/images/8.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1788
date: Sun, 16 Oct 2022 07:04:46 GMT
x-oss-request-id: 634BAD0E0FAF34313397FCF8
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "15C10A442A7BD8384CD17ED420CF21E9"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10105978504471775518
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: FcEKRCp72DhM0X7UIM8h6Q==
x-oss-server-time: 132
ali-swift-global-savetime: 1665903886
via: cache52.l2cn3047[0,0,304-0,H], cache28.l2cn3047[1,0], vcache7.cn4732[0,0,200-0,H], vcache9.cn4732[3,0]
age: 7736815
x-cache: HIT TCP_MEM_HIT dirn:9:109913209
x-swift-savetime: Tue, 18 Oct 2022 05:04:17 GMT
x-swift-cachetime: 15386429
timing-allow-origin: *
eagleid: b465c61d16736407019275672e
X-Firefox-Spdy: h2
img2.baidu.com/it/u=2030966795,1593783700&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 55 kB URL HTTP/1.1 img2.baidu.com/it/u=2030966795,1593783700&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Hash 6d44070fdd1ca3b000a292112bba52d2
d243155c763ca792b9349a212e9916e4229595a3
8a6b7021c183c4f40cd7e320696bd7ba2b23bf095dfe9cd31b24342ecfb351b5
GET /it/u=2030966795,1593783700&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:41 GMT
Content-Type: image/jpeg
Content-Length: 54918
Connection: keep-alive
Expires: Fri, 10 Feb 2023 06:36:28 GMT
Last-Modified: Thu, 15 Jan 1970 00:00:00 GMT
ETag: 6d44070fdd1ca3b000a292112bba52d2
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 11 Jan 2023 06:36:28 GMT
Ohc-Cache-HIT: jh2ct72 [1], bdix91 [2]
Ohc-File-Size: 54918
X-Cache-Status: MISS
12803.url.tudown.com/uploads/images/253745.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/253745.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/253745.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=3211264790,4158991480&fm=224&app=112&f=JPEG?w=500&h=500
cpro.baidustatic.com/cpro/ui/pr.js
200 OK 191 B URL HTTP/1.1 cpro.baidustatic.com/cpro/ui/pr.js
IP
File type ASCII text, with CRLF line terminators
Hash 48bbe750b892850b181762bf739e10dd
716574fe9afcde8faef513b16d6867cb07afe626
e538c894cae59538764a334e2cf2bc02e53fa6a9e4efebcd251bc5da82fa2158
GET /cpro/ui/pr.js HTTP/1.1
Host: cpro.baidustatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Fri, 13 Jan 2023 21:10:44 GMT
Last-Modified: Fri, 25 Nov 2022 03:46:04 GMT
ETag: "63803a7c-ff"
Cache-Control: max-age=3600
Content-Encoding: gzip
Age: 56
Accept-Ranges: bytes
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 13 Jan 2023 20:10:44 GMT
Ohc-Cache-HIT: yy2ct63 [2], wzix64 [2]
Ohc-File-Size: 191
X-Cache-Status: HIT
12803.url.tudown.com/uploads/images/420769.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/420769.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/420769.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=113352441,223121214&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/604753.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/604753.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/604753.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=901388,146030078&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
12803.url.tudown.com/template/company/duote-xiazai/images/biaoq-icon.png
200 OK 409 B URL HTTP/1.1 12803.url.tudown.com/template/company/duote-xiazai/images/biaoq-icon.png
IP
ASN #137951 Clayer Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 513adea23e19785779ef24441cbdb356
acaf0cd2ec302562b27850b970523d96ac5a120c
b78bf1490ecfe58446b32e59b0e6505d2d18f75f8676809753830b66a8dee298
GET /template/company/duote-xiazai/images/biaoq-icon.png HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/template/company/duote-xiazai/css/global.css
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/png
Content-Length: 409
Last-Modified: Sun, 06 Nov 2022 08:21:07 GMT
Connection: keep-alive
ETag: "63676e73-199"
Accept-Ranges: bytes
img1.duote.com/duoteimg/zhuanti/comment/images/5.gif
200 OK 2.8 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/5.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash a7bff4f63a973a68e2d98ee780d9e29e
4c87d92faf82347bb122c2ad0e74e166aec5c567
18e82892f579e1f63d003f7e8404754b775542d72ea2d677f61d8ed3c7dfd21c
GET /duoteimg/zhuanti/comment/images/5.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 2768
date: Wed, 27 Jul 2022 13:57:53 GMT
x-oss-request-id: 62E14461DC81703736A9B209
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "A7BFF4F63A973A68E2D98EE780D9E29E"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11302870927342222426
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: p7/09jqXOmji2Y7ngNning==
x-oss-server-time: 33
ali-swift-global-savetime: 1658930273
via: cache19.l2cn3037[0,0,304-0,H], cache2.l2cn3037[0,0], vcache23.cn4732[0,0,200-0,H], vcache9.cn4732[3,0]
age: 14710428
x-cache: HIT TCP_MEM_HIT dirn:11:21940263
x-swift-savetime: Wed, 27 Jul 2022 14:00:56 GMT
x-swift-cachetime: 15551817
timing-allow-origin: *
eagleid: b465c61d16736407019275674e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/6.gif
200 OK 3.5 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/6.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash eb575dd556470ae55acfa8350f63f3ab
5ded8852598c3cb4ff9130d24b1b7b03c558d14e
0be355d4a20f70a41fef403a817d2d27a1c5122fa1b58ef04dc884fb9a12ed7a
GET /duoteimg/zhuanti/comment/images/6.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 3468
date: Wed, 27 Jul 2022 13:57:53 GMT
x-oss-request-id: 62E144616F52933834F154DF
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "EB575DD556470AE55ACFA8350F63F3AB"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17858666986198953545
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: 61dd1VZHCuVaz6g1D2Pzqw==
x-oss-server-time: 86
ali-swift-global-savetime: 1658930273
via: cache39.l2cn3037[0,0,304-0,H], cache72.l2cn3037[1,0], vcache15.cn4732[0,0,200-0,H], vcache9.cn4732[3,0]
age: 14710428
x-cache: HIT TCP_MEM_HIT dirn:10:247805955
x-swift-savetime: Wed, 27 Jul 2022 14:00:56 GMT
x-swift-cachetime: 15551817
timing-allow-origin: *
eagleid: b465c61d16736407019275673e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/4.gif
200 OK 1.7 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/4.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 9429cb260cbf87e528d14cf6baaf2b5b
eb067540c3b93c515efbc46b5a1cb4c7bcb16ff7
4cce9443159a3c082fbf59610efbf5ef9b92d5422bce4bbe8ef43d1bcc8d0475
GET /duoteimg/zhuanti/comment/images/4.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1706
date: Tue, 18 Oct 2022 08:31:25 GMT
x-oss-request-id: 634E645DC8A4583832C601BC
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "9429CB260CBF87E528D14CF6BAAF2B5B"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 875222251737355829
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: lCnLJgy/h+Uo0Uz2uq8rWw==
x-oss-server-time: 142
ali-swift-global-savetime: 1666081885
via: cache78.l2cn3037[0,0,304-0,H], cache49.l2cn3037[1,0], vcache17.cn4732[0,0,200-0,H], vcache9.cn4732[3,0]
age: 7558816
x-cache: HIT TCP_MEM_HIT dirn:9:301135434
x-swift-savetime: Tue, 18 Oct 2022 08:48:07 GMT
x-swift-cachetime: 15550998
timing-allow-origin: *
eagleid: b465c61d16736407019275675e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/12.gif
200 OK 2.6 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/12.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 74dc1aa4f1e4f7219da7ad597c91b8e7
bfda85aaa1fd81b79b792ee83cd448cd2cde5005
733f3dc6aa38aaad278d72cbef942326c77b0f872727e5971cc8fb9b3b683efe
GET /duoteimg/zhuanti/comment/images/12.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 2575
date: Sat, 10 Dec 2022 02:48:42 GMT
x-oss-request-id: 6393F38A28E01236303D13AE
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "74DC1AA4F1E4F7219DA7AD597C91B8E7"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17001896356624891276
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: dNwapPHk9yGdp61ZfJG45w==
x-oss-server-time: 48
ali-swift-global-savetime: 1670640522
via: cache34.l2cn3037[0,0,304-0,H], cache76.l2cn3037[0,0], vcache21.cn4732[0,0,200-0,H], vcache9.cn4732[2,0]
age: 3000179
x-cache: HIT TCP_MEM_HIT dirn:9:35026318
x-swift-savetime: Sat, 10 Dec 2022 03:04:45 GMT
x-swift-cachetime: 15551037
timing-allow-origin: *
eagleid: b465c61d16736407019285677e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/11.gif
200 OK 7.0 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/11.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 0dfec8a688ee97162d852f42a0fa2a23
a6bc13493b4f2471b72b9d9e8474a9889ad2f4cb
bfef5124ff15cc50ba2eb8e6c605541b642bb5c8c18a4c618ed248522f8d44e0
GET /duoteimg/zhuanti/comment/images/11.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 6979
date: Tue, 06 Dec 2022 22:52:39 GMT
x-oss-request-id: 638FC7B7AEF36B30351D8998
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "0DFEC8A688EE97162D852F42A0FA2A23"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5501157311881781066
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: Df7IpojulxYthS9CoPoqIw==
x-oss-server-time: 112
ali-swift-global-savetime: 1670367159
via: cache80.l2cn3037[87,86,304-0,M], cache20.l2cn3037[89,0], vcache15.cn4732[0,0,200-0,H], vcache9.cn4732[3,0]
age: 3273542
x-cache: HIT TCP_MEM_HIT dirn:4:773595770
x-swift-savetime: Tue, 06 Dec 2022 22:52:39 GMT
x-swift-cachetime: 15552000
timing-allow-origin: *
eagleid: b465c61d16736407019285678e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/2.gif
200 OK 1.7 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/2.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash daaa6d71e871eec644788b703b718bd8
8fadc0f0070931b2f807159e87b82bc2269b467a
6d31802a2485e9ff603aa0ec2528c96590e9d4c5ac8961ddf8a9c3fe3bb5c0b8
GET /duoteimg/zhuanti/comment/images/2.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1668
date: Wed, 27 Jul 2022 13:56:57 GMT
x-oss-request-id: 62E144290FAF3430362AB6AF
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "DAAA6D71E871EEC644788B703B718BD8"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17840225992830112301
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: 2qptcehx7sZEeItwO3GL2A==
x-oss-server-time: 173
ali-swift-global-savetime: 1658930217
via: cache16.l2cn3037[0,0,304-0,H], cache75.l2cn3037[1,0], vcache7.cn4732[0,0,200-0,H], vcache9.cn4732[1,0]
age: 14710484
x-cache: HIT TCP_MEM_HIT dirn:11:431973436
x-swift-savetime: Wed, 27 Jul 2022 14:00:56 GMT
x-swift-cachetime: 15551761
timing-allow-origin: *
eagleid: b465c61d16736407019315679e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/10.gif
200 OK 2.1 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/10.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 8535863eee1ae5dfffa4f25a79cffa10
ae60588f804b611794c725429927f1a37c31a6e5
13fd5ae010e7d97dc637a2ec0537a28a8d74dac1f1480fa87279ae226e13e535
GET /duoteimg/zhuanti/comment/images/10.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 2105
date: Wed, 07 Dec 2022 22:38:17 GMT
x-oss-request-id: 639115D9EBE1D337378BAB5F
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "8535863EEE1AE5DFFFA4F25A79CFFA10"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 720901678692586227
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: hTWGPu4a5d//pPJaec/6EA==
x-oss-server-time: 93
ali-swift-global-savetime: 1670452697
via: cache6.l2cn3037[0,0,304-0,H], cache22.l2cn3037[1,0], vcache17.cn4732[0,0,200-0,H], vcache9.cn4732[2,0]
age: 3188005
x-cache: HIT TCP_MEM_HIT dirn:10:259663521
x-swift-savetime: Wed, 07 Dec 2022 23:34:46 GMT
x-swift-cachetime: 15548611
timing-allow-origin: *
eagleid: b465c61d16736407021905794e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/9.gif
200 OK 1.7 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/9.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 52c2ef213baaff54c731557b999a0bf7
804e7ac80e4255b27247350265bbc92ce8d075bb
6bc6cc4739fbf0b9257b84549097c06651f82bcb2edef386710f4bb88e5b1676
GET /duoteimg/zhuanti/comment/images/9.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1733
date: Fri, 09 Dec 2022 13:25:13 GMT
x-oss-request-id: 63933739960DF237391E4EA8
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "52C2EF213BAAFF54C731557B999A0BF7"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7207152638915174298
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: UsLvITuq/1THMVV7mZoL9w==
x-oss-server-time: 46
ali-swift-global-savetime: 1670592313
via: cache35.l2cn3037[0,0,304-0,H], cache40.l2cn3037[1,0], vcache14.cn4732[0,0,200-0,H], vcache9.cn4732[2,0]
age: 3048389
x-cache: HIT TCP_MEM_HIT dirn:11:15204520
x-swift-savetime: Fri, 09 Dec 2022 14:08:59 GMT
x-swift-cachetime: 15549374
timing-allow-origin: *
eagleid: b465c61d16736407021905796e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/7.gif
200 OK 1.5 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/7.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 56bd697fdac1de3dbe8d4dd53e309a9b
215d4fead2dbf7bf6aeea1136749675cc5034f9e
7acdc1e69fd8d2c578ccf122054b7dab5a58a59caa255cd5585d45956136f4a3
GET /duoteimg/zhuanti/comment/images/7.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1495
date: Wed, 27 Jul 2022 14:00:56 GMT
x-oss-request-id: 62E1451844A24C3331B8E6EA
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "56BD697FDAC1DE3DBE8D4DD53E309A9B"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6398064933782332215
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: Vr1pf9rB3j2+jU3VPjCamw==
x-oss-server-time: 53
ali-swift-global-savetime: 1658930456
via: cache67.l2cn3037[164,164,304-0,M], cache39.l2cn3037[166,0], vcache3.cn4732[0,0,200-0,H], vcache9.cn4732[2,0]
age: 14710246
x-cache: HIT TCP_MEM_HIT dirn:9:181936673
x-swift-savetime: Wed, 27 Jul 2022 14:00:56 GMT
x-swift-cachetime: 15552000
timing-allow-origin: *
eagleid: b465c61d16736407021905795e
X-Firefox-Spdy: h2
img1.duote.com/duoteimg/zhuanti/comment/images/1.gif
200 OK 1.8 kB URL HTTP/2 img1.duote.com/duoteimg/zhuanti/comment/images/1.gif
IP
ASN #23650 AS Number for CHINANET jiangsu province backbone
File type GIF image data, version 89a, 24 x 24\012- data
Hash 26df8be954a888cd2b29429bcc7d91de
2fa6246adde0616962ed672907c5da94893ce35e
9c73781c61d66f4af9043f08da67a47653fe9662e0aabd4cfa133cfbe55eaa76
GET /duoteimg/zhuanti/comment/images/1.gif HTTP/1.1
Host: img1.duote.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 1771
date: Sat, 30 Jul 2022 05:24:34 GMT
x-oss-request-id: 62E4C092E38C983934309E2A
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "26DF8BE954A888CD2B29429BCC7D91DE"
last-modified: Thu, 03 Sep 2020 22:40:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7119512290700278717
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Fri, 04 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
content-md5: Jt+L6VSoiM0rKUKbzH2R3g==
x-oss-server-time: 25
ali-swift-global-savetime: 1659158674
via: cache2.l2cn2656[0,0,304-0,H], cache35.l2cn2656[0,0], vcache1.cn4732[0,0,200-0,H], vcache9.cn4732[2,0]
age: 14482028
x-cache: HIT TCP_MEM_HIT dirn:10:270045207
x-swift-savetime: Wed, 03 Aug 2022 04:14:12 GMT
x-swift-cachetime: 15210622
timing-allow-origin: *
eagleid: b465c61d16736407021905798e
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/529305.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/529305.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/529305.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=2937043579,2088123210&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=494
12803.url.tudown.com/uploads/images/972366.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/972366.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/972366.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img0.baidu.com/it/u=1396723519,2116952154&fm=253&app=120&f=JPEG?w=1280&h=800
img1.baidu.com/it/u=1972996059,3553985259&fm=253&fmt=auto&app=138&f=JPEG?w=502&h=500
200 OK 32 kB URL HTTP/2 img1.baidu.com/it/u=1972996059,3553985259&fm=253&fmt=auto&app=138&f=JPEG?w=502&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 502x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1ff88e21ca00270f870b7772dabfd50f
ba63842c11f2b8a3bd5c8b69955023e331ca3e54
521f3891f5fefe1d258752e57779b18aac76e7a6bf190a7d6ab58998f59c320f
GET /it/u=1972996059,3553985259&fm=253&fmt=auto&app=138&f=JPEG?w=502&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 32426
expires: Sun, 22 Jan 2023 01:31:50 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 1ff88e21ca00270f870b7772dabfd50f
age: 157963
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 01:31:50 GMT
ohc-cache-hit: lz5ct78 [4], qdix89 [2]
ohc-file-size: 32426
x-cache-status: HIT
X-Firefox-Spdy: h2
img1.baidu.com/it/u=3511172545,1345624513&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 9.9 kB URL HTTP/2 img1.baidu.com/it/u=3511172545,1345624513&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e5737672661593a4db4e779f84596a3f
ea1c4837f21b400d591b541ad25fc728dadb510b
44803f507cd10cb521ead8f8cfa4b9bc3b3bfdd0148f89a3320a98bca7f21b8e
GET /it/u=3511172545,1345624513&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 9862
expires: Thu, 19 Jan 2023 04:14:05 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: e5737672661593a4db4e779f84596a3f
age: 151675
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 20 Dec 2022 04:14:05 GMT
ohc-cache-hit: lz5ct51 [4], xiangyix204 [4]
ohc-file-size: 9862
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=3557108674,2596093384&fm=253&fmt=auto&app=138&f=JPEG?w=642&h=500
200 OK 22 kB URL HTTP/2 img0.baidu.com/it/u=3557108674,2596093384&fm=253&fmt=auto&app=138&f=JPEG?w=642&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 642x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cdd18aca39bfd67bdc4c7bac423c1bb6
756113ba9816746825e2d5aa7fa69b9149f11854
6399ef7b27dafd616f44628b97d475a0c263c33450ccc156163e16d290c07b7f
GET /it/u=3557108674,2596093384&fm=253&fmt=auto&app=138&f=JPEG?w=642&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 22076
expires: Sun, 22 Jan 2023 08:16:50 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: cdd18aca39bfd67bdc4c7bac423c1bb6
age: 162889
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 08:16:50 GMT
ohc-cache-hit: lz5ct59 [2], xaix101 [2]
ohc-file-size: 22076
x-cache-status: HIT
X-Firefox-Spdy: h2
bdcode.2345.com/kolimnn.js
200 OK 4.0 kB URL HTTP/1.1 bdcode.2345.com/kolimnn.js
IP
File type ASCII text, with very long lines (11438), with no line terminators
Hash 4927ec7cf61077c3cb553d1e91fbe407
81cecb6db2e670675c9bdac9c8c9225b987262cc
439bad0c6b3cec8c27d7bd369cf89917af4deec831c07836e4e1d265113a641c
Analyzer Verdict Alert fortinet Malware
GET /kolimnn.js HTTP/1.1
Host: bdcode.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 4034
Connection: keep-alive
Cache-Control: max-age=3600
Content-Encoding: gzip
Expires: Fri, 13 Jan 2023 21:11:42 GMT
Last-Modified: Wed, 18 May 2022 01:48:47 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
YJS-ID: c0e7a6ef4b6337e8-143
Server: yunjiasu
12803.url.tudown.com/uploads/images/287115.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/287115.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/287115.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2964355596,2439513550&fm=253&fmt=auto&app=138&f=JPEG?w=207&h=300
12803.url.tudown.com/uploads/images/98509.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/98509.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/98509.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=4149789965,3823690269&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
12803.url.tudown.com/uploads/images/303986.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/303986.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/303986.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=766948159,3313120789&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=734
12803.url.tudown.com/uploads/images/459104.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/459104.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/459104.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=1135095693,1401687570&fm=224&app=112&f=JPEG?w=500&h=500
t14.baidu.com/it/u=3211264790,4158991480&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 79 kB URL HTTP/1.1 t14.baidu.com/it/u=3211264790,4158991480&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 817d00c71aa061d63089594b4708d559
ef7e7c1fa9c0ed02dfe7d5b1bd6ea81998909ee2
4c96f56ca7cdb75ef0324916ddfb0a052eb2c78a8cb0dd0214b3851df80f3c75
GET /it/u=3211264790,4158991480&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 78805
Connection: keep-alive
Expires: Tue, 31 Jan 2023 23:45:24 GMT
Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT
ETag: 817d00c71aa061d63089594b4708d559
Age: 745701
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 01 Jan 2023 23:45:24 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [4], zhuzuncache60 [1], csix117 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 78805
X-Cache-Status: HIT
Timing-Allow-Origin: *
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Fri, 13 Jan 2023 20:11:42 GMT
Etag: "4078521116"
Expires: Sat, 13 Jan 2024 20:11:42 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=1C4AB38F025C0C0DFF0BF0721844948B:FG=1; max-age=31536000; expires=Sat, 13-Jan-24 20:11:42 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
12803.url.tudown.com/uploads/images/771101.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/771101.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/771101.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=1993358440,2963697047&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
12803.url.tudown.com/uploads/images/744762.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/744762.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/744762.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1373096375,2375034147&fm=253&fmt=auto&app=138&f=JPEG?w=260&h=260
t14.baidu.com/it/u=1135095693,1401687570&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 41 kB URL HTTP/1.1 t14.baidu.com/it/u=1135095693,1401687570&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash dc0927ce387a9cf82b857d250fcc90c1
b43dcddad08181557ea54fd272be62ae8cdb0286
12f8f5473429a206e447e8b6270d2262064fa8ce9facaef31d733f029f6b60e4
GET /it/u=1135095693,1401687570&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 40625
Connection: keep-alive
Expires: Mon, 06 Feb 2023 17:47:49 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: dc0927ce387a9cf82b857d250fcc90c1
Age: 169516
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 07 Jan 2023 17:47:49 GMT
Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [4], zhuzuncache55 [1], czix99 [4]
Ohc-Response-Time: 1 0 0 0 0 1
Ohc-File-Size: 40625
X-Cache-Status: HIT
Timing-Allow-Origin: *
img0.baidu.com/it/u=1536563237,947815639&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=729
200 OK 32 kB URL HTTP/2 img0.baidu.com/it/u=1536563237,947815639&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=729
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x729, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d4eaff30840eb449848608e67b8afbbe
8d32b7f4276acbfc39484682c6317665f390d37b
beb8eee432a011f7a53b83a2f3e4f464a0594a784db9c93e78019e5753743204
GET /it/u=1536563237,947815639&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=729 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 32116
expires: Sun, 22 Jan 2023 03:08:06 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: d4eaff30840eb449848608e67b8afbbe
age: 749981
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 03:08:06 GMT
ohc-cache-hit: lz5ct74 [4], bdix148 [2]
ohc-file-size: 32116
x-cache-status: HIT
X-Firefox-Spdy: h2
img2.baidu.com/it/u=946290660,1722004426&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=889
200 OK 42 kB URL HTTP/2 img2.baidu.com/it/u=946290660,1722004426&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=889
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x889, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2a8a1083239ceadbf0f5d895b06596dc
e230ad849b9532510391a7fb9afe199a63cb91b7
5fef025ff5bf259e36d0866c553e039914cc831a0850bd0e2e4b770d90b62540
GET /it/u=946290660,1722004426&fm=253&fmt=auto&app=120&f=JPEG?w=500&h=889 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 41796
expires: Sun, 22 Jan 2023 03:16:44 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: 2a8a1083239ceadbf0f5d895b06596dc
age: 165762
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 03:16:44 GMT
ohc-cache-hit: lz5ct55 [4], xiangyix240 [2]
ohc-file-size: 41796
x-cache-status: HIT
X-Firefox-Spdy: h2
img2.baidu.com/it/u=3547934588,425058143&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 19 kB URL HTTP/2 img2.baidu.com/it/u=3547934588,425058143&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76131008a9d1cb0b87abad6deae931b7
8cbf62227b45729dc108729ff4d14df241f44da1
e67d30228758d35fa1e2047140f820ddf71c0d917bac2cbd7731942bc04a402a
GET /it/u=3547934588,425058143&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 18734
expires: Sun, 12 Feb 2023 00:18:59 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 76131008a9d1cb0b87abad6deae931b7
age: 32313
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 13 Jan 2023 00:18:59 GMT
ohc-cache-hit: lz5ct52 [4], czix240 [4]
ohc-file-size: 18734
x-cache-status: HIT
X-Firefox-Spdy: h2
sofire.bdstatic.com/js/dfxaf3-635b4cd6.js
200 OK 123 kB URL HTTP/1.1 sofire.bdstatic.com/js/dfxaf3-635b4cd6.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 123 kB (123037 bytes)
Hash c39ed7d28cee6240d44cc5b5c2bbd686
eab7220ff1195b14d9c1c21ae4fcad33315549b5
cd5d1c61337dd6b5a3ddffdc95ed7da921b125c9911aa22eaef8f054a2345459
GET /js/dfxaf3-635b4cd6.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 16 Jan 2023 02:00:19 GMT
Last-Modified: Fri, 06 Jan 2023 03:24:00 GMT
ETag: "6c8af00e14f394b624a4b374d18b9b7a"
Content-Encoding: gzip
Age: 59985
Accept-Ranges: bytes
Content-MD5: bIrwDhTzlLYkpLN00Yubeg==
x-bce-content-crc32: 1362413814
x-bce-debug-id: oBRnL9Rm6mktChfh+Q/bZOLxVybYIdLP1hOBqfmojYkP0j/g0lHmCeGRQa0TvkxHWlcUmy/vEhEATyXRFP3ibg==
x-bce-request-id: 721fd90f-6b1d-43c1-a6da-3188e9ec3add
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
Ohc-Global-Saved-Time: Fri, 13 Jan 2023 02:00:19 GMT
Ohc-Cache-HIT: wz2ct55 [2], nb2ctcache51 [2]
Ohc-Response-Time: 1 0 0 0 0 0
t15.baidu.com/it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 47 kB URL HTTP/1.1 t15.baidu.com/it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 8c3e2b46dec06e16a6282e0d40ac01fc
ae78204ae8bb2275d191d822394886b474678be3
9e870a4790215004650631d2399d7385b9b9ab6d8f660c4f421b8f6752d4eb6c
GET /it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 47176
Connection: keep-alive
Expires: Thu, 26 Jan 2023 09:38:13 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 8c3e2b46dec06e16a6282e0d40ac01fc
Age: 1271514
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 27 Dec 2022 09:38:13 GMT
Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache65 [1], xaix232 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 47176
X-Cache-Status: HIT
Timing-Allow-Origin: *
t15.baidu.com/it/u=2726795237,2395944025&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 50 kB URL HTTP/1.1 t15.baidu.com/it/u=2726795237,2395944025&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash f683ddfe7e20e3c348d95397c44db472
0164f32dadabe71adc05d5cfc9b19ef6f0c7a444
49fa7962be05fe8b76944b74afb6615e384f3dc1dfa8eda57d0add7ebd2c9939
GET /it/u=2726795237,2395944025&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 49596
Connection: keep-alive
Expires: Fri, 20 Jan 2023 03:02:34 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: f683ddfe7e20e3c348d95397c44db472
Age: 1269312
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 21 Dec 2022 03:02:34 GMT
Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache51 [1], qdix51 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 49596
X-Cache-Status: HIT
Timing-Allow-Origin: *
t15.baidu.com/it/u=113352441,223121214&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 55 kB URL HTTP/1.1 t15.baidu.com/it/u=113352441,223121214&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 4088331d309619799e16ba62ace99686
4631a7158be07dc3a1763c8fe0152de85312e812
099beee5b26a30ba927829af25826e325264102dd81b4f37c34e8fc9ce8abfd3
GET /it/u=113352441,223121214&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 55186
Connection: keep-alive
Expires: Mon, 06 Feb 2023 18:41:25 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: 4088331d309619799e16ba62ace99686
Age: 168936
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 07 Jan 2023 18:41:24 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [4], zhuzuncache64 [4], suzix78 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 55186
X-Cache-Status: HIT
Timing-Allow-Origin: *
12803.url.tudown.com/uploads/images/407480.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/407480.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/407480.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1683639605,3826718427&fm=253&fmt=auto&app=138&f=JPEG?w=130&h=170
12803.url.tudown.com/uploads/images/468274.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/468274.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/468274.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=2592493909,2413524070&fm=224&app=112&f=JPEG?w=500&h=500
img2.baidu.com/it/u=2937043579,2088123210&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=494
200 OK 45 kB URL HTTP/2 img2.baidu.com/it/u=2937043579,2088123210&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=494
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x494, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 39b751cc9f9985a91e0933f750cbf40a
3f14b43d3c2da6290fa5f5293572b3ce66d5e47c
b3e4afe42c11181a57d79e1b586fd72878e1af306b2440433e6effaff26e99db
GET /it/u=2937043579,2088123210&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=494 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 45030
expires: Sun, 22 Jan 2023 06:25:02 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: 39b751cc9f9985a91e0933f750cbf40a
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 06:25:02 GMT
ohc-cache-hit: lz5ct80 [1], suzix237 [4]
ohc-file-size: 45030
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/634567.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/634567.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/634567.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img0.baidu.com/it/u=2688390421,310851128&fm=253&app=120&f=JPEG?w=1280&h=800
12803.url.tudown.com/uploads/images/204349.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/204349.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/204349.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=3274269949,1763585853&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
12803.url.tudown.com/uploads/images/858175.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/858175.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/858175.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=1772699667,437107508&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
12803.url.tudown.com/uploads/images/194076.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/194076.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/194076.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=912231801,338562233&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
img1.baidu.com/it/u=901388,146030078&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 18 kB URL HTTP/2 img1.baidu.com/it/u=901388,146030078&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c157c148ceb91b47842da02a62e777a8
1f2d1e33bcb58c3b34b1ac20530e3f08ea34ccd0
9e5535bcac1dd979ebfc72c3535a0b34884cf6233be16f7566bd6a94701bab62
GET /it/u=901388,146030078&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 17812
expires: Wed, 01 Feb 2023 13:35:04 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: c157c148ceb91b47842da02a62e777a8
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 02 Jan 2023 13:35:04 GMT
ohc-cache-hit: lz5ct83 [1], csix82 [2]
ohc-file-size: 17812
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=4149789965,3823690269&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
200 OK 62 kB URL HTTP/2 img1.baidu.com/it/u=4149789965,3823690269&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b8f3bc6881638aec33cef88fa111619f
ae06797cc833ff5f9d138a539decf5565be10114
ff5baea5684f0044f8b3c9db81d414b64bfd3e9fe2dd93a2741ea97b5ba237b8
GET /it/u=4149789965,3823690269&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 61726
expires: Sat, 21 Jan 2023 06:25:43 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: b8f3bc6881638aec33cef88fa111619f
age: 27767
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 06:25:43 GMT
ohc-cache-hit: lz5ct73 [4], xaix143 [4]
ohc-file-size: 61726
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=2964355596,2439513550&fm=253&fmt=auto&app=138&f=JPEG?w=207&h=300
200 OK 18 kB URL HTTP/2 img0.baidu.com/it/u=2964355596,2439513550&fm=253&fmt=auto&app=138&f=JPEG?w=207&h=300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 207x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3c868344313e436b18448b351534404a
a9aeeb03e8a0ce315cf95565d29c2321276684a3
e243f658e393213da4c9bda9a17b29bc753cf09a142593f72383cf8bceb49c72
GET /it/u=2964355596,2439513550&fm=253&fmt=auto&app=138&f=JPEG?w=207&h=300 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 17522
expires: Wed, 25 Jan 2023 19:35:48 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 3c868344313e436b18448b351534404a
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 26 Dec 2022 19:35:48 GMT
ohc-cache-hit: lz5ct51 [1], wzix51 [2]
ohc-file-size: 17522
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=1993358440,2963697047&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
200 OK 22 kB URL HTTP/2 img2.baidu.com/it/u=1993358440,2963697047&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x375, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bbff838416149f843af4f4e07d2b660c
33cfd092851fbf54862f351f3bae15de2a9e48aa
bed45dce3d9b97448bd1af7cfbd87da883a317481a2fa40ab57dca4f2479b3be
GET /it/u=1993358440,2963697047&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 21954
expires: Thu, 02 Feb 2023 02:09:44 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: bbff838416149f843af4f4e07d2b660c
age: 315134
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 03 Jan 2023 02:09:44 GMT
ohc-cache-hit: lz5ct77 [4], wzix77 [2]
ohc-file-size: 21954
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1373096375,2375034147&fm=253&fmt=auto&app=138&f=JPEG?w=260&h=260
200 OK 9.1 kB URL HTTP/2 img0.baidu.com/it/u=1373096375,2375034147&fm=253&fmt=auto&app=138&f=JPEG?w=260&h=260
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 260x260, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 78cd2b9a4c3e539c5f677292e6d625a1
9e3f246aba7fc5692ad17ff537cae1a605672694
e35eaf659df5361f59824f24ccf0651e3246a64f4d9af195750f1240ddf7c12a
GET /it/u=1373096375,2375034147&fm=253&fmt=auto&app=138&f=JPEG?w=260&h=260 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 9098
expires: Sun, 29 Jan 2023 19:57:13 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: 78cd2b9a4c3e539c5f677292e6d625a1
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 30 Dec 2022 19:57:13 GMT
ohc-cache-hit: lz5ct58 [1], xaix90 [2]
ohc-file-size: 9098
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=766948159,3313120789&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=734
200 OK 20 kB URL HTTP/2 img0.baidu.com/it/u=766948159,3313120789&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=734
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x734, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ca29d2db0579931d55381a5e606d30c7
85d1596b3068af21a9dfd80a975e2632d707c9b3
131b48f524143cf6282a80474346bae03d2528e2d7c16557e0a6f01bf14f3346
GET /it/u=766948159,3313120789&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=734 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:42 GMT
content-type: image/webp
content-length: 20408
expires: Tue, 17 Jan 2023 06:37:13 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: ca29d2db0579931d55381a5e606d30c7
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 18 Dec 2022 06:37:13 GMT
ohc-cache-hit: lz5ct80 [1], xiangyix204 [4]
ohc-file-size: 20408
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=2243551898,683398045&fm=253&app=120&f=JPEG?w=1422&h=800
200 OK 140 kB URL HTTP/1.1 img1.baidu.com/it/u=2243551898,683398045&fm=253&app=120&f=JPEG?w=1422&h=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1422x800, components 3\012- data
Size 140 kB (140364 bytes)
Hash 3959cf74f88b425dd9e25e90de83dc49
bc7c0adfaf802f156a9b8a908989653a18aa3099
94c227ec36788e8d6ed3ee5db109e7cd3b08b75fd4427b6ba28ff2d07abe41a4
GET /it/u=2243551898,683398045&fm=253&app=120&f=JPEG?w=1422&h=800 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 140364
Connection: keep-alive
Expires: Wed, 01 Feb 2023 21:32:58 GMT
Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT
ETag: 3959cf74f88b425dd9e25e90de83dc49
Age: 151684
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Mon, 02 Jan 2023 21:32:58 GMT
Ohc-Cache-HIT: lz5ct78 [4], csix115 [2]
Ohc-File-Size: 140364
X-Cache-Status: HIT
static.mediav.com/js/mvf_pm_slider.js
200 OK 40 kB URL HTTP/1.1 static.mediav.com/js/mvf_pm_slider.js
IP
ASN #55992 Beijing Qihu Technology Company Limited
File type ASCII text, with very long lines (65536), with no line terminators, with escape sequences
Hash b23b60a7adefb62f50583079ed66f03b
965ea6506ea6c004b1135f23c10c67484fc0d238
987d03cb317bd411589ab916be6ea0e5aaabf8de0e94a2de7712beff577a62f8
GET /js/mvf_pm_slider.js HTTP/1.1
Host: static.mediav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 07:57:42 GMT
Vary: Accept-Encoding
Expires: Sat, 14 Jan 2023 01:11:42 GMT
Cache-Control: max-age=18000
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Encoding: gzip
KCS-Via: HIT from w-fc01.hkht;HIT from w-sc04.bjyt
hm.baidu.com/hm.js?dd9836db2e433f487a0aa434b7b3deb7
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?dd9836db2e433f487a0aa434b7b3deb7
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (633)
Hash 28fd1c40a7d3c1d9eacb40d9a274afee
6988114584c3a023424e29483d4c7342df3e910f
cfa3177c64b2ee41238399e826be624f26ce0610c300d426739940441d2f5c94
GET /hm.js?dd9836db2e433f487a0aa434b7b3deb7 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11271
Content-Type: application/javascript
Date: Fri, 13 Jan 2023 20:11:42 GMT
Etag: 4a12af02888bbf14d16cd2c6464a22ae
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F709F20C74DB4F21; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
t15.baidu.com/it/u=2592493909,2413524070&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 52 kB URL HTTP/1.1 t15.baidu.com/it/u=2592493909,2413524070&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash c1f821a0aa85eb64b9f5f2385bc186c1
8213df38108e4b15f4ec97d845aad5a1b1f205f9
1787754cae6bd77a4a0649d0e343a60a01d35e94091d8ffd9a881ece0bd5fd97
GET /it/u=2592493909,2413524070&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 51852
Connection: keep-alive
Expires: Sat, 04 Feb 2023 15:40:32 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: c1f821a0aa85eb64b9f5f2385bc186c1
Age: 169456
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 05 Jan 2023 15:40:31 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache65 [4], qdix145 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 51852
X-Cache-Status: HIT
Timing-Allow-Origin: *
api.share.baidu.com/s.gif?l=http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
IP
ASN #134770 CHINANET Jiangsu province Suzhou taihu IDC network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Fri, 13 Jan 2023 20:11:43 GMT
12803.url.tudown.com/uploads/images/78183.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/78183.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/78183.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3090275914,1834012815&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=654
12803.url.tudown.com/uploads/images/323867.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/323867.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/323867.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/228436.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/228436.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/228436.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=1354242520,477234005&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/326718.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/326718.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/326718.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500
pos.baidu.com/s?wid=910&hei=120&di=u4965894&s1=1895337643&s2=286336730<u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&dc=3&ti=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88&ps=1822x34&drs=1&pcs=1268x939&pss=1268x2578&cfv=0&cpl=0&chi=1&cce=true&cec=UTF-8&tlm=1673640686&psr=1280x1024&par=1280x1002&pis=-1x-1&ccd=24&cja=false&cmi=0&col=en-US&cdo=-1&tcn=1673640686&dtm=HTML_POST&tpr=1673640686025&ari=2&ant=0&exps=110277,110269,110257,110009,111000,110011&prot=2&dis=0&dai=1&dri=0&ver=1221&ecd=1&psi=05e40c94fce62cb7&dft=0&ft=1
200 OK 13 kB URL HTTP/2 pos.baidu.com/s?wid=910&hei=120&di=u4965894&s1=1895337643&s2=286336730<u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&dc=3&ti=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88&ps=1822x34&drs=1&pcs=1268x939&pss=1268x2578&cfv=0&cpl=0&chi=1&cce=true&cec=UTF-8&tlm=1673640686&psr=1280x1024&par=1280x1002&pis=-1x-1&ccd=24&cja=false&cmi=0&col=en-US&cdo=-1&tcn=1673640686&dtm=HTML_POST&tpr=1673640686025&ari=2&ant=0&exps=110277,110269,110257,110009,111000,110011&prot=2&dis=0&dai=1&dri=0&ver=1221&ecd=1&psi=05e40c94fce62cb7&dft=0&ft=1
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7808)
Hash 8bbee7b9532a1b8b6972d3c27e6de2f8
5f6681ceb472726b7933fdbd7a0586dc534bb8e5
974e0962889d625acb04fb6e575bc7479c6f10deda4ed628c444a35a05385605
GET /s?wid=910&hei=120&di=u4965894&s1=1895337643&s2=286336730<u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&dc=3&ti=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88&ps=1822x34&drs=1&pcs=1268x939&pss=1268x2578&cfv=0&cpl=0&chi=1&cce=true&cec=UTF-8&tlm=1673640686&psr=1280x1024&par=1280x1002&pis=-1x-1&ccd=24&cja=false&cmi=0&col=en-US&cdo=-1&tcn=1673640686&dtm=HTML_POST&tpr=1673640686025&ari=2&ant=0&exps=110277,110269,110257,110009,111000,110011&prot=2&dis=0&dai=1&dri=0&ver=1221&ecd=1&psi=05e40c94fce62cb7&dft=0&ft=1 HTTP/1.1
Host: pos.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Fri, 13 Jan 2023 20:11:42 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sat Jan 14 04:11:42 2023
p3p: CP=" OTI DSP COR IVA OUR IND COM ", CP=" OTI DSP COR IVA OUR IND COM "
pragma: no-cache
server: nginx
set-cookie: BAIDUID=8928A0B191E7E60671E71EE5E64DF41B:FG=1; expires=Sat, 13-Jan-54 20:11:42 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
x-xss-protection: 0
content-length: 13088
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/702530.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/702530.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/702530.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3829630217,1912335658&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=867
t14.baidu.com/it/u=1354242520,477234005&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 54 kB URL HTTP/1.1 t14.baidu.com/it/u=1354242520,477234005&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 8450e5a1e0b31f6c699b13e7e36b542f
1dc410c4ff0c94ecd3729bdeaea8899f1b063ae2
0bd0e6410f5042e5c98db8bb5f77a88ba7e1978ee6414f19c258637d414d3dbc
GET /it/u=1354242520,477234005&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 53620
Connection: keep-alive
Expires: Sat, 21 Jan 2023 20:14:45 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: 8450e5a1e0b31f6c699b13e7e36b542f
Age: 168438
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 22 Dec 2022 20:14:45 GMT
Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache65 [4], qdix122 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 53620
X-Cache-Status: HIT
Timing-Allow-Origin: *
img2.baidu.com/it/u=3274269949,1763585853&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
200 OK 48 kB URL HTTP/2 img2.baidu.com/it/u=3274269949,1763585853&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0865d044b466c86d7ffa015a136afcf2
5c53721169752ea4d82c8b1150030876a4ced814
bb5412922a992e5fe2f504ea479fe772e4334c77ff23b5b81056f0ce49115246
GET /it/u=3274269949,1763585853&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 48450
expires: Sat, 04 Feb 2023 03:44:01 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: 0865d044b466c86d7ffa015a136afcf2
age: 161127
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 05 Jan 2023 03:44:01 GMT
ohc-cache-hit: lz5ct55 [4], xiangyix159 [2]
ohc-file-size: 48450
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1683639605,3826718427&fm=253&fmt=auto&app=138&f=JPEG?w=130&h=170
200 OK 7.2 kB URL HTTP/2 img0.baidu.com/it/u=1683639605,3826718427&fm=253&fmt=auto&app=138&f=JPEG?w=130&h=170
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 130x170, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4a84832cbef9785ca3fd2630551ead40
96c0e517f27535af3471ccb5b51cbcd6d15fd638
e4e459068c910a4cdae85c6fb8fdf3143f8d91fb6d54e29c4ec72b3068493b93
GET /it/u=1683639605,3826718427&fm=253&fmt=auto&app=138&f=JPEG?w=130&h=170 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 7198
expires: Sat, 28 Jan 2023 09:23:33 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 4a84832cbef9785ca3fd2630551ead40
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 29 Dec 2022 09:23:33 GMT
ohc-cache-hit: lz5ct78 [1], qdix78 [2]
ohc-file-size: 7198
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/423323.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/423323.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/423323.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=2853799180,1946914223&fm=224&app=112&f=JPEG?w=500&h=500
t15.baidu.com/it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 58 kB URL HTTP/1.1 t15.baidu.com/it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 783e8f3119c4c5bfd04f1bc1923605d1
2d7a5b02ccc0c792f9d0b680d4b407bec6ddc185
e46810f4d68977edaffe9e68a5c51df7f34db20945a01a4c62a7f77834285f7d
GET /it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 57891
Connection: keep-alive
Expires: Sun, 15 Jan 2023 01:26:52 GMT
Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT
ETag: 783e8f3119c4c5bfd04f1bc1923605d1
Age: 1443785
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 16 Dec 2022 01:26:52 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache61 [1], czix188 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 57891
X-Cache-Status: HIT
Timing-Allow-Origin: *
img0.baidu.com/it/u=1396723519,2116952154&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 121 kB URL HTTP/1.1 img0.baidu.com/it/u=1396723519,2116952154&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Size 121 kB (121336 bytes)
Hash 1319769cd8b7cdfe4509287985584899
11d6a3b81f610f90d859cbb9c067e1d04acb0e5f
2729e2ba61587bb5f03274360cce21b2efd75c835929332f452f60e9598e829f
GET /it/u=1396723519,2116952154&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:42 GMT
Content-Type: image/jpeg
Content-Length: 121336
Connection: keep-alive
Expires: Tue, 24 Jan 2023 10:06:53 GMT
Last-Modified: Wed, 14 Jan 1970 00:00:00 GMT
ETag: 1319769cd8b7cdfe4509287985584899
Age: 163291
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 25 Dec 2022 10:06:53 GMT
Ohc-Cache-HIT: jh2ct54 [4], suzix164 [2]
Ohc-File-Size: 121336
X-Cache-Status: HIT
t15.baidu.com/it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 73 kB URL HTTP/1.1 t15.baidu.com/it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 15f19d1938d8ade71638f27c76e2af7e
3a3394256ee3f6b37d00bd189b15c2032f976448
d76c3a5b474d3673500f9f1dcd5dc2a7ded0628300d3828db8df8b75bd6bf724
GET /it/u=3972360743,3416028636&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 72681
Connection: keep-alive
Expires: Sat, 04 Feb 2023 07:53:07 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 15f19d1938d8ade71638f27c76e2af7e
Age: 614680
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 05 Jan 2023 07:53:07 GMT
Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache54 [1], bdix192 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 72681
X-Cache-Status: HIT
Timing-Allow-Origin: *
img0.baidu.com/it/u=912231801,338562233&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 23 kB URL HTTP/2 img0.baidu.com/it/u=912231801,338562233&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5fb2fab1fde36bb91848729016e55209
cf57e1ded385f7940e54f0b024472aa658a0e0de
bd9dddae272ac39b1593fef2cdef0d9d1bfcea20941398b60954831a0c65d8f7
GET /it/u=912231801,338562233&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 22680
expires: Tue, 31 Jan 2023 04:01:21 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: 5fb2fab1fde36bb91848729016e55209
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 01 Jan 2023 04:01:21 GMT
ohc-cache-hit: lz5ct80 [1], csix80 [4]
ohc-file-size: 22680
x-cache-status: MISS
X-Firefox-Spdy: h2
pos.baidu.com/s?wid=890&hei=200&di=u5039524&s1=461922102&s2=150314141<u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&dc=3&ti=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88&ps=2156x34&drs=1&pcs=1268x939&pss=1268x2698&cfv=0&cpl=0&chi=1&cce=true&cec=UTF-8&tlm=1673640686&psr=1280x1024&par=1280x1002&pis=-1x-1&ccd=24&cja=false&cmi=0&col=en-US&cdo=-1&tcn=1673640686&dtm=HTML_POST&tpr=1673640686025&ari=2&ant=0&exps=110277,110269,110257,110009,111000,110011&prot=2&dis=0&dai=2&dri=0&ver=1221&ecd=1&psi=05e40c94fce62cb7&dft=0&ft=1
200 OK 15 kB URL HTTP/2 pos.baidu.com/s?wid=890&hei=200&di=u5039524&s1=461922102&s2=150314141<u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&dc=3&ti=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88&ps=2156x34&drs=1&pcs=1268x939&pss=1268x2698&cfv=0&cpl=0&chi=1&cce=true&cec=UTF-8&tlm=1673640686&psr=1280x1024&par=1280x1002&pis=-1x-1&ccd=24&cja=false&cmi=0&col=en-US&cdo=-1&tcn=1673640686&dtm=HTML_POST&tpr=1673640686025&ari=2&ant=0&exps=110277,110269,110257,110009,111000,110011&prot=2&dis=0&dai=2&dri=0&ver=1221&ecd=1&psi=05e40c94fce62cb7&dft=0&ft=1
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (43252)
Hash 253481b2cdd694737d9b098bf124ab57
69bd051f0d2de8db937e7214b26d1be117fc5652
ff3465daf442fe63dbd22d7b5581b6c378e4b63b17dfca99de0eeb1fb636b10a
GET /s?wid=890&hei=200&di=u5039524&s1=461922102&s2=150314141<u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&dc=3&ti=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88&ps=2156x34&drs=1&pcs=1268x939&pss=1268x2698&cfv=0&cpl=0&chi=1&cce=true&cec=UTF-8&tlm=1673640686&psr=1280x1024&par=1280x1002&pis=-1x-1&ccd=24&cja=false&cmi=0&col=en-US&cdo=-1&tcn=1673640686&dtm=HTML_POST&tpr=1673640686025&ari=2&ant=0&exps=110277,110269,110257,110009,111000,110011&prot=2&dis=0&dai=2&dri=0&ver=1221&ecd=1&psi=05e40c94fce62cb7&dft=0&ft=1 HTTP/1.1
Host: pos.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html;charset=UTF-8
date: Fri, 13 Jan 2023 20:11:42 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sat Jan 14 04:11:42 2023
p3p: CP=" OTI DSP COR IVA OUR IND COM ", CP=" OTI DSP COR IVA OUR IND COM "
pragma: no-cache
server: nginx
set-cookie: BAIDUID=8928A0B191E7E6068E5024612054DD36:FG=1; expires=Sat, 13-Jan-54 20:11:42 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
x-xss-protection: 0
content-length: 14846
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/548338.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/548338.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/548338.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1615088474,1501397324&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=325
img0.baidu.com/it/u=2688390421,310851128&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 69 kB URL HTTP/1.1 img0.baidu.com/it/u=2688390421,310851128&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Hash c1d9b0a20c9d31bde5ff9694a64ca11a
8bdcdfd3bda3024aeb1e1030ad993dc84f3174db
807a69cccde2ed24645da418fa2edab0a940d43f3474440e029998faca537c96
GET /it/u=2688390421,310851128&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 68737
Connection: keep-alive
Expires: Thu, 02 Feb 2023 06:10:43 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: c1d9b0a20c9d31bde5ff9694a64ca11a
Age: 416792
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 03 Jan 2023 06:10:43 GMT
Ohc-Cache-HIT: jh2ct62 [4], xiangyix97 [4]
Ohc-File-Size: 68737
X-Cache-Status: HIT
img1.baidu.com/it/u=3090275914,1834012815&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=654
200 OK 29 kB URL HTTP/2 img1.baidu.com/it/u=3090275914,1834012815&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=654
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x654, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9d43031817bf25505291b60f2036de72
ac1483175fa3bf7a56b0f9f812acc803b5346a16
2cd0bc6dc6dfd74bd257ab07a3e94d84813ce1edf795c93c0fe0b859183743fd
GET /it/u=3090275914,1834012815&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=654 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 28722
expires: Fri, 03 Feb 2023 06:36:15 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 9d43031817bf25505291b60f2036de72
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 04 Jan 2023 06:36:15 GMT
ohc-cache-hit: lz5ct83 [1], qdix242 [2]
ohc-file-size: 28722
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/186818.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/186818.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/186818.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2313612704,2835248235&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=500
12803.url.tudown.com/uploads/images/327471.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/327471.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/327471.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1813137494,494167122&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
12803.url.tudown.com/uploads/images/19265.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/19265.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/19265.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=117087444,328076365&fm=253&fmt=auto&app=138&f=JPEG?w=236&h=345
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0<=1673640687&rnd=557519380&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=2&sn=7857&r=0&ww=1280&u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&tt=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0<=1673640687&rnd=557519380&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=2&sn=7857&r=0&ww=1280&u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&tt=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0<=1673640687&rnd=557519380&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=2&sn=7857&r=0&ww=1280&u=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&tt=%E5%BC%80%E4%BA%91%C2%B7%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99-%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BDV6.37.142_IOS%2F%E5%AE%89%E5%8D%93%E9%80%9A%E7%94%A8%E7%89%88 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 13 Jan 2023 20:11:43 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=61C2966D93C03C5E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
12803.url.tudown.com/uploads/images/138615.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/138615.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/138615.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2939082115,1834256937&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=400
img1.baidu.com/it/u=1772699667,437107508&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
200 OK 26 kB URL HTTP/1.1 img1.baidu.com/it/u=1772699667,437107508&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x375, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6ac37eafc2a419c4ec0b3d3945abb0df
52c4eb32970810b150782458cf0c946bc5b4cbfd
71ccee80e29008f7f8dc01c6c421f14c1b52627e7c805a0270b6d6dce43c71f6
GET /it/u=1772699667,437107508&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/webp
Content-Length: 26294
Connection: keep-alive
Expires: Tue, 07 Feb 2023 11:52:59 GMT
Last-Modified: Sun, 04 Jan 1970 00:00:00 GMT
ETag: 6ac37eafc2a419c4ec0b3d3945abb0df
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 08 Jan 2023 11:52:59 GMT
Ohc-Cache-HIT: lz5ct60 [1], wzix60 [4]
Ohc-File-Size: 26294
X-Cache-Status: MISS
t13.baidu.com/it/u=2853799180,1946914223&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 41 kB URL HTTP/1.1 t13.baidu.com/it/u=2853799180,1946914223&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash e4c4ad90550a53d2b1d8e1d0a578882d
af35421fc20d7e8be1cb024badce283f76130ce0
e37e856a19cb326261c18839d8abba5fb8843d4628d9a3e6458e2b01196915f5
GET /it/u=2853799180,1946914223&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 40846
Connection: keep-alive
Expires: Tue, 07 Feb 2023 04:45:17 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: e4c4ad90550a53d2b1d8e1d0a578882d
Age: 166915
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 08 Jan 2023 04:45:17 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache62 [2], qdix146 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 40846
X-Cache-Status: HIT
Timing-Allow-Origin: *
12803.url.tudown.com/uploads/images/943054.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/943054.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/943054.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=588053366,880660267&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=711
img1.baidu.com/it/u=3829630217,1912335658&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=867
200 OK 35 kB URL HTTP/2 img1.baidu.com/it/u=3829630217,1912335658&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=867
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x867, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b52f26318be383026b885627a403737a
927154ea24eedc6fcc87344a4ea911e3f56f65bf
88998a392d5661742b1aa83176e690c3de2231cd8d02df9b9efc1902800d3b8c
GET /it/u=3829630217,1912335658&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=867 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 34880
expires: Sun, 22 Jan 2023 03:53:19 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: b52f26318be383026b885627a403737a
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 03:53:19 GMT
ohc-cache-hit: lz5ct80 [1], bdix80 [4]
ohc-file-size: 34880
x-cache-status: MISS
X-Firefox-Spdy: h2
img1.baidu.com/it/u=1813137494,494167122&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
200 OK 27 kB URL HTTP/2 img1.baidu.com/it/u=1813137494,494167122&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 889x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3794dd56c6603192f5190a6940b56e5
05ec1e1d21d7a6106c87371933ab69b76051bd54
5b1dedd3177c18169a3b2577f5533ad286c58b0a96dcefd23665c5665b1f3b03
GET /it/u=1813137494,494167122&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 27360
expires: Sat, 21 Jan 2023 19:46:50 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: b3794dd56c6603192f5190a6940b56e5
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 19:46:50 GMT
ohc-cache-hit: lz5ct73 [1], qdix216 [2]
ohc-file-size: 27360
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/778561.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/778561.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/778561.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=899234704,1790933798&fm=253&fmt=auto?w=1280&h=800
12803.url.tudown.com/uploads/images/760143.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/760143.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/760143.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=4198915791,560694034&fm=253&app=120&f=JPEG?w=1280&h=800
12803.url.tudown.com/uploads/images/782528.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/782528.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/782528.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=2278950305,1482257722&fm=224&app=112&f=JPEG?w=500&h=500
img0.baidu.com/it/u=2313612704,2835248235&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=500
200 OK 21 kB URL HTTP/2 img0.baidu.com/it/u=2313612704,2835248235&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d27374f926e4cd264de891f474689f13
ce8435d84c983a0bd4328cd3f765e457e8eee63c
f403a5c765b6e4bcda193619def2104846387014978f720a213a54459c871a70
GET /it/u=2313612704,2835248235&fm=253&fmt=auto&app=138&f=JPEG?w=700&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 20628
expires: Thu, 19 Jan 2023 00:49:08 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: d27374f926e4cd264de891f474689f13
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 20 Dec 2022 00:49:08 GMT
ohc-cache-hit: lz5ct64 [1], qdix236 [2]
ohc-file-size: 20628
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/643659.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/643659.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/643659.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=2699172341,4068553794&fm=253&fmt=auto&app=138&f=JPEG?w=668&h=500
img0.baidu.com/it/u=117087444,328076365&fm=253&fmt=auto&app=138&f=JPEG?w=236&h=345
200 OK 14 kB URL HTTP/2 img0.baidu.com/it/u=117087444,328076365&fm=253&fmt=auto&app=138&f=JPEG?w=236&h=345
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 236x345, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3c48a1243d5bdc27e209627a15e78fc7
c447810159c137f36f1d7fd0d4b71e68975855a9
7bf69baeadd993d8a022b884b25e732bf923b9b20ab1fa8682c7cb7c1019c81c
GET /it/u=117087444,328076365&fm=253&fmt=auto&app=138&f=JPEG?w=236&h=345 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 14218
expires: Sat, 21 Jan 2023 23:26:06 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: 3c48a1243d5bdc27e209627a15e78fc7
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 23:26:06 GMT
ohc-cache-hit: lz5ct77 [1], qdix171 [4]
ohc-file-size: 14218
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/183992.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/183992.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/183992.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=2968735583,2880346486&fm=253&app=120&f=JPEG?w=1280&h=800
img0.baidu.com/it/u=2939082115,1834256937&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=400
200 OK 17 kB URL HTTP/2 img0.baidu.com/it/u=2939082115,1834256937&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8333ed62f60b781766ae0e7e53ce60bf
ad936475aa35d462668eccc4e120285934ebedbc
ad45186d342340c0c73555ee87f87c2e69a0f54984184261b794c0c8291c5258
GET /it/u=2939082115,1834256937&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=400 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 17176
expires: Sun, 05 Feb 2023 21:47:04 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 8333ed62f60b781766ae0e7e53ce60bf
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 06 Jan 2023 21:47:04 GMT
ohc-cache-hit: lz5ct65 [1], csix65 [2]
ohc-file-size: 17176
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/733299.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/733299.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/733299.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=2753325612,2676903845&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
img1.baidu.com/it/u=1615088474,1501397324&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=325
200 OK 9.9 kB URL HTTP/2 img1.baidu.com/it/u=1615088474,1501397324&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=325
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 499x325, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a5edfa5c95a90bf110a651e9bd4aebd6
8d6469c3da94bc0a8727bc1f09db9399827e2f13
f8e956a1403c0225a09f9b33a8ff756203643493173b19a49a6cc95203a8a249
GET /it/u=1615088474,1501397324&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=325 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 9888
expires: Wed, 18 Jan 2023 15:22:10 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: a5edfa5c95a90bf110a651e9bd4aebd6
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 19 Dec 2022 15:22:10 GMT
ohc-cache-hit: lz5ct61 [1], qdix61 [2]
ohc-file-size: 9888
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=588053366,880660267&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=711
200 OK 62 kB URL HTTP/2 img0.baidu.com/it/u=588053366,880660267&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=711
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x711, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1b7101234a648dc432f7b84eb435eae2
494c0bd76617104cdf597039d0ed01901c2fca9e
07deb2924f5eaf2310ef4319220efc9853df05c21dc0b89087fef19118273fb9
GET /it/u=588053366,880660267&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=711 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:43 GMT
content-type: image/webp
content-length: 61538
expires: Tue, 31 Jan 2023 09:57:36 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 1b7101234a648dc432f7b84eb435eae2
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 01 Jan 2023 09:57:36 GMT
ohc-cache-hit: lz5ct79 [1], csix79 [2]
ohc-file-size: 61538
x-cache-status: MISS
X-Firefox-Spdy: h2
t13.baidu.com/it/u=2278950305,1482257722&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 100 kB URL HTTP/1.1 t13.baidu.com/it/u=2278950305,1482257722&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Size 100 kB (100124 bytes)
Hash 0b1bd11070857d11dc1f6073c83255f5
1c0c92d5d5c1f7fbbca5f5f8e939208063ff6fdd
7804aca5b77e75ac73dfe69dd0c572b682118b191fded8dabc01482236354a63
GET /it/u=2278950305,1482257722&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:43 GMT
Content-Type: image/jpeg
Content-Length: 100124
Connection: keep-alive
Expires: Sun, 22 Jan 2023 06:34:27 GMT
Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT
ETag: 0b1bd11070857d11dc1f6073c83255f5
Age: 168925
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 23 Dec 2022 06:34:27 GMT
Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache52 [1], qdix240 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 100124
X-Cache-Status: HIT
Timing-Allow-Origin: *
sofire.baidu.com/h5/t/8800
204 No Content 0 B URL HTTP/2 sofire.baidu.com/h5/t/8800
IP
ASN #23724 IDC, China Telecommunications Corporation
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /h5/t/8800 HTTP/1.1
Host: sofire.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-bdh5-pf
Referer: http://12803.url.tudown.com/
Origin: http://12803.url.tudown.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: http://12803.url.tudown.com
access-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
date: Fri, 13 Jan 2023 20:11:44 GMT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=899234704,1790933798&fm=253&fmt=auto?w=1280&h=800
200 OK 61 kB URL HTTP/2 img0.baidu.com/it/u=899234704,1790933798&fm=253&fmt=auto?w=1280&h=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dd519b370e82b44832f1abaa6304c781
4025378ed4fdef5055197ff6179cef4823d37a4a
0366e91b33990ea197d07ee89773af5149708a1dc921b5a2fede0c6590e19781
GET /it/u=899234704,1790933798&fm=253&fmt=auto?w=1280&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 61090
expires: Wed, 08 Feb 2023 08:26:23 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: dd519b370e82b44832f1abaa6304c781
age: 148520
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 09 Jan 2023 08:26:23 GMT
ohc-cache-hit: lz5ct77 [4], csix108 [4]
ohc-file-size: 61090
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/123756.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/123756.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/123756.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=2326297489,1732475146&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/832484.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/832484.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/832484.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=1798960028,2072623724&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/614582.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/614582.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/614582.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=2179758687,2656114737&fm=253&app=120&f=JPEG?w=1422&h=800
12803.url.tudown.com/uploads/images/778635.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/778635.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/778635.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=2482274954,583409756&fm=253&app=120&f=JPEG?w=1280&h=800
12803.url.tudown.com/uploads/images/569397.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/569397.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/569397.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3683618975,854722243&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=202
img1.baidu.com/it/u=2968735583,2880346486&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 81 kB URL HTTP/1.1 img1.baidu.com/it/u=2968735583,2880346486&fm=253&app=120&f=JPEG?w=1280&h=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Hash 055177ba6b944aa5847964c2adb0eba5
9aae73ef6dd63dd40478a5d7781495d15d567a2d
d67745fc754446f2300059257d8f1782b2b3b9284fa88468ee49031040db094b
GET /it/u=2968735583,2880346486&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 80641
Connection: keep-alive
Expires: Sun, 12 Feb 2023 14:16:56 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: 055177ba6b944aa5847964c2adb0eba5
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 13 Jan 2023 14:16:56 GMT
Ohc-Cache-HIT: lz5ct72 [2], csix116 [4]
Ohc-File-Size: 80641
X-Cache-Status: MISS
bdcode.2345.com/js/logo/css/logo-sm.css
200 OK 783 B URL HTTP/2 bdcode.2345.com/js/logo/css/logo-sm.css
IP
File type ASCII text, with very long lines (2128), with no line terminators
Hash 621b3563f1231de3a058fa25980064be
c2575c8110cbaba0c87c543fabf7c592789ad67f
37944a5c3981b16d6a498a7dc9427edcd64c1752e6728c5323525bc400efc8d6
GET /js/logo/css/logo-sm.css HTTP/1.1
Host: bdcode.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: text/css
date: Fri, 13 Jan 2023 20:11:44 GMT
etag: W/"62d0f6af-850"
expires: Fri, 13 Jan 2023 21:11:44 GMT
last-modified: Fri, 15 Jul 2022 05:10:07 GMT
p3p: CP=" OTI DSP COR IVA OUR IND COM "
server: yunjiasu
yjs-id: c0e7a701467c37e1-143
content-length: 783
X-Firefox-Spdy: h2
img0.baidu.com/it/u=2699172341,4068553794&fm=253&fmt=auto&app=138&f=JPEG?w=668&h=500
200 OK 27 kB URL HTTP/2 img0.baidu.com/it/u=2699172341,4068553794&fm=253&fmt=auto&app=138&f=JPEG?w=668&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 668x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 83e67d50edb74ed975abd9e4b6b6bd5c
599f95de1cf105a977610494b814047b2b7c4be3
1e997c5b975a7bb09f80001673587ef9c1ea491f9aa6c5284e7c7b31cbbec833
GET /it/u=2699172341,4068553794&fm=253&fmt=auto&app=138&f=JPEG?w=668&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 27036
expires: Tue, 31 Jan 2023 03:44:21 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 83e67d50edb74ed975abd9e4b6b6bd5c
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 01 Jan 2023 03:44:21 GMT
ohc-cache-hit: lz5ct71 [1], csix82 [2]
ohc-file-size: 27036
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=2753325612,2676903845&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
200 OK 24 kB URL HTTP/2 img2.baidu.com/it/u=2753325612,2676903845&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x375, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e2a4116caf7fd1449607fa27457fd07c
d61f6e2d6342a728ab450ab0b355189817a5cddb
d3bd65fdfecec452863f64b3a0ed1e20b0edc659ec65e92b921ba03bb5769407
GET /it/u=2753325612,2676903845&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=375 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 23698
expires: Fri, 20 Jan 2023 06:30:04 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: e2a4116caf7fd1449607fa27457fd07c
age: 157208
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 21 Dec 2022 06:30:04 GMT
ohc-cache-hit: lz5ct69 [4], qdix184 [2]
ohc-file-size: 23698
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/79128.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/79128.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/79128.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=1802735225,2629669515&fm=224&app=112&f=JPEG?w=500&h=500
t13.baidu.com/it/u=1798960028,2072623724&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 63 kB URL HTTP/1.1 t13.baidu.com/it/u=1798960028,2072623724&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash f6cd26c582bc33b48f586a61da8e0151
de3734040abfac08eec881aa5b73cc40cfefc849
bd9dcf91e7651ea62e1704b2ed80c25c95bd32b2d8ec549eeecab744bdc03976
GET /it/u=1798960028,2072623724&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 63173
Connection: keep-alive
Expires: Fri, 10 Feb 2023 03:41:47 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: f6cd26c582bc33b48f586a61da8e0151
Age: 98364
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 11 Jan 2023 03:41:47 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache60 [4], czix67 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 63173
X-Cache-Status: HIT
Timing-Allow-Origin: *
static.mediav.com/js/mvf_g2.js
200 OK 9.0 kB URL HTTP/1.1 static.mediav.com/js/mvf_g2.js
IP
ASN #55992 Beijing Qihu Technology Company Limited
File type ASCII text, with very long lines (25539), with no line terminators
Hash 1baf9fc7116527b1a41307a6653030ca
f854953834e70e842d0d3fe6c8966ffb38e16744
d601207a5fa9a6b11008bc0a5a295c46ed62707d4a4b7b04a276eef33c3dcbd3
GET /js/mvf_g2.js HTTP/1.1
Host: static.mediav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 07:57:41 GMT
Vary: Accept-Encoding
Expires: Sat, 14 Jan 2023 01:11:44 GMT
Cache-Control: max-age=18000
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Encoding: gzip
KCS-Via: HIT from w-fc01.hkht;HIT from w-sc04.bjyt
t14.baidu.com/it/u=1802735225,2629669515&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 102 kB URL HTTP/1.1 t14.baidu.com/it/u=1802735225,2629669515&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Size 102 kB (102236 bytes)
Hash bf1c0c0a0456970ffc119b4c377f1760
d4d04689bb80f7058196218c8cd5fece3630f7d1
9f3864dab03533df7d1278116e3c60d7fa5c93dc81925bb4805e971d147c19d1
GET /it/u=1802735225,2629669515&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 102236
Connection: keep-alive
Expires: Mon, 16 Jan 2023 00:38:54 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: bf1c0c0a0456970ffc119b4c377f1760
Age: 1429716
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 17 Dec 2022 00:38:54 GMT
Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [4], zhuzuncache64 [4], bdix78 [4]
Ohc-Response-Time: 1 0 0 0 0 2
Ohc-File-Size: 102236
X-Cache-Status: HIT
Timing-Allow-Origin: *
img2.baidu.com/it/u=4198915791,560694034&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 117 kB URL HTTP/1.1 img2.baidu.com/it/u=4198915791,560694034&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Size 117 kB (117416 bytes)
Hash aca8a45af1cbd76ebb8b3de4fb880463
be6b3eafff5e554c501de6e52645edd4f187e156
9723e3e4684816edbb74c2e4808fa7b6260f73bf02fb26b485d77d40e228d63a
GET /it/u=4198915791,560694034&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 117416
Connection: keep-alive
Expires: Sat, 04 Feb 2023 13:56:08 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: aca8a45af1cbd76ebb8b3de4fb880463
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 05 Jan 2023 13:56:08 GMT
Ohc-Cache-HIT: jh2ct78 [1], xaix211 [4]
Ohc-File-Size: 117416
X-Cache-Status: MISS
sofire.baidu.com/h5/t/8800
200 OK 591 B URL HTTP/2 sofire.baidu.com/h5/t/8800
IP
ASN #23724 IDC, China Telecommunications Corporation
File type JSON data\012- , ASCII text, with very long lines (591), with no line terminators
Hash 0c880fee33f85ece9f7a38120c661b40
f87c2ba60c071edcc25bc849569d390466905ba7
c79d0a85e7fdc660c0714e051fc44c6c0ff1c0f259801391adac2c02a64b8bfa
POST /h5/t/8800 HTTP/1.1
Host: sofire.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
X-Bdh5-Pf: 1
Content-Length: 3530
Origin: http://12803.url.tudown.com
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: http://12803.url.tudown.com
access-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
content-type: application/json; charset=utf-8
date: Fri, 13 Jan 2023 20:11:44 GMT
content-length: 591
X-Firefox-Spdy: h2
img1.baidu.com/it/u=2326297489,1732475146&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 27 kB URL HTTP/2 img1.baidu.com/it/u=2326297489,1732475146&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2f6ef5299bb9a4e1527c94894145f3b5
28edaffa4e7bf70ff6a47b62e1a271930b37861d
48184e25c9afbb1e426be62f205cfdb0a9427f436698c1917fea98948f0c0e75
GET /it/u=2326297489,1732475146&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 26626
expires: Sat, 11 Feb 2023 11:53:06 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 2f6ef5299bb9a4e1527c94894145f3b5
age: 54232
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 12 Jan 2023 11:53:06 GMT
ohc-cache-hit: lz5ct61 [4], suzix121 [2]
ohc-file-size: 26626
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/667092.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/667092.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/667092.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=2103823174,2642144133&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/479532.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/479532.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/479532.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1381776271,2572623697&fm=253&fmt=auto&app=138&f=JPEG?w=563&h=500
12803.url.tudown.com/uploads/images/105785.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/105785.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/105785.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3680394737,2253167893&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=270
12803.url.tudown.com/uploads/images/877121.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/877121.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/877121.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3442397391,4272240420&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
12803.url.tudown.com/uploads/images/406246.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/406246.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/406246.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500
img0.baidu.com/it/u=3683618975,854722243&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=202
200 OK 23 kB URL HTTP/2 img0.baidu.com/it/u=3683618975,854722243&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=202
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x202, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d0baa87c72c353d3dd27090e08a9440b
73bfe75c6d66ad117e47eb33148f2b43ffc0d573
405a41cdca240459713defa70223bdc7b2c4d8fdb6fd8b2f93abd76a4604ff38
GET /it/u=3683618975,854722243&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=202 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 23290
expires: Sun, 22 Jan 2023 17:17:04 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: d0baa87c72c353d3dd27090e08a9440b
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 17:17:04 GMT
ohc-cache-hit: lz5ct58 [1], czix226 [2]
ohc-file-size: 23290
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/569695.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/569695.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/569695.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=1043417095,771915572&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=300
union2.50bang.org/web/duoteall?uId2=QUTQUPPRNO&r=&fBL=1280*1024
200 OK 0 B URL HTTP/1.1 union2.50bang.org/web/duoteall?uId2=QUTQUPPRNO&r=&fBL=1280*1024
IP
ASN #138950 Jiangsu Wuxi International IDC network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/duoteall?uId2=QUTQUPPRNO&r=&fBL=1280*1024 HTTP/1.1
Host: union2.50bang.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: uidFlag=1; path=/; domain=union2.50bang.org; expires=Sun,22-Feb-2099 00:00:00 GMT
uUid=601663C1BB00000905C9CCD30000; path=/; domain=union2.50bang.org; expires=Sun,22-Feb-2099 00:00:00 GMT
uHTL=1; path=/web/duoteall; expires=Sun,22-Feb-2099 00:00:00 GMT
uHTT=1673640704; path=/web/duoteall; expires=Sun,22-Feb-2099 00:00:00 GMT
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Length: 0
t15.baidu.com/it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500
304 Not Modified 0 B URL HTTP/1.1 t15.baidu.com/it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it/u=340143712,2330178855&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
If-Modified-Since: Sun, 11 Jan 1970 00:00:00 GMT
If-None-Match: 783e8f3119c4c5bfd04f1bc1923605d1
HTTP/1.1 304 Not Modified
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Connection: keep-alive
Expires: Sun, 15 Jan 2023 01:26:52 GMT
Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT
ETag: 783e8f3119c4c5bfd04f1bc1923605d1
Age: 1443786
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 16 Dec 2022 01:26:52 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache61 [1], czix188 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 57891
X-Cache-Status: HIT
Timing-Allow-Origin: *
t15.baidu.com/it/u=2103823174,2642144133&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 41 kB URL HTTP/1.1 t15.baidu.com/it/u=2103823174,2642144133&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 795bb729c77da6267eab333808928d6a
c7fc6317dcb6be0dc1cedde4047cb0fcf3bc1e36
02437ad118831be7a11b94b35b08a3c37a5563e2604c7c7739ec102c0e645995
GET /it/u=2103823174,2642144133&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 41242
Connection: keep-alive
Expires: Wed, 01 Feb 2023 10:45:13 GMT
Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT
ETag: 795bb729c77da6267eab333808928d6a
Age: 163842
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Mon, 02 Jan 2023 10:45:12 GMT
Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache61 [4], czix108 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 41242
X-Cache-Status: HIT
Timing-Allow-Origin: *
wn.pos.baidu.com/adx.php?c=d25pZD0wYjllMzkyN2FmNDhmNmUzAHM9MGI5ZTM5MjdhZjQ4ZjZlMwB0PTE2NzM2NDA3MDIAc2U9MQBidT00AHByaWNlPVk4RzZfZ0FOYjJWN2pFcGdXNUlBOGxmM3pIRTQ3bXQ4ckVQUVVBAGNoYXJnZV9wcmljZT0zAHNoYXJpbmdfcHJpY2U9MzAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9AGNwcm9pZD0Ad2Q9MTM1NzkxNjQ5MgB0dT11NTAzOTUyNABhZGNsYXNzPTAAc3JjdD0wAHBvcz0wAGxvYz01AGVpZD0wAGNiaWQ9WThHNl9nQU5iMlY3akVwZ1c1SUE4bGYzekhFNDdtdDhyRVBRVUEAYmNobWQ9MAB0bT0wAHY9MQBpPTg4ZGJhN2U1
200 OK 49 B URL HTTP/1.1 wn.pos.baidu.com/adx.php?c=d25pZD0wYjllMzkyN2FmNDhmNmUzAHM9MGI5ZTM5MjdhZjQ4ZjZlMwB0PTE2NzM2NDA3MDIAc2U9MQBidT00AHByaWNlPVk4RzZfZ0FOYjJWN2pFcGdXNUlBOGxmM3pIRTQ3bXQ4ckVQUVVBAGNoYXJnZV9wcmljZT0zAHNoYXJpbmdfcHJpY2U9MzAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9AGNwcm9pZD0Ad2Q9MTM1NzkxNjQ5MgB0dT11NTAzOTUyNABhZGNsYXNzPTAAc3JjdD0wAHBvcz0wAGxvYz01AGVpZD0wAGNiaWQ9WThHNl9nQU5iMlY3akVwZ1c1SUE4bGYzekhFNDdtdDhyRVBRVUEAYmNobWQ9MAB0bT0wAHY9MQBpPTg4ZGJhN2U1
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ed280a0ea3cc38f3cbbc747acfbef47d
6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
GET /adx.php?c=d25pZD0wYjllMzkyN2FmNDhmNmUzAHM9MGI5ZTM5MjdhZjQ4ZjZlMwB0PTE2NzM2NDA3MDIAc2U9MQBidT00AHByaWNlPVk4RzZfZ0FOYjJWN2pFcGdXNUlBOGxmM3pIRTQ3bXQ4ckVQUVVBAGNoYXJnZV9wcmljZT0zAHNoYXJpbmdfcHJpY2U9MzAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9AGNwcm9pZD0Ad2Q9MTM1NzkxNjQ5MgB0dT11NTAzOTUyNABhZGNsYXNzPTAAc3JjdD0wAHBvcz0wAGxvYz01AGVpZD0wAGNiaWQ9WThHNl9nQU5iMlY3akVwZ1c1SUE4bGYzekhFNDdtdDhyRVBRVUEAYmNobWQ9MAB0bT0wAHY9MQBpPTg4ZGJhN2U1 HTTP/1.1
Host: wn.pos.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 49
Content-Type: image/gif
Date: Fri, 13 Jan 2023 20:11:44 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: BAIDUID=3E6D834A944540F3B8987FB3AA048570:FG=1; expires=Sat, 13-Jan-24 20:11:44 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
img2.baidu.com/it/u=2482274954,583409756&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 90 kB URL HTTP/1.1 img2.baidu.com/it/u=2482274954,583409756&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Hash 064e541ec8de60485df3d101115f074e
535c1b5746f7971ec8de424f07e6b251d4aedea1
81a22e9259bb6c36f80032fea4e46ec52ffbdedfe45182babee22799e10291e5
GET /it/u=2482274954,583409756&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 90515
Connection: keep-alive
Expires: Thu, 09 Feb 2023 09:09:36 GMT
Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT
ETag: 064e541ec8de60485df3d101115f074e
Age: 282399
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 10 Jan 2023 09:09:36 GMT
Ohc-Cache-HIT: jh2ct72 [4], wzix72 [2]
Ohc-File-Size: 90515
X-Cache-Status: HIT
img1.baidu.com/it/u=2179758687,2656114737&fm=253&app=120&f=JPEG?w=1422&h=800
200 OK 97 kB URL HTTP/1.1 img1.baidu.com/it/u=2179758687,2656114737&fm=253&app=120&f=JPEG?w=1422&h=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1422x800, components 3\012- data
Hash aa56613d3824458bdf82758ebc994c84
461f0a13adc1e8a87f8374bc40a66402b7348a7d
475df7a82ca96d74133eb00d056efd4d36342100fb65da138512b591934c603d
GET /it/u=2179758687,2656114737&fm=253&app=120&f=JPEG?w=1422&h=800 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 97284
Connection: keep-alive
Expires: Sat, 21 Jan 2023 00:48:00 GMT
Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT
ETag: aa56613d3824458bdf82758ebc994c84
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 22 Dec 2022 00:48:00 GMT
Ohc-Cache-HIT: lz5ct67 [1], xiangyix124 [2]
Ohc-File-Size: 97284
X-Cache-Status: MISS
sofire.baidu.com/abot/api/v1/tpl/re/8800?v=1.1&0=1&1=0&2=0&3=0&4=0&5=0&6=0&7=1&8=v10-479d5a4ddddfc4213d96d207f5add062eca52bb6&9=0&10=1&11=1534&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&t=1673640688612&r=lo
200 OK 0 B URL HTTP/2 sofire.baidu.com/abot/api/v1/tpl/re/8800?v=1.1&0=1&1=0&2=0&3=0&4=0&5=0&6=0&7=1&8=v10-479d5a4ddddfc4213d96d207f5add062eca52bb6&9=0&10=1&11=1534&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&t=1673640688612&r=lo
IP
ASN #23724 IDC, China Telecommunications Corporation
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /abot/api/v1/tpl/re/8800?v=1.1&0=1&1=0&2=0&3=0&4=0&5=0&6=0&7=1&8=v10-479d5a4ddddfc4213d96d207f5add062eca52bb6&9=0&10=1&11=1534&u=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&h=http%3A%2F%2F12803.url.tudown.com%2Fdown%2F%25E9%2587%258D%25E7%2594%259F%25E4%25B9%258B%25E8%2583%2596%25E5%25A6%259E%25E9%2580%2586%25E8%25A2%25AD%25E5%2585%258D%25E8%25B4%25B9%25E7%25A0%25B4%25E8%25A7%25A3%25E7%2589%2588%40324_161351.exe&t=1673640688612&r=lo HTTP/1.1
Host: sofire.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Fri, 13 Jan 2023 20:11:44 GMT
content-length: 0
X-Firefox-Spdy: h2
img1.baidu.com/it/u=1381776271,2572623697&fm=253&fmt=auto&app=138&f=JPEG?w=563&h=500
200 OK 26 kB URL HTTP/2 img1.baidu.com/it/u=1381776271,2572623697&fm=253&fmt=auto&app=138&f=JPEG?w=563&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 563x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7e005dc24865960dbdbe50f049184906
11e6d1219ef20c995a87663093c1b805af446fec
6b30378f75ec1baedd47d2b07aee24c35b7eac9b9a76dcc9e5b42f5befdc3b9d
GET /it/u=1381776271,2572623697&fm=253&fmt=auto&app=138&f=JPEG?w=563&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 26220
expires: Wed, 25 Jan 2023 02:42:02 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: 7e005dc24865960dbdbe50f049184906
age: 151681
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 26 Dec 2022 02:42:02 GMT
ohc-cache-hit: lz5ct54 [4], qdix54 [4]
ohc-file-size: 26220
x-cache-status: HIT
X-Firefox-Spdy: h2
img1.baidu.com/it/u=3680394737,2253167893&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=270
200 OK 22 kB URL HTTP/2 img1.baidu.com/it/u=3680394737,2253167893&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=270
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 632387cda95c8f57259b0fbc95ad1508
ca4f9469ab51f6e59fef883e5c4a995dd8cd2106
ac651be11c17d9362df1c6d3867f6dc33b4fcd764c79a2e00f3b332abb7adcb3
GET /it/u=3680394737,2253167893&fm=253&fmt=auto&app=138&f=JPEG?w=480&h=270 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 22290
expires: Wed, 18 Jan 2023 19:17:52 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 632387cda95c8f57259b0fbc95ad1508
age: 154752
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 19 Dec 2022 19:17:52 GMT
ohc-cache-hit: lz5ct54 [4], qdix54 [4]
ohc-file-size: 22290
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=3442397391,4272240420&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
200 OK 34 kB URL HTTP/2 img0.baidu.com/it/u=3442397391,4272240420&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x889, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8f562671379da607da509f3eb67aedc8
85afdec0c502ec3752d76bdbae24f2a618005fd3
54ed138ba6e260eea20f16a42369063ae9ef51be045734cc245816003662407f
GET /it/u=3442397391,4272240420&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 33892
expires: Thu, 19 Jan 2023 09:40:41 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: 8f562671379da607da509f3eb67aedc8
age: 323180
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Tue, 20 Dec 2022 09:40:41 GMT
ohc-cache-hit: lz5ct60 [4], wzix60 [4]
ohc-file-size: 33892
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/284801.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/284801.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/284801.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=3789432413,4266431036&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/526925.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/526925.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/526925.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=3230920261,938425230&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/528641.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/528641.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/528641.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=3760551908,4089021835&fm=253&fmt=auto&app=138&f=JPEG?w=658&h=465
12803.url.tudown.com/uploads/images/158139.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/158139.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/158139.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3587721667,3025861923&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=119
12803.url.tudown.com/uploads/images/444057.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/444057.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/444057.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500
t14.baidu.com/it/u=3230920261,938425230&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 38 kB URL HTTP/1.1 t14.baidu.com/it/u=3230920261,938425230&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 1edc66598f8d83780955194261c87fd8
3ed93ce31dd8e57443d531ac234c21f437ccc7e7
5531b1e2fe0b67f687e8afac2ee91fe626d7e28b537d70346e244364ec5048cb
GET /it/u=3230920261,938425230&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 37756
Connection: keep-alive
Expires: Mon, 06 Feb 2023 00:39:08 GMT
Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT
ETag: 1edc66598f8d83780955194261c87fd8
Age: 3957
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 07 Jan 2023 00:39:08 GMT
Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache57 [1], czix106 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 37756
X-Cache-Status: HIT
Timing-Allow-Origin: *
wn.pos.baidu.com/adx.php?c=d25pZD1mMmJkYzRmOTk0MDY3OWI1AHM9ZjJiZGM0Zjk5NDA2NzliNQB0PTE2NzM2NDA3MDIAc2U9MQBidT00AHByaWNlPVk4RzZfZ0FOZDBKN2pFcGdXNUlBOGpYQXJSN3lER0NGZjVVdTBBAGNoYXJnZV9wcmljZT0yMgBzaGFyaW5nX3ByaWNlPTIyMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD0AY3Byb2lkPQB3ZD05MjQ4MjQwMjEAdHU9dTQ5NjU4OTQAYWRjbGFzcz0wAHNyY3Q9MABwb3M9MABsb2M9NQBlaWQ9MABjYmlkPVk4RzZfZ0FOZDBKN2pFcGdXNUlBOGpYQXJSN3lER0NGZjVVdTBBAGJjaG1kPTAAdG09MAB2PTEAaT01MTg4ODlhOA
200 OK 49 B URL HTTP/1.1 wn.pos.baidu.com/adx.php?c=d25pZD1mMmJkYzRmOTk0MDY3OWI1AHM9ZjJiZGM0Zjk5NDA2NzliNQB0PTE2NzM2NDA3MDIAc2U9MQBidT00AHByaWNlPVk4RzZfZ0FOZDBKN2pFcGdXNUlBOGpYQXJSN3lER0NGZjVVdTBBAGNoYXJnZV9wcmljZT0yMgBzaGFyaW5nX3ByaWNlPTIyMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD0AY3Byb2lkPQB3ZD05MjQ4MjQwMjEAdHU9dTQ5NjU4OTQAYWRjbGFzcz0wAHNyY3Q9MABwb3M9MABsb2M9NQBlaWQ9MABjYmlkPVk4RzZfZ0FOZDBKN2pFcGdXNUlBOGpYQXJSN3lER0NGZjVVdTBBAGJjaG1kPTAAdG09MAB2PTEAaT01MTg4ODlhOA
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ed280a0ea3cc38f3cbbc747acfbef47d
6bdcb32ee75e957a5085c010f4dfd0c716bfdadc
8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5
GET /adx.php?c=d25pZD1mMmJkYzRmOTk0MDY3OWI1AHM9ZjJiZGM0Zjk5NDA2NzliNQB0PTE2NzM2NDA3MDIAc2U9MQBidT00AHByaWNlPVk4RzZfZ0FOZDBKN2pFcGdXNUlBOGpYQXJSN3lER0NGZjVVdTBBAGNoYXJnZV9wcmljZT0yMgBzaGFyaW5nX3ByaWNlPTIyMDAwAHdpbl9kc3A9NABjaG1kPTEAYmRpZD0AY3Byb2lkPQB3ZD05MjQ4MjQwMjEAdHU9dTQ5NjU4OTQAYWRjbGFzcz0wAHNyY3Q9MABwb3M9MABsb2M9NQBlaWQ9MABjYmlkPVk4RzZfZ0FOZDBKN2pFcGdXNUlBOGpYQXJSN3lER0NGZjVVdTBBAGJjaG1kPTAAdG09MAB2PTEAaT01MTg4ODlhOA HTTP/1.1
Host: wn.pos.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 49
Content-Type: image/gif
Date: Fri, 13 Jan 2023 20:11:44 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: BAIDUID=CBC914DB144AA36540A1F97F2D424C81:FG=1; expires=Sat, 13-Jan-24 20:11:44 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
img1.baidu.com/it/u=1043417095,771915572&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=300
200 OK 16 kB URL HTTP/2 img1.baidu.com/it/u=1043417095,771915572&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=300
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 260bde16380cb04e8b99a693c137c1fa
95ef480315b8c9023bddfb53e2776e3bb7db2ac5
b99b5cbcaccbb52d0e63eadd7c69596add9c29357c2d0f5c8b3afdd73a6d2892
GET /it/u=1043417095,771915572&fm=253&fmt=auto&app=138&f=JPEG?w=400&h=300 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:44 GMT
content-type: image/webp
content-length: 16256
expires: Mon, 23 Jan 2023 09:11:49 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 260bde16380cb04e8b99a693c137c1fa
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 24 Dec 2022 09:11:49 GMT
ohc-cache-hit: lz5ct68 [1], bdix92 [4]
ohc-file-size: 16256
x-cache-status: MISS
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/900965.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/900965.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/900965.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=2598962451,1485475895&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
t13.baidu.com/it/u=3789432413,4266431036&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 53 kB URL HTTP/1.1 t13.baidu.com/it/u=3789432413,4266431036&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash ad142c8238499d8797688737249cd9d5
3b2787feffbb1e9943937d09bbd94ee23f0d488f
3c82fece0e25eb773ff421de6f2aa8ee8c3d096bd7169d052f63399415bbcb79
GET /it/u=3789432413,4266431036&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Content-Length: 53232
Connection: keep-alive
Expires: Fri, 10 Feb 2023 12:06:35 GMT
Last-Modified: Sun, 18 Jan 1970 00:00:00 GMT
ETag: ad142c8238499d8797688737249cd9d5
Age: 168780
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 11 Jan 2023 12:06:35 GMT
Ohc-Cache-HIT: fra01-sys-jomo3.fra01.baidu.com [2], zhuzuncache63 [2], qdix214 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 53232
X-Cache-Status: HIT
Timing-Allow-Origin: *
t15.baidu.com/it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500
304 Not Modified 0 B URL HTTP/1.1 t15.baidu.com/it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it/u=1505718934,344135737&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
If-Modified-Since: Thu, 08 Jan 1970 00:00:00 GMT
If-None-Match: 8c3e2b46dec06e16a6282e0d40ac01fc
HTTP/1.1 304 Not Modified
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:44 GMT
Content-Type: image/jpeg
Connection: keep-alive
Expires: Thu, 26 Jan 2023 09:38:13 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 8c3e2b46dec06e16a6282e0d40ac01fc
Age: 1271516
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Tue, 27 Dec 2022 09:38:13 GMT
Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache65 [1], xaix232 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 47176
X-Cache-Status: HIT
Timing-Allow-Origin: *
img1.baidu.com/it/u=3587721667,3025861923&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=119
200 OK 3.3 kB URL HTTP/2 img1.baidu.com/it/u=3587721667,3025861923&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=119
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 86x119, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ecf1e4373ab3492c4ce094bb62caebc0
0f8d346fd2f4a2ce81200a75610d19612231e50d
5e71da7cb612593f75419e8e5c0cc57e43c1d5597cecd68d0bbfe70c5263827e
GET /it/u=3587721667,3025861923&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=119 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 3302
expires: Sat, 04 Feb 2023 03:33:04 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: ecf1e4373ab3492c4ce094bb62caebc0
age: 26966
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 05 Jan 2023 03:33:04 GMT
ohc-cache-hit: lz5ct56 [4], xiangyix56 [4]
ohc-file-size: 3302
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/50420.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/50420.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/50420.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=3881523669,1000175870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
12803.url.tudown.com/uploads/images/32862.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/32862.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/32862.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1886792067,848633028&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
img2.baidu.com/it/u=3760551908,4089021835&fm=253&fmt=auto&app=138&f=JPEG?w=658&h=465
200 OK 63 kB URL HTTP/1.1 img2.baidu.com/it/u=3760551908,4089021835&fm=253&fmt=auto&app=138&f=JPEG?w=658&h=465
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 658x465, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e8881d0b8c6dc419c000fa1876ecc6f1
8dcae33ba227e417bb654ad3fdbc463163ceb46c
fe0cef7c9ed03a52482aecf18424ce3b00dc776813a42dd218736f6054cccd89
GET /it/u=3760551908,4089021835&fm=253&fmt=auto&app=138&f=JPEG?w=658&h=465 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/webp
Content-Length: 62700
Connection: keep-alive
Expires: Tue, 31 Jan 2023 09:46:48 GMT
Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT
ETag: e8881d0b8c6dc419c000fa1876ecc6f1
Age: 1074297
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 01 Jan 2023 09:46:48 GMT
Ohc-Cache-HIT: jh2ct64 [4], csix113 [4]
Ohc-File-Size: 62700
X-Cache-Status: HIT
12803.url.tudown.com/uploads/images/874824.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/874824.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/874824.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1402048371,4073689408&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
12803.url.tudown.com/uploads/images/355948.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/355948.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/355948.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=2842691146,1532805845&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/139808.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/139808.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/139808.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img0.baidu.com/it/u=930554859,850887514&fm=253&app=120&f=JPEG?w=1422&h=800
cpro.baidustatic.com/cpro/ui/noexpire/img/2.0.0/native_ad.png
200 OK 4.5 kB URL HTTP/2 cpro.baidustatic.com/cpro/ui/noexpire/img/2.0.0/native_ad.png
IP
File type PNG image data, 44 x 984, 8-bit colormap, non-interlaced\012- data
Hash 3e2d110dd13ae372eac3c04347687487
666c77091671206a1ee7202bfa821afa63dfed94
4b86aeb9d139835e6517cef965d3442d8efca774abc2d6befc580ec63aace62e
GET /cpro/ui/noexpire/img/2.0.0/native_ad.png HTTP/1.1
Host: cpro.baidustatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/png
content-length: 4514
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Fri, 01 Apr 2022 07:05:03 GMT
etag: "6246a41f-11a2"
cache-control: max-age=315360000
age: 63151
accept-ranges: bytes
timing-allow-origin: *
ohc-global-saved-time: Tue, 21 Jun 2022 04:49:12 GMT
ohc-cache-hit: yy2ct60 [2], wzix60 [2]
ohc-file-size: 4514
x-cache-status: HIT
X-Firefox-Spdy: h2
t14.baidu.com/it/u=2842691146,1532805845&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 28 kB URL HTTP/1.1 t14.baidu.com/it/u=2842691146,1532805845&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 3fc28001dfb6229466c2f702f132da30
5c82d6090de99b8a88efc9d08a37a55cce9be75b
6f5d176f834bcec68c533f0a6652c417abc93d251c5584400e3ca1dbd47435a8
GET /it/u=2842691146,1532805845&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 27690
Connection: keep-alive
Expires: Sat, 11 Feb 2023 00:55:15 GMT
Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT
ETag: 3fc28001dfb6229466c2f702f132da30
Age: 146838
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 12 Jan 2023 00:55:14 GMT
Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache51 [4], wzix51 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 27690
X-Cache-Status: HIT
Timing-Allow-Origin: *
12803.url.tudown.com/uploads/images/94080.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/94080.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/94080.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t13.baidu.com/it/u=2423740803,4005398423&fm=224&app=112&f=JPEG?w=500&h=500
img1.baidu.com/it/u=2598962451,1485475895&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
200 OK 32 kB URL HTTP/2 img1.baidu.com/it/u=2598962451,1485475895&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1c8864fa86fb108b12bab5463e245cdd
1cc467a5cd066a9318709dc503f8fc4037b8cdbe
7f1a55b4b9c021336c87026d480ee932b61a283ce1cb11775b9a3ca9ac3718be
GET /it/u=2598962451,1485475895&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 31902
expires: Mon, 23 Jan 2023 04:33:50 GMT
last-modified: Mon, 05 Jan 1970 00:00:00 GMT
etag: 1c8864fa86fb108b12bab5463e245cdd
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 24 Dec 2022 04:33:50 GMT
ohc-cache-hit: lz5ct50 [1], xiangyix109 [2]
ohc-file-size: 31902
x-cache-status: MISS
X-Firefox-Spdy: h2
t13.baidu.com/it/u=2423740803,4005398423&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 27 kB URL HTTP/1.1 t13.baidu.com/it/u=2423740803,4005398423&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 4c528e55e50bbdc0fa9fba29808c8521
3f8bdd64d3733be1aac5fc201bd4b18b77ef5030
29affc6fe60b169806acb5b1e5f8537925812a4cf67e400accc5a757a8a7bb43
GET /it/u=2423740803,4005398423&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t13.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 26833
Connection: keep-alive
Expires: Mon, 16 Jan 2023 00:12:27 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: 4c528e55e50bbdc0fa9fba29808c8521
Age: 168358
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 17 Dec 2022 00:12:27 GMT
Ohc-Cache-HIT: fra01-sys-jomo3.fra01.baidu.com [2], zhuzuncache57 [4], czix153 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 26833
X-Cache-Status: HIT
Timing-Allow-Origin: *
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 0013e9db00b6a3eb9f40d36b5ffa1370
51ef63e4917fc895d31a8351a728469a95511018
8cb05fbaa34d97773b8cc4ed804ef9ff6ee2e8a03fb64c9658618632fd6cb34d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 13 Jan 2023 20:11:45 GMT
Ali-Swift-Global-Savetime: 1673640705
Via: cache10.l2de2[236,235,200-0,M], cache10.l2de2[236,0], cache4.nl2[245,244,200-0,M], cache4.nl2[247,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309816736407052532864e
img1.baidu.com/it/u=3881523669,1000175870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
200 OK 32 kB URL HTTP/2 img1.baidu.com/it/u=3881523669,1000175870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x281, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b19580c0f53341267bbc1c38d036d478
cb95fe7b1ef803d47ae4221884e8197e839daf9b
1946dc8a9a0289be7318d78d5839f5303c8219fd57922dfc51c2d87bc69d052f
GET /it/u=3881523669,1000175870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 32496
expires: Sat, 21 Jan 2023 05:52:52 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: b19580c0f53341267bbc1c38d036d478
age: 385052
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 05:52:52 GMT
ohc-cache-hit: lz5ct70 [4], xaix242 [4]
ohc-file-size: 32496
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1886792067,848633028&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
200 OK 60 kB URL HTTP/2 img0.baidu.com/it/u=1886792067,848633028&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 889x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1e3e6c251c7500590f83480f7b94d0df
dde1d227d2911995bcab5dac67f7de853b78312e
7ee5c32cfd2f9620ce9b9746774bb29283be6064b755bca0106329f91d7fe6cd
GET /it/u=1886792067,848633028&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 59564
expires: Sat, 21 Jan 2023 11:31:58 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 1e3e6c251c7500590f83480f7b94d0df
age: 1849
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 11:31:58 GMT
ohc-cache-hit: lz5ct51 [4], qdix51 [4]
ohc-file-size: 59564
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1402048371,4073689408&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
200 OK 19 kB URL HTTP/2 img0.baidu.com/it/u=1402048371,4073689408&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 281x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ecb6c6584ccd9ba1113e51aadd1e5488
992ef0d7d1d4c179d5089030273d77d7713ea626
d2acb9d0bafbd499b6230f4b103052d989b5425def0c8eae2baa308dbfa18241
GET /it/u=1402048371,4073689408&fm=253&fmt=auto&app=138&f=JPEG?w=281&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 19422
expires: Wed, 08 Feb 2023 15:37:45 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: ecb6c6584ccd9ba1113e51aadd1e5488
age: 360568
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 09 Jan 2023 15:37:44 GMT
ohc-cache-hit: lz5ct51 [4], suzix245 [2]
ohc-file-size: 19422
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/14806.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/14806.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/14806.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=4108683146,643385273&fm=224&app=112&f=JPEG?w=500&h=500
img0.baidu.com/it/u=930554859,850887514&fm=253&app=120&f=JPEG?w=1422&h=800
200 OK 141 kB URL HTTP/1.1 img0.baidu.com/it/u=930554859,850887514&fm=253&app=120&f=JPEG?w=1422&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1422x800, components 3\012- data
Size 141 kB (140608 bytes)
Hash 1b9d63b6fcbb97aad830b5bd9679a0c5
de61f8dfacab359392375decec78d63b05c515c6
cd323d0c376ed2ce3298a79b578b3bf7594ca83cfb8a6e2721026db239b78148
GET /it/u=930554859,850887514&fm=253&app=120&f=JPEG?w=1422&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 140608
Connection: keep-alive
Expires: Fri, 03 Feb 2023 09:02:52 GMT
Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT
ETag: 1b9d63b6fcbb97aad830b5bd9679a0c5
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Wed, 04 Jan 2023 09:02:52 GMT
Ohc-Cache-HIT: jh2ct70 [2], qdix205 [3]
Ohc-File-Size: 140608
X-Cache-Status: MISS
12803.url.tudown.com/uploads/images/242831.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/242831.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/242831.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=1398182852,637093904&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
12803.url.tudown.com/uploads/images/283911.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/283911.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/283911.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=4136145966,2942858870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=800
12803.url.tudown.com/uploads/images/821204.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/821204.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/821204.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=3105392263,1108592492&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/991944.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/991944.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/991944.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=3695860788,2767676066&fm=253&app=138&f=JPEG?w=800&h=500
t14.baidu.com/it/u=4108683146,643385273&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 57 kB URL HTTP/1.1 t14.baidu.com/it/u=4108683146,643385273&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 0772e506187cc5736b3ce991559deb7f
ddcedffa243c775ef15e6bdd271c99b9cc8b3dff
fab57e3523e4d6d2f0f8c36c2da3ce68a10d8b47eb5aedbeaf93510cb5cba620
GET /it/u=4108683146,643385273&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 56747
Connection: keep-alive
Expires: Sat, 04 Feb 2023 09:32:28 GMT
Last-Modified: Fri, 09 Jan 1970 00:00:00 GMT
ETag: 0772e506187cc5736b3ce991559deb7f
Age: 169074
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 05 Jan 2023 09:32:28 GMT
Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [4], zhuzuncache56 [2], czix237 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 56747
X-Cache-Status: HIT
Timing-Allow-Origin: *
eclick.baidu.com/rs.jpg?pageSearchId=1673640686589e0i2e3dlisb&content=%7BpgSacI%22%22634668eiedib%2CneUla%22tu%2Cevrnet%3A%7Btp%22%22niomn%22%22eieyaer%22%22tp%2F183ultdw.o%2Fon%2598%25DE%2549%254B%25BE%2539%255A%25EE%2508%258A%25DE%2558%258B%259E%250B%258A%253E%2598%402_631ee%2CpgSacI%22%22634668eiedib%7D%7D%22aeerhd%3A1760859023ls%22%22edpod%3Are%22niomn%22%5B%22ye%3Aevrnet%2CdlvrPgUl%3Aht%3A%2F20.r.uoncmdw%2FE%2578%2579%25FE%2598%2588%256E%2569%2598%256E%252A%2558%25DE%254B%257A%254E%257A%2578%25834115.x%22%22aeerhd%3A1760859023ls%22%5D
200 OK 0 B URL HTTP/1.1 eclick.baidu.com/rs.jpg?pageSearchId=1673640686589e0i2e3dlisb&content=%7BpgSacI%22%22634668eiedib%2CneUla%22tu%2Cevrnet%3A%7Btp%22%22niomn%22%22eieyaer%22%22tp%2F183ultdw.o%2Fon%2598%25DE%2549%254B%25BE%2539%255A%25EE%2508%258A%25DE%2558%258B%259E%250B%258A%253E%2598%402_631ee%2CpgSacI%22%22634668eiedib%7D%7D%22aeerhd%3A1760859023ls%22%22edpod%3Are%22niomn%22%5B%22ye%3Aevrnet%2CdlvrPgUl%3Aht%3A%2F20.r.uoncmdw%2FE%2578%2579%25FE%2598%2588%256E%2569%2598%256E%252A%2558%25DE%254B%257A%254E%257A%2578%25834115.x%22%22aeerhd%3A1760859023ls%22%5D
IP
ASN #4808 China Unicom Beijing Province Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rs.jpg?pageSearchId=1673640686589e0i2e3dlisb&content=%7BpgSacI%22%22634668eiedib%2CneUla%22tu%2Cevrnet%3A%7Btp%22%22niomn%22%22eieyaer%22%22tp%2F183ultdw.o%2Fon%2598%25DE%2549%254B%25BE%2539%255A%25EE%2508%258A%25DE%2558%258B%259E%250B%258A%253E%2598%402_631ee%2CpgSacI%22%22634668eiedib%7D%7D%22aeerhd%3A1760859023ls%22%22edpod%3Are%22niomn%22%5B%22ye%3Aevrnet%2CdlvrPgUl%3Aht%3A%2F20.r.uoncmdw%2FE%2578%2579%25FE%2598%2588%256E%2569%2598%256E%252A%2558%25DE%254B%257A%254E%257A%2578%25834115.x%22%22aeerhd%3A1760859023ls%22%5D HTTP/1.1
Host: eclick.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=0
Connection: keep-alive
Content-Length: 0
Content-Type: image/jpeg
Date: Fri, 13 Jan 2023 20:11:45 GMT
Etag: "62c54c5a-0"
Expires: Fri, 13 Jan 2023 20:11:45 GMT
Last-Modified: Wed, 06 Jul 2022 08:48:26 GMT
Server: nginx
12803.url.tudown.com/uploads/images/466004.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/466004.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/466004.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3003072192,3955227881&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=695
t15.baidu.com/it/u=3105392263,1108592492&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 37 kB URL HTTP/1.1 t15.baidu.com/it/u=3105392263,1108592492&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 551eb5bc16e625cbee37678cf26a708e
4f79bc9ef5bcd0187d312b170d56689165e538fb
fb3a7077d60acd6b8917fe877c0fa91bb836700a6b2c603f38f9a1c1cb89eae7
GET /it/u=3105392263,1108592492&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 37179
Connection: keep-alive
Expires: Mon, 23 Jan 2023 10:37:38 GMT
Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT
ETag: 551eb5bc16e625cbee37678cf26a708e
Age: 1257037
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 24 Dec 2022 10:37:38 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache56 [4], suzix85 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 37179
X-Cache-Status: HIT
Timing-Allow-Origin: *
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 0013e9db00b6a3eb9f40d36b5ffa1370
51ef63e4917fc895d31a8351a728469a95511018
8cb05fbaa34d97773b8cc4ed804ef9ff6ee2e8a03fb64c9658618632fd6cb34d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 13 Jan 2023 20:11:45 GMT
Ali-Swift-Global-Savetime: 1673640705
Via: cache17.l2de2[469,468,200-0,M], cache17.l2de2[469,0], cache8.nl2[476,475,200-0,M], cache8.nl2[478,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309c16736407052514912e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 0013e9db00b6a3eb9f40d36b5ffa1370
51ef63e4917fc895d31a8351a728469a95511018
8cb05fbaa34d97773b8cc4ed804ef9ff6ee2e8a03fb64c9658618632fd6cb34d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 13 Jan 2023 20:11:45 GMT
Last-Modified: Fri, 13 Jan 2023 15:48:36 GMT
ETag: "63c17d54-1d7"
Expires: Sun, 15 Jan 2023 15:48:36 GMT
Cache-Control: max-age=157011
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1673640705
Via: cache8.l2de2[479,479,200-0,M], cache8.l2de2[481,0], cache5.nl2[487,486,200-0,M], cache5.nl2[488,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309916736407052733607e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 0013e9db00b6a3eb9f40d36b5ffa1370
51ef63e4917fc895d31a8351a728469a95511018
8cb05fbaa34d97773b8cc4ed804ef9ff6ee2e8a03fb64c9658618632fd6cb34d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 13 Jan 2023 20:11:45 GMT
Last-Modified: Fri, 13 Jan 2023 15:48:36 GMT
ETag: "63c17d54-1d7"
Expires: Sun, 15 Jan 2023 15:48:36 GMT
Cache-Control: max-age=157011
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1673640705
Via: cache16.l2de2[461,460,200-0,M], cache16.l2de2[462,0], cache4.nl2[469,469,200-0,M], cache4.nl2[470,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309816736407053333064e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 0013e9db00b6a3eb9f40d36b5ffa1370
51ef63e4917fc895d31a8351a728469a95511018
8cb05fbaa34d97773b8cc4ed804ef9ff6ee2e8a03fb64c9658618632fd6cb34d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Fri, 13 Jan 2023 20:11:45 GMT
Last-Modified: Fri, 13 Jan 2023 15:48:36 GMT
ETag: "63c17d54-1d7"
Expires: Sun, 15 Jan 2023 15:48:36 GMT
Cache-Control: max-age=157011
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1673640705
Via: cache12.l2de2[468,468,200-0,M], cache12.l2de2[470,0], cache3.nl2[476,476,200-0,M], cache3.nl2[479,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 13 Jan 2023 20:11:45 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309716736407053535335e
bdsearch.2345.com/auto_ds?ttv=nlo-&gjj=vw02rwz12&kgi=v01x0yu020uwz&uij=v&ukd=4ONIUDMIHJ&riz=w&vogj=vvuuvv&ut=y&rr=v<=vw2urvuuw&gjz=uz-yuZ3y.Z-0wZY1&gzj=VvrVv&ckl=bnnjWx4Ww9Ww9vw2uxWUolfWUno_iqhWUZigWw9_iqhWw9Wwz83Wwz21Wwz27Wwz81Wwz3yWwz39Wwz8yWwz53Wwz25Wwz82Wwz2xWwz30Wwz8zWwz40Wwz38Wwz83Wwz2uWwz20Wwz82Wwz4wWwz47Wwz8zWwz2zWwz27Wwz82Wwz5yWwz53Wwz81Wwz4uWwz5yWwz82Wwz41Wwz4xWwz81Wwz23Wwz22WyuxwyUv0vxzvWU-r-&ji=vw2urvuwy>j=vw02r3x3&uiz=u&tvt=ON9V2&uzj=u&urz=u&kte=v01x0yu020&llzu=y__1-Z3.XZY.._y3&uwk=u&mvi=vwwv&vtu=v&kz=W8zW56W2uW8yW54W3vW6wW51W8yW57W3xW82W2wW5wW8zW48W32W81W57W3v(W8yW52W47W8zW35W57)W8zW48W32W80W30W53W81W57W3vW81W45W33VW8zW48W4wW80W22W51W81W45W49W8yW52W25W82W57W57P0WUx1WUvywUCIMWw9W8zW48W23W8zW27W3xW83W2uW34W81W3yW42W81W23W22&gj=uru&gifk=w&uts=UUUYXc_oUohcihUZXffYXZe&umz=uWUu&kcd=v01x0yu020&tgc=u&usm=u&rek=u&uz=u&ugk=hih-&tyz=v&vel=-hZi_cha&in=3x3&twm=u&utz=Vv
200 OK 78 B URL HTTP/2 bdsearch.2345.com/auto_ds?ttv=nlo-&gjj=vw02rwz12&kgi=v01x0yu020uwz&uij=v&ukd=4ONIUDMIHJ&riz=w&vogj=vvuuvv&ut=y&rr=v<=vw2urvuuw&gjz=uz-yuZ3y.Z-0wZY1&gzj=VvrVv&ckl=bnnjWx4Ww9Ww9vw2uxWUolfWUno_iqhWUZigWw9_iqhWw9Wwz83Wwz21Wwz27Wwz81Wwz3yWwz39Wwz8yWwz53Wwz25Wwz82Wwz2xWwz30Wwz8zWwz40Wwz38Wwz83Wwz2uWwz20Wwz82Wwz4wWwz47Wwz8zWwz2zWwz27Wwz82Wwz5yWwz53Wwz81Wwz4uWwz5yWwz82Wwz41Wwz4xWwz81Wwz23Wwz22WyuxwyUv0vxzvWU-r-&ji=vw2urvuwy>j=vw02r3x3&uiz=u&tvt=ON9V2&uzj=u&urz=u&kte=v01x0yu020&llzu=y__1-Z3.XZY.._y3&uwk=u&mvi=vwwv&vtu=v&kz=W8zW56W2uW8yW54W3vW6wW51W8yW57W3xW82W2wW5wW8zW48W32W81W57W3v(W8yW52W47W8zW35W57)W8zW48W32W80W30W53W81W57W3vW81W45W33VW8zW48W4wW80W22W51W81W45W49W8yW52W25W82W57W57P0WUx1WUvywUCIMWw9W8zW48W23W8zW27W3xW83W2uW34W81W3yW42W81W23W22&gj=uru&gifk=w&uts=UUUYXc_oUohcihUZXffYXZe&umz=uWUu&kcd=v01x0yu020&tgc=u&usm=u&rek=u&uz=u&ugk=hih-&tyz=v&vel=-hZi_cha&in=3x3&twm=u&utz=Vv
IP
File type ASCII text, with no line terminators
Hash 0bfc082c87e43cfe560c673d59358dde
b73af443fdc291cb5242785b33222f3c390e8e3c
89daae671a7cbde9fbb427a295ae463927f180cfb2f3a8c324e8fd1d00c7014b
GET /auto_ds?ttv=nlo-&gjj=vw02rwz12&kgi=v01x0yu020uwz&uij=v&ukd=4ONIUDMIHJ&riz=w&vogj=vvuuvv&ut=y&rr=v<=vw2urvuuw&gjz=uz-yuZ3y.Z-0wZY1&gzj=VvrVv&ckl=bnnjWx4Ww9Ww9vw2uxWUolfWUno_iqhWUZigWw9_iqhWw9Wwz83Wwz21Wwz27Wwz81Wwz3yWwz39Wwz8yWwz53Wwz25Wwz82Wwz2xWwz30Wwz8zWwz40Wwz38Wwz83Wwz2uWwz20Wwz82Wwz4wWwz47Wwz8zWwz2zWwz27Wwz82Wwz5yWwz53Wwz81Wwz4uWwz5yWwz82Wwz41Wwz4xWwz81Wwz23Wwz22WyuxwyUv0vxzvWU-r-&ji=vw2urvuwy>j=vw02r3x3&uiz=u&tvt=ON9V2&uzj=u&urz=u&kte=v01x0yu020&llzu=y__1-Z3.XZY.._y3&uwk=u&mvi=vwwv&vtu=v&kz=W8zW56W2uW8yW54W3vW6wW51W8yW57W3xW82W2wW5wW8zW48W32W81W57W3v(W8yW52W47W8zW35W57)W8zW48W32W80W30W53W81W57W3vW81W45W33VW8zW48W4wW80W22W51W81W45W49W8yW52W25W82W57W57P0WUx1WUvywUCIMWw9W8zW48W23W8zW27W3xW83W2uW34W81W3yW42W81W23W22&gj=uru&gifk=w&uts=UUUYXc_oUohcihUZXffYXZe&umz=uWUu&kcd=v01x0yu020&tgc=u&usm=u&rek=u&uz=u&ugk=hih-&tyz=v&vel=-hZi_cha&in=3x3&twm=u&utz=Vv HTTP/1.1
Host: bdsearch.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: post-check=0, pre-check=0
content-encoding: gzip
content-type: application/javascript;charset=UTF-8
date: Fri, 13 Jan 2023 20:11:45 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sat Jan 14 04:11:45 2023
p3p: CP=" OTI DSP COR IVA OUR IND COM "
pragma: no-cache
server: yunjiasu
x-xss-protection: 0
yjs-id: c0e7a710e5a937e7-143
content-length: 78
X-Firefox-Spdy: h2
img0.baidu.com/it/u=1398182852,637093904&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
200 OK 47 kB URL HTTP/2 img0.baidu.com/it/u=1398182852,637093904&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 889x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5a4b5075a9197d9bcbe131054737f762
2b9b2f4e2ef14206cbd3822ecf05325b5020a65b
ee0351dad4bfc93daa85c681babb4d75f4767137c2469f31fd0ee35ccbc4c344
GET /it/u=1398182852,637093904&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 46650
expires: Sat, 21 Jan 2023 06:08:27 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 5a4b5075a9197d9bcbe131054737f762
age: 554819
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 06:08:27 GMT
ohc-cache-hit: lz5ct65 [4], suzix65 [4]
ohc-file-size: 46650
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/859449.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/859449.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/859449.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=1150247283,1640345354&fm=224&app=112&f=JPEG?w=500&h=500
img0.baidu.com/it/u=4136145966,2942858870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=800
200 OK 38 kB URL HTTP/2 img0.baidu.com/it/u=4136145966,2942858870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ca476963405019372ad9b7e6d616e844
a1a2c440a80149e4ae09571db291d057c854e376
06ca8a804d64a2b7884ecd620947209179b0c3a0151bd6f797a7083792f67305
GET /it/u=4136145966,2942858870&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 38480
expires: Sat, 21 Jan 2023 12:37:44 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: ca476963405019372ad9b7e6d616e844
age: 400525
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 12:37:44 GMT
ohc-cache-hit: lz5ct56 [4], qdix240 [2]
ohc-file-size: 38480
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/340281.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/340281.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/340281.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3713182546,4167173536&fm=253&fmt=auto?w=1280&h=800
12803.url.tudown.com/uploads/images/753277.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/753277.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/753277.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=2646168825,1094894018&fm=253&app=120&f=JPEG?w=1280&h=800
12803.url.tudown.com/uploads/images/413053.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/413053.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/413053.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t14.baidu.com/it/u=468516396,277323801&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/547902.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/547902.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/547902.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=1811547784,2806101989&fm=253&app=120&f=JPEG?w=1280&h=800
t14.baidu.com/it/u=1150247283,1640345354&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 39 kB URL HTTP/1.1 t14.baidu.com/it/u=1150247283,1640345354&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 18ae2787536a889e947b6c31097b889b
32f7733dad0e0101edffbbabbe771d5f5b448074
ac1bcdbd3ca53a55e0e1e5d5c3e5301bf4239de6bc75a6a94a47deb9fe3a45f7
GET /it/u=1150247283,1640345354&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 38946
Connection: keep-alive
Expires: Sun, 05 Feb 2023 23:59:40 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 18ae2787536a889e947b6c31097b889b
Age: 169670
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 06 Jan 2023 23:59:40 GMT
Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache57 [1], wzix113 [2]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 38946
X-Cache-Status: HIT
Timing-Allow-Origin: *
img1.baidu.com/it/u=3695860788,2767676066&fm=253&app=138&f=JPEG?w=800&h=500
200 OK 70 kB URL HTTP/1.1 img1.baidu.com/it/u=3695860788,2767676066&fm=253&app=138&f=JPEG?w=800&h=500
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x500, components 3\012- data
Hash b9c425cadab90fe2f59fd2e873db00a4
128d4b541462eae7d1fc1cff427aeff815d61fa4
5629cf882b1527444494e5b446793c3c880a94b9c6e9fd21b5f068f9cf833952
GET /it/u=3695860788,2767676066&fm=253&app=138&f=JPEG?w=800&h=500 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 70213
Connection: keep-alive
Expires: Wed, 25 Jan 2023 12:58:53 GMT
Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT
ETag: b9c425cadab90fe2f59fd2e873db00a4
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Mon, 26 Dec 2022 12:58:53 GMT
Ohc-Cache-HIT: lz5ct51 [1], bdix94 [2]
Ohc-File-Size: 70213
X-Cache-Status: MISS
t14.baidu.com/it/u=468516396,277323801&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 31 kB URL HTTP/1.1 t14.baidu.com/it/u=468516396,277323801&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 56426af22708e8742cf2af53ded64ead
bdcbba5ae4a9ffa0e85cab48ec2c7fad25a1f38b
5d9e3e02204264fc1c97b0d637d1889aa3b05de209abc084f2cfeb5c96a31f35
GET /it/u=468516396,277323801&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t14.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpeg
Content-Length: 30569
Connection: keep-alive
Expires: Mon, 23 Jan 2023 15:40:27 GMT
Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT
ETag: 56426af22708e8742cf2af53ded64ead
Age: 168428
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 24 Dec 2022 15:40:27 GMT
Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache50 [1], qdix93 [4]
Ohc-Response-Time: 1 0 0 0 0 0
Ohc-File-Size: 30569
X-Cache-Status: HIT
Timing-Allow-Origin: *
img0.baidu.com/it/u=3003072192,3955227881&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=695
200 OK 33 kB URL HTTP/2 img0.baidu.com/it/u=3003072192,3955227881&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=695
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x695, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 69e09115a39d76a2efa0b6cdd9aac6cc
518385e3288b84a0f93c217935818aec316559d9
3b7cfc0ccd2288883774a38cce28ae6fde50c510528890d2f2f3accbf15ca98c
GET /it/u=3003072192,3955227881&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=695 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/webp
content-length: 32852
expires: Sat, 21 Jan 2023 06:50:17 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 69e09115a39d76a2efa0b6cdd9aac6cc
age: 499612
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 06:50:17 GMT
ohc-cache-hit: lz5ct68 [4], xaix158 [4]
ohc-file-size: 32852
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/583946.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/583946.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/583946.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:45 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=3241384787,1113300379&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=500
lupic.cdn.bcebos.com/20191203/3017154272_14.jpg
200 OK 32 kB URL HTTP/2 lupic.cdn.bcebos.com/20191203/3017154272_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x286, components 3\012- data
Hash bcc5b64c96a6e8f6458bc4ab5f693f9a
c6014adf636fa61ec1979cdc1e7f88f00957de26
bba7634817c698a5fcdda323c6c9b8aca75d22e0fb560f4aafae7231032ee129
GET /20191203/3017154272_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 31834
expires: Sat, 14 Jan 2023 23:33:07 GMT
last-modified: Tue, 03 Dec 2019 08:45:26 GMT
etag: "bcc5b64c96a6e8f6458bc4ab5f693f9a"
age: 159822
accept-ranges: bytes
content-md5: vMW2TJam6PZFi8SrX2k/mg==
x-bce-content-crc32: 609958593
x-bce-debug-id: kixkZUotojcfbZzARjX4zXSCytA5rg1weAw0RS01olCuHvKt33sp4jC/q94VsLjpFvQF3ckyc+iZtQ55rGH0Hg==
x-bce-request-id: 120e7a4f-615a-469f-9e65-30d87782e4bf
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 23:33:07 GMT
ohc-cache-hit: ly4ct75 [2], suzix220 [4]
ohc-file-size: 31834
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20210629/1059990_14.jpg
200 OK 42 kB URL HTTP/2 lupic.cdn.bcebos.com/20210629/1059990_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 280x200, components 3\012- data
Hash 03f091cb3eec6ffcb23c10308f203a61
e074bbd39972c92b2b200963f2137f24fa691af0
701960593f50d8d44cfb2fdbf4b8ef2f567c169ef3d9f441f41047d6df8fb964
GET /20210629/1059990_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 41529
expires: Mon, 16 Jan 2023 09:48:19 GMT
last-modified: Wed, 30 Jun 2021 22:39:21 GMT
etag: "03f091cb3eec6ffcb23c10308f203a61"
age: 32269
accept-ranges: bytes
content-md5: A/CRyz7sb/yyPBAwjyA6YQ==
x-bce-content-crc32: 0
x-bce-debug-id: D2myi3fzU0HViErN4cGSyfokEGEMFcqqPBeCPHUD/fmwk2bC900HB3bJVXfhfMONJzKNJ0mnYkcbceVwFKQo4Q==
x-bce-request-id: a1956da9-0bf7-4635-80f4-5a53b3a4d968
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Fri, 13 Jan 2023 09:48:19 GMT
ohc-cache-hit: ly4ct106 [2], csix106 [4]
ohc-file-size: 41529
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20210629/2001250994_14.jpg
200 OK 8.5 kB URL HTTP/2 lupic.cdn.bcebos.com/20210629/2001250994_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 280x200, components 3\012- data
Hash ed1df6843e51f19fd75f71be9b5ebf76
16387cff3f09e366c1ff6f9a66e9b6ac8b0738f7
310df026d1fa2acce77f6435b8e9f2123963435d0d0b3d44d2955b9172a99e57
GET /20210629/2001250994_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 8519
expires: Mon, 16 Jan 2023 05:42:44 GMT
last-modified: Thu, 01 Jul 2021 18:34:43 GMT
etag: "ed1df6843e51f19fd75f71be9b5ebf76"
age: 50392
accept-ranges: bytes
content-md5: 7R32hD5R8Z/XX3G+m16/dg==
x-bce-content-crc32: 0
x-bce-debug-id: Pzg4d1IRhgedxPM7QdCChyMmlTvl8PqPlqT8g9/9o9eljVtyf7pcwWuaD0aSOkXxiK5Aho1zgducUOisgKTxZg==
x-bce-request-id: 27e7dd3f-c0bb-47e3-a1c5-254690368862
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Fri, 13 Jan 2023 05:42:44 GMT
ohc-cache-hit: ly4ct96 [2], czix96 [2]
ohc-file-size: 8519
x-cache-status: HIT
X-Firefox-Spdy: h2
img2.baidu.com/it/u=1811547784,2806101989&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 103 kB URL HTTP/1.1 img2.baidu.com/it/u=1811547784,2806101989&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Size 103 kB (103018 bytes)
Hash 15187c28bea386723143ce9e8166072e
773c282ba885b6e1511dc0223189dc2a3bbe9721
bfe281a28fa0e188f61ae45d9af1068fe74023dfc044e9a2c6c2d9007b3325a0
GET /it/u=1811547784,2806101989&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpeg
Content-Length: 103018
Connection: keep-alive
Expires: Sun, 05 Feb 2023 04:46:11 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: 15187c28bea386723143ce9e8166072e
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Fri, 06 Jan 2023 04:46:11 GMT
Ohc-Cache-HIT: jh2ct84 [1], bdix125 [4]
Ohc-File-Size: 103018
X-Cache-Status: MISS
12803.url.tudown.com/uploads/images/949562.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/949562.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/949562.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img1.baidu.com/it/u=744431433,506944321&fm=253&fmt=auto&app=138&f=JPEG?w=1000&h=462
12803.url.tudown.com/uploads/images/966956.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/966956.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/966956.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img2.baidu.com/it/u=93248956,4146095941&fm=253&app=120&f=JPEG?w=1280&h=800
12803.url.tudown.com/uploads/images/273970.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/273970.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/273970.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=2026270025,3176475861&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
12803.url.tudown.com/uploads/images/185862.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/185862.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/185862.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=818346405,224299019&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=707
12803.url.tudown.com/uploads/images/464636.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/464636.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/464636.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=3703933552,34919102&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
img0.baidu.com/it/u=3713182546,4167173536&fm=253&fmt=auto?w=1280&h=800
200 OK 48 kB URL HTTP/2 img0.baidu.com/it/u=3713182546,4167173536&fm=253&fmt=auto?w=1280&h=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d59513318f610d954d67949561dd65bb
97e8a10ee0a134ff8fb83ed1fab487f9a092e05d
ecfbd5ab43debeb03bc0d4ed9fb6444250b3b17c512c074fc8f538bb8504b169
GET /it/u=3713182546,4167173536&fm=253&fmt=auto?w=1280&h=800 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 48080
expires: Sun, 22 Jan 2023 08:14:48 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: d59513318f610d954d67949561dd65bb
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 23 Dec 2022 08:14:48 GMT
ohc-cache-hit: lz5ct59 [1], czix57 [4]
ohc-file-size: 48080
x-cache-status: MISS
X-Firefox-Spdy: h2
img2.baidu.com/it/u=2646168825,1094894018&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 102 kB URL HTTP/1.1 img2.baidu.com/it/u=2646168825,1094894018&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Size 102 kB (101653 bytes)
Hash cca482b62048b875b4a47c3d6d24bb09
882853f40b3b14c710ccc2a083dd8941d69c7815
c4e54099cdab4399cd5b64bd0d5d1893334207cc680d195242ecbbaa3851eb27
GET /it/u=2646168825,1094894018&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpeg
Content-Length: 101653
Connection: keep-alive
Expires: Tue, 07 Feb 2023 14:30:43 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: cca482b62048b875b4a47c3d6d24bb09
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sun, 08 Jan 2023 14:30:43 GMT
Ohc-Cache-HIT: jh2ct79 [1], wzix99 [4]
Ohc-File-Size: 101653
X-Cache-Status: MISS
lupic.cdn.bcebos.com/20220601/3086818421_14_600_429.jpg
200 OK 21 kB URL HTTP/2 lupic.cdn.bcebos.com/20220601/3086818421_14_600_429.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x429, components 3\012- data
Hash 076becc0d6d00495870a50d2a61dd1d9
3d5996257f7680e018271767b35d2eaae9cbcab9
0b05cab17520ecf2dbadb851a944fbb5396168d918cb20e5bcd07db7670f5704
GET /20220601/3086818421_14_600_429.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 21105
expires: Sun, 15 Jan 2023 12:51:54 GMT
last-modified: Thu, 02 Jun 2022 03:36:53 GMT
etag: "076becc0d6d00495870a50d2a61dd1d9"
age: 112708
accept-ranges: bytes
content-md5: B2vswNbQBJWHClDSph3R2Q==
x-bce-content-crc32: 1922509067
x-bce-debug-id: IJULy8hA2XxEywJ59M4DFo/hPRE+451G5DyoiPKGSsaBhLmk3h0R6eTs16knp7nlmcVrB/iIBEF744pKJm0IHQ==
x-bce-request-id: 207af164-9d0d-49c6-8d74-73a3cc54eaaf
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Thu, 12 Jan 2023 12:51:54 GMT
ohc-cache-hit: ly4ct88 [4], xiangyix141 [2]
ohc-file-size: 21105
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20210629/8427056_14.jpg
200 OK 14 kB URL HTTP/2 lupic.cdn.bcebos.com/20210629/8427056_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 280x200, components 3\012- data
Hash 036ad151e7906ec7ee8fc57fa31bd388
070ed32ad244f5e2c8d36fd3e4c8b7d47d7957fb
233d7223b9b705327e9666f9a0d0519227e115d3619c0e7e20b9edf2c450005e
GET /20210629/8427056_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 13529
expires: Sat, 14 Jan 2023 02:58:44 GMT
last-modified: Fri, 02 Jul 2021 17:26:36 GMT
etag: "036ad151e7906ec7ee8fc57fa31bd388"
age: 233057
accept-ranges: bytes
content-md5: A2rRUeeQbsfuj8V/oxvTiA==
x-bce-content-crc32: 0
x-bce-debug-id: kUsW6SoTH7kpRcL+l+1MCnQ3pQBnFL8dIpIwieFl3a4zN0gdPtC1H7WTzDeIDJztlzOfpsAboDKWd83UDKzLjQ==
x-bce-request-id: 1a9cd3ee-266d-4cfb-9f15-da3f556babaf
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 02:58:44 GMT
ohc-cache-hit: ly4ct75 [2], bdix75 [2]
ohc-file-size: 13529
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20200412/3073940729_14_800_572.jpg
200 OK 43 kB URL HTTP/2 lupic.cdn.bcebos.com/20200412/3073940729_14_800_572.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x572, components 3\012- data
Hash a8d753752b9eb11b42cf136b1e29b78e
89d33691f982f9ba66fc8c2ed98ccf2679c2682d
4a07946857dc4f3905d32a9fe5278a5a4ed518d827a04a82e484816374fce544
GET /20200412/3073940729_14_800_572.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 42968
expires: Sat, 14 Jan 2023 02:26:11 GMT
last-modified: Tue, 14 Apr 2020 16:38:24 GMT
etag: "a8d753752b9eb11b42cf136b1e29b78e"
age: 234569
accept-ranges: bytes
content-md5: qNdTdSuesRtCzxNrHim3jg==
x-bce-content-crc32: 2849273704
x-bce-debug-id: 1uaQdkJ/FHcaMwYZXxa2sjRwxpIyTpImEnKPafGgZMdZ7Wv/fL4zz9mJEgbCmHwZw0Xp+maxVvyyUiFncEd+eA==
x-bce-request-id: 24e8abdf-37e7-4ad0-bf1f-74d46116236a
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 02:26:11 GMT
ohc-cache-hit: ly4ct76 [4], czix190 [2]
ohc-file-size: 42968
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20200412/3062925257_14_457_327.jpg
200 OK 17 kB URL HTTP/2 lupic.cdn.bcebos.com/20200412/3062925257_14_457_327.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 457x327, components 3\012- data
Hash 1561a54d458bc94257c2a7250235df59
9886e582cacc1abf98bba263ba66d747a5fa557c
b633ba94e2ceb20168a306ef78b2c5cbe9be83dd5a4be2f1e1cede2617971efd
GET /20200412/3062925257_14_457_327.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 16637
expires: Sun, 15 Jan 2023 04:37:17 GMT
last-modified: Sat, 11 Apr 2020 22:37:56 GMT
etag: "1561a54d458bc94257c2a7250235df59"
age: 58897
accept-ranges: bytes
content-md5: FWGlTUWLyUJXwqclAjXfWQ==
x-bce-content-crc32: 4104101605
x-bce-debug-id: TKGbN4jpMioDIBeo7wGN1ADT1zW/oI5fx58FeqszK3wXFhFGHxAU/OlGor3IIn+hXwKfxA9wnQIUb6GC/7LnJQ==
x-bce-request-id: 4f8b5451-294d-4f67-8b28-b615931e622c
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Thu, 12 Jan 2023 04:37:17 GMT
ohc-cache-hit: ly4ct80 [4], qdix80 [2]
ohc-file-size: 16637
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/277677.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/277677.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/277677.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://img1.baidu.com/it/u=3977209964,4004517777&fm=253&app=120&f=JPEG?w=1280&h=800
img2.baidu.com/it/u=93248956,4146095941&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 126 kB URL HTTP/1.1 img2.baidu.com/it/u=93248956,4146095941&fm=253&app=120&f=JPEG?w=1280&h=800
IP
ASN #136190 JINHUA, ZHEJIANG Province, P.R.China.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Size 126 kB (125599 bytes)
Hash 49dd0512a57c7a54a604110eced4822d
f46e320883732c4d45443718b8081bf7c14489e9
dbacb6e43194cb2aee9fa165d29994a3f86034296e8331ce71ac4cb5997eeb7a
GET /it/u=93248956,4146095941&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpeg
Content-Length: 125599
Connection: keep-alive
Expires: Mon, 16 Jan 2023 14:30:26 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: 49dd0512a57c7a54a604110eced4822d
Age: 167935
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Sat, 17 Dec 2022 14:30:26 GMT
Ohc-Cache-HIT: jh2ct73 [4], xiangyix107 [2]
Ohc-File-Size: 125599
X-Cache-Status: HIT
img1.baidu.com/it/u=744431433,506944321&fm=253&fmt=auto&app=138&f=JPEG?w=1000&h=462
200 OK 24 kB URL HTTP/2 img1.baidu.com/it/u=744431433,506944321&fm=253&fmt=auto&app=138&f=JPEG?w=1000&h=462
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x462, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6e7812336205b5a39f078e8fd3b47601
0a119932b8970ea7230c8d6da169148a9d6c81a0
57562e7f200470f087e4e96541c6935e7a485d6c9f81cb8539745ca17ca9a767
GET /it/u=744431433,506944321&fm=253&fmt=auto&app=138&f=JPEG?w=1000&h=462 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 24194
expires: Wed, 25 Jan 2023 06:50:57 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: 6e7812336205b5a39f078e8fd3b47601
age: 530
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Mon, 26 Dec 2022 06:50:57 GMT
ohc-cache-hit: lz5ct51 [4], xiangyix118 [4]
ohc-file-size: 24194
x-cache-status: HIT
X-Firefox-Spdy: h2
img2.baidu.com/it/u=2026270025,3176475861&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
200 OK 20 kB URL HTTP/2 img2.baidu.com/it/u=2026270025,3176475861&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7d2c0cfefd3cc50a59f4964ade49d5b3
08bd9f24fe112faac1def4a582624fd11f6f9a68
02ac922b58ffeb2304fe1cb12281ec10feb55afe972cdc89db1075ed444629fc
GET /it/u=2026270025,3176475861&fm=253&fmt=auto&app=120&f=JPEG?w=800&h=500 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 19804
expires: Fri, 10 Feb 2023 02:09:53 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 7d2c0cfefd3cc50a59f4964ade49d5b3
age: 229329
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 02:09:53 GMT
ohc-cache-hit: lz5ct80 [4], csix80 [4]
ohc-file-size: 19804
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/727967.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/727967.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/727967.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=423087075,3567703411&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=122
img2.baidu.com/it/u=818346405,224299019&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=707
200 OK 50 kB URL HTTP/2 img2.baidu.com/it/u=818346405,224299019&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=707
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x707, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash edd4e47dfbb51e2eab22187b39d9a6d5
b280b14769ed99395cd2ff034c62f230aef8a4b9
ae60b58eac287d0bdd68399712aacc262806428ac68636b1f4cbd90e57114b1c
GET /it/u=818346405,224299019&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=707 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 49668
expires: Mon, 23 Jan 2023 07:25:40 GMT
last-modified: Thu, 08 Jan 1970 00:00:00 GMT
etag: edd4e47dfbb51e2eab22187b39d9a6d5
age: 95471
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 24 Dec 2022 07:25:40 GMT
ohc-cache-hit: lz5ct63 [4], wzix107 [2]
ohc-file-size: 49668
x-cache-status: HIT
X-Firefox-Spdy: h2
12803.url.tudown.com/uploads/images/542483.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/542483.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/542483.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://t15.baidu.com/it/u=211477426,1028115806&fm=224&app=112&f=JPEG?w=500&h=500
12803.url.tudown.com/uploads/images/374864.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/374864.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/374864.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img0.baidu.com/it/u=4066814996,903916700&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
12803.url.tudown.com/uploads/images/497295.jpg
301 Moved Permanently 0 B URL HTTP/1.1 12803.url.tudown.com/uploads/images/497295.jpg
IP
ASN #137951 Clayer Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/images/497295.jpg HTTP/1.1
Host: 12803.url.tudown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://12803.url.tudown.com/down/%E9%87%8D%E7%94%9F%E4%B9%8B%E8%83%96%E5%A6%9E%E9%80%86%E8%A2%AD%E5%85%8D%E8%B4%B9%E7%A0%B4%E8%A7%A3%E7%89%88@324_161351.exe
Cookie: Hm_lvt_dd9836db2e433f487a0aa434b7b3deb7=1673637540
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://img2.baidu.com/it/u=3304647643,407544210&fm=253&fmt=auto&app=138&f=JPEG?w=120&h=80
img2.baidu.com/it/u=3703933552,34919102&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
200 OK 141 kB URL HTTP/2 img2.baidu.com/it/u=3703933552,34919102&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 141 kB (141070 bytes)
Hash c59308e46ed888d0951819093b69dc0d
ac8fe49d97385c45ff6ba9ae02928521adb3cb54
f0f12cf8b02a6a6e60c0c1ed0c79d9bf5186ee4cd04aafbcc4dedf92642f39d1
GET /it/u=3703933552,34919102&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 141070
expires: Tue, 31 Jan 2023 12:18:52 GMT
last-modified: Tue, 06 Jan 1970 00:00:00 GMT
etag: c59308e46ed888d0951819093b69dc0d
age: 292175
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sun, 01 Jan 2023 12:18:52 GMT
ohc-cache-hit: lz5ct72 [2], wzix98 [2]
ohc-file-size: 141070
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=3241384787,1113300379&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=500
200 OK 11 kB URL HTTP/2 img0.baidu.com/it/u=3241384787,1113300379&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 499x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ef97ce34daae5be4d06050fbd93bdd13
0564d4d510720bfe04e0a8f669843e318d033333
bcf30e17e32c33df4c2910f0f80e902cf51d7e622e99dc86979488931dfc6b3a
GET /it/u=3241384787,1113300379&fm=253&fmt=auto&app=138&f=JPEG?w=499&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 10752
expires: Fri, 10 Feb 2023 19:31:04 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: ef97ce34daae5be4d06050fbd93bdd13
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 19:31:04 GMT
ohc-cache-hit: lz5ct56 [1], csix56 [2]
ohc-file-size: 10752
x-cache-status: MISS
X-Firefox-Spdy: h2
bdcode.2345.com/js/logo/js/logo.js
200 OK 41 kB URL HTTP/2 bdcode.2345.com/js/logo/js/logo.js
IP
Hash b39df0dc7aa265573ff2d156e95e5f5a
3ab8b1300b3766d5bee60e512da5f64e70f48fe9
7de44fed850fb599851a8b0038bf0c7b8937d4d08ec312e5af6f339be7a78c9b
Analyzer Verdict Alert fortinet Malware
GET /js/logo/js/logo.js HTTP/1.1
Host: bdcode.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: application/x-javascript
date: Fri, 13 Jan 2023 20:11:44 GMT
etag: W/"639b0691-371a"
expires: Fri, 13 Jan 2023 21:11:44 GMT
last-modified: Thu, 15 Dec 2022 11:35:45 GMT
p3p: CP=" OTI DSP COR IVA OUR IND COM "
server: yunjiasu
yjs-id: c0e7a701896c37e1-143
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20210629/18096752_14.jpg
200 OK 14 kB URL HTTP/2 lupic.cdn.bcebos.com/20210629/18096752_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 279x200, components 3\012- data
Hash e8967089697bec6748e4c247e2cb3ec3
3f9d210fe59a1b57e549288f9632e4c8c04cb14f
65da9803632f9e9ebaf44e50b68ee934410fdc931f3b2a49ddfe9b216691ce6a
GET /20210629/18096752_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 13746
expires: Sat, 14 Jan 2023 02:46:27 GMT
last-modified: Sat, 03 Jul 2021 15:52:23 GMT
etag: "e8967089697bec6748e4c247e2cb3ec3"
age: 226348
accept-ranges: bytes
content-md5: 6JZwiWl77GdI5MJH4ss+ww==
x-bce-content-crc32: 0
x-bce-debug-id: zER/T/52fRuufjOM14pBprtaO3IZK6PFCTf9STQ4atgWi8uSOwUrjMUgTEvJByiLUaAz6XJ0P7Z0i+FuK5tqEQ==
x-bce-request-id: 5b67d005-4c22-474c-a020-af4b4c5fd290
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 02:46:27 GMT
ohc-cache-hit: ly4ct89 [2], bdix217 [4]
ohc-file-size: 13746
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20210629/1371266_14.jpg
200 OK 55 kB URL HTTP/2 lupic.cdn.bcebos.com/20210629/1371266_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 280x200, components 3\012- data
Hash d2d808f102e50e8a0a2b2fde9237e249
fd6175e99d9bc4579b81732ea4f1fdfaf55c1b45
25ef78a37103adb93b477a19618212b438cd1d6a141953abcf5d1ced39abb612
GET /20210629/1371266_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 54797
expires: Sun, 15 Jan 2023 08:03:15 GMT
last-modified: Fri, 02 Jul 2021 16:21:18 GMT
etag: "d2d808f102e50e8a0a2b2fde9237e249"
age: 115318
accept-ranges: bytes
content-md5: 0tgI8QLlDooKKy/ekjfiSQ==
x-bce-content-crc32: 0
x-bce-debug-id: Dg02jEQVcI/i8Z0TkKrQuTlVTwnf2GYjj21+VJ13BWpGgitoAgbaZmy0YZhJXUd/vVTKC/rnAWaJq4Hkf2IJDA==
x-bce-request-id: cfb50095-6ece-4c4e-bf96-1d0b8c369a4b
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Thu, 12 Jan 2023 08:03:15 GMT
ohc-cache-hit: ly4ct68 [2], wzix68 [2]
ohc-file-size: 54797
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20191203/3017727420_14.jpg
200 OK 48 kB URL HTTP/2 lupic.cdn.bcebos.com/20191203/3017727420_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 374x267, components 3\012- data
Hash b2f2a476de07fb2dc11b365d4f7748b5
accd4ae98676de20b6e3e36c6bcf817e953cb8d4
021773bee8190dd719ebc72407d08b7efb78b89ca3f8b67315e86523c3af0637
GET /20191203/3017727420_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/jpeg
content-length: 48120
expires: Sat, 14 Jan 2023 06:08:30 GMT
last-modified: Tue, 03 Dec 2019 09:37:04 GMT
etag: "b2f2a476de07fb2dc11b365d4f7748b5"
age: 223206
accept-ranges: bytes
content-md5: svKkdt4H+y3BGzZdT3dItQ==
x-bce-content-crc32: 830031945
x-bce-debug-id: WS0pu8cj8iIwcA+fK/4qFg4n6cBkR3B6KNi93AhgCYY/3qmFvtVvdxd+StQDSMHbxntubjC42TXG3KOtLMWhyg==
x-bce-request-id: fcaef919-9cdc-41ad-95f3-583e3d0fb8d6
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 06:08:30 GMT
ohc-cache-hit: ly4ct80 [2], czix169 [4]
ohc-file-size: 48120
x-cache-status: HIT
X-Firefox-Spdy: h2
lupic.cdn.bcebos.com/20210629/30298075_14.jpg
200 OK 15 kB URL HTTP/2 lupic.cdn.bcebos.com/20210629/30298075_14.jpg
IP
ASN #139018 Henan Luoyang IDC
File type PNG image data, 280 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash ee0ff76126d69a2b797d034dfe23f3cd
3b038663e8f545a68934d8d91baa9267086f7866
58b36520559518ce4c60aed856c2d156776fd62cf0c15810a6d45a9fbe88164a
GET /20210629/30298075_14.jpg HTTP/1.1
Host: lupic.cdn.bcebos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pos.baidu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:45 GMT
content-type: image/png
content-length: 14596
expires: Sat, 14 Jan 2023 11:13:47 GMT
last-modified: Thu, 01 Jul 2021 18:57:46 GMT
etag: "ee0ff76126d69a2b797d034dfe23f3cd"
age: 205070
accept-ranges: bytes
content-md5: 7g/3YSbWmit5fQNN/iPzzQ==
x-bce-content-crc32: 0
x-bce-debug-id: JFyFjuquAsZBTO09yFQp/wWXOxzUqGbMI+2OtjFq2TGpB82dfqu+cZlKuvSv4BO/HIF65IIbzW3p7he+S3bngw==
x-bce-request-id: e787a60e-ad2c-464b-9f64-d7d1e0c658c9
x-bce-storage-class: STANDARD
timing-allow-origin: *
ohc-global-saved-time: Wed, 11 Jan 2023 11:13:46 GMT
ohc-cache-hit: ly4ct79 [2], suzix137 [4]
ohc-file-size: 14596
x-cache-status: HIT
X-Firefox-Spdy: h2
img1.baidu.com/it/u=3977209964,4004517777&fm=253&app=120&f=JPEG?w=1280&h=800
200 OK 106 kB URL HTTP/1.1 img1.baidu.com/it/u=3977209964,4004517777&fm=253&app=120&f=JPEG?w=1280&h=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x800, components 3\012- data
Size 106 kB (105973 bytes)
Hash f918d9bebe50bee75b5d684932ddd247
ecd4e572deafb650903ed874484cdd5bdc47faf4
e12d7e08318997ea0859a9d47c08ae1ea77ca0450bda52558e83253c4c7ad453
GET /it/u=3977209964,4004517777&fm=253&app=120&f=JPEG?w=1280&h=800 HTTP/1.1
Host: img1.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpeg
Content-Length: 105973
Connection: keep-alive
Expires: Wed, 18 Jan 2023 06:42:52 GMT
Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT
ETag: f918d9bebe50bee75b5d684932ddd247
Age: 106878
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Ohc-Global-Saved-Time: Mon, 19 Dec 2022 06:42:52 GMT
Ohc-Cache-HIT: lz5ct83 [4], xiangyix101 [4]
Ohc-File-Size: 105973
X-Cache-Status: HIT
img2.baidu.com/it/u=3304647643,407544210&fm=253&fmt=auto&app=138&f=JPEG?w=120&h=80
200 OK 3.6 kB URL HTTP/2 img2.baidu.com/it/u=3304647643,407544210&fm=253&fmt=auto&app=138&f=JPEG?w=120&h=80
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x80, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9aa0bae10856e916eb8ad266b94ab062
110f664c2004dfb8aa600cca5f79ff96e8e469ac
a1be53c3da15c54421d46e1a2010703c4163fd6205e39e96f18a5f53ab484b99
GET /it/u=3304647643,407544210&fm=253&fmt=auto&app=138&f=JPEG?w=120&h=80 HTTP/1.1
Host: img2.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 3616
expires: Sat, 21 Jan 2023 12:39:25 GMT
last-modified: Sat, 10 Jan 1970 00:00:00 GMT
etag: 9aa0bae10856e916eb8ad266b94ab062
age: 510240
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Thu, 22 Dec 2022 12:39:25 GMT
ohc-cache-hit: lz5ct72 [4], bdix239 [2]
ohc-file-size: 3616
x-cache-status: HIT
X-Firefox-Spdy: h2
img0.baidu.com/it/u=423087075,3567703411&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=122
200 OK 3.1 kB URL HTTP/2 img0.baidu.com/it/u=423087075,3567703411&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=122
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 86x122, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 40150e9c860208834a043a20107b0119
97cd0c953c1860cfe9cdf06f2d70fafc7815a89d
a73d70dcff0f351b17c898a6231069239326b280f87436b45144587ecfdd3d7d
GET /it/u=423087075,3567703411&fm=253&fmt=auto&app=138&f=JPEG?w=86&h=122 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 3052
expires: Sun, 29 Jan 2023 02:52:30 GMT
last-modified: Wed, 07 Jan 1970 00:00:00 GMT
etag: 40150e9c860208834a043a20107b0119
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Fri, 30 Dec 2022 02:52:30 GMT
ohc-cache-hit: lz5ct62 [1], qdix175 [4]
ohc-file-size: 3052
x-cache-status: MISS
X-Firefox-Spdy: h2
img0.baidu.com/it/u=4066814996,903916700&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
200 OK 34 kB URL HTTP/2 img0.baidu.com/it/u=4066814996,903916700&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 55cdbd5ed040dd3490e1d657fa83c3eb
7cde4e5afe9ccdfe31ec067254205bb6f280dd70
be92a9aa1e2c0feb5fc11c0a805a8960e28bfe7ee3da39af8f84aca8934ef205
GET /it/u=4066814996,903916700&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500 HTTP/1.1
Host: img0.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://12803.url.tudown.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: JSP3/2.0.14
date: Fri, 13 Jan 2023 20:11:46 GMT
content-type: image/webp
content-length: 34412
expires: Mon, 23 Jan 2023 02:31:45 GMT
last-modified: Fri, 09 Jan 1970 00:00:00 GMT
etag: 55cdbd5ed040dd3490e1d657fa83c3eb
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
ohc-global-saved-time: Sat, 24 Dec 2022 02:31:45 GMT
ohc-cache-hit: lz5ct63 [1], suzix87 [4]
ohc-file-size: 34412
x-cache-status: MISS
X-Firefox-Spdy: h2
t15.baidu.com/it/u=211477426,1028115806&fm=224&app=112&f=JPEG?w=500&h=500
200 OK 56 kB URL HTTP/1.1 t15.baidu.com/it/u=211477426,1028115806&fm=224&app=112&f=JPEG?w=500&h=500
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 09657c6e7606445169aa0b2d77587aab
062a8e73b8e593c16d9fb1259aca377a3a049d12
4baf2abcb76e69a0e93231fa4571727e304f42b717ed581451bc34ace08a3516
GET /it/u=211477426,1028115806&fm=224&app=112&f=JPEG?w=500&h=500 HTTP/1.1
Host: t15.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12803.url.tudown.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Fri, 13 Jan 2023 20:11:46 GMT
Content-Type: image/jpeg
Content-Length: 55928
Connection: keep-alive
Expires: Sat, 04 Feb 2023 12:24:38 GMT
Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT
ETag: 09657c6e7606445169aa0b2d77587aab
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Ohc-Global-Saved-Time: Thu, 05 Jan 2023 12:24:38 GMT
Ohc-Upstream-Trace: 111.177.6.63; 58.20.204.63
Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [1], zhuzuncache63 [1], xiangyix63 [2]
Ohc-Response-Time: 1 0 0 0 346 347
Ohc-File-Size: 55928
X-Cache-Status: MISS
Timing-Allow-Origin: *
img4.runjiapp.com/duoteimg/dtnew_recom_img/202008/20200812163506_69310.jpg
200 OK 0 B URL HTTP/1.1 img4.runjiapp.com/duoteimg/dtnew_recom_img/202008/20200812163506_69310.jpg
IP
ASN #4812 China Telecom Group
GET /duoteimg/dtnew_recom_img/202008/20200812163506_69310.jpg HTTP/1.1
Host: img4.runjiapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 41017
Connection: keep-alive
Date: Wed, 04 Jan 2023 09:53:50 GMT
x-oss-request-id: 63B54CAE8873C53939421D90
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "F8F15F37C9961BC7463D1DF83059D32C"
Last-Modified: Fri, 04 Sep 2020 08:59:59 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2768094505068467474
x-oss-storage-class: Standard
x-oss-expiration: expiry-date="Sat, 05 Sep 2020 00:00:00 GMT", rule-id="03f94d9c-6cf0-4053-b855-b1862a1b87c2"
x-oss-version-id: null
Content-MD5: +PFfN8mWG8dGPR34MFnTLA==
x-oss-server-time: 18
Ali-Swift-Global-Savetime: 1672826030
Via: cache45.l2cn1807[0,0,200-0,H], cache50.l2cn1807[0,0], vcache15.cn4757[0,0,200-0,H], vcache5.cn4757[1,0]
Age: 814672
X-Cache: HIT TCP_MEM_HIT dirn:10:251523674
X-Swift-SaveTime: Wed, 04 Jan 2023 09:55:49 GMT
X-Swift-CacheTime: 15551881
Timing-Allow-Origin: *
EagleId: 65e21c9916736407023835272e
e2.2345.com/news/module2/js/newsModule-v2.js
200 OK 0 B URL HTTP/2 e2.2345.com/news/module2/js/newsModule-v2.js
IP
GET /news/module2/js/newsModule-v2.js HTTP/1.1
Host: e2.2345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://12803.url.tudown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
date: Fri, 13 Jan 2023 19:54:39 GMT
etag: W/"5f35e38f-cacf"
last-modified: Fri, 14 Aug 2020 01:06:23 GMT
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
ali-swift-global-savetime: 1673639679
via: cache59.l2cn3037[0,0,304-0,H], cache66.l2cn3037[1,0], cache66.l2cn3037[1,0], ens-vcache8.cn5274[0,0,200-0,H], ens-vcache7.cn5274[2,0]
age: 1021
x-cache: HIT TCP_MEM_HIT dirn:11:169308236
x-swift-savetime: Fri, 13 Jan 2023 20:01:49 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: deba119a16736407009836327e
content-encoding: gzip
X-Firefox-Spdy: h2
154.218.151.71
60.190.116.48
104.18.20.226
47.246.44.205
34.160.144.191
23.36.77.32
47.246.48.205
93.184.220.29