r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4520
Expires: Sun, 27 Nov 2022 10:07:50 GMT
Date: Sun, 27 Nov 2022 08:52:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3976
Cache-Control: max-age=96294
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:30 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:37:24 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 08:19:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1989
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7612
Expires: Sun, 27 Nov 2022 10:59:22 GMT
Date: Sun, 27 Nov 2022 08:52:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /rALfjTaAvESwbjGrv4hzURBQsEAxHO4dR9ot+3TaESRapCzQEukAjeAq1nn+gjR1qwIEUN1cw4=
x-amz-request-id: 9TYZQA29GDZVMZWB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 08:41:34 GMT
age: 656
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
gifts-now.com/
301 Moved Permanently 0 B IP
ASN #134175 UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: gifts-now.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 08:52:30 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.gifts-now.com/index.php
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 08:11:12 GMT
cache-control: public,max-age=3600
age: 2478
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4050
Cache-Control: max-age=91311
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:30 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:14:21 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cJRruO57pV8XXmlel53p4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4JmsOUbZL7i00BFyLK0z8ZKclGw=
www.gifts-now.com/index.php
200 OK 579 B URL HTTP/1.1 www.gifts-now.com/index.php
IP
ASN #134175 UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (723), with CRLF line terminators
Hash 8250c2a8478dd0c83e02b44231fc0714
bc8c2ce71cf1d7581bf71d30a098744e33678ae3
f790fb9fbdae12a35129c07635cb9c36c6d5c2602466619665af6321a5b7b7e4
GET /index.php HTTP/1.1
Host: www.gifts-now.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.gifts-now.com/common.js
200 OK 822 B URL HTTP/1.1 www.gifts-now.com/common.js
IP
ASN #134175 UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD
File type HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Hash 6995f13355499348c74d8d05830edb35
82325c8623aa870b022ee46726c4e9d3dee0b20c
e72e6c52f476845f1bd58f72bbcc9dfce75d31ce8ddfdce8566fdd778679c95b
GET /common.js HTTP/1.1
Host: www.gifts-now.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gifts-now.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:31 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.gifts-now.com/tj.js
200 OK 258 B IP
ASN #134175 UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD
File type ASCII text, with CRLF line terminators
Hash fb72bc8623c35f49cd2c74765de21161
2952fd538a71ca88b163206aa6088ca40237bcf5
5a8a245f255096ad5aee3ab4b0ef44cbc4bc9fd139aab0a9c4e49e01f82a9d4f
GET /tj.js HTTP/1.1
Host: www.gifts-now.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gifts-now.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:31 GMT
Content-Type: application/x-javascript
Content-Length: 258
Connection: keep-alive
www.gifts-now.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.gifts-now.com/favicon.ico
IP
ASN #134175 UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.gifts-now.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gifts-now.com/index.php
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:31 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Fri, 02 Dec 2022 08:52:31 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 4060547e3c079905279b49f8d66e3de1
adfd243f704fe487f042aee85df3ae032202e8ac
ce4f68996fc33f704b5a5d1778a2ddd18d466a69caca92602253990e9bea5c48
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 01 Dec 2022 07:48:15 GMT
ETag: "adfd243f704fe487f042aee85df3ae032202e8ac"
Last-Modified: Sun, 27 Nov 2022 07:48:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1067
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0d66df80b02-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 4060547e3c079905279b49f8d66e3de1
adfd243f704fe487f042aee85df3ae032202e8ac
ce4f68996fc33f704b5a5d1778a2ddd18d466a69caca92602253990e9bea5c48
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 01 Dec 2022 07:48:15 GMT
ETag: "adfd243f704fe487f042aee85df3ae032202e8ac"
Last-Modified: Sun, 27 Nov 2022 07:48:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1067
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0d66de4b4e8-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7973
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7973
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7973
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 25544
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 39651
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 39744
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 39655
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9de86e0161ef1255306ddfce1c2549d7
f77ff5378766c6b14125de0e003b21f34726672b
7db14b31e7e2d882eb446bd6056ad9e8eed6e1581837a6d54d2e0d26aa2600bb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4023
x-amzn-requestid: e9fe84db-d488-4ec7-81e6-c819bb625944
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b44BuHsmIAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d3a4-54fbd7892170110e4bafc899;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:13:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GYi18tS1H9gOh6y9rQGwRx9VANq4dYJ_vJIpMD0kWIXFVNSif-sxXA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 22:05:29 GMT
age: 38823
etag: "f77ff5378766c6b14125de0e003b21f34726672b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e615cdc2e330b5cf76435abce9aa631a
71f737c3cee7766494157cd6491ce247a785c09e
853f68bf79a553b9fbf0e10391424faf0a3c071370d05d369563f7824d1bda84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9063
x-amzn-requestid: f00ac8bd-6466-4c92-9b99-0e71b4b2345c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Jr4ENtoAMFzvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2318-0e3a57932987e29521388dd7;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:04:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ntfumip5IjOlyoe6ASlwJ1PjPLN1yZHkK_iiDDKfmMCyI__PrrGVMA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 11:33:57 GMT
age: 76715
etag: "71f737c3cee7766494157cd6491ce247a785c09e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
niugetv9.top/
200 OK 21 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (546), with CRLF, LF line terminators
Hash e4f1913f0b2931a6f45f957b20ae2908
c2b1b8d335daa4d5e2d0dc61b94e8b7ec89042cb
afe7a4e30c792fc7c0f6b287495383339065459321a0200f2b938ae85ea224fe
GET / HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.gifts-now.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/js/bootstrap.min.js
200 OK 13 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (39553)
Hash 89cfee4061db2dd37f5e2668f1c7ebfb
1ecc979a3bc78d4987cb642f3f64e80d56d57d39
dcff2dfb3ebcdba16ed0e4b9024fa681edc77ace8a686d9bd5aea6dc282e8168
GET /template/m1938pc/static/js/bootstrap.min.js HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: application/javascript
Last-Modified: Wed, 02 Jun 2021 11:05:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765e0-9b00"
Expires: Sun, 27 Nov 2022 20:52:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/js/jquery.lazyload.min.js
200 OK 1.3 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/js/jquery.lazyload.min.js
IP
File type ASCII text, with very long lines (3309)
Hash 8e5f2c601d9dc5b0d53cb406774e99c9
562d3c568f650e9cc977328d440fc94c46fe9f8e
0f18d8d9a5b33df370579bebc38911b2f344a8fb99bcdd66e83a6fa48c25e01a
GET /template/m1938pc/static/js/jquery.lazyload.min.js HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: application/javascript
Last-Modified: Wed, 02 Jun 2021 11:05:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765e0-d35"
Expires: Sun, 27 Nov 2022 20:52:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/css/swiper.min.css
200 OK 3.3 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/css/swiper.min.css
IP
File type ASCII text, with very long lines (17459)
Hash e73a49e6a4e9772b6add191cf694bd34
00038fe32a6e97fbbeb281939adfb363cdd5f54f
5a1a24bd85867233f36de37f59b96bfeeb4290619781494713b8216902b30988
GET /template/m1938pc/static/css/swiper.min.css HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: text/css
Last-Modified: Wed, 02 Jun 2021 11:04:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765da-455f"
Expires: Sun, 27 Nov 2022 20:52:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/css/common.css
200 OK 1.7 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/css/common.css
IP
Hash 1bfc16865e4e7621e5c91f2a4505e7fe
7b556b6e7f13fc6e86ab74b1e8b539fc30d7af89
dd1cca1a3a887f0bf1af7b0c06fe6ef5f0cdfa720d9f3c7230843830ba709c26
GET /template/m1938pc/static/css/common.css HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: text/css
Last-Modified: Wed, 02 Jun 2021 11:04:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765da-19c0"
Expires: Sun, 27 Nov 2022 20:52:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee5ab293e102b8d59eff3b40d4c63ac8
0bdadbda0381470a92b52b3e3b37c30c94591b8f
983239f8d698212f30063e5a99adf923ab18e869ccdbc7062eb9eed963c2a2c0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "983239F8D698212F30063E5A99ADF923AB18E869CCDBC7062EB9EED963C2A2C0"
Last-Modified: Thu, 24 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8820
Expires: Sun, 27 Nov 2022 11:19:33 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
niugetv9.top/template/m1938pc/static/js/jquery.min.js
200 OK 38 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/js/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash c0750a85ce0399accd8ded17e2564d6b
ba767d35271e9b39305f156814495650f269ddb6
9de8ff805e6807598c4c2987a8368ff4b2240606f6285902c844baf5a04655ac
GET /template/m1938pc/static/js/jquery.min.js HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: application/javascript
Last-Modified: Wed, 02 Jun 2021 11:05:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765dc-17b8b"
Expires: Sun, 27 Nov 2022 20:52:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/js/swiper.min.js
200 OK 28 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/js/swiper.min.js
IP
File type ASCII text, with very long lines (31999)
Hash 3694d961c3b4a420105cf9563c4cafe7
f75e4b2319d4bc0ea3af5ad3b8cf2e0679575767
3e5b269624b5703cb234c5217a66e9e77b5ffe6f70e2dd0425f3a8951dcba27c
GET /template/m1938pc/static/js/swiper.min.js HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: application/javascript
Last-Modified: Wed, 02 Jun 2021 11:05:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765dc-178a3"
Expires: Sun, 27 Nov 2022 20:52:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/js/global.js
200 OK 225 B URL HTTP/1.1 niugetv9.top/template/m1938pc/static/js/global.js
IP
Hash daa83033a5dfaa134d09d60dad0f02ec
c6bc6e2ba0d0d84ae34d3e7ec586d5b2884f6539
868c454612344976f793e1a2c8a20d947f4b90cb4784509ab146c561590f2226
GET /template/m1938pc/static/js/global.js HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: application/javascript
Content-Length: 225
Last-Modified: Sat, 12 Nov 2022 16:24:06 GMT
Connection: keep-alive
ETag: "636fc8a6-e1"
Expires: Sun, 27 Nov 2022 20:52:33 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
niugetv9.top/template/m1938pc/static/css/style.css
200 OK 9.6 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/css/style.css
IP
File type assembler source, Unicode text, UTF-8 text, with very long lines (367)
Hash 76c3cfbf09c2924d1324d18e71e4086c
e2955681a2b3e4806b34e4953517088ae3875059
48e3528c19a5f4f1dbd10bf600f3232f614369099eabb26a55b2baada479de09
GET /template/m1938pc/static/css/style.css HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: text/css
Last-Modified: Thu, 03 Jun 2021 01:54:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b83650-bf0e"
Expires: Sun, 27 Nov 2022 20:52:33 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv9.top/template/m1938pc/static/css/bootstrap.min.css
200 OK 24 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65369)
Hash fa8eee12898882e0b97ca29c7920c483
427b362e999391c7ad6d1c37e0178a4fc906fa10
239818d1da6510c291bb39dfa0b5f5873a81a4d63ae877fe97a9053842b58cf2
GET /template/m1938pc/static/css/bootstrap.min.css HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:32 GMT
Content-Type: text/css
Last-Modified: Wed, 02 Jun 2021 11:04:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"60b765da-1da6a"
Expires: Sun, 27 Nov 2022 20:52:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
niugetv3.top/img/17172.gif
301 Moved Permanently 0 B URL HTTP/1.1 niugetv3.top/img/17172.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/17172.gif HTTP/1.1
Host: niugetv3.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 08:52:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 09:52:33 GMT
Location: https://niugetv3.top/img/17172.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EuBrLd0mNslowG36wq%2Fm8ISDDDySdyh0hqraj4%2FzzRIUCR5Q43GFTnzE2PljJ5eox11cSneZ0fibuDRMLtUFHWmWpHCU7dVnJVtz7uFJAPyxcMZZ4vdoA0rWD8z1iEU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0dbbc8fb4e8-OSL
alt-svc: h2=":443"; ma=60
niugetv3.top/img/ylf-1.gif
301 Moved Permanently 0 B URL HTTP/1.1 niugetv3.top/img/ylf-1.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/ylf-1.gif HTTP/1.1
Host: niugetv3.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 08:52:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 09:52:33 GMT
Location: https://niugetv3.top/img/ylf-1.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Brfe5p%2BN%2FxOw8qtJpbMbm9S9huNYxt620%2BSPkfbr5PnzZtkQccGLP5J%2BgKMYsY7kePd%2FChic3%2B6xUef%2BVKupKKTlQCwoIisGBXnIBbvw%2BC3cCLHBMYW0492cmHf1jmQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0dbbc640b55-OSL
alt-svc: h2=":443"; ma=60
niugetv3.top/img/1717.gif
301 Moved Permanently 0 B URL HTTP/1.1 niugetv3.top/img/1717.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/1717.gif HTTP/1.1
Host: niugetv3.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://niugetv9.top/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 08:52:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 09:52:33 GMT
Location: https://niugetv3.top/img/1717.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ohlFcp70fNcFAVM23oPUfwRhxcTQTjDQNhdK9KLi2t8VYAyoVMm8KOkp4lOqtHMsV0k%2B%2FxJDGpQKmpWjHm1N6pSN%2F8MUyQeMKb%2Flasn%2Bjc1kAMPQzsqv9cR0ZgivHHk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0dbb9deb52d-OSL
alt-svc: h2=":443"; ma=60
kvegg.com/67a0474849f4ee10ccbe3b0d2cebf337.gif
301 Moved Permanently 162 B URL HTTP/2 kvegg.com/67a0474849f4ee10ccbe3b0d2cebf337.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /67a0474849f4ee10ccbe3b0d2cebf337.gif HTTP/1.1
Host: kvegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: text/html
content-length: 162
location: https://kvtooo.top/67a0474849f4ee10ccbe3b0d2cebf337.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?4b095d89a95101adc8fa951bfbceef9e
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?4b095d89a95101adc8fa951bfbceef9e
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (629)
Hash 104df965cf650fabba89422fe938ab07
f2e99e719602bd129ed8c8399ca301da970a1aa2
56be625a6b08117cef24bfbd799f23a62a088413fa9a5206ad9a943339c79222
GET /hm.js?4b095d89a95101adc8fa951bfbceef9e HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gifts-now.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11267
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:32 GMT
Etag: 0bfc91eada2718c00c05c20d14eb207f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=05261B11CDAA733A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?84c863ef954e26adfd9e72a90e4b6c5b
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?84c863ef954e26adfd9e72a90e4b6c5b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (617)
Hash 46bd6d7c2e346afdef1ab440d79f99d7
80313525f78faf27925516745a46adce87984875
3eb2c3cb6edc6524fe811eb332fe5f4b3cff655568cdfde77320339868764277
GET /hm.js?84c863ef954e26adfd9e72a90e4b6c5b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gifts-now.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:32 GMT
Etag: a1848a7142dbba825d9c2f93487617ae
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=D2D4D3C6146395CC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?f3d6365cc089588672da4dd3e692e58e
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?f3d6365cc089588672da4dd3e692e58e
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (624)
Hash 3d2e2f887744a41f07bb34a581064c40
2992928f90b10f1f1ea8957efad7e458c65c6b4f
06da02b1445a14fe8a5b0d77ae8f6148fb69ec3cb91af2fcc8a4c2e5fce9906f
GET /hm.js?f3d6365cc089588672da4dd3e692e58e HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gifts-now.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11262
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:32 GMT
Etag: 0427b51afb86055f3190151b37f5490c
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=309E3D6246133D0D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 567afb2d20ab9bc9155c2b380ef69519
a1578e970ec09610d88bf444ab51c2d482736a24
571e08d7465e9260594730e7c572d9e6583d39c0cd06fd0b2ba4c52011ad0ede
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "571E08D7465E9260594730E7C572D9E6583D39C0CD06FD0B2BA4C52011AD0EDE"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2146
Expires: Sun, 27 Nov 2022 09:28:19 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
int.jstatic.xyz/happy/newyear/yiren/yiren140.gif
200 OK 47 kB URL HTTP/2 int.jstatic.xyz/happy/newyear/yiren/yiren140.gif
IP
File type GIF image data, version 89a, 240 x 140\012- data
Hash eb340fa6893251f2af76ebef29cf6600
64c8dcdb9a57321c84136068a5f7a16363bc5430
962f36c8324e275fa8df04007b238d7a47d28bf3ab01d189d78271d8ea88d663
Analyzer Verdict Alert quad9 Sinkholed
GET /happy/newyear/yiren/yiren140.gif HTTP/1.1
Host: int.jstatic.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: image/gif
content-length: 47044
last-modified: Sat, 01 Oct 2022 12:28:45 GMT
etag: "6338327d-b7c4"
expires: Tue, 29 Nov 2022 13:45:18 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 2401635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=62lnY7UO2xV0AMWaCp2TCbBP0H4xqUspl0mXxpbCDDa3%2FnSxk%2BVjxguc4N2GyttahyqhbDcXB1D1X5jtvRuVXtYJTePXx%2FXA0En6cYYLa%2BkcobTgo6%2FNPJSdqbJrszEQG1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0ddfdb7b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash ee2a31b4f9bbd25339a22cbb6d851da4
2948a3db7d7e263ca6e6bbbb5238fd6313fcee5e
3e1cb77e95b12a07c9387e0d197666273e38a3cf3def1fe99ca0506f345aed1b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3E1CB77E95B12A07C9387E0D197666273E38A3CF3DEF1FE99CA0506F345AED1B"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21588
Expires: Sun, 27 Nov 2022 14:52:21 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8a909bfc6bc38ff056c5edc80beefbd9
8be7843431bfabe9645c92c61820a796dbcede01
6885579b16ffd1d2281fd79f517acd183e4590aa6a69860aa16f10ac8bebcd45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6885579B16FFD1D2281FD79F517ACD183E4590AA6A69860AA16F10AC8BEBCD45"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11714
Expires: Sun, 27 Nov 2022 12:07:47 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/swCvH5hS9-4
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/swCvH5hS9-4
IP
Hash 9e3c2ccc4e1d70f192a6cb979a944924
552e0e86f847267a73e04673c7aeaf9efd98df12
c6fcd179a709f5318e25668468cac0e4304d025f0889e99ec248ead7e19a55fe
POST /s/gts1p5/swCvH5hS9-4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:33 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68dda22040b4a99eb0f686913a1e808f
3e6ef44f5d18726920136dfca1425005d0f85c3a
96a7ac49f9438bcc337e90b47d5fc4de4a60ce4e3167469b8c384c36d17ac174
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96A7AC49F9438BCC337E90B47D5FC4DE4A60CE4E3167469B8C384C36D17AC174"
Last-Modified: Sat, 26 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5359
Expires: Sun, 27 Nov 2022 10:21:52 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
www.tukky.vip/91uu/91uuspk200.gif
200 OK 330 kB URL HTTP/2 www.tukky.vip/91uu/91uuspk200.gif
IP
File type GIF image data, version 89a, 320 x 200\012- data
Size 330 kB (329800 bytes)
Hash c8515e829d6c15278640453ade073548
20019ae01ae180c537c65d9370dd6dff01e56346
6ca0b4ef7e96f09b8fdb715877485314fa5da8e9e9b501f7d0906609a003f894
GET /91uu/91uuspk200.gif HTTP/1.1
Host: www.tukky.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: image/gif
content-length: 329800
last-modified: Mon, 17 Oct 2022 03:32:11 GMT
etag: "634cccbb-50848"
expires: Sat, 24 Dec 2022 20:17:00 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 177715
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NiK1mSKsJclUTDOblyuaKQzV20UpbMFGigVrqbxQwes32AqZEte7Ua0JIGlZhqVZAUMJ45DnAwfz7z4zCC%2FyYRBSVtPYUpbdFoW5LO5WFcInPDTXm0TaL6OA0MNHUUzs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0de9fefb506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/t1eJGFHGm7w
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/t1eJGFHGm7w
IP
Hash 99552bbd7784cb08c870c16500ac6f55
923c1b605d915c92bc4ce862a994f2b67451490b
7aeaded279d93dfaee19153a9c5223fdb2019d96e9d956cfcfbb964e8d265505
POST /s/gts1p5/t1eJGFHGm7w HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:33 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.tukudhgg.vip/lm/klm01.gif
200 OK 78 kB URL HTTP/2 www.tukudhgg.vip/lm/klm01.gif
IP
File type GIF image data, version 89a, 320 x 190\012- data
Hash f12d32b75b26394038be19df19aea586
286e3cee23dee594ce497c1f2020ccb842e0ae69
06a090053e07f41505d1949525aa511001d14069cb8560f933d60740f9e3eba9
GET /lm/klm01.gif HTTP/1.1
Host: www.tukudhgg.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: image/gif
content-length: 78524
last-modified: Wed, 24 Aug 2022 10:34:37 GMT
etag: "6305febd-132bc"
expires: Sat, 24 Dec 2022 06:29:29 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 227368
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KVmMdMXyMuZm7Uy4zaS9nMtRfb2OF17kkA9ozoW6sXnhqlOwtg01XW%2BVsXiDAijuMwOxJaDynOjy7%2BTRMGjlNewETAdWeeq5%2FKjPIN7q1ekhwu1bjSrK6NhH80ix4HblHM5K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0ded887b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/5B5Lw1c9RxE
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/5B5Lw1c9RxE
IP
Hash 5e4d3d756321bf59b060d29b402fbacb
ac91585bd928cd3f21d0a3972324a52eb20ec170
e000fe11bb37393146401271af280565838b4252419e9040de38f3f4203ac35c
POST /s/gts1p5/5B5Lw1c9RxE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:33 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hm.baidu.com/hm.js?3e4245b0fdf57a3891f74ac658409754
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?3e4245b0fdf57a3891f74ac658409754
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (617)
Hash 487deadb8e8416f3d1261d727af557ca
df2b35e3fdf0c88f0193d579738a2c8988589a52
b96b55a27f0eb64650283c4eecefa5e1a34fd1ce0659a6c8a6acf5bb7928c0f9
GET /hm.js?3e4245b0fdf57a3891f74ac658409754 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:33 GMT
Etag: 6c28ce736f33a6822ceeb14d30ee4d10
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=960ED88506C4E983; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
madou8img.5100m.xyz/videos/202208/18/62fd405731a1d92735a7f34e/poster2.jpg
200 OK 46 kB URL HTTP/2 madou8img.5100m.xyz/videos/202208/18/62fd405731a1d92735a7f34e/poster2.jpg
IP
File type JPEG image data, baseline, precision 8, 600x340, components 3\012- data
Hash 8cee135b65dc2de4efafc419f4b353d0
fffc6829df1aa62783f66eca0ac618512d64dbe8
28cf9e87185f5cff027ac436cd6fe1b1b7f44e5b31df3e18c99f0898d1785932
GET /videos/202208/18/62fd405731a1d92735a7f34e/poster2.jpg HTTP/1.1
Host: madou8img.5100m.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: image/jpeg
content-length: 46200
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=43200
last-modified: Wed, 17 Aug 2022 19:41:16 GMT
etag: W/"b478-182ad53098f"
expires: Sun, 27 Nov 2022 14:45:56 GMT
cf-cache-status: HIT
age: 21997
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7VH6X86npqApnb8RPUeoc6iMFxuQpg%2Fl1oDdy1Hz4LaenOH%2BddftRE4u2tliocN79l4jMlHYiiL6M%2B3mLkCxsi8o87VrDnbT8OU1X1o1vhquwHdIwtiHTpJkuCrxOvbSCPaZ5Kb8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0df19ea8895-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
niugetv9.top/template/m1938pc/static/fonts/9a493d426e0448e59e470e76ff1be0a0.woff
404 Not Found 146 B URL HTTP/1.1 niugetv9.top/template/m1938pc/static/fonts/9a493d426e0448e59e470e76ff1be0a0.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /template/m1938pc/static/fonts/9a493d426e0448e59e470e76ff1be0a0.woff HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://niugetv9.top/template/m1938pc/static/css/style.css
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/DU7TrHLJxL8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/DU7TrHLJxL8
IP
Hash 66c9d0ce83c9abf2e6fab9107f43c4fe
32c14bb22b27a91692f623061db9ee9ebf2e4bb4
e7ed430db50e20a134decd0ce9d43935bba2e73894efd2790ae452a96010d24b
POST /s/gts1p5/DU7TrHLJxL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:33 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6601cbd49d9974a5606e061045cd2d31
b9a998f2acf0b247ed33a59a3c86b57e70c233b5
35f3c932348c034496d163f78a3541a2f26daab6800a39add0148c5cad720779
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35F3C932348C034496D163F78A3541A2F26DAAB6800A39ADD0148C5CAD720779"
Last-Modified: Sat, 26 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10428
Expires: Sun, 27 Nov 2022 11:46:21 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
niugetv3.top/img/ylf-1.gif
200 OK 876 kB URL HTTP/2 niugetv3.top/img/ylf-1.gif
IP
File type GIF image data, version 89a, 980 x 120\012- data
Size 876 kB (875859 bytes)
Hash 5d8bd2cf8dfd1fdeebc625f2a664a5f5
b3cc24d971059319e859932dd124bcc4d64a7a8f
f1c047bf61b6c302e1afd72b6c49e7d5e397689109620cefdb055ce09d6483b6
GET /img/ylf-1.gif HTTP/1.1
Host: niugetv3.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: image/gif
content-length: 875859
last-modified: Fri, 18 Nov 2022 14:33:12 GMT
etag: "637797a8-d5d53"
expires: Sat, 24 Dec 2022 19:01:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 222657
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0HYBPXTvihFRedtGAuUcz0SaNeLQgJ4Z9tOboWw8B9VKcmcvOdVWvAMh77Ai4QroWmbWIzwAj1gp1JRKjFEHT8ttZ8ED9vrT7r5buokFM8xfOpozB8TRDr14sBoI3rY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0dfac48b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22883e167e102ce5b8307d9f0f24ff31
205d3a515742c1ba657e88158ab2e4918269734c
5347dadb7038bd0f84f997bf7f7d036cf5499fc77a524237f2abe99b791ac5e6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5347DADB7038BD0F84F997BF7F7D036CF5499FC77A524237F2ABE99B791AC5E6"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12541
Expires: Sun, 27 Nov 2022 12:21:34 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fa83a1f103ffe503bacb761df256642
adc420a46019985993794463ebab62667e7b0713
813ded61d535d7ae20e265bf2f11858ba2748fe517fa4311edb8c1749754190e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "813DED61D535D7AE20E265BF2F11858BA2748FE517FA4311EDB8C1749754190E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1808
Expires: Sun, 27 Nov 2022 09:22:41 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 567afb2d20ab9bc9155c2b380ef69519
a1578e970ec09610d88bf444ab51c2d482736a24
571e08d7465e9260594730e7c572d9e6583d39c0cd06fd0b2ba4c52011ad0ede
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "571E08D7465E9260594730E7C572D9E6583D39C0CD06FD0B2BA4C52011AD0EDE"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2146
Expires: Sun, 27 Nov 2022 09:28:19 GMT
Date: Sun, 27 Nov 2022 08:52:33 GMT
Connection: keep-alive
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 3b87531f8e2f44a41dbc82132dd4f2dd
bc221e0e10b4f4bca12907c2021d2a65eb848aad
81a7b1cb379d5bfa9a1a1b04742402e176d49a148194c3d8ec71a0e4f6684f33
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 04:34:28 GMT
Expires: Thu, 01 Dec 2022 04:34:27 GMT
Etag: "bc221e0e10b4f4bca12907c2021d2a65eb848aad"
Cache-Control: max-age=329513,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0def8b50b3d-OSL
ocsp.trust-provider.cn/
200 OK 599 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2705db343df591a8a65280711ad391d2
65705b7ac4bdc79b01206ef29548d4b7f819d155
72e1b1ac913f28f9895187eb9e7472156b2eb707042d2e440e7a44a5915caa24
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Sun, 27 Nov 2022 08:31:01 GMT
last-modified: Sat, 26 Nov 2022 11:26:23 GMT
expires: Sat, 03 Dec 2022 11:26:22 GMT
etag: "65705b7ac4bdc79b01206ef29548d4b7f819d155"
cache-control: max-age=600276,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb3
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 7709815539489b3f-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1669537861
via: cache19.l2de2[0,0,304-0,H], cache12.l2de2[1,0], cache5.se1[0,0,200-0,H], cache4.se1[1,0], cache1.se1[3,0]
age: 1292
x-cache: HIT TCP_MEM_HIT dirn:1:24456123
x-swift-savetime: Sun, 27 Nov 2022 08:32:33 GMT
x-swift-cachetime: 1708
timing-allow-origin: *, *
eagleid: 2ff62c9516695391539516532e, 2ff62c9516695391539516532e
niugetv3.top/img/17172.gif
200 OK 3.2 MB URL HTTP/2 niugetv3.top/img/17172.gif
IP
File type GIF image data, version 89a, 600 x 240\012- data
Size 3.2 MB (3197145 bytes)
Hash 4dff729097677e6c8875d87ecb1cc40a
b2a83ac93f0177346ba2a2ba69280db169a89d0e
fdade7b3735760517f548e086b27db22b3701015daf7d94dd94a4a284373a154
GET /img/17172.gif HTTP/1.1
Host: niugetv3.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: image/gif
content-length: 3197145
last-modified: Thu, 27 Oct 2022 13:06:28 GMT
etag: "635a8254-30c8d9"
expires: Sun, 25 Dec 2022 10:15:59 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 167794
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=egxaVxK8OlpE%2FYzEhb0PPIpvuv1KjWeciErH82vpyHiB9WnM9A5sFB6PDx7cU%2FhvSTmaVJDVehbNsAjzRBrojdkke4j%2BmkDVQIqR2I8WHHojJ3Gglv1z4Lbw4gN9OPc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0e05d02b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
niugetv9.top/template/m1938pc/static/fonts/iconfont.woff
200 OK 2.9 kB URL HTTP/1.1 niugetv9.top/template/m1938pc/static/fonts/iconfont.woff
IP
File type Web Open Font Format, TrueType, length 2924, version 1.0\012- data
Hash 1b05b2b67ca6e3fe976ed8d2d1aa31d5
c7055832382daf713a911d67501e26873db045f8
ac1718a88630db8d2fd67997ad9796acdc8a6a88361b2b7058832caeec4fb22d
GET /template/m1938pc/static/fonts/iconfont.woff HTTP/1.1
Host: niugetv9.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://niugetv9.top/template/m1938pc/static/css/style.css
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: font/woff
Content-Length: 2924
Last-Modified: Wed, 02 Jun 2021 11:05:00 GMT
Connection: keep-alive
ETag: "60b765dc-b6c"
Accept-Ranges: bytes
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=633140080&si=4b095d89a95101adc8fa951bfbceef9e&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=633140080&si=4b095d89a95101adc8fa951bfbceef9e&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=633140080&si=4b095d89a95101adc8fa951bfbceef9e&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gifts-now.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 27 Nov 2022 08:52:33 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=F1192C4A93645576; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=719446574&si=84c863ef954e26adfd9e72a90e4b6c5b&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=719446574&si=84c863ef954e26adfd9e72a90e4b6c5b&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=719446574&si=84c863ef954e26adfd9e72a90e4b6c5b&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gifts-now.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 27 Nov 2022 08:52:33 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=158F6411EAF5AE9D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1901493506&si=f3d6365cc089588672da4dd3e692e58e&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1901493506&si=f3d6365cc089588672da4dd3e692e58e&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1901493506&si=f3d6365cc089588672da4dd3e692e58e&v=1.3.0&lv=1&sn=35028&r=0&ww=1280&u=http%3A%2F%2Fwww.gifts-now.com%2Findex.php&tt=%E6%9D%A5%E5%AE%BE%E5%82%A7%E8%B0%8F%E7%94%B5%E5%AD%90%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.gifts-now.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 27 Nov 2022 08:52:33 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=00796524433DB0AE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
kzeoo.com/68a7807de3933bf7079116fa9df99e6f.gif
301 Moved Permanently 162 B URL HTTP/2 kzeoo.com/68a7807de3933bf7079116fa9df99e6f.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1
Host: kzeoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: text/html
content-length: 162
location: https://max001.top/68a7807de3933bf7079116fa9df99e6f.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
niugetv3.top/img/1717.gif
200 OK 2.8 MB URL HTTP/2 niugetv3.top/img/1717.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 2.8 MB (2812930 bytes)
Hash b84dd689257112c2eeb9ff11c1eb1de7
125c585e21293764e1e52ca97dc256af76a67fc5
bd957c468bded0806e0a7ab33334f11f4a8952467f2fa13c2c606cf0bfc0ce83
GET /img/1717.gif HTTP/1.1
Host: niugetv3.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 2812930
last-modified: Wed, 26 Oct 2022 16:39:02 GMT
etag: "635962a6-2aec02"
expires: Sat, 24 Dec 2022 19:01:43 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 222650
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9t6qz4XIysZDLKURMqPCVmd6CBL9hMv8ISpCBV69PsyBEr3BOzZxCf8C%2BQeXFbVZOtA2BVz%2BFma6vvtgO%2BRuCL9utPjXPchzeCCely82VYt406cPwa777%2Bi4H8P7A0U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0e07d1eb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e87e83d3f1ef60dac0da32fd75660f33
44e9bb6e308c88de2c723bd924e04b54d1c80db7
c2557c68ca8ba5fe723fa02ab3c82083c465c7ccd971e93d33b868a6ebcdf342
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C2557C68CA8BA5FE723FA02AB3C82083C465C7CCD971E93D33B868A6EBCDF342"
Last-Modified: Thu, 24 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5095
Expires: Sun, 27 Nov 2022 10:17:29 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash ffdbc08ccb81d02178d8126c33b7f993
df48a0cb70c035fb15ad16b4e5a2b51894be7a1d
35fabbe802c21b176d434add054a470a1e51d3c7fe27c80b8b844faac1409219
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 23:50:14 GMT
Expires: Thu, 01 Dec 2022 23:50:13 GMT
Etag: "df48a0cb70c035fb15ad16b4e5a2b51894be7a1d"
Cache-Control: max-age=398858,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0e059a9b50b-OSL
ocsp.trust-provider.cn/
200 OK 599 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2705db343df591a8a65280711ad391d2
65705b7ac4bdc79b01206ef29548d4b7f819d155
72e1b1ac913f28f9895187eb9e7472156b2eb707042d2e440e7a44a5915caa24
POST / HTTP/1.1
Host: ocsp.trust-provider.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
date: Sun, 27 Nov 2022 08:31:01 GMT
last-modified: Sat, 26 Nov 2022 11:26:23 GMT
expires: Sat, 03 Dec 2022 11:26:22 GMT
etag: "65705b7ac4bdc79b01206ef29548d4b7f819d155"
cache-control: max-age=600276,s-maxage=1800,public,no-transform,must-revalidate
x-ccacdn-proxy-id: mcdpinlb3
x-frame-options: SAMEORIGIN
cf-cache-status: REVALIDATED
cf-ray: 7709815539489b3f-FRA
accept-ranges: bytes
ali-swift-global-savetime: 1669537861
via: cache19.l2de2[0,0,200-0,H], cache15.l2de2[1,0], cache4.se1[103,102,200-0,M], cache4.se1[104,0], cache2.se1[107,0]
age: 1293
x-cache: MISS TCP_REFRESH_MISS dirn:11:29982714
x-swift-savetime: Sun, 27 Nov 2022 08:52:34 GMT
x-swift-cachetime: 507
timing-allow-origin: *, *
eagleid: 2ff62c9616695391539487611e, 2ff62c9616695391539487611e
hm.baidu.com/hm.js?84c863ef954e26adfd9e72a90e4b6c5b
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?84c863ef954e26adfd9e72a90e4b6c5b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (617)
Hash 91c2adcf49573a32bc48ba4fbe71eb3d
51d7bd4b05268357fc107dc423e9c0b8fe0d7f0b
285b0e0f8cb5a4f3bf454367272b4cf283f93935617f78bb284889df548dc806
GET /hm.js?84c863ef954e26adfd9e72a90e4b6c5b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: a1848a7142dbba825d9c2f93487617ae
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:33 GMT
Etag: 454df06ef9c79ba509130ecca6301bf7
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=EE008E650630126A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?3e4245b0fdf57a3891f74ac658409754
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?3e4245b0fdf57a3891f74ac658409754
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (617)
Hash 9d8efdae95ded98f1bce038c53b1c486
e556cfc2393a47232b37ebcad5557122d2e6c62a
3ca1d52cd2836e52f77751f2bcd081049c60e56abec003a863f3c53dee2a6ef2
GET /hm.js?3e4245b0fdf57a3891f74ac658409754 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: 6c28ce736f33a6822ceeb14d30ee4d10
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:33 GMT
Etag: 9bba52b2f2141b36c571429656eae4e1
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=EA4D63A125BEBF12; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
kvemm.com/e48970f4052a7ec9d8b871d168e2b2ab.gif
301 Moved Permanently 162 B URL HTTP/2 kvemm.com/e48970f4052a7ec9d8b871d168e2b2ab.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /e48970f4052a7ec9d8b871d168e2b2ab.gif HTTP/1.1
Host: kvemm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: text/html
content-length: 162
location: https://kvknnn.top/e48970f4052a7ec9d8b871d168e2b2ab.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 3b87531f8e2f44a41dbc82132dd4f2dd
bc221e0e10b4f4bca12907c2021d2a65eb848aad
81a7b1cb379d5bfa9a1a1b04742402e176d49a148194c3d8ec71a0e4f6684f33
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 04:34:28 GMT
Expires: Thu, 01 Dec 2022 04:34:27 GMT
Etag: "bc221e0e10b4f4bca12907c2021d2a65eb848aad"
Cache-Control: max-age=329512,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0e02bb70b31-OSL
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1174731900&si=3e4245b0fdf57a3891f74ac658409754&su=http%3A%2F%2Fwww.gifts-now.com%2F&v=1.3.0&lv=1&sn=35029&r=0&ww=1268&u=http%3A%2F%2Fniugetv9.top%2F&tt=%E7%89%9B%E7%89%9B%2C%E7%89%9B%E7%89%9BTV%2C%E7%89%9B%E7%89%9B%E5%BD%B1%E8%A7%86%2C%E7%89%9B%E7%89%9BAV%2C%E7%89%9B%E7%89%9B%E7%BD%91
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1174731900&si=3e4245b0fdf57a3891f74ac658409754&su=http%3A%2F%2Fwww.gifts-now.com%2F&v=1.3.0&lv=1&sn=35029&r=0&ww=1268&u=http%3A%2F%2Fniugetv9.top%2F&tt=%E7%89%9B%E7%89%9B%2C%E7%89%9B%E7%89%9BTV%2C%E7%89%9B%E7%89%9B%E5%BD%B1%E8%A7%86%2C%E7%89%9B%E7%89%9BAV%2C%E7%89%9B%E7%89%9B%E7%BD%91
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1174731900&si=3e4245b0fdf57a3891f74ac658409754&su=http%3A%2F%2Fwww.gifts-now.com%2F&v=1.3.0&lv=1&sn=35029&r=0&ww=1268&u=http%3A%2F%2Fniugetv9.top%2F&tt=%E7%89%9B%E7%89%9B%2C%E7%89%9B%E7%89%9BTV%2C%E7%89%9B%E7%89%9B%E5%BD%B1%E8%A7%86%2C%E7%89%9B%E7%89%9BAV%2C%E7%89%9B%E7%89%9B%E7%BD%91 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 27 Nov 2022 08:52:34 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=BBB4C374A5F214DD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp.sectigo.com/
200 OK 471 B IP
Hash d70f0571f110d61e72a3961505950fa1
90476448b25e8e5fed72d8b497f1d24fbe54dff4
b2633dd1aa0357ada5bbb652b83bf1aa806f8abfd470ae44f1cd3de9e8c0130f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 16:32:08 GMT
Expires: Fri, 02 Dec 2022 16:32:07 GMT
Etag: "90476448b25e8e5fed72d8b497f1d24fbe54dff4"
Cache-Control: max-age=458972,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0e06fcbb4f1-OSL
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash ee2a31b4f9bbd25339a22cbb6d851da4
2948a3db7d7e263ca6e6bbbb5238fd6313fcee5e
3e1cb77e95b12a07c9387e0d197666273e38a3cf3def1fe99ca0506f345aed1b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3E1CB77E95B12A07C9387E0D197666273E38A3CF3DEF1FE99CA0506F345AED1B"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21587
Expires: Sun, 27 Nov 2022 14:52:21 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdb957248ee69ab7d924620a3e4712af
b72d955c710a36c92789cfe3fb9d03bcd011bc13
c9e0e166fcfaaf0b95b0608e39efc77ebb5acf3173457615fcbf690674603296
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9E0E166FCFAAF0B95B0608E39EFC77EBB5ACF3173457615FCBF690674603296"
Last-Modified: Fri, 25 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15112
Expires: Sun, 27 Nov 2022 13:04:26 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
kvtooo.top/67a0474849f4ee10ccbe3b0d2cebf337.gif
200 OK 324 kB URL HTTP/2 kvtooo.top/67a0474849f4ee10ccbe3b0d2cebf337.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 324 kB (324467 bytes)
Hash 51223186e981513fc73e79a1bf5b62d1
280e6af2e99c9381a9101c6b5820bd0d5b682df1
d3437c90208ae243d19d4316d1fe074314bcb00be9f2025819f47064c76b3833
GET /67a0474849f4ee10ccbe3b0d2cebf337.gif HTTP/1.1
Host: kvtooo.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 324467
last-modified: Tue, 22 Nov 2022 18:04:15 GMT
etag: "637d0f1f-4f373"
expires: Sun, 25 Dec 2022 16:40:14 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 144740
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7KwV%2Bp6vd2GcPIv4csIpl3cVF9ah2PNDJwo6Zy%2Fb1V9CGdci64MRG3mQQ4byXbRtblI7rmzzd2U6zdpQ2pJF%2BFSvVfbqlHL5MaWPxBW6dsj6p%2BfJyj163s4jB96H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0e1fc3ab4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 82927611a8c787e7be944e85b926e59f
33a982a4cc16216dc0da624cbc7ac7e304458a85
47eb83f37816ea6ca6470c3d59a7833199821d45e0ba5752ffd181d02f048bc5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "47EB83F37816EA6CA6470C3D59A7833199821D45E0BA5752FFD181D02F048BC5"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3940
Expires: Sun, 27 Nov 2022 09:58:14 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash daddcf0ab2997b54fc856427439df2ed
cb80e931671fd9db0a2f79d695f2f835dce19b06
2a5984f8aa140bf99cf940d933d21448bd6717ad02a75befd3be2dd9c1416705
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 16:01:18 GMT
Expires: Thu, 01 Dec 2022 16:01:17 GMT
Etag: "cb80e931671fd9db0a2f79d695f2f835dce19b06"
Cache-Control: max-age=370722,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0e1fb62b50b-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 38c85444d04a02cc0ba5385e286fe413
e2da541367f09e77c14b091f34bdfba6642ebc47
f42ecc8e6ec8ff400e4984cca9ab0250e7696ba302c888c383477ea8d30553fd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 17:33:14 GMT
Expires: Fri, 02 Dec 2022 17:33:13 GMT
Etag: "e2da541367f09e77c14b091f34bdfba6642ebc47"
Cache-Control: max-age=462638,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0e1f9aeb4f1-OSL
ocsp.pki.goog/s/gts1p5/t1eJGFHGm7w
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/t1eJGFHGm7w
IP
Hash 99552bbd7784cb08c870c16500ac6f55
923c1b605d915c92bc4ce862a994f2b67451490b
7aeaded279d93dfaee19153a9c5223fdb2019d96e9d956cfcfbb964e8d265505
POST /s/gts1p5/t1eJGFHGm7w HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/5B5Lw1c9RxE
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/5B5Lw1c9RxE
IP
Hash 5e4d3d756321bf59b060d29b402fbacb
ac91585bd928cd3f21d0a3972324a52eb20ec170
e000fe11bb37393146401271af280565838b4252419e9040de38f3f4203ac35c
POST /s/gts1p5/5B5Lw1c9RxE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash fe3637116a0ee56a31182dc5fc2223b5
4b55d6b14b4ed560c4b296f81d2fbd2640bc90b3
cd474c324a9f6046ba92e0a154377f98fb34c5bd9447400704d0573e8a09338d
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 01 Dec 2022 05:32:33 GMT
ETag: "4b55d6b14b4ed560c4b296f81d2fbd2640bc90b3"
Last-Modified: Sun, 27 Nov 2022 05:32:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 599
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0e28ab20b02-OSL
ocsp.pki.goog/s/gts1p5/swCvH5hS9-4
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/swCvH5hS9-4
IP
Hash 9e3c2ccc4e1d70f192a6cb979a944924
552e0e86f847267a73e04673c7aeaf9efd98df12
c6fcd179a709f5318e25668468cac0e4304d025f0889e99ec248ead7e19a55fe
POST /s/gts1p5/swCvH5hS9-4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash d8c46dbdc0d45adf2f5c854802c47149
594d59437d97167e45375a4d028dd35835bfd93a
1d712fb6c936017869ac9514bd8a2fe18d12bb27d33ecc1720ddeae876e8cb00
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 01 Dec 2022 06:29:02 GMT
ETag: "594d59437d97167e45375a4d028dd35835bfd93a"
Last-Modified: Sun, 27 Nov 2022 06:29:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1793
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0e2c923b50c-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 9ae2b9e506cd3eb01cd1901866779c85
0964289871821210729d979564bbaa5a67110f91
2bfcea014448f562ffbbbcaf9fb4cd0fa3ecdb3f2e41e5fdb40f27d040bed7d9
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 01 Dec 2022 07:29:30 GMT
ETag: "0964289871821210729d979564bbaa5a67110f91"
Last-Modified: Sun, 27 Nov 2022 07:29:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1074
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0e2c9f60b41-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d05893195aa5ddb83b28b52e434be01f
6829b8688dc279af2feb22df2fb3afd55ed23308
4947087c34ac5f0edffd8ac6aa429268fe66a715baaceb33338194095c0d2891
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4947087C34AC5F0EDFFD8AC6AA429268FE66A715BAACEB33338194095C0D2891"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16421
Expires: Sun, 27 Nov 2022 13:26:15 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
img.alicdn.com/imgextra/i1/133635909329/O1CN01tjzAup2Imjb8FL1oh_!!133635909329.jpg
200 OK 9.2 kB URL HTTP/2 img.alicdn.com/imgextra/i1/133635909329/O1CN01tjzAup2Imjb8FL1oh_!!133635909329.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x360, components 3\012- data
Hash 43ae14560cdbc69ce960a28002f04309
4dc694c2754882f840c77807016676732c38138b
af0e248de25efb22e6edd4e1453e686154b00ce5039f94dceb2684a332ddad0e
GET /imgextra/i1/133635909329/O1CN01tjzAup2Imjb8FL1oh_!!133635909329.jpg HTTP/1.1
Host: img.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 9166
date: Tue, 10 May 2022 07:04:29 GMT
last-modified: Fri, 13 Aug 2021 10:28:00 GMT
picasso-ret-code: SUCCESS
request-time: 0.160
expires: Wed, 10 May 2023 07:04:29 GMT
cache-control: max-age=31536000
ali-swift-global-savetime: 1652166269
via: cache31.l2ot7-1[0,0,200-0,H], cache36.l2ot7-1[6,0], cache2.fr1[0,0,200-0,H], cache1.fr1[2,0]
access-control-allow-origin: *
age: 17372885
x-cache: HIT TCP_MEM_HIT dirn:9:336074871
x-swift-savetime: Mon, 27 Jun 2022 19:24:11 GMT
x-swift-cachetime: 27344418
s-rt: 2
timing-allow-origin: *
eagleid: 2ff6329516695391543453192e
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e87e83d3f1ef60dac0da32fd75660f33
44e9bb6e308c88de2c723bd924e04b54d1c80db7
c2557c68ca8ba5fe723fa02ab3c82083c465c7ccd971e93d33b868a6ebcdf342
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C2557C68CA8BA5FE723FA02AB3C82083C465C7CCD971E93D33B868A6EBCDF342"
Last-Modified: Thu, 24 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5095
Expires: Sun, 27 Nov 2022 10:17:29 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9d0b6b9242d4ff0a1d32ffb00bf27c22
ecd7fc62c9645fc03414207d6e486f4c7a7484a6
d1f9ab0d796300896f30b26648fcb52b045a5e6c0621ab9541a0bbd677d5b4e2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D1F9AB0D796300896F30B26648FCB52B045A5E6C0621AB9541A0BBD677D5B4E2"
Last-Modified: Fri, 25 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6388
Expires: Sun, 27 Nov 2022 10:39:02 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
monaitv.me/upload/vod/2022-09-09/16627118011.jpg
200 OK 43 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/16627118011.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 998x495, components 3\012- data
Hash 5258407a8fdff3f4cfd3a9f415a13846
aa3c2f30398dce45e66c15d43118b5fb50e50ae9
e22c78b8684fcbae4229f7d84872f926dcfc4ea91fefd8ed4635b9399f4169a7
GET /upload/vod/2022-09-09/16627118011.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: image/jpeg
Content-Length: 43149
Last-Modified: Wed, 16 Nov 2022 04:32:32 GMT
Connection: keep-alive
ETag: "637467e0-a88d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
kvmaa.com/cf4287991556df0490caf209d0ed91fe.gif
301 Moved Permanently 162 B URL HTTP/2 kvmaa.com/cf4287991556df0490caf209d0ed91fe.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /cf4287991556df0490caf209d0ed91fe.gif HTTP/1.1
Host: kvmaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: text/html
content-length: 162
location: https://nvhbbb.top/cf4287991556df0490caf209d0ed91fe.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
askzyimg.com/20221002/SSHz8Yis/1.jpg
200 OK 8.9 kB URL HTTP/2 askzyimg.com/20221002/SSHz8Yis/1.jpg
IP
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash cab5e40f59ddaf68888493c7e377f189
e685bf72d76f79cf35b7361e21198564bc84ab6a
08a516fe2983bc9e1abbdba8807b3962b4c7d7f4d7ad7b126bc9e7c9ccf04d27
GET /20221002/SSHz8Yis/1.jpg HTTP/1.1
Host: askzyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/jpeg
content-length: 8941
last-modified: Mon, 03 Oct 2022 14:23:40 GMT
etag: "633af06c-22ed"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eed814939fa777891f0aa8b4c1b7436a
acc473f37e762fb198005daacdcdd6c2a703e1db
3017906d981fa2368caaa7e9816697177a03a7a2a57be5f3c22f8306b1bb7dc0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3017906D981FA2368CAAA7E9816697177A03A7A2A57BE5F3C22F8306B1BB7DC0"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 27 Nov 2022 14:52:34 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
monaitv.me/upload/vod/2021-12-13/16393698108.jpg
200 OK 84 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-13/16393698108.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1046x660, components 3\012- data
Hash 913b6ea05c26826377cac7a57e529fcb
8ae1c38a9cae3ad22d6dc45983d7faeca4b9e01d
150ae1c0b55e8740bcc7e098dd575c2aa54c9a9765902e5b251279d870d2b488
GET /upload/vod/2021-12-13/16393698108.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: image/jpeg
Content-Length: 83539
Last-Modified: Wed, 16 Nov 2022 04:32:26 GMT
Connection: keep-alive
ETag: "637467da-14653"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.pki.goog/s/gts1p5/DU7TrHLJxL8
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/DU7TrHLJxL8
IP
Hash 66c9d0ce83c9abf2e6fab9107f43c4fe
32c14bb22b27a91692f623061db9ee9ebf2e4bb4
e7ed430db50e20a134decd0ce9d43935bba2e73894efd2790ae452a96010d24b
POST /s/gts1p5/DU7TrHLJxL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 727 B IP
Hash 0e8d32d395320638dc002a869177b365
a4f8791beb518111fdff24bde36d44914840d986
6b3965abae232ffbb4f9fff767f18da7f3634defd25d3feb938e439d04530426
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4276
Cache-Control: max-age=137625
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: "63828b37-2d7"
Expires: Mon, 28 Nov 2022 23:06:19 GMT
Last-Modified: Sat, 26 Nov 2022 21:55:03 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash 0e8d32d395320638dc002a869177b365
a4f8791beb518111fdff24bde36d44914840d986
6b3965abae232ffbb4f9fff767f18da7f3634defd25d3feb938e439d04530426
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5656
Cache-Control: max-age=139005
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: "63828b37-2d7"
Expires: Mon, 28 Nov 2022 23:29:19 GMT
Last-Modified: Sat, 26 Nov 2022 21:55:03 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/s/gts1p5/2CEUKfxv4m0
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/2CEUKfxv4m0
IP
Hash 2da23df0ee3dd11d1158eb4bb9f31b88
b7d70f62d2315e1fb3376fc8f5de2a1c7c3c3f7f
9475d8e3fc7dc6c4e7f03b929c1c6dd28ee2b79cd2eb492d70d9c257cbb80788
POST /s/gts1p5/2CEUKfxv4m0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monaitv.me/upload/vod/2021-12-13/16393695029.jpg
200 OK 59 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-13/16393695029.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 720x480, components 3\012- data
Hash 773a50daf0bfa7126e1a02284f16250d
1d6d0c7b970f8f64589c67085edfbe92b912eb87
ca06e86e54a33b99582ca13d695a2a358d66c8e354f9574c013485740eb04c35
GET /upload/vod/2021-12-13/16393695029.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: image/jpeg
Content-Length: 59196
Last-Modified: Wed, 16 Nov 2022 04:31:23 GMT
Connection: keep-alive
ETag: "6374679b-e73c"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1209915041&si=84c863ef954e26adfd9e72a90e4b6c5b&su=http%3A%2F%2Fwww.gifts-now.com%2F&v=1.3.0&lv=1&sn=35029&r=0&ww=1268&u=http%3A%2F%2Fniugetv9.top%2F&tt=%E7%89%9B%E7%89%9B%2C%E7%89%9B%E7%89%9BTV%2C%E7%89%9B%E7%89%9B%E5%BD%B1%E8%A7%86%2C%E7%89%9B%E7%89%9BAV%2C%E7%89%9B%E7%89%9B%E7%BD%91
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1209915041&si=84c863ef954e26adfd9e72a90e4b6c5b&su=http%3A%2F%2Fwww.gifts-now.com%2F&v=1.3.0&lv=1&sn=35029&r=0&ww=1268&u=http%3A%2F%2Fniugetv9.top%2F&tt=%E7%89%9B%E7%89%9B%2C%E7%89%9B%E7%89%9BTV%2C%E7%89%9B%E7%89%9B%E5%BD%B1%E8%A7%86%2C%E7%89%9B%E7%89%9BAV%2C%E7%89%9B%E7%89%9B%E7%BD%91
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=1209915041&si=84c863ef954e26adfd9e72a90e4b6c5b&su=http%3A%2F%2Fwww.gifts-now.com%2F&v=1.3.0&lv=1&sn=35029&r=0&ww=1268&u=http%3A%2F%2Fniugetv9.top%2F&tt=%E7%89%9B%E7%89%9B%2C%E7%89%9B%E7%89%9BTV%2C%E7%89%9B%E7%89%9B%E5%BD%B1%E8%A7%86%2C%E7%89%9B%E7%89%9BAV%2C%E7%89%9B%E7%89%9B%E7%BD%91 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 27 Nov 2022 08:52:34 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=2F4692D2E3D59CA8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
kvknnn.top/e48970f4052a7ec9d8b871d168e2b2ab.gif
200 OK 967 kB URL HTTP/2 kvknnn.top/e48970f4052a7ec9d8b871d168e2b2ab.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 967 kB (966741 bytes)
Hash e6e170a45f5089c336f21c4453d4e00f
20fcfbe9d22eb6868add8b1782234d1b888c0337
a37eaf9f04a634f3e85dcd7353eb1fa224ddefa8d1e04b65a946b3cebf97ea75
GET /e48970f4052a7ec9d8b871d168e2b2ab.gif HTTP/1.1
Host: kvknnn.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 966741
last-modified: Sat, 12 Mar 2022 15:18:45 GMT
etag: "622cb9d5-ec055"
expires: Sat, 17 Dec 2022 04:04:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 881256
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vOx%2FRsHpqAJQOhjnc0B0ysVz%2FUZ0xV6l01xp%2BbGnNisZdPW70HqY7MZHbwDgfoT93UqwUXGJtRt76nOI%2BlSQTYswjGLZ8m6mLoK9Ni4nLMv%2Bj89otLh%2BVO7NlHki"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0e41eec1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 0e8d32d395320638dc002a869177b365
a4f8791beb518111fdff24bde36d44914840d986
6b3965abae232ffbb4f9fff767f18da7f3634defd25d3feb938e439d04530426
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 946
Cache-Control: max-age=134295
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: "63828b37-2d7"
Expires: Mon, 28 Nov 2022 22:10:49 GMT
Last-Modified: Sat, 26 Nov 2022 21:55:03 GMT
Server: ECS (amb/6BB7)
X-Cache: HIT
Content-Length: 727
p3.douyinpic.com/obj/tos-cn-i-dy/50372422c79c43218a1f1a337e6e6727
200 OK 440 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/50372422c79c43218a1f1a337e6e6727
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 440 kB (439790 bytes)
Hash 07ad6948d174b603a75e166a521bbb04
d08af2d0fc9693ce636e66cbb89277875d7954f4
40853d1d4eb09490225dfe79a563bcc574195734b42387a2a4043f854bc3ca2b
GET /obj/tos-cn-i-dy/50372422c79c43218a1f1a337e6e6727 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 439790
date: Tue, 22 Nov 2022 10:08:42 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Tue, 22 Nov 2022 10:08:42 GMT
nw-session-id: 2022112218084201015816313014E20EC78n6pj03dy
nw-session-trace: 2022-11-22T18:08:42.103953138+08:00 30
x-bdcdn-cache-status: TCP_MISS
x-length: 439790
x-powered-by: ImageX
x-response-date: Tue, 22 Nov 2022 18:08:42 GMT
x-tt-logid: 2022112218084201015816313014E20EC7
via: n150-062-144, cache12.l2de2[0,0,206-0,H], cache2.l2de2[0,0], cache2.l2de2[1,0], cache2.se1[0,0,200-0,H], cache8.se1[6,0]
x-request-ip: fdbd:dc02:22:591::130
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=6
x-tt-trace-host: 01828e55a3aae08103c59996ea14c72a4aa51a193bb85077f4f7c956c62e5a545448397ee85385517816fd2376cd74e6a5134a7bbe40b2f834d80de48cf19178d98157ba68fe13526cac7ff6b9a769ff2e578150eb7becb6badde52c1221bf0e52
x-response-lb: image
ali-swift-global-savetime: 1669111722
age: 427432
x-cache: HIT TCP_HIT dirn:11:33709056
x-swift-savetime: Tue, 22 Nov 2022 11:19:45 GMT
x-swift-cachetime: 31531737
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16695391545446010e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/48b54eb53623451d9e5ae631a74a014c
200 OK 256 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/48b54eb53623451d9e5ae631a74a014c
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 256 kB (256359 bytes)
Hash bb9cf137ebf620d25a203489dd9f7fdf
a816fd8698e1cdec12e67cf26c76ee91f8685cd8
8e63ff608d9c5be39a967c94ccea6394b6e529a7b63e387b5384d4d9d7e48b16
GET /obj/tos-cn-i-dy/48b54eb53623451d9e5ae631a74a014c HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 256359
date: Sat, 26 Nov 2022 15:57:27 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Sat, 26 Nov 2022 11:58:11 GMT
nw-session-id: 2022112619581101015816313036B1E90326khb03dy
nw-session-trace: 2022-11-26T19:58:11.416185266+08:00 42
x-bdcdn-cache-status: TCP_HIT
x-length: 256359
x-powered-by: ImageX
x-response-date: Sat, 26 Nov 2022 19:58:11 GMT
x-tt-logid: 2022112619581101015816313036B1E903
via: n204-098-236, cache19.l2de2[0,0,206-0,H], cache6.l2de2[1,0], cache6.l2de2[1,0], cache7.se1[0,0,200-0,H], cache8.se1[7,0]
x-request-ip: fdbd:dc01:22:35::154
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=7
x-tt-trace-host: 01c70dd2b30bede540a99194c063ce1081cd61dd4259176fc7f86da45d743ce8534e95f2507d6671dcb8d9b642b32f609f7632c1c2480568d06be3fa71ed10ef46603a49c12e2d5ab7b3d3ede5cd8390af107ef1101731d1ddf886bd9a11a1ff88
x-response-lb: image
ali-swift-global-savetime: 1669478247
age: 60907
x-cache: HIT TCP_HIT dirn:3:329263623
x-swift-savetime: Sat, 26 Nov 2022 18:45:21 GMT
x-swift-cachetime: 31525926
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16695391545486012e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/47aedc0691794d95b123bb4f8e114de3
200 OK 66 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/47aedc0691794d95b123bb4f8e114de3
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 200 x 200\012- data
Hash 9d629444f249b855a94e8a882d5ec47d
c06f98e56cf9977aaa7addb0e0acee4d982f6248
a81c159959e121cf31b8fb9fff87a139cb549a928b07ff43306ac65a2dcb6a0c
GET /obj/tos-cn-i-dy/47aedc0691794d95b123bb4f8e114de3 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 65638
date: Thu, 24 Nov 2022 17:04:00 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 24 Nov 2022 17:04:00 GMT
nw-session-id: 202211250104000102090801531EE6926Csfzgg02dy
nw-session-trace: 2022-11-25T01:04:00.722129358+08:00 73
x-bdcdn-cache-status: TCP_MISS
x-length: 65638
x-powered-by: ImageX
x-response-date: Fri, 25 Nov 2022 01:04:00 GMT
x-tt-logid: 202211250104000102090801531EE6926C
via: n204-098-054, cache10.l2de2[0,0,206-0,H], cache17.l2de2[1,0], cache17.l2de2[1,0], cache5.se1[0,0,200-0,H], cache8.se1[6,0]
x-request-ip: fdbd:dc01:26:259::153
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=6
x-tt-trace-host: 01ca22b6e36e3f31e53156b8c1b9275e2a54e22ec5fa313783764a03842e9750a0a7ec1b4f7a798a21a47d5248bf2e9442c66bae0b17d8290d806bf3a82392ede5fb1912d52b89c2efd48888dfe0420c77be8fe85a874695a645e46616c04286b4
x-response-lb: image
ali-swift-global-savetime: 1669309440
age: 229714
x-cache: HIT TCP_HIT dirn:11:87007938
x-swift-savetime: Fri, 25 Nov 2022 13:07:35 GMT
x-swift-cachetime: 31463785
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16695391545536018e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/e153ea07a9e84b79b083849c40cc34b6
200 OK 420 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/e153ea07a9e84b79b083849c40cc34b6
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 420 kB (420442 bytes)
Hash 7020ecb5ebdf5d2d41668f76d36f5982
30c768ceb1463fffc0145f1e73c808f8f6d2bb51
3a55db6e5e4fa541729efffaa932549e491e07af768e1c3c3d1dad65ae53a8bb
GET /obj/tos-cn-i-dy/e153ea07a9e84b79b083849c40cc34b6 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 420442
date: Wed, 23 Nov 2022 19:05:33 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Wed, 23 Nov 2022 14:25:30 GMT
nw-session-id: 202211232225300101580270672D784638mtkdn02dy
nw-session-trace: 2022-11-23T22:25:30.548689345+08:00 81
x-bdcdn-cache-status: TCP_HIT
x-length: 420442
x-powered-by: ImageX
x-response-date: Wed, 23 Nov 2022 22:25:30 GMT
x-tt-logid: 202211232225300101580270672D784638
via: n132-085-052, cache5.l2de2[0,0,206-0,H], cache21.l2de2[2,0], cache21.l2de2[3,0], cache1.se1[0,0,200-0,H], cache8.se1[3,0]
x-request-ip: fdbd:dc03:15:231::134
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=3
x-tt-trace-host: 01e30c4ab5eb7be2436f4e80c37d0bf865ef2d9e490926580dd610aecbe3b3a013e27c67d9bdcc334baaf37a5076138f2c0511e61569a5cdf088a257cc92e49364e17f9f5ac608c83dc1ec0d4b13ce6f2b753315b127c46b57bfdd2e2fb9612211
x-response-lb: image
ali-swift-global-savetime: 1669230333
age: 308821
x-cache: HIT TCP_HIT dirn:2:17137560
x-swift-savetime: Fri, 25 Nov 2022 09:11:11 GMT
x-swift-cachetime: 31398862
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16695391545926054e
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/52b82452019e46df91397f0a8fdcc9e6
200 OK 385 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/52b82452019e46df91397f0a8fdcc9e6
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 60\012- data
Size 385 kB (384932 bytes)
Hash 6b1533d50f7375dff2f5b3969e7ec1da
6dfd13e56902faedb34a9d2e6d27e51605ddb0f1
2f235ff0c8fd65b40619ef5448206c505716aa41dcee03850c00b1352c986f7c
GET /obj/tos-cn-i-dy/52b82452019e46df91397f0a8fdcc9e6 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 384932
date: Tue, 22 Nov 2022 10:08:41 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Tue, 22 Nov 2022 10:08:41 GMT
nw-session-id: 202211221808410101351601674FE863345mzx501dy
nw-session-trace: 2022-11-22T18:08:41.647742825+08:00 42
x-bdcdn-cache-status: TCP_MISS
x-length: 384932
x-powered-by: ImageX
x-response-date: Tue, 22 Nov 2022 18:08:41 GMT
x-tt-logid: 202211221808410101351601674FE86334
via: n132-082-090, cache8.l2de2[0,0,206-0,H], cache5.l2de2[1,0], cache5.l2de2[1,0], cache2.se1[0,0,200-0,H], cache8.se1[4,0]
x-request-ip: fdbd:dc03:8:579::167
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=4
x-tt-trace-host: 01828e55a3aae08103c59996ea14c72a4affd5f336396c83fef04801501cdc16c039bb9b50be36e4583a9a652be70d4c26d43a9fbfbc9d261778259a62d27b92becca44012ddd205b00b27dc756b3cf65e7a30213d49dde86765893b92cc85453b
x-response-lb: image
ali-swift-global-savetime: 1669111721
age: 427433
x-cache: HIT TCP_HIT dirn:3:20866193
x-swift-savetime: Tue, 22 Nov 2022 11:19:45 GMT
x-swift-cachetime: 31531736
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9c16695391545576022e
X-Firefox-Spdy: h2
img.9675x.com/images/637f23088d97bc67605fd916.gif
302 Found 516 kB URL HTTP/2 img.9675x.com/images/637f23088d97bc67605fd916.gif
IP
ASN #134835 Starry Network Limited
File type GIF image data, version 89a, 960 x 60\012- data
Size 516 kB (516218 bytes)
Hash 8d339af776b8da39e4e1fdb55f96b6af
d6b84760fea01429a13f8ff040172507361097c0
fd6e67ed60cceb42d84e753cce3f4c5ede43ae84f4038ffea335a840302fa2df
GET /images/637f23088d97bc67605fd916.gif HTTP/1.1
Host: img.9675x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/087453e6696a47efaee2f34d49758e2f
cache-control: max-age=3600
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c962d00c5990db6177d46313fb9d52f4
6a0f6cdeb0dd5df988b26cca02ecc6cc0100cbe9
4f2ec16c924561fdeccf0fa216e8e323e757b24af1da42cefc4eaa072131f80f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=107403
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: "638225dd-118"
Expires: Mon, 28 Nov 2022 14:42:37 GMT
Last-Modified: Sat, 26 Nov 2022 14:42:37 GMT
Server: nginx
Content-Length: 280
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9d0b6b9242d4ff0a1d32ffb00bf27c22
ecd7fc62c9645fc03414207d6e486f4c7a7484a6
d1f9ab0d796300896f30b26648fcb52b045a5e6c0621ab9541a0bbd677d5b4e2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D1F9AB0D796300896F30B26648FCB52B045A5E6C0621AB9541A0BBD677D5B4E2"
Last-Modified: Fri, 25 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6388
Expires: Sun, 27 Nov 2022 10:39:02 GMT
Date: Sun, 27 Nov 2022 08:52:34 GMT
Connection: keep-alive
monaitv.me/upload/vod/2021-12-13/16393693601.jpg
200 OK 191 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-13/16393693601.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 680x454, components 3\012- data
Size 191 kB (190649 bytes)
Hash 4494e73afc8d41bc0e99e5a3ae50bd00
6991f1dcc15d59f0c3f2dd74c3b2517a777256b3
53ae6be0d77aa77b01c113b90116dde5c5b714fc6b07d78ae62072b17aedfa35
GET /upload/vod/2021-12-13/16393693601.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: image/jpeg
Content-Length: 190649
Last-Modified: Wed, 16 Nov 2022 04:28:51 GMT
Connection: keep-alive
ETag: "63746703-2e8b9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
nvhbbb.top/cf4287991556df0490caf209d0ed91fe.gif
200 OK 318 kB URL HTTP/2 nvhbbb.top/cf4287991556df0490caf209d0ed91fe.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 318 kB (317903 bytes)
Hash fb3f1f47e7cd3c017411f4a08cb222b7
9ef0eebfa48d7d3c66398066ad781c2e4c5c2fce
864310898b7de94e28b82e0e318d801e6537365a75078d2f94b98a25c81e98a9
GET /cf4287991556df0490caf209d0ed91fe.gif HTTP/1.1
Host: nvhbbb.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 317903
last-modified: Sat, 13 Aug 2022 11:03:31 GMT
etag: "62f78503-4d9cf"
expires: Sat, 24 Dec 2022 18:27:11 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 224723
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pgn%2FaHRRZ3LROFPHOXRFN8a0DAC7HoqnXkKd2usVAKLwI50rnQ6tjKjMafYBpVyknCrMGpbo5ZV6dHsvWtV05zi6aIlKDrSN1aeKztAMR1mt9EWVQms7iQs%2BSDLF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0e4f8c9b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/2CEUKfxv4m0
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/2CEUKfxv4m0
IP
Hash 2da23df0ee3dd11d1158eb4bb9f31b88
b7d70f62d2315e1fb3376fc8f5de2a1c7c3c3f7f
9475d8e3fc7dc6c4e7f03b929c1c6dd28ee2b79cd2eb492d70d9c257cbb80788
POST /s/gts1p5/2CEUKfxv4m0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
max001.top/68a7807de3933bf7079116fa9df99e6f.gif
200 OK 366 kB URL HTTP/2 max001.top/68a7807de3933bf7079116fa9df99e6f.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 366 kB (366444 bytes)
Hash 86371c51bf2086f3a40f0e438246b662
9da793de9c620485ee91b88413b256c69dc774c5
8155b44efd09301dca9ec4bdab8e3e6445d1564fe580edd5f7575c9289843ccf
GET /68a7807de3933bf7079116fa9df99e6f.gif HTTP/1.1
Host: max001.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://niugetv9.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 366444
last-modified: Fri, 19 Aug 2022 17:02:28 GMT
etag: "62ffc224-5976c"
expires: Tue, 27 Dec 2022 08:52:34 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IyyL5eu7f9qVT9buhmmkZ5Yp6nfl3AWnI9b%2Bxs5IhCz96uuC891KgYOah8GXnr0wbYyxqFEI3AuRP0j342A%2Bs90uzLiMi4AH9Pebe6HpvxDkFgzG9gS4F5aXaYIs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0e31ad0b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c962d00c5990db6177d46313fb9d52f4
6a0f6cdeb0dd5df988b26cca02ecc6cc0100cbe9
4f2ec16c924561fdeccf0fa216e8e323e757b24af1da42cefc4eaa072131f80f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4733
Cache-Control: max-age=112136
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: "638225dd-118"
Expires: Mon, 28 Nov 2022 16:01:30 GMT
Last-Modified: Sat, 26 Nov 2022 14:42:37 GMT
Server: ECS (amb/6BC8)
X-Cache: HIT
Content-Length: 280
8499753.com/8499/960x60.gif
200 OK 331 kB URL HTTP/2 8499753.com/8499/960x60.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /8499/960x60.gif HTTP/1.1
Host: 8499753.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 331043
last-modified: Wed, 09 Nov 2022 06:22:39 GMT
etag: "50d23-5ed03aef4304d"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
monaitv.me/upload/vod/2021-12-13/16393696693.jpg
200 OK 139 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-13/16393696693.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x587, components 3\012- data
Size 139 kB (138673 bytes)
Hash a14701247d0c639ca6cbd7e58503af10
e8e1fef6493ad46c28c5ab50abae2cbe40ea96bd
ab0533c598b3b2a20bcd42b511b791adf3bc5ed00cc09b376d430f3c2ab63d90
GET /upload/vod/2021-12-13/16393696693.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: image/jpeg
Content-Length: 138673
Last-Modified: Wed, 16 Nov 2022 04:32:29 GMT
Connection: keep-alive
ETag: "637467dd-21db1"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
hm.baidu.com/hm.js?84c863ef954e26adfd9e72a90e4b6c5b
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?84c863ef954e26adfd9e72a90e4b6c5b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (617)
Hash be28752b7b569a9d8ef943be4f0c2973
532080e9419d813dfb039407f87d800a236382fb
6147791dfef2ffc2933e8afbadb195cdc577dc23539b568aee40cfa0c90bfa59
GET /hm.js?84c863ef954e26adfd9e72a90e4b6c5b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: 454df06ef9c79ba509130ecca6301bf7
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: b0a8e4cfda3b94cad61369d4bdaf62e9
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=104E10F20A3DB8EA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?3e4245b0fdf57a3891f74ac658409754
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?3e4245b0fdf57a3891f74ac658409754
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (617)
Hash 946ac067d4a1c9ec189600bdd1bde17c
a3bf1153c1b3afcc16805263ea8b16c26d6f5d5d
f3c79ff5ea065fddafe56f21b5f33c108c90adc3dcae9ee40c7d0a0b8e2b83ca
GET /hm.js?3e4245b0fdf57a3891f74ac658409754 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-None-Match: 9bba52b2f2141b36c571429656eae4e1
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11255
Content-Type: application/javascript
Date: Sun, 27 Nov 2022 08:52:34 GMT
Etag: 8c42c157ccee16c1a4416c600ea42a94
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1D2203D374BCE53C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
monaitv.me/upload/vod/2022-05-05/165173678012.jpg
200 OK 73 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-05-05/165173678012.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 500x333, components 3\012- data
Hash d7a6510257bb747ed9d56228502b5219
5d0fd20d55ff68c572aba2d316f40807e44eff6d
87dc3d2e149f996e8e880ec3eed1b39be86f9ed4133d5ba79289a2eac6020eb5
GET /upload/vod/2022-05-05/165173678012.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 72912
Last-Modified: Wed, 16 Nov 2022 04:29:28 GMT
Connection: keep-alive
ETag: "63746728-11cd0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
523zyw.com/upload/vod/2022-06-11/165495332110.jpg
200 OK 161 kB URL HTTP/1.1 523zyw.com/upload/vod/2022-06-11/165495332110.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x539, components 3\012- data
Size 161 kB (161065 bytes)
Hash 6ef63b47f6e33870ce0a20eb64930261
8fb1ab32828d1810b0fa70b32cc88cf490fd1a39
74cb76df2888f6e9bd88a930c72a3e5cbf2d2294548a4c8a76a2074bfbd95c69
GET /upload/vod/2022-06-11/165495332110.jpg HTTP/1.1
Host: 523zyw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 161065
Connection: keep-alive
Last-Modified: Sat, 11 Jun 2022 13:15:21 GMT
Accept-Ranges: bytes
ETag: "5aab24d957dd81:0"
pic.picnewsss.com/tu-2022290039/960-120.gif
200 OK 363 kB URL HTTP/2 pic.picnewsss.com/tu-2022290039/960-120.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 363 kB (362862 bytes)
Hash c3bde1a0936121317a37c1ea11d3c59a
5c61c5caea1804742596aff4779247ca14fe0fe3
0e54eb7dcb90dc18351c3b5c97e684fee4b4b1de27f3d2e263f81103a20edd81
GET /tu-2022290039/960-120.gif HTTP/1.1
Host: pic.picnewsss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=2592000
content-type: image/gif
date: Sun, 27 Nov 2022 02:25:57 GMT
etag: "1669515957"
expires: Tue, 27 Dec 2022 02:25:57 GMT
last-modified: Sun, 27 Nov 2022 02:25:57 GMT
server: nginx
x-cache: HIT, policy, memory
content-length: 362862
X-Firefox-Spdy: h2
8499753.com/8499/hongse/960x60.gif
200 OK 331 kB URL HTTP/2 8499753.com/8499/hongse/960x60.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /8499/hongse/960x60.gif HTTP/1.1
Host: 8499753.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 331043
last-modified: Sat, 12 Nov 2022 04:48:00 GMT
etag: "50d23-5ed3eb5f982bf"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
523zyw.com/upload/vod/2022-06-12/165504085514.jpg
200 OK 179 kB URL HTTP/1.1 523zyw.com/upload/vod/2022-06-12/165504085514.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 1000x666, components 3\012- data
Size 179 kB (179353 bytes)
Hash 134e669b1e710b58dbad92fd85219662
040a39c0ff86938f1e790ef0937d4f9f0c2ad222
034ef7302f7c43998aa4185ffeb73668918940a0099f29d253c4525c662347e9
GET /upload/vod/2022-06-12/165504085514.jpg HTTP/1.1
Host: 523zyw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 179353
Connection: keep-alive
Last-Modified: Sun, 12 Jun 2022 13:34:15 GMT
Accept-Ranges: bytes
ETag: "f265ef1b617ed81:0"
3688qq.com/4b282cc16ec34dcba5f961c935029278.gif
200 OK 359 kB URL HTTP/1.1 3688qq.com/4b282cc16ec34dcba5f961c935029278.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 359 kB (358672 bytes)
Hash 668143938c3bb811847d83330decd423
f86300da5d773b84bc65d3c901a4767fd8566c48
a06c47f458fdbd01ba8ba0202fb615e94e2353d65098b480ede52a13a645f859
Analyzer Verdict Alert quad9 Sinkholed
GET /4b282cc16ec34dcba5f961c935029278.gif HTTP/1.1
Host: 3688qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "637e164a-57910"
Date: Sat, 26 Nov 2022 12:09:24 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 23 Nov 2022 12:47:06 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us1-cdnb-27
Content-Length: 358672
9366qq.com/d1c4e9fab26a450f81996ecd67b392b3.gif
200 OK 426 kB URL HTTP/1.1 9366qq.com/d1c4e9fab26a450f81996ecd67b392b3.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 426 kB (425642 bytes)
Hash 05224c1ad7b782f551cbccdcf9f27fa5
c6ee7c8a6a149c7bd96c9e25ac1784fdbca84eb0
0b24fd89f9a5bbd8278bccf94b310be958f495b91597c0bf0c8faa7980ab5897
Analyzer Verdict Alert quad9 Sinkholed
GET /d1c4e9fab26a450f81996ecd67b392b3.gif HTTP/1.1
Host: 9366qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "637e165c-67eaa"
Date: Fri, 25 Nov 2022 11:56:54 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 23 Nov 2022 12:47:24 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-21
Content-Length: 425642
ads-6686.top/960X240.gif
200 OK 2.3 MB IP
File type GIF image data, version 89a, 960 x 240\012- data
Size 2.3 MB (2291400 bytes)
Hash e95cb7b655d12501799b1e020ef32265
3fdba737a19ffd6c2c43b48dd655c5f91d92bba4
6a877f0bcfe685891a093893ce37fa8ff60d3264ecf9ebff6f6b7a6848516f71
Analyzer Verdict Alert quad9 Sinkholed
GET /960X240.gif HTTP/1.1
Host: ads-6686.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: load-edge/2.1.1
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 2291400
last-modified: Mon, 14 Nov 2022 08:20:48 GMT
etag: "6371fa60-22f6c8"
strict-transport-security: max-age=31536000
lp-geo: edge-ejle
lp-addr: 91.90.42.154
lp-request: 818fc314-de14-4a67-aa8f-6a174f0420ce
lp-id: 342c499e6acb362e9bb6b12feb4fc65c
expires: Sun, 27 Nov 2022 08:57:34 GMT
cache-control: max-age=300
lp-cache: HIT
lp-cache-hit: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
play.ncbofang4.com/20220909/Gnfm5HFp/1.jpg
200 OK 614 kB URL HTTP/1.1 play.ncbofang4.com/20220909/Gnfm5HFp/1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x563, components 3\012- data
Size 614 kB (614177 bytes)
Hash a31b202199e30ec328233468c6ae3831
41830c2b6a68b0dbe5889927b1e3b134caaedb5b
faab6ac849365ca31db54ba5fc40986065b9abbf373c6d65372af7e4dc0e1b32
GET /20220909/Gnfm5HFp/1.jpg HTTP/1.1
Host: play.ncbofang4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:47 GMT
Content-Type: image/jpeg
Content-Length: 614177
Last-Modified: Tue, 08 Nov 2022 11:51:08 GMT
Connection: keep-alive
ETag: "636a42ac-95f21"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ads-6686.top/600X300.gif
200 OK 2.0 MB IP
File type GIF image data, version 89a, 600 x 300\012- data
Size 2.0 MB (1963053 bytes)
Hash d30acbce9f6b70d5db3de8add527b4e4
ce6f310e4afc8b622d5b83182c1982f21a6f0948
0bd87a1b457da36aba0fdc9ed7001f5e1b1bd6821f90861faab660af7f7589d6
Analyzer Verdict Alert quad9 Sinkholed
GET /600X300.gif HTTP/1.1
Host: ads-6686.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: load-edge/2.1.1
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 1963053
last-modified: Mon, 14 Nov 2022 07:36:41 GMT
etag: "6371f009-1df42d"
strict-transport-security: max-age=31536000
lp-geo: edge-ejle
lp-addr: 91.90.42.154
lp-request: 8fa87159-9325-4f42-b524-2e044300dea2
lp-id: 1c11e2f5ad8a035a6dd3a3190ec5599e
expires: Sun, 27 Nov 2022 08:57:34 GMT
cache-control: max-age=300
lp-cache: REVALIDATED
lp-cache-hit: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
592773xgg.com/be2d6c93b7fe43b4b25d4a8810bc5bfc.gif
200 OK 1.8 MB URL HTTP/1.1 592773xgg.com/be2d6c93b7fe43b4b25d4a8810bc5bfc.gif
IP
File type GIF image data, version 89a, 960 x 240\012- data
Size 1.8 MB (1833203 bytes)
Hash b7b8c8d351470288a0c28f34bbdbfac6
d3f0b5bbaff9cda595c8525365618228e756d55d
bcd291e3c8c9fbccc8953982200b8ffe1804289e13f0a68b44aa189227e569d8
Analyzer Verdict Alert quad9 Sinkholed
GET /be2d6c93b7fe43b4b25d4a8810bc5bfc.gif HTTP/1.1
Host: 592773xgg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "6364f659-1bf8f3"
Date: Thu, 24 Nov 2022 06:43:46 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 04 Nov 2022 11:24:09 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-16
Content-Length: 1833203
monaitv.me/upload/vod/2022-09-09/166271180317.jpg
200 OK 116 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/166271180317.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 999x558, components 3\012- data
Size 116 kB (116387 bytes)
Hash c320799a53998277d9e0b15c326c2f07
4992d1028c4e232b69022b52ab579432dd737c68
4e536bd3ef7785ed13125d3c8de44126db3f7f91500e34bda7e39f0dfa54e6a8
GET /upload/vod/2022-09-09/166271180317.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 116387
Last-Modified: Wed, 16 Nov 2022 04:32:32 GMT
Connection: keep-alive
ETag: "637467e0-1c6a3"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-12/16392865119.jpg
200 OK 607 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/16392865119.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 799x482, components 3\012- data
Size 607 kB (606843 bytes)
Hash 70632b93fd5a3a41b89b6203b9426b08
80c015fe160a97fdb870a247e8c6c3d716a8aa2c
d710fda8ec063b92d3bf67c180c5352e87a916971a59ee821736eb84434ffb8c
GET /upload/vod/2021-12-12/16392865119.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:33 GMT
Content-Type: image/jpeg
Content-Length: 606843
Last-Modified: Wed, 16 Nov 2022 04:28:34 GMT
Connection: keep-alive
ETag: "637466f2-9427b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 9183f15e6557030169d7d9e9fac58585
30e7fa73d6c4e6ae50ca7466e0b068d812dbe891
dab1dcf09914ad0ddc7c58d2c96e18f03959c9002278a3a804eae46c67f59228
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 01 Dec 2022 06:54:42 GMT
ETag: "30e7fa73d6c4e6ae50ca7466e0b068d812dbe891"
Last-Modified: Sun, 27 Nov 2022 06:54:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1832
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7709a0ea5993b50c-OSL
monaitv.me/upload/vod/2022-09-09/166271180212.jpg
200 OK 31 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/166271180212.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 998x496, components 3\012- data
Hash 02fc19d7ae6cd2928d2d79e9f29b7891
443df580fdcf92534b5d962ab90e000ab49cb95b
eb3368625b7328bbb43751ec7ededd5569bb4b2158c306772befd8625fd5cf31
GET /upload/vod/2022-09-09/166271180212.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: image/jpeg
Content-Length: 30797
Last-Modified: Wed, 16 Nov 2022 04:32:31 GMT
Connection: keep-alive
ETag: "637467df-784d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
u0062.com/a13ccf8571ea4a7ab6b41a306a625f57.gif
200 OK 248 kB URL HTTP/1.1 u0062.com/a13ccf8571ea4a7ab6b41a306a625f57.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 650 x 350\012- data
Size 248 kB (247851 bytes)
Hash a9bf695dc5e2ed4a1d5e17818bb895f6
5018e0b9d477d7a536586297fbd2404fc407e295
6cd4ba0841e74acee6bcbc0933c03a0932d5e267a3a2b2af1b8f1abd6a7c0010
GET /a13ccf8571ea4a7ab6b41a306a625f57.gif HTTP/1.1
Host: u0062.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 29 May 2022 12:25:12 GMT
ETag: W/"62936628-3c8da"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
monaitv.me/upload/vod/2022-07-22/165849653111.jpg
200 OK 464 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-07-22/165849653111.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, xresolution=110, yresolution=118, resolutionunit=2, software=www.meitu.com, datetime=2019:09:30 16:51:48], baseline, precision 8, 800x499, components 3\012- data
Size 464 kB (463866 bytes)
Hash 75844e3ed00976f4f7383a6eea0d8759
2e3a39ea44e0b82bed8a4a200736458bc94b53ff
b3303407e2da2d99fa5bcafe160e711f256aacb88dfe88d75b42b634d08521df
GET /upload/vod/2022-07-22/165849653111.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 463866
Last-Modified: Wed, 16 Nov 2022 04:28:43 GMT
Connection: keep-alive
ETag: "637466fb-713fa"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-09-09/166271180211.jpg
200 OK 106 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/166271180211.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 997x501, components 3\012- data
Size 106 kB (106318 bytes)
Hash 41c5fd42d49af84b1eef2e311d9af3af
7ed7cd318d2ac4ebdaef4721419c782673c548a8
6c92a37400bbd36b66bd392550ecdccc7666cd8e505ba97fefa0804870e7710d
GET /upload/vod/2022-09-09/166271180211.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: image/jpeg
Content-Length: 106318
Last-Modified: Wed, 16 Nov 2022 04:32:31 GMT
Connection: keep-alive
ETag: "637467df-19f4e"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 727 B IP
Hash ac743acaa158b81a76562b1ab28fd093
da15b2a8843fa424d3fbaa8f43a3b0652fa355c2
deb3eb79d36ddf041a20041417b063d8416932db214feb513322dbca381651d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=101663
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:35 GMT
Etag: "63820f72-2d7"
Expires: Mon, 28 Nov 2022 13:06:58 GMT
Last-Modified: Sat, 26 Nov 2022 13:06:58 GMT
Server: nginx
Content-Length: 727
monaitv.me/upload/vod/2022-08-12/166030313415.jpg
200 OK 493 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-08-12/166030313415.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x550, components 3\012- data
Size 493 kB (492705 bytes)
Hash b7efdaf4a63fa8cd6d74945228b66de9
f4c212122cd23dc301f004a9962744c4213023ec
81eb5f739f1a0fbdfcc06fae5b9251fa8a40528ddbea6484e9aa596b9bc1a0a9
GET /upload/vod/2022-08-12/166030313415.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 492705
Last-Modified: Wed, 16 Nov 2022 04:28:38 GMT
Connection: keep-alive
ETag: "637466f6-784a1"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
taiwtp1.com/xin/960240.gif
200 OK 436 kB URL HTTP/2 taiwtp1.com/xin/960240.gif
IP
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 960 x 240\012- data
Size 436 kB (436473 bytes)
Hash 732bd86d0a1c250c8ee8f6ebf30d358e
9f8ec516e191af6504caead933e550627ed80af9
8f3edf67a76ef4c9b72fe1dc842ec813009e0fd7bb1945c96d564eb385d068ee
GET /xin/960240.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:50:09 GMT
content-type: image/gif
content-length: 436473
last-modified: Thu, 20 Oct 2022 07:11:15 GMT
etag: "6350f493-6a8f9"
expires: Tue, 27 Dec 2022 08:50:09 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
monaitv.me/upload/vod/2022-09-09/16627118029.jpg
200 OK 47 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/16627118029.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 992x488, components 3\012- data
Hash 4eedcf8e2d52dc8a400ff30738caf215
d89db5850e719700dda24888f59f571e3dbca054
431d0792b638762572d713d7e733d34c0487b752dfb0bdd72b687f27b5cd24cc
GET /upload/vod/2022-09-09/16627118029.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: image/jpeg
Content-Length: 47061
Last-Modified: Wed, 16 Nov 2022 04:32:31 GMT
Connection: keep-alive
ETag: "637467df-b7d5"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-09-09/166271180210.jpg
200 OK 105 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/166271180210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1003x499, components 3\012- data
Size 105 kB (104763 bytes)
Hash 292418be8755af3cbc2fa481a2282a32
dfacfa4813ccae92f102d1db6be4fdd8c1048a04
605ac4ca2f038c94aa20c7b96aeb1e3a61e5dce05f850d80581fc11f4c81c203
GET /upload/vod/2022-09-09/166271180210.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: image/jpeg
Content-Length: 104763
Last-Modified: Wed, 16 Nov 2022 04:32:31 GMT
Connection: keep-alive
ETag: "637467df-1993b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
kjimg10.360buyimg.com/ott/jfs/t1/120993/16/33030/1021535/6380d2dbE2ee6e05e/c45dd20fdac2727b.gif
200 OK 1.0 MB URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/120993/16/33030/1021535/6380d2dbE2ee6e05e/c45dd20fdac2727b.gif
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
File type GIF image data, version 89a, 960 x 60\012- data
Size 1.0 MB (1021535 bytes)
Hash 3ee27568f25223c8d290eb4003e1916f
78a1cc6c8e4bca6cb26f7f2ae899ad5bc5154b7d
9d019eccd2bc0f713cab4e42e37f9f3d8fbb022526850ea87248a09bd1c215a4
GET /ott/jfs/t1/120993/16/33030/1021535/6380d2dbE2ee6e05e/c45dd20fdac2727b.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 1021535
cache-control: max-age=315360000
expires: Mon, 22 Nov 2032 14:51:41 GMT
last-modified: Fri, 25 Nov 2022 14:36:11 GMT
age: 151255
via: http/1.1 ORI-CLOUD-HUN-MIX-25 (jcs [cMsSfW]), http/1.1 SCchengdu-CT-11-MIX-29 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1669387901977-0-0-0-12-12;200;200-1669387901951-0-0-0-68-68;200-1669539154483-0-0-0-1-1
X-Firefox-Spdy: h2
monaitv.me/upload/vod/2021-12-25/16404063220.jpg
200 OK 96 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-25/16404063220.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x557, components 3\012- data
Hash c5d09b3062f65682c7066181a645cb64
5f5f4a70b6268b3e71f62b9551c3136615c0ba8e
164928f4839c0bd88b7767923d0b7491906b8e80ab65ddf6bbeb793adafaca69
GET /upload/vod/2021-12-25/16404063220.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: image/jpeg
Content-Length: 95845
Last-Modified: Wed, 16 Nov 2022 04:44:45 GMT
Connection: keep-alive
ETag: "63746abd-17665"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
sz88.oss-cn-shenzhen.aliyuncs.com/af/q960x80-6.gif
200 OK 562 kB URL HTTP/1.1 sz88.oss-cn-shenzhen.aliyuncs.com/af/q960x80-6.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 562 kB (562130 bytes)
Hash 8beed805ef37d0fa42646c105c8aadd8
48ce0717f037a6fb1f489ff1da3537a00ff0f47b
9df49f47b95763d2234554adf562f5a0ba5eb3910a9f7f01a5d90e5f425eccce
GET /af/q960x80-6.gif HTTP/1.1
Host: sz88.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/gif
Content-Length: 562130
Connection: keep-alive
x-oss-request-id: 638325528AF0BE3031B722E9
Accept-Ranges: bytes
ETag: "8BEED805EF37D0FA42646C105C8AADD8"
Last-Modified: Tue, 27 Sep 2022 07:43:47 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15479893720264865523
x-oss-storage-class: Standard
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: i+7YBe830PpCZGwQXIqt2A==
x-oss-server-time: 1
ocsp.sectigochina.com/
200 OK 599 B IP
Hash d301a496329eddcc70576b8f371b1208
c8249667048f70904f131d765f09bafe43334470
f14343659399e6508919c22305268cd9d9060ba3f8fc90158dff935e25a50dd4
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 06:59:52 GMT
Expires: Sat, 03 Dec 2022 06:59:51 GMT
Etag: "c8249667048f70904f131d765f09bafe43334470"
Cache-Control: max-age=511034,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0ec9e0afac4-OSL
monaitv.me/upload/vod/2022-07-25/16587541307.jpg
200 OK 742 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-07-25/16587541307.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 1079x700, components 3\012- data
Size 742 kB (742134 bytes)
Hash c610e020967f1c0af5981053ec8441e2
a9e34374b6b05acfb6d3e63ba50da0fc6f21279e
b25118de38677ff1936e0d6902b6f1b76c976e1a57eae595b25d9009941b329b
GET /upload/vod/2022-07-25/16587541307.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 742134
Last-Modified: Wed, 16 Nov 2022 04:28:43 GMT
Connection: keep-alive
ETag: "637466fb-b52f6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
8644aaw.com/a.gif
200 OK 397 kB IP
ASN #24154 Asia Pacific Broadband Fixed Lines Co., Ltd.
File type GIF image data, version 89a, 200 x 200\012- data
Size 397 kB (397051 bytes)
Hash 5869cbd58ab3c66fb06e236b6b5dc421
e9d3274a485604f1077dff7b47968036e25b3ae3
62e972b383e9d0b0e5f7288e58935588610d0453b1b9fde60228328b1e2860d0
GET /a.gif HTTP/1.1
Host: 8644aaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:30 GMT
content-type: image/gif
content-length: 397051
last-modified: Wed, 05 Oct 2022 08:47:42 GMT
etag: "633d44ae-60efb"
expires: Tue, 27 Dec 2022 08:52:30 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigochina.com/
200 OK 599 B IP
Hash d301a496329eddcc70576b8f371b1208
c8249667048f70904f131d765f09bafe43334470
f14343659399e6508919c22305268cd9d9060ba3f8fc90158dff935e25a50dd4
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: application/ocsp-response
Content-Length: 599
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 06:59:52 GMT
Expires: Sat, 03 Dec 2022 06:59:51 GMT
Etag: "c8249667048f70904f131d765f09bafe43334470"
Cache-Control: max-age=511034,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709a0ec9bcf0b61-OSL
kjimg10.360buyimg.com/ott/jfs/t1/222610/4/20743/688878/6380d41fEdd27fc60/810ef977e1cd11c0.gif
200 OK 689 kB URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/222610/4/20743/688878/6380d41fEdd27fc60/810ef977e1cd11c0.gif
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
File type GIF image data, version 89a, 960 x 60\012- data
Size 689 kB (688878 bytes)
Hash 38adb06da8d7db34d62dfc1760cda2dd
862c5ecedd5add094b8dfb22c3087b09493a312a
89521c87c1fe061e63fb523bb11f2a328e9202574d73aa4c4e17de8a8f301c58
GET /ott/jfs/t1/222610/4/20743/688878/6380d41fEdd27fc60/810ef977e1cd11c0.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: image/gif
content-length: 688878
cache-control: max-age=315360000
expires: Mon, 22 Nov 2032 14:51:35 GMT
last-modified: Fri, 25 Nov 2022 14:41:35 GMT
age: 151259
via: http/1.1 ORI-CLOUD-HUN-MIX-21 (jcs [cMsSfW]), http/1.1 SCchengdu-CT-11-MIX-29 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1669387895392-0-0-20-62-62;200;200-1669387895369-0-0-0-181-181;200-1669539154490-0-0-0-1-1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 534dd04e20985046318f4887548c0cd1
1967887a5ef29ccc859491710f44c10238ddda03
06f03337592310951721b3c796744013ebb697dd72b12736ff8e581a35d2df55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "06F03337592310951721B3C796744013EBB697DD72B12736FF8E581A35D2DF55"
Last-Modified: Thu, 24 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1933
Expires: Sun, 27 Nov 2022 09:24:49 GMT
Date: Sun, 27 Nov 2022 08:52:36 GMT
Connection: keep-alive
monaitv.me/upload/vod/2021-12-12/16392868814.jpg
200 OK 244 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/16392868814.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 739x462, components 3\012- data
Size 244 kB (243739 bytes)
Hash 185cd389bfbf621c8e8b3a57168bec3f
38d2a4fd4fa53b6a1a0285931b7059063290bc7f
675b247d0cf2ccadd778280c4200f7b80731a7fa388538a6ff982c33f99fbd29
GET /upload/vod/2021-12-12/16392868814.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 243739
Last-Modified: Wed, 16 Nov 2022 04:36:52 GMT
Connection: keep-alive
ETag: "637468e4-3b81b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-12/163928882117.jpg
200 OK 367 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/163928882117.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 774x483, components 3\012- data
Size 367 kB (367385 bytes)
Hash 144ea54b2d24cf67d5ef288e237e34fc
620179c8fca0e4c3be02f1b9c75070565d97bcb7
e2526d0e2f250cfb38f0584c3b726bfa05032c11592976e4eab57ba08bf29b05
GET /upload/vod/2021-12-12/163928882117.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:35 GMT
Content-Type: image/jpeg
Content-Length: 367385
Last-Modified: Wed, 16 Nov 2022 04:34:09 GMT
Connection: keep-alive
ETag: "63746841-59b19"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
dg.mzxvib.com/sc/2357?n=svxmjqwo
200 OK 10 kB URL HTTP/1.1 dg.mzxvib.com/sc/2357?n=svxmjqwo
IP
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (10448), with no line terminators
Hash 35c38a4ea4fb3c2e50c595b1efc6d835
3e32b1f49ef9e1af70d50a735011301045ded7b8
97990e43003e79dcea80bd8785cfa9c661a132d7fece255e799ddc070f30177f
GET /sc/2357?n=svxmjqwo HTTP/1.1
Host: dg.mzxvib.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sun, 27 Nov 2022 08:03:05 GMT
Content-Type: text/javascript; charset=utf-8
X-Powered-By: PHP/5.6.31
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Access-Control-Allow-Origin: *
Pragma: max-age=1800
X-Cache-Lookup: Cache Hit, Hit From Inner Cluster, Cache Miss
Cache-Control: max-age=1800
Age: 0
Content-Length: 10448
Accept-Ranges: bytes
X-NWS-LOG-UUID: 4942241860520887031
Connection: keep-alive
vns86.oss-cn-hongkong.aliyuncs.com/sstu/st.gif
200 OK 532 kB URL HTTP/1.1 vns86.oss-cn-hongkong.aliyuncs.com/sstu/st.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 532 kB (531945 bytes)
Hash 904c4f51a02c9f03f27ac2593d4c061e
faa7b399e3dc1e36e450636f0fafcaaca901f59e
107d811d56db4017059b2c99a4829faa9e20ce7fa395b3182bdb456ff93fbee6
GET /sstu/st.gif HTTP/1.1
Host: vns86.oss-cn-hongkong.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/gif
Content-Length: 531945
Connection: keep-alive
x-oss-request-id: 638325521F85633239FA4457
Accept-Ranges: bytes
ETag: "904C4F51A02C9F03F27AC2593D4C061E"
Last-Modified: Sun, 20 Nov 2022 05:06:16 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9035815038154931791
x-oss-storage-class: Standard
x-oss-version-id: CAEQPxiBgIC4ltzNpBgiIDdlODc5YmI4ZDVjNjQ3ZDk5OTI1NWRlZmIwMjk2Zjc5
Content-MD5: kExPUaAsnwPyesJZPUwGHg==
x-oss-server-time: 1
monaitv.me/upload/vod/2021-12-12/163928684210.jpg
200 OK 349 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/163928684210.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 988x617, components 3\012- data
Size 349 kB (349052 bytes)
Hash d135d7e52f6ad9684c52b2cda6b9b675
da00a614bb55328d4ac4424c98fc52830007e67f
017a53ae762b48f64d63df53cd8643d4c0fd78524c236eaa1fd8e1e5d110e597
GET /upload/vod/2021-12-12/163928684210.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 349052
Last-Modified: Wed, 16 Nov 2022 04:32:43 GMT
Connection: keep-alive
ETag: "637467eb-5537c"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-01-30/164351545011.jpg
200 OK 21 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-01-30/164351545011.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 538x356, components 3\012- data
Hash 7df431a42de911a8f7a970cd15e56f12
b30fe0853b961e9ce73d6c8b75e616ab41f0bf9c
d51b8c3cc29cf08b7a76e6c01a2176ae3a1718c2e12bf4e753d084e8c7e400cf
GET /upload/vod/2022-01-30/164351545011.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 20661
Last-Modified: Wed, 16 Nov 2022 04:29:49 GMT
Connection: keep-alive
ETag: "6374673d-50b5"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-12/163928814415.jpg
200 OK 392 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/163928814415.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 814x508, components 3\012- data
Size 392 kB (392438 bytes)
Hash 6386502eda17bcdcbb8a042ebf29a8b3
61c38a81aab8576b2696cf050a198bd46c182583
62d39323d2d067b993bb3791ccbbcd019d23004c30456f615f06392cf6d8faee
GET /upload/vod/2021-12-12/163928814415.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 392438
Last-Modified: Wed, 16 Nov 2022 04:39:34 GMT
Connection: keep-alive
ETag: "63746986-5fcf6"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-13/16393698094.jpg
200 OK 63 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-13/16393698094.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x533, components 3\012- data
Hash 3babefcb616c0b719a8e47c99b6b435e
0e166bf30e4ccf20b261d6b2d4c2fc4ef49ad3b9
070905b6567376f9ba83fb281a06c4eb7433362607e25181b4d3ae24af475fb4
GET /upload/vod/2021-12-13/16393698094.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 62905
Last-Modified: Wed, 16 Nov 2022 04:28:58 GMT
Connection: keep-alive
ETag: "6374670a-f5b9"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-04-29/165120557510.jpg
200 OK 370 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-04-29/165120557510.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 660x422, components 3\012- data
Size 370 kB (369721 bytes)
Hash bb2a327dc8b3fc82fa9c6ecd8988518b
a4db3504f093beecd09e89c199c1511fbde74493
0f39a049cb1ab00706025059f92e940acfc344b65298486e372aefc811541476
GET /upload/vod/2022-04-29/165120557510.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:34 GMT
Content-Type: image/jpeg
Content-Length: 369721
Last-Modified: Wed, 16 Nov 2022 04:28:41 GMT
Connection: keep-alive
ETag: "637466f9-5a439"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-12/163928619412.jpg
200 OK 372 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/163928619412.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 749x468, components 3\012- data
Size 372 kB (371911 bytes)
Hash 84e8e3f312f5cbb4b428b93ec029e874
6c3e610ccead6d4c29aa0cfe434553e7f795f7fd
b118b2bac2d477cc921f84704004836f7d51f846186a0b1d76253cdcaef74a8f
GET /upload/vod/2021-12-12/163928619412.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 371911
Last-Modified: Wed, 16 Nov 2022 04:28:57 GMT
Connection: keep-alive
ETag: "63746709-5acc7"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-07-06/165711484616.jpg
200 OK 134 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-07-06/165711484616.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 134 kB (133823 bytes)
Hash c57086c22a1a3d0ec463779d7d656478
bd9d631ee5eba7ca347446e5ba14b1b8c6c590d9
7b281bdf29626b437382bd4c3e016e0105644ca1e4563ae24b52a80ac3d5f99f
GET /upload/vod/2022-07-06/165711484616.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 133823
Last-Modified: Wed, 16 Nov 2022 04:28:31 GMT
Connection: keep-alive
ETag: "637466ef-20abf"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-01-06/164144225712.jpg
200 OK 131 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-01-06/164144225712.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=www.meitu.com], baseline, precision 8, 800x528, components 3\012- data
Size 131 kB (131018 bytes)
Hash 1f7a93f3c5b8f6768c419f3f19a5d2fd
b2f8f1d81f55b410396adb8c5dfd9f3b35be6000
447f65416425a0b4021c709e833c8722580f1310bf80a1e21062035d0a6e0819
GET /upload/vod/2022-01-06/164144225712.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 131018
Last-Modified: Wed, 16 Nov 2022 04:28:41 GMT
Connection: keep-alive
ETag: "637466f9-1ffca"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-01-06/16414422567.jpg
200 OK 104 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-01-06/16414422567.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=www.meitu.com], baseline, precision 8, 800x581, components 3\012- data
Size 104 kB (104156 bytes)
Hash 25d704f2143988de871c71b70447fedd
60929268648461172636761c5b6211a71a47e31c
f925f38acef98a1895427879035244cfc679e41da0f29eb4a4cb659b33f752e1
GET /upload/vod/2022-01-06/16414422567.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 104156
Last-Modified: Wed, 16 Nov 2022 04:29:36 GMT
Connection: keep-alive
ETag: "63746730-196dc"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-01-08/16416168466.jpg
200 OK 114 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-01-08/16416168466.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=www.meitu.com], baseline, precision 8, 800x530, components 3\012- data
Size 114 kB (113768 bytes)
Hash 325c2d29c5e55c143e274e2b0929cc1b
ee949cb31a842ece7e7eea5f1f3c1a319bcfe6e1
bf58f81e465709edfb9e429b1389174b21aa51fb4d3a105d226c89ef48ad2a1e
GET /upload/vod/2022-01-08/16416168466.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 113768
Last-Modified: Wed, 16 Nov 2022 04:29:41 GMT
Connection: keep-alive
ETag: "63746735-1bc68"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-01-21/16427415961.jpg
200 OK 45 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-01-21/16427415961.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 658x438, components 3\012- data
Hash 1cbe0c6671389df4a1255d621c3c128f
f855f5115a207d4404d16178f4300ad84d8bfd46
bae480ad0dfe46b3ebee54e0be148b614a6bdbf1ab8164620d56a93329ff8e93
GET /upload/vod/2022-01-21/16427415961.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 45203
Last-Modified: Wed, 16 Nov 2022 04:30:59 GMT
Connection: keep-alive
ETag: "63746783-b093"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-13/16393698462.jpg
200 OK 177 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-13/16393698462.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x782, components 3\012- data
Size 177 kB (176605 bytes)
Hash fa8e9de4072140e5ed928bad2264a2ab
4c94c591d54e614dad645959d3022646e6e2d23a
eb800935e5aa92d641bdc893e658b00c8cf36a85ebcff5fe77b4a9838a17e14f
GET /upload/vod/2021-12-13/16393698462.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 176605
Last-Modified: Wed, 16 Nov 2022 04:34:33 GMT
Connection: keep-alive
ETag: "63746859-2b1dd"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-01-23/16429204853.jpg
200 OK 38 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-01-23/16429204853.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 938x634, components 3\012- data
Hash aeecc5edad9ec3acd1ddf61b040e9c31
8f109b958ef65b7cf7e90293e60feabe1e327998
1bf46b0fe421f7108a86f291ff5121f45c22b7c0c4854ecc7d8d5fbe9e6ee593
GET /upload/vod/2022-01-23/16429204853.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 37536
Last-Modified: Wed, 16 Nov 2022 04:30:22 GMT
Connection: keep-alive
ETag: "6374675e-92a0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
200 OK 678 kB URL HTTP/2 p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
IP
ASN #133119 China Unicom IP network
File type GIF image data, version 89a, 270 x 160\012- data
Size 678 kB (677521 bytes)
Hash 94051cb1d1b77200b4462281a864b96e
e5b468a1b2f4bbdda1b6a3a0df2dcce6b3de7e06
d44d0d2dd188024b60ec38cb3f3ea10c080690175e923f90c9c2a2e862670c84
GET /img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:36 GMT
content-type: image/gif
content-length: 677521
set-cookie: hccesp_lttk=AAAAAgAAAAAAAAAFAAAAAQAAAAeBwwi0wpEfjO61EJzneZPhSuYWFrBf2Mt+IrtylOiSQAAAAAAAAAAAAAAAQNOwolH9k5yh2pwmBWea89CA+MDta6hATqTXR9I9sV+9L0jEfSqDFusfvjZNo3T9kETxUkDX1QAmXkYMm7ZVYiM=; Expires=Mon, 27 Nov 2023 08:52:36 GMT; path=/;
server: openresty
age: 13410811
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Thu, 30 Dec 2021 00:07:35 GMT
nw-session-id: 2021123008073501015013614530ADE9B0dprsv01tt
nw-session-trace: 2021-12-30T08:07:35.194015393+08:00 68
x-bdcdn-cache-status: TCP_HIT
x-ccdn-cachettl: 31536000
x-length: 677521
x-powered-by: ImageX
x-response-date: Thu, 30 Dec 2021 08:07:35 GMT
x-response-lb: image
x-tt-logid: 2021123008073501015013614530ADE9B0
nginx-hit: 1
server-timing: cdn-cache;desc=HIT, edge;dur=6
via: CHN-HElangfang-AREACUCC1-CACHE25[6],CHN-HElangfang-AREACUCC1-CACHE35[0,TCP_HIT,2],CHN-TJ-GLOBAL1-CACHE60[39],CHN-TJ-GLOBAL1-CACHE35[0,TCP_HIT,36]
x-hcs-proxy-type: 1
x-tt-trace-host: 016a2077e03b2041825c42669e9a23cec5ee04519515486308eb42b81315658df6aa5ed29ad219c7d25626d5b022cced5274c18183adcd43889f65e87a17fde2315b0226a7e5f07d4c19094125051b3e74699be800dd629619bc2141d5fb81fc89ccc76230d7d3e4f731a9d881f3cb16c4
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2
monaitv.me/upload/vod/2022-09-01/16620057333.jpg
200 OK 277 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-01/16620057333.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 1594x897, components 3\012- data
Size 277 kB (276941 bytes)
Hash ad2a2212d840983805ef57dc5ca8dce1
3a18199ba4ed992ddb4596495d9b5a34bf72f94f
2268273be36a32192f3745f030a80ec3d11ed8d03d6d37573e6a0fec8a99b42e
GET /upload/vod/2022-09-01/16620057333.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 276941
Last-Modified: Wed, 16 Nov 2022 04:29:27 GMT
Connection: keep-alive
ETag: "63746727-439cd"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
p.qlogo.cn/qqmail_head/PiajxSqBRaELqPahYLFZH9ouhuYRQGvOE6Jpic2zTvndUd2fLK5VTTWuF3XXEic6vI1DJGhfs86jaA/0
200 OK 331 kB URL HTTP/2 p.qlogo.cn/qqmail_head/PiajxSqBRaELqPahYLFZH9ouhuYRQGvOE6Jpic2zTvndUd2fLK5VTTWuF3XXEic6vI1DJGhfs86jaA/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 60\012- data
Size 331 kB (331043 bytes)
Hash 09f29e56330449942571a66f47f82fb5
30fc3421671176f6f724f32ee910470f03661ddc
b1a0f29b0a924b51c844351bddb87fddf9fa4ef5909f69f818e968f18413a725
GET /qqmail_head/PiajxSqBRaELqPahYLFZH9ouhuYRQGvOE6Jpic2zTvndUd2fLK5VTTWuF3XXEic6vI1DJGhfs86jaA/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Sun, 27 Nov 2022 08:52:36 GMT
content-type: image/gif
content-length: 331043
vary: Accept,Origin
last-modified: Tue, 08 Nov 2022 23:42:24 GMT
cache-control: max-age=2592000
x-delay: 50051 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 331043
chid: 0
fid: 0
x-nws-log-uuid: a148b406-ed00-45c6-a1a5-33ea71f3184e
X-Firefox-Spdy: h2
monaitv.me/upload/vod/2022-07-20/16583211837.jpg
200 OK 351 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-07-20/16583211837.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 800x513, components 3\012- data
Size 351 kB (351106 bytes)
Hash 65420069ef9f7e9a57712d1f5057d687
868a2c552949d0b0ded645c398b0ce0146b5491f
80607cc199744ec5258419c2b0f551d647b15a2c1bfdf89210f9eba2594de5a1
GET /upload/vod/2022-07-20/16583211837.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 351106
Last-Modified: Wed, 16 Nov 2022 04:32:17 GMT
Connection: keep-alive
ETag: "637467d1-55b82"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-09-09/16627118018.jpg
200 OK 23 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/16627118018.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 651x374, components 3\012- data
Hash 769eeff44c7a749535f1397fd92e7d18
35ecc486ed54194cbb2ad066d095d408d2ae0816
951712b267c1296311a6b0bc1c00f22f507f29fc84d9f85bcb3c9da3b58d7286
GET /upload/vod/2022-09-09/16627118018.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 23335
Last-Modified: Wed, 16 Nov 2022 04:32:30 GMT
Connection: keep-alive
ETag: "637467de-5b27"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-09-09/16627118016.jpg
200 OK 45 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/16627118016.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 988x504, components 3\012- data
Hash bca8643529f06e872778496219a06a1c
107eabda070049798859e4915b040d08bb3a8d5a
e79bf033b928234a67fb372976b2077085a267cc3fff03c3cfd4bd130b9149a4
GET /upload/vod/2022-09-09/16627118016.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 44978
Last-Modified: Wed, 16 Nov 2022 04:32:30 GMT
Connection: keep-alive
ETag: "637467de-afb2"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-09-09/16627118013.jpg
200 OK 44 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/16627118013.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 999x499, components 3\012- data
Hash d56cd1fc78fcc98c931e6ddc302c5613
910fa44f224d9c9a27a16ad9b359977667e6196e
773b5cdd69dda676798534b79d9811d4ff97ae6abcc465881d9c22792b42bb9d
GET /upload/vod/2022-09-09/16627118013.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 44439
Last-Modified: Wed, 16 Nov 2022 04:32:30 GMT
Connection: keep-alive
ETag: "637467de-ad97"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-09-09/16627118015.jpg
200 OK 68 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-09-09/16627118015.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1005x498, components 3\012- data
Hash 03ad4d2f2319005011f64b041a454d59
c4fb426f336c0ba7ef5e687bc53071dc32511844
a9a3ec7b5b14421ecbf7992e611481357a3b97621deae8ed2e00a8c26f8c7e26
GET /upload/vod/2022-09-09/16627118015.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 68253
Last-Modified: Wed, 16 Nov 2022 04:30:37 GMT
Connection: keep-alive
ETag: "6374676d-10a9d"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2022-04-25/16508621602.jpg
200 OK 656 kB URL HTTP/1.1 monaitv.me/upload/vod/2022-04-25/16508621602.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 1335x720, components 3\012- data
Size 656 kB (655856 bytes)
Hash 00c885ad85e9593a5c44724457dafcd7
a80a42c8cab1a6f96cacd137b3164163e3faaded
be0dc861c7aceaf46bca40a52d8a5d2b1cb3dc98321ff0cc49f47e8da5636055
GET /upload/vod/2022-04-25/16508621602.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 655856
Last-Modified: Wed, 16 Nov 2022 04:28:42 GMT
Connection: keep-alive
ETag: "637466fa-a01f0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
monaitv.me/upload/vod/2021-12-12/163928648117.jpg
200 OK 329 kB URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/163928648117.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, height=873, bps=0, PhotometricIntepretation=RGB, width=1554], baseline, precision 8, 1280x720, components 3\012- data
Size 329 kB (328777 bytes)
Hash d103ab13339f34f0141f7e36ae8ad3ff
817bd092771a5e603881012794c16e36f8ea65e7
5d27fc0a5e7769534f26b16817cad0755e07003fd0d5c71b16e55752916e4253
GET /upload/vod/2021-12-12/163928648117.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:37 GMT
Content-Type: image/jpeg
Content-Length: 328777
Last-Modified: Wed, 16 Nov 2022 04:32:01 GMT
Connection: keep-alive
ETag: "637467c1-50449"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
img.u2765.com/images/637c9dccac84359a7f268ae1.gif
302 Found 0 B URL HTTP/2 img.u2765.com/images/637c9dccac84359a7f268ae1.gif
IP
ASN #134835 Starry Network Limited
GET /images/637c9dccac84359a7f268ae1.gif HTTP/1.1
Host: img.u2765.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/50372422c79c43218a1f1a337e6e6727
cache-control: max-age=3600
X-Firefox-Spdy: h2
img.1170555.com/images/637e12abc967c48ec27be3df.gif
302 Found 0 B URL HTTP/2 img.1170555.com/images/637e12abc967c48ec27be3df.gif
IP
ASN #134835 Starry Network Limited
GET /images/637e12abc967c48ec27be3df.gif HTTP/1.1
Host: img.1170555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/47aedc0691794d95b123bb4f8e114de3
cache-control: max-age=3600
X-Firefox-Spdy: h2
img.u1662.com/images/637c9e75ac84359a7f268ae4.gif
302 Found 0 B URL HTTP/2 img.u1662.com/images/637c9e75ac84359a7f268ae4.gif
IP
ASN #134835 Starry Network Limited
GET /images/637c9e75ac84359a7f268ae4.gif HTTP/1.1
Host: img.u1662.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/52b82452019e46df91397f0a8fdcc9e6
cache-control: max-age=3600
X-Firefox-Spdy: h2
monaitv.me/upload/vod/2022-04-05/16491322876.jpg
200 OK 0 B URL HTTP/1.1 monaitv.me/upload/vod/2022-04-05/16491322876.jpg
IP
GET /upload/vod/2022-04-05/16491322876.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Sun, 27 Nov 2022 08:52:36 GMT
Content-Type: image/jpeg
Content-Length: 725109
Last-Modified: Wed, 16 Nov 2022 04:28:41 GMT
Connection: keep-alive
ETag: "637466f9-b1075"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
cdn-xinghuatupian-cdn.com/xh/200x200.gif
200 OK 0 B URL HTTP/2 cdn-xinghuatupian-cdn.com/xh/200x200.gif
IP
GET /xh/200x200.gif HTTP/1.1
Host: cdn-xinghuatupian-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:37 GMT
content-type: image/gif
content-length: 173918
last-modified: Sun, 02 Oct 2022 06:51:55 GMT
etag: "6339350b-2a75e"
expires: Mon, 26 Dec 2022 09:31:27 GMT
cache-control: max-age=2592000
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.moneyziyouwm.com/o.js
200 OK 0 B URL HTTP/2 www.moneyziyouwm.com/o.js
IP
GET /o.js HTTP/1.1
Host: www.moneyziyouwm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:33 GMT
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-headers: Origin, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
access-control-allow-methods: POST, GET,PUT, DELETE, UPDATE
access-control-allow-origin:
cache-control: max-age=14400
cf-cache-status: HIT
age: 4210
last-modified: Sun, 27 Nov 2022 07:42:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rrJ0OL8jTrsprp50%2FB0MQd%2BTMKyPiPGc3CJEyFWnhZbhbfBUtR6VNX8Stj0Eh4Q%2FroARi4LmIMEj%2ByMzV6CRjthcTDyHtcsS29IGpLuONk8TQPD0wh0BfU0EAiGFRKFVT0fobuiA3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7709a0de3ef6750d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.u1336.com/images/6381ff51fbdac46b425ad68a.gif
302 Found 0 B URL HTTP/2 img.u1336.com/images/6381ff51fbdac46b425ad68a.gif
IP
ASN #134835 Starry Network Limited
GET /images/6381ff51fbdac46b425ad68a.gif HTTP/1.1
Host: img.u1336.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/48b54eb53623451d9e5ae631a74a014c
cache-control: max-age=3600
X-Firefox-Spdy: h2
www.moneyziyouwm.com/bid?url=http%3A%2F%2Fniugetv9.top%2F&frm=1&ref=http%3A%2F%2Fwww.gifts-now.com%2F&ic=0&pl=0&ml=0&sid=76:105:110:117:120:32:120:56:54:95:54:52:58:50:53:48:50:50:51:49:53:54:58:49:58:49:50:56:48:46:49:48:48:50&ps=20100101&lgs=0&zo=0&ws=1280x1024&gdm=0&iw=0&cpn=16&fid=c9ac64ebd715d4f67814f8ea5ae2de84&hl=1&ihn=0&md=0&ns=denied&np=default&pj=0&top=0&left=0&id=10194&rid=6db3acc9881430ce8626349727807ce6&dcc=&dcl=&gvd=&grr=&ct=unknown&diit=&dit=&cmn=
200 OK 0 B URL HTTP/2 www.moneyziyouwm.com/bid?url=http%3A%2F%2Fniugetv9.top%2F&frm=1&ref=http%3A%2F%2Fwww.gifts-now.com%2F&ic=0&pl=0&ml=0&sid=76:105:110:117:120:32:120:56:54:95:54:52:58:50:53:48:50:50:51:49:53:54:58:49:58:49:50:56:48:46:49:48:48:50&ps=20100101&lgs=0&zo=0&ws=1280x1024&gdm=0&iw=0&cpn=16&fid=c9ac64ebd715d4f67814f8ea5ae2de84&hl=1&ihn=0&md=0&ns=denied&np=default&pj=0&top=0&left=0&id=10194&rid=6db3acc9881430ce8626349727807ce6&dcc=&dcl=&gvd=&grr=&ct=unknown&diit=&dit=&cmn=
IP
GET /bid?url=http%3A%2F%2Fniugetv9.top%2F&frm=1&ref=http%3A%2F%2Fwww.gifts-now.com%2F&ic=0&pl=0&ml=0&sid=76:105:110:117:120:32:120:56:54:95:54:52:58:50:53:48:50:50:51:49:53:54:58:49:58:49:50:56:48:46:49:48:48:50&ps=20100101&lgs=0&zo=0&ws=1280x1024&gdm=0&iw=0&cpn=16&fid=c9ac64ebd715d4f67814f8ea5ae2de84&hl=1&ihn=0&md=0&ns=denied&np=default&pj=0&top=0&left=0&id=10194&rid=6db3acc9881430ce8626349727807ce6&dcc=&dcl=&gvd=&grr=&ct=unknown&diit=&dit=&cmn= HTTP/1.1
Host: www.moneyziyouwm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 08:52:34 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-headers: Origin, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
access-control-allow-methods: POST, GET,PUT, DELETE, UPDATE
access-control-allow-origin:
set-cookie: geo=%E6%8C%AA%E5%A8%81%2F%2F; Path=/; Max-Age=259200
oid=c967b5b8-6e30-11ed-b2f0-b009c0000761; Path=/; Max-Age=31104000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uTlt0HGstq0oHG2%2F1xtvu1leiYoKsFhgNV0kJylH%2BAnnUS%2B%2F176i6w2h%2FdkbhBPNdYsWk5lPCx4IzJB9WEsQ9PGtHstap2omqAVWjqSHU%2BS0dj2PymuAkLJ9TSC7obUxW1TLaV2Y%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709a0df7850750d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.1200555.com/images/637e1290c967c48ec27be3de.gif
302 Found 0 B URL HTTP/2 img.1200555.com/images/637e1290c967c48ec27be3de.gif
IP
ASN #134835 Starry Network Limited
GET /images/637e1290c967c48ec27be3de.gif HTTP/1.1
Host: img.1200555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://niugetv9.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/e153ea07a9e84b79b083849c40cc34b6
cache-control: max-age=3600
X-Firefox-Spdy: h2
154.221.158.75
45.154.215.92
104.18.32.68
60.244.96.178
23.36.77.32
116.177.248.80
47.246.44.205
40.115.211.191
93.184.220.29
47.246.50.251