www.aga-recovery.net/
543 B IP
ASN #134548 DXTL Tseung Kwan O Service
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (609), with CRLF line terminators
Hash b85c29bad7ee6c2d2215eb50ba833743
75d7c0034faafb18895c0d0a0e09ba3a92f63f9d
05801b70ab6f33a6e8529774370e56a47965f600cbcc83e4d5e0ce77ea3eec36
GET / HTTP/1.1
Host: www.aga-recovery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Oct 2023 08:09:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
200 OK 543 B URL User Request GET HTTP/1.1 www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
IP
ASN #134548 DXTL Tseung Kwan O Service
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (609), with CRLF line terminators
Hash b85c29bad7ee6c2d2215eb50ba833743
75d7c0034faafb18895c0d0a0e09ba3a92f63f9d
05801b70ab6f33a6e8529774370e56a47965f600cbcc83e4d5e0ce77ea3eec36
GET /gotoUrl.php?url=http://bandlab.com/lanastewart HTTP/1.1
Host: www.aga-recovery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Oct 2023 08:09:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.aga-recovery.net/common.js
200 OK 564 B URL GET HTTP/1.1 www.aga-recovery.net/common.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
File type ASCII text, with very long lines (502), with CRLF line terminators
Hash b9aea80f40cb7f84dd0dc34f88b86c4f
24a443edfa0458323443e87dab3bb8541ac92ccd
4c59457317c2c3869479ba4b80da8adf24c4a7a0b832b6c569cb511dae10a23b
GET /common.js HTTP/1.1
Host: www.aga-recovery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Oct 2023 08:09:09 GMT
Content-Type: application/x-javascript
Content-Length: 564
Connection: keep-alive
www.aga-recovery.net/tj.js
200 OK 258 B URL GET HTTP/1.1 www.aga-recovery.net/tj.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
File type ASCII text, with CRLF line terminators
Hash c9018fabc955be754337474d9d82ef6a
3bd5672758c651a4dd257817ebc4029e4051d2c1
c4bcaca581c5f3d7e73a739786103bc62b2d9d0b60c511257ae3a45e1c2854a9
GET /tj.js HTTP/1.1
Host: www.aga-recovery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Oct 2023 08:09:10 GMT
Content-Type: application/x-javascript
Content-Length: 258
Connection: keep-alive
www.aga-recovery.net/favicon.ico
200 OK 1.2 kB URL GET HTTP/1.1 www.aga-recovery.net/favicon.ico
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.aga-recovery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Oct 2023 08:09:10 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Fri, 20 Oct 2023 08:09:10 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
m.juxian46.top/
200 OK 196 B IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
File type HTML document, Unicode text, UTF-8 (with BOM) text
Hash 31d7742744ef16dc3b100f3ee30c4235
e53ea39931217c840400992668e81e59d21fda63
6b0e4ba5e3db66aaa51368ea1c14a9ec91ad17cb48a1a9180dfadf0ab4d9a219
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.top domain
GET / HTTP/1.1
Host: m.juxian46.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.aga-recovery.net/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Sun, 15 Oct 2023 04:08:36 GMT
Accept-Ranges: bytes
ETag: "cd1f61451dffd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:10 GMT
Content-Length: 196
hm.baidu.com/hm.js?0bc2b820e33ee8c210ee9e7561358d9e
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?0bc2b820e33ee8c210ee9e7561358d9e
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (625)
Hash 95b33898194f6cdcf706c94713e2ca99
486cddd5334c65b7fb582a670de8294cbcb42d86
ded224526f3af64b3c565440e197fbf39e4557c1d561dfd6e5d25df781d1eaf9
GET /hm.js?0bc2b820e33ee8c210ee9e7561358d9e HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.aga-recovery.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11263
Content-Type: application/javascript
Date: Sun, 15 Oct 2023 08:09:11 GMT
Etag: fb60cd108e92768a044bb2580ba6c5ef
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B0E95B8FDE726284; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ang2.juxiank85.top/
200 OK 9.3 kB IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1451), with CRLF line terminators
Hash 14655f34a389e16281f726694c893725
3c81d9a34ca0e4771701d50021bcce27ea2d6d9f
5140cc30781d82e67d13781b142ed89cb7c1346755170c5c882b0d4b02e327a6
GET / HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://m.juxian46.top/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: PHP/7.0.33, ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 9288
ang2.juxiank85.top/static/css/home.css
200 OK 5.1 kB URL GET HTTP/1.1 ang2.juxiank85.top/static/css/home.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators
Hash 0b5c27715501dd5a4bcb94ed67e1469f
492f64e14d4cf8def155d081b1775337464d1d42
f416d0af2d94655ed66f29541bef46a0df12be7bc11c34f25f0c62517e1576ec
GET /static/css/home.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 28 Sep 2022 09:57:16 GMT
Accept-Ranges: bytes
ETag: "06670b020d3d81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 5128
ang2.juxiank85.top/template/m1938pc/css/style.css
200 OK 3.8 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/style.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type Unicode text, UTF-8 text, with very long lines (887)
Hash d5ecc549a2cb611382a326829889ceff
f8df5f023e6a94b13e76fb80ca546f36f40fcc28
50e9a317566e0f89163e4e40688d4f36161063f0c57ef6defd24f74159be3cd4
GET /template/m1938pc/css/style.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 3752
ang2.juxiank85.top/template/m1938pc/css/white.css
200 OK 2.4 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/white.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type assembler source, ASCII text, with very long lines (1029)
Hash b90841731fbc7f50e81cf1361bae342e
6576652a41dd205cc109294e0046d7ecb1981167
0806ae8b4da17626a2964ce62187036eec1f32c1e0f66703c590ceead6723576
GET /template/m1938pc/css/white.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 2381
ang2.juxiank85.top/template/m1938pc/css/swiper.min.css
200 OK 2.8 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/swiper.min.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ASCII text, with very long lines (17459)
Hash 6af34d0737ad0ca608111771cf74cc79
15d0417baa08a741c6aee19fdfbf4813635f98f8
47b0e7129add982c0e394f0dfa8d9621e6c9e4126859b26e1ad25c18def0d812
GET /template/m1938pc/css/swiper.min.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 2842
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1466774852&si=0bc2b820e33ee8c210ee9e7561358d9e&v=1.3.0&lv=1&sn=853&r=0&ww=1280&u=http%3A%2F%2Fwww.aga-recovery.net%2FgotoUrl.php%3Furl%3Dhttp%3A%2F%2Fbandlab.com%2Flanastewart&tt=%E6%A1%90%E4%B9%A1%E5%8F%8A%E4%BE%9D%E5%BB%BA%E7%AD%91%E6%9D%90%E6%96%99%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1466774852&si=0bc2b820e33ee8c210ee9e7561358d9e&v=1.3.0&lv=1&sn=853&r=0&ww=1280&u=http%3A%2F%2Fwww.aga-recovery.net%2FgotoUrl.php%3Furl%3Dhttp%3A%2F%2Fbandlab.com%2Flanastewart&tt=%E6%A1%90%E4%B9%A1%E5%8F%8A%E4%BE%9D%E5%BB%BA%E7%AD%91%E6%9D%90%E6%96%99%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1466774852&si=0bc2b820e33ee8c210ee9e7561358d9e&v=1.3.0&lv=1&sn=853&r=0&ww=1280&u=http%3A%2F%2Fwww.aga-recovery.net%2FgotoUrl.php%3Furl%3Dhttp%3A%2F%2Fbandlab.com%2Flanastewart&tt=%E6%A1%90%E4%B9%A1%E5%8F%8A%E4%BE%9D%E5%BB%BA%E7%AD%91%E6%9D%90%E6%96%99%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.aga-recovery.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 15 Oct 2023 08:09:12 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=FA6496EEFAFEE89B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ang2.juxiank85.top/template/m1938pc/css/mm-content.css
200 OK 1.4 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/mm-content.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
Hash 7b105d4180c933ddc532a542bb0adad7
c5f8c8b2ee579cbbfc78220c2d9fa86ce1894175
6dc5d581ad14ebecee84c978f5c074a176c7cee1b159b6bd0b4c21d8b8043ffe
GET /template/m1938pc/css/mm-content.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 1402
ang2.juxiank85.top/template/m1938pc/css/style1.css
200 OK 11 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/style1.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type assembler source, Unicode text, UTF-8 text
Hash 1554ad7b4f773708f2e05d7043234012
1189a700318993ed081b5e1e778c893f013f1ba1
9529368049dead11faa64527136bba8dbaa76c493fce2031cef5b148ec71da97
GET /template/m1938pc/css/style1.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 11004
ang2.juxiank85.top/template/m1938pc/css/mp4.css
200 OK 1.8 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/mp4.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
Hash d07010c77757c1db9314f9d51943ead7
fdf93fe7a21c91a2e434d67059bfa5a9016fc9b4
d1c21c3166ddd66f33dd80833c817276187b03c6c9c7b065521cd96460fcb548
GET /template/m1938pc/css/mp4.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 1792
ang2.juxiank85.top/template/m1938pc/js/jquery.lazyload.js
200 OK 918 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/js/jquery.lazyload.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ASCII text, with very long lines (2230)
Hash 9dfc308833c7ae64a6e0e6bd33fb51d7
527e4dbceb22c063ed1bc5bd2ec362d9a412892a
f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1
GET /template/m1938pc/js/jquery.lazyload.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "1ea54635613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 918
js.users.51.la/21592677.js
200 OK 2.5 kB URL GET HTTP/1.1 js.users.51.la/21592677.js
IP
ASN #4837 CHINA UNICOM China169 Backbone
Requested by http://ang2.juxiank85.top/
File type HTML document, ASCII text, with very long lines (5207), with no line terminators
Hash 802f3fb0a8824ad8690da84cac38aa5a
39541a7cae7d96463c4a323e2613469bfdacb04e
bcbadc79a8f5ffe2aa27b4c787464f7dc9152c1d3b3dc729dda68cfd5c88ae9b
GET /21592677.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ang2.juxiank85.top/template/m1938pc/js/jquery.autocomplete.js
200 OK 5.5 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/js/jquery.autocomplete.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text
Hash eef27168e4e9397399dafb5913cb3b18
97205e2886e76320fc92cc20bd3c65a6e267bac0
0c4348f9abb00683f322c8eebea774789dc5baa6f83706f19e269149f03699e1
GET /template/m1938pc/js/jquery.autocomplete.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 5522
ang2.juxiank85.top/template/m1938pc/css/bootstrap.min.css
200 OK 22 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/css/bootstrap.min.css
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ASCII text, with very long lines (493)
Hash 0bcf6becca77986a4ba649f908b378b5
f208d3ef591c69fe68b4b652415c8623cf9f2680
b23c1d7b9c4318b670ae55f188d286232756f6cecb4e16e007c87d8fc2d52b31
GET /template/m1938pc/css/bootstrap.min.css HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:11 GMT
Content-Length: 22130
ang2.juxiank85.top/template/m1938pc/js/jquery.superslide.js
200 OK 2.7 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/js/jquery.superslide.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ISO-8859 text, with very long lines (9089)
Hash 1df665f705cfe0dab1ff2dc4da067b74
932ad7ea8bef83caf58c988daff8f454ba6cccf4
d683555905b40a480147e1d754de11f7091f29d6ccee543b4dcddeb71fbc9a12
GET /template/m1938pc/js/jquery.superslide.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 2726
ang2.juxiank85.top/template/m1938pc/js/jquery.config.js
200 OK 1.8 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/js/jquery.config.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with very long lines (633), with CRLF line terminators
Hash 798584588156b8a3a27dd0a056275c99
1b9d22994e721a797fff16c574a644e38d6a5e83
20ddadb5ad25e49f390360c6eb3e3a1110bad564f0c103b8487198a36419679c
GET /template/m1938pc/js/jquery.config.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 1774
sdk.51.la/js-sdk-pro.min.js?id=K1qm9bpjfG1n6H2z&ck=K1qm9bpjfG1n6H2z
200 OK 13 kB URL GET HTTP/1.1 sdk.51.la/js-sdk-pro.min.js?id=K1qm9bpjfG1n6H2z&ck=K1qm9bpjfG1n6H2z
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://ang2.juxiank85.top/
File type Unicode text, UTF-8 text, with very long lines (34110)
Hash 24bb520e9517f2ed3ed987b46aeaf723
846723563d7dd2bff3954f93633b11af0103adc8
d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27
GET /js-sdk-pro.min.js?id=K1qm9bpjfG1n6H2z&ck=K1qm9bpjfG1n6H2z HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Fri, 06 Oct 2023 14:24:44 GMT
x-oss-request-id: 652018AC0E28CD3138F5D5B3
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1696602284
Via: cache23.l2de2[0,0,304-0,H], cache8.l2de2[2,0], cache2.se1[0,11,200-0,H], cache4.se1[14,0]
Vary: Accept-Encoding
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 755068
X-Cache: HIT TCP_HIT dirn:6:292301905
X-Swift-SaveTime: Fri, 06 Oct 2023 15:12:15 GMT
X-Swift-CacheTime: 1293149
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9816973573529687253e
ang2.juxiank85.top/template/m1938pc/js/jquery.base.js
200 OK 2.2 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/js/jquery.base.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
Hash 81e3aa0b9016f4b578d31ead3e553ae9
7a19293442a2f0524cb2d63f89b8774c9211821a
77dff02e7269fc670e7b11fb0df50f7a3b0775e7d2c0dd67a7be7320a7bec0b6
GET /template/m1938pc/js/jquery.base.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 2218
ang2.juxiank85.top/static/js/home.js
200 OK 9.2 kB URL GET HTTP/1.1 ang2.juxiank85.top/static/js/home.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type Unicode text, UTF-8 text, with very long lines (2677), with CRLF line terminators
Hash dace87b98369cd3a17614087ace567a7
854eb995ab3a2ca08a785786c0ab1055eef1649d
2c3a6ec3d46d0232dfbe258fc9ae849d7e29435f2ae66e388d0f6e5c42132417
GET /static/js/home.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 28 Sep 2022 09:57:16 GMT
Accept-Ranges: bytes
ETag: "06670b020d3d81:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 9176
ang2.juxiank85.top/template/m1938pc/ads/banner_s.js
200 OK 784 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/banner_s.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash fc2692cb33ea080a7b8111f15a2f5e29
4d828f1c9f55cf8b5ad91e1e5d4974a69351373f
bc5b07a19ae93d0397134c3c02db00cb2447d0cad6fe1e123a913b78ad48e4e7
GET /template/m1938pc/ads/banner_s.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 15 Oct 2023 07:41:23 GMT
Accept-Ranges: bytes
ETag: "80d3abfe3affd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 784
ang2.juxiank85.top/template/m1938pc/ads/word_s.js
200 OK 550 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/word_s.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e338605c997ff579508fa37d9f8ea6a1
060275975cf004c624eb6bb0100fb9e1b9e630d2
cef9f469e7c772b2a0d658b6ed49090ac64f299561971633c77284aa0b11d3d9
GET /template/m1938pc/ads/word_s.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:45:52 GMT
Accept-Ranges: bytes
ETag: "040ec2722f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 550
ang2.juxiank85.top/template/m1938pc/ads/word_x.js
200 OK 578 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/word_x.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 49fec9f16a45c593b1e92cd0b2c6dcc8
b646ef27d6890c00e5dbf3c3c9df465b129b5be9
b2b8de71d691a635b7a91ee0e4377e1fa60628356a3f168d9994f6a4686cdb3b
GET /template/m1938pc/ads/word_x.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:46:18 GMT
Accept-Ranges: bytes
ETag: "c5b06c3722f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 578
ang2.juxiank85.top/template/m1938pc/js/jquery.js
200 OK 33 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/js/jquery.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ASCII text, with very long lines (32089)
Hash 397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /template/m1938pc/js/jquery.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "086d825613d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 32857
ang2.juxiank85.top/template/m1938pc/ads/banner_z.js
200 OK 457 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/banner_z.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, ASCII text, with CRLF line terminators
Hash 4811f27e2b0be3d2a404b79bc265fa04
32207c273c8c449f1f7fb10f8439034ed720d582
0e89539d3fbe3d531a94a43ec43f2f967d87823cb16989f8ad518d85b123818d
GET /template/m1938pc/ads/banner_z.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:43:58 GMT
Accept-Ranges: bytes
ETag: "67e6fe421f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 457
ang2.juxiank85.top/template/m1938pc/ads/1.js
200 OK 753 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/1.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 8df0d385c1bd017b789044537b3a45a3
216adae8c943fe34a872f49329f1719e7d09b737
701f7a2cc168ac92506ed759ab9aa487e564cae741ef818ebd58e8c381cd96ba
GET /template/m1938pc/ads/1.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 15 Oct 2023 07:42:22 GMT
Accept-Ranges: bytes
ETag: "083d6213bffd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 753
ang2.juxiank85.top/template/m1938pc/ads/2.js
200 OK 663 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/2.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash bd48d4ebc8b9f2f702c634b3702ee04d
b8d8a5483c0d4c226c60505463d25ee1d8902891
d29cfc2ce462d1cbc3f044cccca37980a4082105301efa24f5240175fb49cc46
GET /template/m1938pc/ads/2.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:40:44 GMT
Accept-Ranges: bytes
ETag: "d21fe77021f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 663
ang2.juxiank85.top/template/m1938pc/ads/3.js
200 OK 678 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/3.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with very long lines (311), with CRLF line terminators
Hash 6ffeaed335537c77f1f94594eb78c286
dc54580b3e0241631c6414f78cfa4f6c1a8b711f
52379489b7c07dd396cd719ef8a5245b83e9d1aee2cd8c2b16cf4fe17f8a0696
GET /template/m1938pc/ads/3.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:41:08 GMT
Accept-Ranges: bytes
ETag: "8038d67e21f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 678
ang2.juxiank85.top/template/m1938pc/ads/4.js
200 OK 737 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/4.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 9a49bb1ca610fc7a0a886424831fa012
ef84bd1d59a4e702dc1b67e83dec8591836560e3
968e11a2fe2a00f50efc4744f1e0b50cd9e6d343395f7ebdaf63aff186d27da3
GET /template/m1938pc/ads/4.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 25 Sep 2023 06:45:26 GMT
Accept-Ranges: bytes
ETag: "33c081dd7befd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 737
ang2.juxiank85.top/template/m1938pc/ads/5.js
200 OK 124 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/5.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ASCII text, with CRLF line terminators
Hash 90bf63fa7217a4e5a60f421b64ab30eb
1614df9f3cb1b5e1dc040b2d7dd942f355994509
e6c767aaabb678ed4d3fb4f5c9193c55abf9739f641095705e94f198f08010f9
GET /template/m1938pc/ads/5.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sat, 23 Sep 2023 06:09:45 GMT
Accept-Ranges: bytes
ETag: "8983978ce4edd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 124
ang2.juxiank85.top/template/m1938pc/ads/6.js
200 OK 582 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/6.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 3835fab98d00fe752551f9ff123089e8
4013d01f74408faf5c61faf1c41be368525e4d44
4355bf4adc4da72049963512026cb750316810d868d20bf0f26ebc05d4ac8fd6
GET /template/m1938pc/ads/6.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:42:06 GMT
Accept-Ranges: bytes
ETag: "7b2fc6a121f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 582
ang2.juxiank85.top/template/m1938pc/ads/7.js
200 OK 0 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/7.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /template/m1938pc/ads/7.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "35f43535613d91:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 0
ang2.juxiank85.top/template/m1938pc/ads/8.js
200 OK 0 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/8.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /template/m1938pc/ads/8.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 19 Dec 2022 03:00:12 GMT
Accept-Ranges: bytes
ETag: "35f43535613d91:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 0
ang2.juxiank85.top/template/m1938pc/ads/9.js
200 OK 123 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/9.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type ASCII text, with CRLF line terminators
Hash ed19ca99581136d44b35bbb2240a6bf6
d0ac1626cb4713dd5e6b3ff63d818efac90ab4b3
aea52d27230b89ca1b732866afbe137a98e65100049a56b3293def8d5fe7dda0
GET /template/m1938pc/ads/9.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 17 Sep 2023 13:31:28 GMT
Accept-Ranges: bytes
ETag: "c79566436be9d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 123
ang2.juxiank85.top/template/m1938pc/ads/banner_x.js
200 OK 508 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/banner_x.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, ASCII text, with CRLF line terminators
Hash 29314ec88cde905c21029db07aa44aa2
2f4dbc99d59d8fafbba7ddce52f6fd8fd7d81d9a
e367b549a9b8cdcf978cd4b598613f5755e86f59578dc58d19d08159ac122709
GET /template/m1938pc/ads/banner_x.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 09 Oct 2023 05:47:56 GMT
Accept-Ranges: bytes
ETag: "51ad782774fad91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 508
ang2.juxiank85.top/template/m1938pc/ads/10.js
200 OK 574 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/10.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document, Unicode text, UTF-8 text, with very long lines (316), with CRLF line terminators
Hash 63db5a5b464079839644994165bf030c
a6e06bd42ef0780b279af9490362df6c381b958b
6b39f709f41c449cb1dbf1d239caba7b8a8171445e100e6e34fb3541da6801a5
GET /template/m1938pc/ads/10.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:39:49 GMT
Accept-Ranges: bytes
ETag: "2c43cf4f21f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 574
ang2.juxiank85.top/template/m1938pc/ads/77.js
200 OK 748 B URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/ads/77.js
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 18f7e1a501fd9baa6ee6d3f5cf4130f7
1aca5df4b20374af002f4a2fa7f676cc4762339f
e385b4cba5c9b9b991b46f7728b0c093387ac22dfb007974c3dcb213873a1081
GET /template/m1938pc/ads/77.js HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 01 Oct 2023 04:42:42 GMT
Accept-Ranges: bytes
ETag: "bdbef6b621f4d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:12 GMT
Content-Length: 748
pic.ddpic.info/upload/vod/20221113-1/b7bbd9ca417acdde030a3636e2cc70b8.jpg
200 OK 56 kB URL GET HTTP/1.1 pic.ddpic.info/upload/vod/20221113-1/b7bbd9ca417acdde030a3636e2cc70b8.jpg
IP
Requested by http://ang2.juxiank85.top/
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3\012- data
Hash d5e21801ccdce6a7cce6effdd18923b2
77db877411fc56d47c3e350e2c1e7c2c4d398da9
9a8feb509e6a0f334939691f314642baf432271c0c8433dc436ef8769a12face
GET /upload/vod/20221113-1/b7bbd9ca417acdde030a3636e2cc70b8.jpg HTTP/1.1
Host: pic.ddpic.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:13 GMT
Content-Type: image/jpeg
Content-Length: 55452
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 14:10:40 GMT
ETag: "6370fae0-d89c"
Expires: Thu, 09 Nov 2023 20:43:42 GMT
Cache-Control: max-age=31536000
Strict-Transport-Security: max-age=31536000
CF-Cache-Status: HIT
Age: 386457
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ouCN6wFikXIpfz8iBnhr8snwsxu4VtVxavsVNvvGtsLC7%2BG5SZ%2FMIzV9Neu%2B8YixoFAfUwH%2FgxvfnUb5kBcefEg3PldXkFZlniIkkjXq6EmtraBElYvkvP5tTxfXXo7X9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 816694249ed83854-LHR
alt-svc: h2=":443"; ma=60
pic.ddpic.info/upload/vod/20221114-1/2a0e0ea9673919dabe55df40def9649a.jpg
200 OK 69 kB URL GET HTTP/2 pic.ddpic.info/upload/vod/20221114-1/2a0e0ea9673919dabe55df40def9649a.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subjectddpic.info
Fingerprint79:5C:15:0B:1E:FA:CA:0D:9B:A5:D9:4A:FD:D1:A6:2E:25:91:1C:82
ValidityWed, 30 Aug 2023 23:19:00 GMT - Tue, 28 Nov 2023 23:18:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1280x720, components 3\012- data
Hash 63a314a7017bc9e3d224d5494a2ac64a
6ac85d0ba8c7569c6dee16777f664889130e2fcf
152c8e16ef224d2ef9d5a63e3fdb218fbc7b52f19398bfd6518d2f52b4098687
GET /upload/vod/20221114-1/2a0e0ea9673919dabe55df40def9649a.jpg HTTP/1.1
Host: pic.ddpic.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:13 GMT
content-type: image/jpeg
content-length: 69000
last-modified: Mon, 14 Nov 2022 15:04:25 GMT
etag: "637258f9-10d88"
expires: Sat, 11 Nov 2023 00:29:19 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 286517
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3c25HlulVpDKmPAs%2B00J1PhhKbouIGa%2FWRY5v3Q7shXgwCCjCmxetqmCi3Lk1ITGBZKln3iFzhKer1QjWksscD0QP81QMeJ0AOA8lHpayg4jQOODdahOj4vOSKtdz3IPPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 816694250df94185-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ang2.juxiank85.top/template/m1938pc/html/advertised/advertised.json?refresh=20231015Sun%20Oct%2015%202023%2008:09:14%20GMT+0000%20(Coordinated%20Universal%20Time)
404 Not Found 1.2 kB URL GET HTTP/1.1 ang2.juxiank85.top/template/m1938pc/html/advertised/advertised.json?refresh=20231015Sun%20Oct%2015%202023%2008:09:14%20GMT+0000%20(Coordinated%20Universal%20Time)
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ISO-8859 text, with CRLF line terminators
Hash 8363acaeab9cbb099b59b78a44127ca6
aef448ce5500e3734059ec285cf6ec0b547075f2
9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
GET /template/m1938pc/html/advertised/advertised.json?refresh=20231015Sun%20Oct%2015%202023%2008:09:14%20GMT+0000%20(Coordinated%20Universal%20Time) HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sun, 15 Oct 2023 08:09:13 GMT
Content-Length: 1163
files.230579.top/store/loveimgmoe/f5/5a/64ae1f0ed9e2e1a049e7f55a.gif
200 OK 468 kB URL GET HTTP/2 files.230579.top/store/loveimgmoe/f5/5a/64ae1f0ed9e2e1a049e7f55a.gif
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerGoogle Trust Services LLC
Subjectfiles.230579.top
Fingerprint2D:7C:7B:F7:49:9A:6C:34:39:52:D8:80:B4:03:D2:5E:AD:97:7B:75
ValidityThu, 14 Sep 2023 04:10:24 GMT - Wed, 13 Dec 2023 04:10:23 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 468 kB (468051 bytes)
Hash ab23b7c929e5f7e13a0a5c2447e6b401
07114dd65cf32f1060214ea4c28bf5178c8035e2
6c686b4e3c09a26e96955e8030c336df66dafd9385037257482547675f224fef
GET /store/loveimgmoe/f5/5a/64ae1f0ed9e2e1a049e7f55a.gif HTTP/1.1
Host: files.230579.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:13 GMT
content-type: image/gif
content-length: 468051
vary: Origin, Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
last-modified: Wed, 12 Jul 2023 03:33:59 GMT
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 816694250825b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ang2.juxiank85.top/api.php/timming/index?t=0.32994230894606735
200 OK 301 B URL GET HTTP/1.1 ang2.juxiank85.top/api.php/timming/index?t=0.32994230894606735
IP
ASN #134548 DXTL Tseung Kwan O Service
Requested by http://ang2.juxiank85.top/
File type Unicode text, UTF-8 text, with no line terminators
Hash 9d16d8c3910202df56aa56fde46fdadb
6042858ccc7e29a8e3e3fb99f8f1dc03bb721409
ba3727dea444b602a12d635cf18c556d5b112a573d423da05fb49b4d529db4e7
GET /api.php/timming/index?t=0.32994230894606735 HTTP/1.1
Host: ang2.juxiank85.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ang2.juxiank85.top/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: PHP/7.0.33, ASP.NET
Date: Sun, 15 Oct 2023 08:09:13 GMT
Content-Length: 301
fmtu.slsltutu.com/upload/vod/20221002-1/2e5356efda7415730bb584560a95d94f.jpg
200 OK 13 kB URL GET HTTP/2 fmtu.slsltutu.com/upload/vod/20221002-1/2e5356efda7415730bb584560a95d94f.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerGoogle Trust Services LLC
Subjectslsltutu.com
Fingerprint57:79:61:BC:C9:6C:1F:FF:22:0F:4F:E7:67:E5:4C:74:01:A6:1D:30
ValidityThu, 24 Aug 2023 14:21:51 GMT - Wed, 22 Nov 2023 14:21:50 GMT
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash a12a1d360504be5553898fd01a0a7e87
ba39a89866b752886cd5b354dfb2ae0ced754335
fbe3b40db00c64c5b07a35662c09e6a1c3faf7ab6b43169416b5046dc5d95a2a
GET /upload/vod/20221002-1/2e5356efda7415730bb584560a95d94f.jpg HTTP/1.1
Host: fmtu.slsltutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/jpeg
content-length: 12764
last-modified: Sun, 02 Oct 2022 10:49:05 GMT
etag: "63396ca1-31dc"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 816694251d265694-OSL
X-Firefox-Spdy: h2
sycdn.pic-726-baidu.com/images/2023/03/18/guochan11235.jpg
200 OK 76 kB URL GET HTTP/2 sycdn.pic-726-baidu.com/images/2023/03/18/guochan11235.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:43:94:40:DA:A7:6A:08:47:F1:8F:EF:01:A2:7E:C1:C7:7C:E1:0E
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3\012- data
Hash bde38c68555a15e5aaf067e8437e00c9
9acc63555e6b831ff893feab0ce3164de262a41b
a4a1d48642b144ec99cdfa5074231584a6b2183c87fe4d96f7b40424509b8ffc
GET /images/2023/03/18/guochan11235.jpg HTTP/1.1
Host: sycdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/jpeg
content-length: 76543
last-modified: Thu, 16 Mar 2023 16:48:43 GMT
etag: "6413486b-12aff"
expires: Tue, 14 Nov 2023 08:09:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 816694245dbb5693-OSL
X-Firefox-Spdy: h2
sycdn.pic-726-baidu.com/images/2022/10/07/guochan2755.jpg
200 OK 79 kB URL GET HTTP/2 sycdn.pic-726-baidu.com/images/2022/10/07/guochan2755.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:43:94:40:DA:A7:6A:08:47:F1:8F:EF:01:A2:7E:C1:C7:7C:E1:0E
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3\012- data
Hash 3f127e65ba470230665fb6ecdccff5d7
360ba466b555ae9e27480c30e4c48a9a1c7ba0a1
1bc5c5d12c07ee8c90d434b14bae376aa90eddfd1b71a9d2fe9d9b4baff368bc
GET /images/2022/10/07/guochan2755.jpg HTTP/1.1
Host: sycdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/jpeg
content-length: 78890
last-modified: Thu, 06 Oct 2022 17:33:55 GMT
etag: "633f1183-1342a"
expires: Tue, 14 Nov 2023 08:09:13 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 816694245dc55693-OSL
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?4b14d1c4ddd6927be4fdb3bb21ee029b
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?4b14d1c4ddd6927be4fdb3bb21ee029b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (619)
Hash 522e1a070c4b324f01d1698dacceb280
aef09a2d18db699358fd310801f85b9ab028fb29
74e28dd05128fb67ab9947b5d711562b2899bccc9e79c5406d611d6dd71227bd
GET /hm.js?4b14d1c4ddd6927be4fdb3bb21ee029b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Sun, 15 Oct 2023 08:09:13 GMT
Etag: fe5c8ea86dd9caa76a64f028a758030a
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=C91FB6C89C9455B4; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
collect-v6.51.la/v6/collect?dt=4
403 0 B URL POST HTTP/1.1 collect-v6.51.la/v6/collect?dt=4
IP
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 248
Origin: http://ang2.juxiank85.top
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403
Date: Sun, 15 Oct 2023 08:09:13 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=1c997918d803093e610f991d28cb8ee021568473d5e6148c1b77808e2acdafb2; Path=/; HttpOnly
acw_tc=1a0c384516973573536618707eb56f0a5717f3e1cd4f842e9fd3cb9735c246;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://ang2.juxiank85.top
Access-Control-Allow-Credentials: true
ddcdn.pic-726-baidu.com/images/2023/03/06/guochan1004.jpg
200 OK 85 kB URL GET HTTP/2 ddcdn.pic-726-baidu.com/images/2023/03/06/guochan1004.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:43:94:40:DA:A7:6A:08:47:F1:8F:EF:01:A2:7E:C1:C7:7C:E1:0E
ValidityFri, 27 Jan 2023 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3\012- data
Hash d27fed9eb1423c2140624ec4ff351eb6
5a7856ce3910ba30e6c0e600cf86de3c7c529e87
e039e3e9ea1eee9d517828e8cbd3353f4ad3268edb43b0d19b247f347ea093d0
GET /images/2023/03/06/guochan1004.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/jpeg
content-length: 84768
last-modified: Thu, 02 Mar 2023 11:22:31 GMT
etag: "640086f7-14b20"
expires: Tue, 14 Nov 2023 08:09:13 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 816694245dc35693-OSL
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g3
1.5 kB URL ocsp2.globalsign.com/gsorganizationvalsha2g3
IP
Hash 427048e8e1d1a8c814129db5817fdbb8
d97c014349fe7bc122e9c32d511c672555851fc7
10a695dd5cdd72389fc89e3fda1ed888202179301a9e035d71df331be03954e1
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Thu, 19 Oct 2023 05:51:31 GMT
ETag: "d97c014349fe7bc122e9c32d511c672555851fc7"
Last-Modified: Sun, 15 Oct 2023 05:51:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 622
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81669429feea56c6-OSL
hm.baidu.com/hm.js?f60217089b1da6d1d44680872fcaac43
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?f60217089b1da6d1d44680872fcaac43
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (620)
Hash b4de2c967536e4e123078342e7fb06d5
1ff85c2a500c804db906da641bedc583cdb36657
76878aa9c424d0b9e75c034ef69bc5a8ff4e096faaf7788b7cb097fd02053cde
GET /hm.js?f60217089b1da6d1d44680872fcaac43 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Sun, 15 Oct 2023 08:09:13 GMT
Etag: 4cf04cfacda1097aa6c65a168d701f3c
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F06DCB15359F85F0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.sectigo.com/
471 B IP
Hash c0cd4d5d779b3bf6d365815237eff0c9
ff10c2238164519a03d18c6327ee636777782c79
486ad79bf60777db0cb236aa8c808279efe44bb8c7b3d7667c2a1624bb7946e3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Oct 2023 00:23:16 GMT
Expires: Sat, 21 Oct 2023 00:23:15 GMT
Etag: "ff10c2238164519a03d18c6327ee636777782c79"
Cache-Control: max-age=490247,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8166942a09105693-OSL
ocsp.sectigo.com/
471 B IP
Hash c0cd4d5d779b3bf6d365815237eff0c9
ff10c2238164519a03d18c6327ee636777782c79
486ad79bf60777db0cb236aa8c808279efe44bb8c7b3d7667c2a1624bb7946e3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Oct 2023 00:23:16 GMT
Expires: Sat, 21 Oct 2023 00:23:15 GMT
Etag: "ff10c2238164519a03d18c6327ee636777782c79"
Cache-Control: max-age=490146,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8166942a39155690-OSL
sc04.alicdn.com/kf/Ab184e1264c0149a4b23af77e11a0b7105/7010397418/Ab184e1264c0149a4b23af77e11a0b7105.jpg
200 OK 109 kB URL GET HTTP/2 sc04.alicdn.com/kf/Ab184e1264c0149a4b23af77e11a0b7105/7010397418/Ab184e1264c0149a4b23af77e11a0b7105.jpg
IP
ASN #20940 Akamai International B.V.
Requested by http://ang2.juxiank85.top/
Certificate IssuerDigiCert Inc
Subject*.alicdn.com
Fingerprint1E:21:1C:70:DA:C9:05:2B:07:37:C6:AB:46:71:94:44:60:7C:E1:CB
ValiditySun, 10 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 174\012- data
Size 109 kB (109336 bytes)
Hash 94e1e9e6dc384e71c9b59f531e827f93
e1eca5f25eeed2f64c7023601af9a7018069479b
7adac80bc71baf9e8bcd3a9cf45601c431e91bc3afcbc249217797dc3c2d3740
GET /kf/Ab184e1264c0149a4b23af77e11a0b7105/7010397418/Ab184e1264c0149a4b23af77e11a0b7105.jpg HTTP/1.1
Host: sc04.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 109336
traceid: 2ff618a316881667380093945e
last-modified: Mon, 19 Jun 2023 03:00:30 GMT
access-control-allow-origin: *
strict-transport-security: max-age=0
eagleid: 2ff618a316881667380093945e, 2ff6169d16884415388315302e
server-timing: rt;dur=0.041,eagleid;desc=2ff618a316881667380093945e
ali-swift-global-savetime: 1688166738
x-swift-savetime: Tue, 04 Jul 2023 03:32:18 GMT
x-swift-cachetime: 86125200
served-from: 23.36.79.148
cache-control: max-age=81409883
expires: Thu, 14 May 2026 14:00:37 GMT
date: Sun, 15 Oct 2023 08:09:14 GMT
network_info: NO_OSLO_50304
timing-allow-origin: *, *, *
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/iftueteyyra.jpg
200 OK 8.4 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/iftueteyyra.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 03d534049b5c34e4e8656bd02dd92e31
ec0b191bfafcaed9d38848a4ea71e23b542c3ccf
3322af5170f5ca1947a07fac9f60a40f2ff618600720d6536ec52e0b088544a8
GET /upload/vod/2023/10/iftueteyyra.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 8382
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9168
content-disposition: inline; filename="iftueteyyra.webp"
etag: "652a0f20-23d0"
last-modified: Sat, 14 Oct 2023 03:46:40 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998c056cc-OSL
X-Firefox-Spdy: h2
status.rapidssl.com/
471 B IP
Hash 78927c214551774aada979050b438a93
24b4ff48822f68a228f6d8669b31b747dba23290
4190a35d7d492ba418ae797bffc1cbf7ba6ef23fae3e627ccc2c7ab30fe9ab10
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4192
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Sun, 15 Oct 2023 08:09:14 GMT
Last-Modified: Sun, 15 Oct 2023 06:59:22 GMT
Server: ECAcc (amb/6B61)
X-Cache: HIT
Content-Length: 471
lbfm.lbpictupian.com/upload/vod/2023/10/oou5vvozvo0.jpg
200 OK 1.0 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/oou5vvozvo0.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8ceb5c79aafc07b432ecfc85cafd057f
649573eb4fb22402dc78cf343e240054fa38260a
8844fa2b56c8cb5ae2231d060a26d2a5f083d546c1277eb748d61a78420fa97f
GET /upload/vod/2023/10/oou5vvozvo0.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 1010
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=2835
content-disposition: inline; filename="oou5vvozvo0.webp"
etag: "652a0f1b-b13"
last-modified: Sat, 14 Oct 2023 03:46:35 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998bf56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/k4yo4rftt1f.jpg
200 OK 4.8 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/k4yo4rftt1f.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash da46b6f1beb66e1914b31f97f66ba791
16361c856066ca08ec67a4224c8cdc3fa95860a2
d881f639cb76ac5e5a3cfd7a4f62820f742e113569b93cd174da88c19e15d64c
GET /upload/vod/2023/10/k4yo4rftt1f.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 4816
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7173
content-disposition: inline; filename="k4yo4rftt1f.webp"
etag: "652a0f6e-1c05"
last-modified: Sat, 14 Oct 2023 03:47:58 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429a8d956cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/jgttacyxwub.jpg
200 OK 4.7 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/jgttacyxwub.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3311f5d3087b22c322fe805028470738
1274c0875e87eb648b2bfa420c833626646b3ba9
53cb1dbd1f13ca4f870e84c29a3ac38af41216da4408ce9df85fcc8e9599fa8c
GET /upload/vod/2023/10/jgttacyxwub.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 4686
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7110
content-disposition: inline; filename="jgttacyxwub.webp"
etag: "652a0f7a-1bc6"
last-modified: Sat, 14 Oct 2023 03:48:10 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429a8dd56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/13luwwme3kz.jpg
200 OK 11 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/13luwwme3kz.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 23546d4781377cbd4ba692c27958f11d
a7033a71859db1438bcddd5455ef29b7fcb8ebda
0844aea97a07b6e4b1761f44f97ecd83aba609ce653739b7e0e1490d3defa7b1
GET /upload/vod/2023/10/13luwwme3kz.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 10780
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11249
content-disposition: inline; filename="13luwwme3kz.webp"
etag: "652a0f2e-2bf1"
last-modified: Sat, 14 Oct 2023 03:46:54 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998c356cc-OSL
X-Firefox-Spdy: h2
maxun066.top/6b4bc2393b34f569886385798f04319d.gif
200 OK 68 kB URL GET HTTP/2 maxun066.top/6b4bc2393b34f569886385798f04319d.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subjectmaxun066.top
FingerprintA0:A1:DF:A2:EE:4A:E8:24:3D:C0:0D:CA:36:11:A4:52:10:D0:EA:36
ValidityThu, 12 Oct 2023 14:22:58 GMT - Wed, 10 Jan 2024 14:22:57 GMT
File type GIF image data, version 89a, 300 x 200\012- data
Hash 8fe8a3221d6c69d2dfa96070eeaf7947
2e3d9f6307f2b435471ca22f3a2662a586a93b73
f2a244eb1748c34fb59c94b4576147ab29247b93edc1c77536c68aa4bbcdf368
GET /6b4bc2393b34f569886385798f04319d.gif HTTP/1.1
Host: maxun066.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/gif
content-length: 67829
last-modified: Fri, 31 Mar 2023 06:50:35 GMT
etag: "642682bb-108f5"
expires: Sun, 15 Oct 2023 20:09:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 556070
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JAXyJhAMOhnkH8LOS9bIgUCVphnGJoL8ILfJNqU9Ra%2BsE25b50lCDgDlrNWjno%2BfdBTIvDvev5KnrgBDq2XyltKhTwuKf87DDzsxbtM97CbI44AhNG%2BhDgWFT6Go"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 815973c3191192c9-FRA
alt-svc: h3=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
maxun066.top/d48317f8a5ae04949eaf4ce9217bb23b.gif
200 OK 305 kB URL GET HTTP/2 maxun066.top/d48317f8a5ae04949eaf4ce9217bb23b.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subjectmaxun066.top
FingerprintA0:A1:DF:A2:EE:4A:E8:24:3D:C0:0D:CA:36:11:A4:52:10:D0:EA:36
ValidityThu, 12 Oct 2023 14:22:58 GMT - Wed, 10 Jan 2024 14:22:57 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 305 kB (305275 bytes)
Hash 3cb212d31583fea947fb9e31e66db085
f6ec471eb810fe55480f8d1b419b964040398f6b
abe2dd018a322d5621a6f98da23c5f8beeffae0929936dd1f824c2e101d3a4a7
GET /d48317f8a5ae04949eaf4ce9217bb23b.gif HTTP/1.1
Host: maxun066.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/gif
content-length: 305275
last-modified: Fri, 31 Mar 2023 06:51:25 GMT
etag: "642682ed-4a87b"
expires: Sun, 15 Oct 2023 20:09:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 2342
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ikitKbgVQ2a09dMpVCP8Sh5hnIcCQHUqOCg6C1iMFRJDREo3LdbUq%2BHry98XmFWDqfFpZpawykf6nd1xATwWZSdnFdB620vBZHJkr2qDpKyght3X%2F3ca3%2Fo%2B%2FpAgX8jRP%2BR5U43eprvV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 8156ce777df41da2-FRA
alt-svc: h3=":443"; ma=86400
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/gxi0dw1ub1a.jpg
200 OK 8.9 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/gxi0dw1ub1a.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ca20c009ef833cfd66627bb1dfc80a6c
68d49316ce4cc5b5b84a49b0ac405d1f99d7b67b
5f37d0e6f7d49f118ad8c78caec07598f0999e43aeeedec30a94dca35b761a02
GET /upload/vod/2023/10/gxi0dw1ub1a.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 8906
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9935
content-disposition: inline; filename="gxi0dw1ub1a.webp"
etag: "652a0ee7-26cf"
last-modified: Sat, 14 Oct 2023 03:45:43 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429f92356cc-OSL
X-Firefox-Spdy: h2
mross044.com/fee6dc0783e7085f6b3452a1155d4b4a.gif
200 OK 288 kB URL GET HTTP/2 mross044.com/fee6dc0783e7085f6b3452a1155d4b4a.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subjectmross044.com
Fingerprint42:D8:79:F0:F8:7B:10:4F:DA:71:CE:C4:41:4B:D2:87:0A:33:82:71
ValidityWed, 16 Aug 2023 23:26:19 GMT - Tue, 14 Nov 2023 23:26:18 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 288 kB (288397 bytes)
Hash e17bb688cfdae836ea866c47e92a022a
d748bb7b13696141ba768280a21d3dac482e3a0c
cb9affdc029bd6deb908ab9786fad62113c4ba28d2e9a8926cbed0c5e2c2aa6a
GET /fee6dc0783e7085f6b3452a1155d4b4a.gif HTTP/1.1
Host: mross044.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/gif
content-length: 288397
last-modified: Wed, 31 May 2023 12:30:06 GMT
etag: "64773dce-4668d"
expires: Sun, 15 Oct 2023 20:09:14 GMT
cache-control: max-age=43200
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/xxprhat3u5z.jpg
200 OK 8.7 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/xxprhat3u5z.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b5a279e036d8bac7089636495accc13a
473bf10051fd75c352c91b2e7ebbaaef6f40af16
cf5b52866fe8b5462259badce087d1a147f7710144f1e322682cf5d7ad5e6cd7
GET /upload/vod/2023/10/xxprhat3u5z.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 8694
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9361
content-disposition: inline; filename="xxprhat3u5z.webp"
etag: "652a0f16-2491"
last-modified: Sat, 14 Oct 2023 03:46:30 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998be56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/oebew2iagaw.jpg
200 OK 7.5 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/oebew2iagaw.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d9abd937018a08906f03b481e18c05c8
ec93d65bd7bcfd8fdc4f56ad6fb9c5402b5520a3
050061d619b60495f9f3a5281ab9a1f70a28d308919ea67312ce1fae96686082
GET /upload/vod/2023/10/oebew2iagaw.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 7490
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8487
content-disposition: inline; filename="oebew2iagaw.webp"
etag: "652a0f0e-2127"
last-modified: Sat, 14 Oct 2023 03:46:22 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998bc56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/fwkckhzf3xq.jpg
200 OK 6.0 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/fwkckhzf3xq.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 553ee43b9278c961d508fd5d1d1c68cd
8425a448d5eef312e973b82f59c9be72d30091e5
5fe9c499d65b7f5f672842f136bda1aa2d39897e81302f007861161503eadda3
GET /upload/vod/2023/10/fwkckhzf3xq.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 6016
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8418
content-disposition: inline; filename="fwkckhzf3xq.webp"
etag: "652a0f2a-20e2"
last-modified: Sat, 14 Oct 2023 03:46:50 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998c256cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/4yuuw3ira0l.jpg
200 OK 13 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/4yuuw3ira0l.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash bdf8518ed5e610e3985c4a268888b450
2fab2247b03e89f220d119cb63384582569ff514
fdbbaef3ed3b87593c32aeb4e3aa048ea31013411a98e2dcd6e7d3d7f01bc08e
GET /upload/vod/2023/10/4yuuw3ira0l.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/jpeg
content-length: 12589
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13211, status=webp_bigger
etag: "652a0f32-339b"
last-modified: Sat, 14 Oct 2023 03:46:58 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 81669429a8c956cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/tleoxioy3ke.jpg
200 OK 9.0 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/tleoxioy3ke.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7d0c75c3a41dd01becabbe119612cb0b
fed2faeea9d9d6331f1dc94da98d3b1079720b92
cc456a69e42588a7a88a6375746f9993d93f509dd347457e86bead8794a6aa51
GET /upload/vod/2023/10/tleoxioy3ke.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 9012
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10503
content-disposition: inline; filename="tleoxioy3ke.webp"
etag: "652a0f12-2907"
last-modified: Sat, 14 Oct 2023 03:46:26 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998bd56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/f3zokd4glcx.jpg
200 OK 9.9 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/f3zokd4glcx.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 51a5e086a06da7329b99cbcdb9b03e2a
ea052ecb8df7bb5e01b8b0bf8b2636d621c44c32
d3c4aadb540d2379b6a3011562995a9afc52a991d87d2db870af46d7253db3c7
GET /upload/vod/2023/10/f3zokd4glcx.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 9948
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10944
content-disposition: inline; filename="f3zokd4glcx.webp"
etag: "652a0f84-2ac0"
last-modified: Sat, 14 Oct 2023 03:48:20 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429a8de56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/zce24dku12w.jpg
200 OK 9.7 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/zce24dku12w.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 7a0ec9b6360b413d657a29191ac22540
f9f0e9998a1688984f4d860b49f6b4e3b2e2922d
57ace411411af4243737a4f6d9de9dff88ab50488a63138654668c56b6259255
GET /upload/vod/2023/10/zce24dku12w.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/jpeg
content-length: 9716
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10258, status=webp_bigger
etag: "652a0f76-2812"
last-modified: Sat, 14 Oct 2023 03:48:06 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 81669429a8db56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/ugxmytdofoz.jpg
200 OK 8.2 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/ugxmytdofoz.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 39497517ea69b126f790e1a2064e1cae
157c88785fef407ae99828ba8a9ed78fb1b7c40a
e25d115eafd182fac8a50089ba8355cb3190190f61c38e9b025ffa35d551c795
GET /upload/vod/2023/10/ugxmytdofoz.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 8246
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9616
content-disposition: inline; filename="ugxmytdofoz.webp"
etag: "652a0f72-2590"
last-modified: Sat, 14 Oct 2023 03:48:02 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429a8da56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/owdrrxu2ybi.jpg
200 OK 6.8 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/owdrrxu2ybi.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0e613cc23e4da1384fbba8c6b4fb4504
8599aa33b3f4b1f7f1c804c29bda836796dfe2ad
41e0eae0f2744a6a202873a9a5bfbed2a273d192c934882d9452e654d6d0bca4
GET /upload/vod/2023/10/owdrrxu2ybi.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 6778
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9121
content-disposition: inline; filename="owdrrxu2ybi.webp"
etag: "652a0f25-23a1"
last-modified: Sat, 14 Oct 2023 03:46:45 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998c156cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/affn1shogeo.jpg
200 OK 10 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/affn1shogeo.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f0a4d885b5666532fdb52b77657dcdd0
2adfd6fbe954c4bb77270e7d877e1973fe4a1734
f7f4c0db9d48a259b0999c5cddf918e98777791319ff8055c4d5a09a31cf57d2
GET /upload/vod/2023/10/affn1shogeo.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 10514
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11256
content-disposition: inline; filename="affn1shogeo.webp"
etag: "652a0efd-2bf8"
last-modified: Sat, 14 Oct 2023 03:46:05 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998b856cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/xo05zlcss5r.jpg
200 OK 5.2 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/xo05zlcss5r.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 540bdbb4e2cc4af0eb7b094eb61c267a
c242c4708c96b36388808d6ad235e382fae357b7
7c37de44804b6f2ca716e9b56b7053ff52f2bb51349c5b3226ec3c7cda72317d
GET /upload/vod/2023/10/xo05zlcss5r.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 5244
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7165
content-disposition: inline; filename="xo05zlcss5r.webp"
etag: "652a0ee3-1bfd"
last-modified: Sat, 14 Oct 2023 03:45:39 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998b756cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/v025rtj0ekn.jpg
200 OK 6.0 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/v025rtj0ekn.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1e66fbdddd8fe5bf4c64cc4da2e549f1
24be486887e1482260622cf19853158fbbb1c54c
0a8848edc17338769686ca20bd53c8add1202dedd8965d868d7edacd70118d78
GET /upload/vod/2023/10/v025rtj0ekn.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 5980
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8242
content-disposition: inline; filename="v025rtj0ekn.webp"
etag: "652a0f06-2032"
last-modified: Sat, 14 Oct 2023 03:46:14 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998ba56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/lkvebzk11ml.jpg
200 OK 5.3 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/lkvebzk11ml.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash da7ec2ce4917469bc8e020345c037767
2616f57efe79e37973382904a3f80372bdff8aca
c0f644a67ee026dda1d1fefdad7ffc0f43b8d57543ed99f8d68df55a0c614143
GET /upload/vod/2023/10/lkvebzk11ml.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 5326
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7026
content-disposition: inline; filename="lkvebzk11ml.webp"
etag: "652a0f01-1b72"
last-modified: Sat, 14 Oct 2023 03:46:09 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998b956cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/aqz5c5lb0nw.jpg
200 OK 6.8 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/aqz5c5lb0nw.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b1623b2556ac44a370f619bd5149cf06
49fca8b352b73b7bfb6aa5cb6e59340fafb02455
f06ba94019d1de24f26696073ac6dca501c095b4e4c8eed1bb8bcdcbc3c2dc31
GET /upload/vod/2023/10/aqz5c5lb0nw.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 6812
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8164
content-disposition: inline; filename="aqz5c5lb0nw.webp"
etag: "652a0f37-1fe4"
last-modified: Sat, 14 Oct 2023 03:47:03 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429a8cb56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/2kmunovcbil.jpg
200 OK 4.1 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/2kmunovcbil.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 29346dcf6429b702e5943ffaaa4dfa46
96d05d00ad11e042c91f2efc1ddf998273574541
cb4a6933f35fc2c3f7a38164bccc7006c63e7e345dc9ac6e595840097c857f78
GET /upload/vod/2023/10/2kmunovcbil.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 4144
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=6369
content-disposition: inline; filename="2kmunovcbil.webp"
etag: "652a0f0a-18e1"
last-modified: Sat, 14 Oct 2023 03:46:18 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8166942998bb56cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/fgedvns0kdw.jpg
200 OK 10 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/fgedvns0kdw.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9a8c93c3af598b5a6fd0bcaeb5507844
e06e79500157ef396ff4eaac83c2158f2c0de662
7a7d41fe488da6e63697857af4b279e6160a6d97caaab63e1d9423cd875aaa3e
GET /upload/vod/2023/10/fgedvns0kdw.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 10390
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11493
content-disposition: inline; filename="fgedvns0kdw.webp"
etag: "652a0ef4-2ce5"
last-modified: Sat, 14 Oct 2023 03:45:56 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429e91456cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/uzvzonklk4x.jpg
200 OK 7.0 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/uzvzonklk4x.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 45dfc072f2e8d4c1aac1226a0a128b7e
4f320ea47fa8710ec5fa3ffab87c01c7bbbefb0f
f638818630d0cf2bd930ac730f76206965f5a67727fec59d0162e0e360b23612
GET /upload/vod/2023/10/uzvzonklk4x.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 7038
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8182
content-disposition: inline; filename="uzvzonklk4x.webp"
etag: "652a0ef8-1ff6"
last-modified: Sat, 14 Oct 2023 03:46:00 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429e91356cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/xbrlcwx3nvj.jpg
200 OK 7.2 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/xbrlcwx3nvj.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b7c5f2ca3d4b42dad448124aefea3707
448830dcb3ffcb663a3df0c5d8b05614a0195568
6dfcb1912015c5c9e652cac6cc25c54472d2c87f02695a9465aee2b7eedf034b
GET /upload/vod/2023/10/xbrlcwx3nvj.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 7230
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8100
content-disposition: inline; filename="xbrlcwx3nvj.webp"
etag: "652a0eeb-1fa4"
last-modified: Sat, 14 Oct 2023 03:45:47 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429f92056cc-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/10/izikvhf51qg.jpg
200 OK 6.4 kB URL GET HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/10/izikvhf51qg.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint73:1B:25:EC:DF:B3:82:66:80:70:9A:1E:BE:37:62:E7:29:F1:4D:00
ValidityThu, 02 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 06198dbb38c601a85fe3b7cc1fa69d48
f1382af2f0cb215f94f951213aa39c4473141550
18173c1f749d67b005fb34d1b7b6b9f5f1ab312c27604146079e2a6b25aac6cc
GET /upload/vod/2023/10/izikvhf51qg.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/webp
content-length: 6442
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7618
content-disposition: inline; filename="izikvhf51qg.webp"
etag: "652a0eef-1dc2"
last-modified: Sat, 14 Oct 2023 03:45:51 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 81669429e91756cc-OSL
X-Firefox-Spdy: h2
ia.51.la/go1?id=21592677&rt=1697357354347&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1697357354347&tt=%25E8%2581%259A%25E4%25BB%2599%25E9%2598%2581%25E5%25BD%25B1%25E8%25A7%2586&kw=&cu=http%253A%252F%252Fang2.juxiank85.top%252F&pu=http%253A%252F%252Fm.juxian46.top%252F
200 OK 0 B URL GET HTTP/1.1 ia.51.la/go1?id=21592677&rt=1697357354347&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1697357354347&tt=%25E8%2581%259A%25E4%25BB%2599%25E9%2598%2581%25E5%25BD%25B1%25E8%25A7%2586&kw=&cu=http%253A%252F%252Fang2.juxiank85.top%252F&pu=http%253A%252F%252Fm.juxian46.top%252F
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21592677&rt=1697357354347&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1697357354347&tt=%25E8%2581%259A%25E4%25BB%2599%25E9%2598%2581%25E5%25BD%25B1%25E8%25A7%2586&kw=&cu=http%253A%252F%252Fang2.juxiank85.top%252F&pu=http%253A%252F%252Fm.juxian46.top%252F HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Length: 0
Connection: keep-alive
Date: Sun, 15 Oct 2023 08:04:54 GMT
Ali-Swift-Global-Savetime: 1697357354
Via: cache15.l2de2[335,334,200-0,M], cache2.l2de2[337,0], cache5.se1[359,358,200-0,M], cache3.se1[360,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 15 Oct 2023 08:09:14 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9716973573545345398e
ocsp.buypass.com/
1.7 kB IP
ASN #20940 Akamai International B.V.
Hash b7b4042a79a8884095e5ed538f3ee7e4
dc74cdf38ca7b950676c1fdd652a87b2aa0a6510
f10c871238bb55628273bc8676490aba7b39e17ec525ae8e9f7b6e4b2827a68b
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: db0d9e9f-920c-451f-88cc-4d215a4ee807
Content-Length: 1701
Date: Sun, 15 Oct 2023 08:09:14 GMT
Connection: keep-alive
hm.baidu.com/hm.js?bca6f81537b563f9f18af3f494c3e633
200 OK 0 B URL GET HTTP/1.1 hm.baidu.com/hm.js?bca6f81537b563f9f18af3f494c3e633
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js?bca6f81537b563f9f18af3f494c3e633 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Date: Sun, 15 Oct 2023 08:09:14 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
dvcasha2.ocsp-certum.com/
1.6 kB URL dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 396dc9e21d8736f0416fcef4251b2f24
50b02bf8e73b57c7e1b0b33bd1cb42cb80eb0aeb
c7060d2fadf35b3d371043f94425920ae2447bd8f0b0d7e3acf1e2117c40573b
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=413
Date: Sun, 15 Oct 2023 08:09:14 GMT
Connection: keep-alive
X-N: S
hm.baidu.com/hm.js?6cdc9a2253c9e58f82eb10fc564d352b
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?6cdc9a2253c9e58f82eb10fc564d352b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (619)
Hash b1e187951b09650435b564377964f382
6d08a4e281215eebc22c1dce517a13e832621b6f
224321fc70f685332819cac60db42683d3589899e8d0430762a7aa4f3f086317
GET /hm.js?6cdc9a2253c9e58f82eb10fc564d352b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Sun, 15 Oct 2023 08:09:14 GMT
Etag: e8b9480fc917262104f97436733803a9
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F08446D600AD2566; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
ocsp.sectigo.com/
472 B IP
Hash 7ba924f6eaea684033eca69785aecf5b
99ee47161f64db185d3ee5cc5d5f371586eb9e14
55f1c2b5930e29cce25e5b5082d279312e85f48fdeb0882b0951110c3e81afff
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 13 Oct 2023 07:15:35 GMT
Expires: Fri, 20 Oct 2023 07:15:34 GMT
Etag: "99ee47161f64db185d3ee5cc5d5f371586eb9e14"
Cache-Control: max-age=428178,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8166942ceb145693-OSL
img.swtuchuang3.com/upload/vod/20230223-1/5ce5e1f34bcf80d218a6db2179fabad2.jpg
200 OK 12 kB URL GET HTTP/2 img.swtuchuang3.com/upload/vod/20230223-1/5ce5e1f34bcf80d218a6db2179fabad2.jpg
IP
ASN #22769 DDOSING-BGP-NETWORK
Requested by http://ang2.juxiank85.top/
Certificate IssuerBuypass AS-983163327
Subjectimg.swtuchuang3.com
Fingerprint89:EC:DF:64:D6:C9:A3:C9:FA:E5:E2:CF:44:1B:5B:80:21:4F:53:BB
ValiditySun, 10 Sep 2023 16:40:19 GMT - Thu, 07 Mar 2024 22:59:00 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 320x240, components 3\012- data
Hash 658217a3e901bf090446a5f27cdee2e9
f20220dafa239c1d1bb9d07e12d1047235b3bf29
b8758f9e777eb9fc7e917d9689580a8a7137c2274fc216bf1f7c25cf4731d91a
GET /upload/vod/20230223-1/5ce5e1f34bcf80d218a6db2179fabad2.jpg HTTP/1.1
Host: img.swtuchuang3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
date: Sun, 15 Oct 2023 08:09:15 GMT
content-type: image/jpeg
content-length: 11837
last-modified: Wed, 22 Feb 2023 16:07:12 GMT
etag: "63f63db0-2e3d"
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
x-cache: hit
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash c0cd4d5d779b3bf6d365815237eff0c9
ff10c2238164519a03d18c6327ee636777782c79
486ad79bf60777db0cb236aa8c808279efe44bb8c7b3d7667c2a1624bb7946e3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Oct 2023 00:23:16 GMT
Expires: Sat, 21 Oct 2023 00:23:15 GMT
Etag: "ff10c2238164519a03d18c6327ee636777782c79"
Cache-Control: max-age=490519,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8166942e9a1d568b-OSL
p5.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/dfff88ba08ca498f9e161207b7e4f8df~noop.image
200 OK 123 kB URL GET HTTP/2 p5.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/dfff88ba08ca498f9e161207b7e4f8df~noop.image
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerDigiCert Inc
Subject*.toutiaoimg.com
FingerprintC6:CB:5C:8D:D0:71:66:4C:20:28:1D:C3:CF:4C:3F:70:8B:BC:0A:59
ValiditySun, 25 Jun 2023 00:00:00 GMT - Sun, 23 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 200\012- data
Size 123 kB (123271 bytes)
Hash 2828d8bf1f0e2caa5bf965ea2353d70c
881f4c5d38bc52df2340c21199220773d4e356dc
a1b40103345dc3fd981b472ad9eea5f3eb18bff295f849b845d65641110d8b77
GET /img/tos-cn-i-siecs4i2o7/dfff88ba08ca498f9e161207b7e4f8df~noop.image HTTP/1.1
Host: p5.toutiaoimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: image/gif
content-length: 123271
access-control-allow-origin: *
age: 14685166
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Fri, 28 Apr 2023 08:56:28 GMT
nw-session-id: 202304281656287D6B068BC51D3285B44Djbmbf03tt
nw-session-trace: 2023-04-28T16:56:28.962824686+08:00 55
server-timing: inner; dur=62
timing-allow-origin: *
x-bdcdn-cache-status: TCP_HIT
x-length: 123271
x-powered-by: ImageX
x-request-id: 40ff603fec4175bda3619a65964df398
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-response-date: Fri, 28 Apr 2023 16:56:28 GMT
x-response-lb: image
x-tt-logid: 202304281656287D6B068BC51D3285B44D
x-tt-trace-host: 015e7940ed6b1f195ad43bf4d4139574228a215d60ccd306d5ec066381fb791e8da4a79042b521171bfbf9f6de6cff63bd1914f9085f7902dd8306a83233c86a870265162d72d09cc0452f393e6b70ef8f6212386dab87cc8ccba296d3dc964548093fdf1e8b8cec1af9bf6dc5973617eec07026487455cd5c523bb32f7a6d1706
x-tt-trace-id: 2023042816562801000610504700FC286F
x-tt-trace-tag: id=5
date: Sun, 15 Oct 2023 08:09:14 GMT
via: cache09.szcm
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img.aosikaimge.com/20230210/W8ZZuXnR/1.jpg
200 OK 36 kB URL GET HTTP/2 img.aosikaimge.com/20230210/W8ZZuXnR/1.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerUnizeto Technologies S.A.
Subject*.aosikaimge.com
FingerprintAE:25:6E:2D:01:4E:2A:74:4F:91:BD:2B:32:AF:0F:A0:1D:14:6B:DE
ValidityTue, 29 Nov 2022 14:37:17 GMT - Thu, 28 Dec 2023 00:00:00 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x550, components 3\012- data
Hash ec0054794866297e3420b5239d14ee60
f5beea815f714f495fe60aa5a5933028c6eb7144
cdfb88410a0b8ec36c8e19a586cefb94c86fd90bcbc99d1df18edd0e311dfa7e
GET /20230210/W8ZZuXnR/1.jpg HTTP/1.1
Host: img.aosikaimge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 15 Oct 2023 08:09:15 GMT
content-type: image/jpeg
content-length: 35798
last-modified: Tue, 06 Jun 2023 09:25:52 GMT
etag: "647efba0-8bd6"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img.1379a.xyz/images/6499b2ecb96ee5939c8ca016.gif
302 Found 0 B URL GET HTTP/2 img.1379a.xyz/images/6499b2ecb96ee5939c8ca016.gif
IP
ASN #4658 2012 Limited Netfront
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintDD:C4:C1:1E:F6:AC:98:D3:40:F4:E3:45:2E:4F:C0:6C:6A:D7:CA:D9
ValiditySat, 30 Sep 2023 04:02:04 GMT - Fri, 29 Dec 2023 04:02:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/6499b2ecb96ee5939c8ca016.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://cdn.sm.cn/7f218f12b143040d1af3315b74e9f013/2131e8fc16877944156431319e8a44
X-Firefox-Spdy: h2
img.1379a.xyz/images/64c8d9383b631af06e912fc6.gif
302 Found 0 B URL GET HTTP/2 img.1379a.xyz/images/64c8d9383b631af06e912fc6.gif
IP
ASN #4658 2012 Limited Netfront
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subject1379a.xyz
FingerprintDD:C4:C1:1E:F6:AC:98:D3:40:F4:E3:45:2E:4F:C0:6C:6A:D7:CA:D9
ValiditySat, 30 Sep 2023 04:02:04 GMT - Fri, 29 Dec 2023 04:02:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/64c8d9383b631af06e912fc6.gif HTTP/1.1
Host: img.1379a.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
referrer-policy: no-referrer
cache-control: max-age=600
location: https://image.3001.net/images/20231001/1696148778_65192d2a65a1eb7451bf8.gif
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash c88884926fe074ceaf1625f7c38cba36
7e2487bea7ccedc42f6579291058da381261a48d
376e3e48d829dd643f81bad09208a992012b6194298e7072f501205d1143a6f3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 14 Oct 2023 06:57:09 GMT
Expires: Sat, 21 Oct 2023 06:57:08 GMT
Etag: "7e2487bea7ccedc42f6579291058da381261a48d"
Cache-Control: max-age=513472,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8166942e3bd85693-OSL
ocsp.sectigo.com/
472 B IP
Hash 58645f98413b1c37de49628ed6b558d6
da44d1ab67f513c67596d923d8e1ec33464f3674
21d59dd73e216163dbc727b06233a376271d4862c14df79747bffc6888307c92
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 12 Oct 2023 02:16:11 GMT
Expires: Thu, 19 Oct 2023 02:16:10 GMT
Etag: "da44d1ab67f513c67596d923d8e1ec33464f3674"
Cache-Control: max-age=323814,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8166942f1bee5690-OSL
u22088.com/f7fd72d8ade7e262c4b4f656dd460724.gif
200 OK 396 kB URL GET HTTP/2 u22088.com/f7fd72d8ade7e262c4b4f656dd460724.gif
IP
ASN #201106 Spartan Host Ltd
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subjectu22088.com
Fingerprint76:D0:68:89:75:59:0E:DF:69:46:01:3D:26:2A:3C:12:4C:8F:5D:B7
ValidityMon, 07 Aug 2023 00:06:53 GMT - Sun, 05 Nov 2023 00:06:52 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 396 kB (395600 bytes)
Hash 5155d4f34bc2f7e77b9fe8e854d9e96f
408ed373dd26d934ee70f30b0e47a9dc8049983f
db9f393331e2d56fe7da37b7822590b82524e2dde508848299877daeae1df3be
GET /f7fd72d8ade7e262c4b4f656dd460724.gif HTTP/1.1
Host: u22088.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/gif
content-length: 395600
last-modified: Fri, 12 May 2023 11:43:34 GMT
etag: "645e2666-60950"
expires: Fri, 20 Oct 2023 08:06:22 GMT
cache-control: max-age=2592000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
u22088.com/8e089c8e4c324c8bc1a08f5fe77e5165.gif
200 OK 293 kB URL GET HTTP/2 u22088.com/8e089c8e4c324c8bc1a08f5fe77e5165.gif
IP
ASN #201106 Spartan Host Ltd
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subjectu22088.com
Fingerprint76:D0:68:89:75:59:0E:DF:69:46:01:3D:26:2A:3C:12:4C:8F:5D:B7
ValidityMon, 07 Aug 2023 00:06:53 GMT - Sun, 05 Nov 2023 00:06:52 GMT
File type GIF image data, version 89a, 650 x 350\012- data
Size 293 kB (292555 bytes)
Hash f6f0bb4a97a38572c3525a718b3b71e6
085dfa8c21aa72bd6ba99a9cc348faaf6d67cb8f
4543d34b4055aed3dd9aaef2f598e211341547a238db3e8d88c060c511e83975
GET /8e089c8e4c324c8bc1a08f5fe77e5165.gif HTTP/1.1
Host: u22088.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 15 Oct 2023 08:09:14 GMT
content-type: image/gif
content-length: 292555
last-modified: Fri, 12 May 2023 11:43:26 GMT
etag: "645e265e-476cb"
expires: Fri, 20 Oct 2023 08:06:21 GMT
cache-control: max-age=2592000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
1cdn.8b4v.cn/xpj96080a.gif
200 OK 272 kB URL GET HTTP/1.1 1cdn.8b4v.cn/xpj96080a.gif
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerSectigo Limited
Subject1cdn.8b4v.cn
Fingerprint90:2B:E9:98:30:96:6B:87:97:34:B5:C0:36:9A:12:91:81:E6:AF:12
ValidityThu, 13 Apr 2023 00:00:00 GMT - Fri, 12 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 272 kB (272151 bytes)
Hash 43a32492f5f0cac9660c7ab9d28ced1f
74dc58aad3d5ffc74d5536abda35d554edbd6aa5
b66bc61c4e4348cadf72790bf397b4bb70921196b0c9fb5935c280c354214450
GET /xpj96080a.gif HTTP/1.1
Host: 1cdn.8b4v.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:15 GMT
Content-Type: image/gif
Content-Length: 272151
Connection: keep-alive
Server: openresty
CloudServiceDiscount: CDN
x-obs-request-id: 0000018ACD2164BB440D48C1F1A6CFCB
x-reserved-indicator: 372
ETag: "43a32492f5f0cac9660c7ab9d28ced1f"
Last-Modified: Mon, 25 Sep 2023 09:52:43 GMT
Content-Disposition: attachment
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCTaPeUHU2beF4tM5vmiU0VWmIjTTVUzr
X-CCDN-Expires: 2574370
via: EU-GER-frankfurt-EDGE4-CACHE1[4],EU-GER-frankfurt-EDGE4-CACHE2[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE14[9],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,9]
x-hcs-proxy-type: 1
X-CCDN-CacheTTL: 2592000
X-CCDN-REQ-ID-46B1: acb3bba332acba48db6c4804178dede4
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
Age: 17630
Accept-Ranges: bytes
ocsp.sectigo.com/
472 B IP
Hash 58645f98413b1c37de49628ed6b558d6
da44d1ab67f513c67596d923d8e1ec33464f3674
21d59dd73e216163dbc727b06233a376271d4862c14df79747bffc6888307c92
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:15 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 12 Oct 2023 02:16:11 GMT
Expires: Thu, 19 Oct 2023 02:16:10 GMT
Etag: "da44d1ab67f513c67596d923d8e1ec33464f3674"
Cache-Control: max-age=323814,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 816694301b19568b-OSL
8878qp.com/300x200.gif
200 OK 75 kB IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subject8878qp.com
Fingerprint3A:C2:C6:C3:1A:A5:86:65:CF:72:CD:F8:29:F8:32:52:99:78:1F:AC
ValidityTue, 19 Sep 2023 06:25:52 GMT - Mon, 18 Dec 2023 06:25:51 GMT
File type GIF image data, version 89a, 300 x 200\012- data
Hash 796a70eb014b392dad158cd41eb57599
6769f5a39abd6c85e7f6173080b26e98972935d0
1dbc733275af7c74e25bfcd5e4d6d3c2a60aa451c1dde144718ccf216b7c1e83
GET /300x200.gif HTTP/1.1
Host: 8878qp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 15 Oct 2023 08:03:25 GMT
Content-Type: image/gif
Content-Length: 74942
Connection: keep-alive
Last-Modified: Thu, 21 Sep 2023 09:21:32 GMT
ETag: "650c0b1c-124be"
Expires: Sat, 21 Oct 2023 09:25:27 GMT
Cache-Control: max-age=2592000
Via: 162.218.31.58
CDN-Cache: HIT
Accept-Ranges: bytes
status.rapidssl.com/
471 B IP
Hash 78927c214551774aada979050b438a93
24b4ff48822f68a228f6d8669b31b747dba23290
4190a35d7d492ba418ae797bffc1cbf7ba6ef23fae3e627ccc2c7ab30fe9ab10
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1362
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Sun, 15 Oct 2023 08:09:15 GMT
Last-Modified: Sun, 15 Oct 2023 07:46:33 GMT
Server: ECAcc (amb/6B0A)
X-Cache: HIT
Content-Length: 471
vnsguanggaotu.oss-cn-hangzhou.aliyuncs.com/882-960x80.gif
200 OK 250 kB URL GET HTTP/1.1 vnsguanggaotu.oss-cn-hangzhou.aliyuncs.com/882-960x80.gif
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subject*.oss-cn-hangzhou.aliyuncs.com
Fingerprint38:70:3C:D0:5E:D4:35:C6:D6:14:B4:D2:E8:CA:D5:1F:A4:98:3A:3D
ValidityFri, 07 Jul 2023 10:24:39 GMT - Mon, 18 Mar 2024 06:06:06 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 250 kB (250356 bytes)
Hash 782f1eaf936342eb06b81643ed729d79
72c2a74a7b0d2414f719abde06117ee783bab8b3
bf5bbe7ca20750cd6a00e690f4726ae7a1f0f125e98736c50b599bb1b65351f7
GET /882-960x80.gif HTTP/1.1
Host: vnsguanggaotu.oss-cn-hangzhou.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sun, 15 Oct 2023 08:09:14 GMT
Content-Type: image/gif
Content-Length: 250356
Connection: keep-alive
x-oss-request-id: 652B9E2ABF9C6A3839552A23
Accept-Ranges: bytes
ETag: "782F1EAF936342EB06B81643ED729D79"
Last-Modified: Wed, 08 Feb 2023 06:25:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10008971337816098083
x-oss-storage-class: Standard
x-oss-ec: 0048-00000105
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: eC8er5NjQusGuBZD7XKdeQ==
x-oss-server-time: 4
1cdn.yuanpinghengkangfuyouxiangongsi.top/bt96080a.gif
200 OK 214 kB URL GET HTTP/1.1 1cdn.yuanpinghengkangfuyouxiangongsi.top/bt96080a.gif
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerSectigo Limited
Subject1cdn.yuanpinghengkangfuyouxiangongsi.top
FingerprintCE:05:79:17:67:EA:DF:17:71:55:41:BF:B4:76:F0:B8:57:12:F0:07
ValidityFri, 16 Jun 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 214 kB (213969 bytes)
Hash fbfdcc7b40b93f021c65a01a8f7a4360
6c449805780129472654fc44ffbe7bf313a2f658
1617a4d235b7b2b32acdf481353bd43b9275c31a18832f54940ff9d7629676ce
GET /bt96080a.gif HTTP/1.1
Host: 1cdn.yuanpinghengkangfuyouxiangongsi.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:14 GMT
Content-Type: image/gif
Content-Length: 213969
Connection: keep-alive
Server: openresty
Age: 1467533
CloudServiceDiscount: CDN
Content-Disposition: attachment
ETag: "fbfdcc7b40b93f021c65a01a8f7a4360"
Last-Modified: Mon, 25 Sep 2023 09:52:25 GMT
X-CCDN-CacheTTL: 2592000
X-CCDN-Expires: 2569839
X-CCDN-REQ-ID-46B1: fc4031357c70874b665ab441a35fea4e
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
via: CHN-AHhefei-AREACT5-CACHE38[2],CHN-AHhefei-AREACT5-CACHE27[0,TCP_HIT,0],CHN-SH-GLOBAL1-CACHE58[2],CHN-SH-GLOBAL1-CACHE69[0,TCP_HIT,0]
x-hcs-proxy-type: 1
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCT09RV0yUlXdDgzU9a6R7RBG7E067UCB
x-obs-request-id: 0000018AD3288544440DA931FB4B38ED
x-reserved-indicator: 372
Accept-Ranges: bytes
1cdn.yuanpinghengkangfuyouxiangongsi.top/xpj96080a.gif
200 OK 272 kB URL GET HTTP/1.1 1cdn.yuanpinghengkangfuyouxiangongsi.top/xpj96080a.gif
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerSectigo Limited
Subject1cdn.yuanpinghengkangfuyouxiangongsi.top
FingerprintCE:05:79:17:67:EA:DF:17:71:55:41:BF:B4:76:F0:B8:57:12:F0:07
ValidityFri, 16 Jun 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 272 kB (272151 bytes)
Hash 43a32492f5f0cac9660c7ab9d28ced1f
74dc58aad3d5ffc74d5536abda35d554edbd6aa5
b66bc61c4e4348cadf72790bf397b4bb70921196b0c9fb5935c280c354214450
GET /xpj96080a.gif HTTP/1.1
Host: 1cdn.yuanpinghengkangfuyouxiangongsi.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:14 GMT
Content-Type: image/gif
Content-Length: 272151
Connection: keep-alive
Server: openresty
CloudServiceDiscount: CDN
x-obs-request-id: 0000018AD0835DF7440F0B7B7DA059E0
x-reserved-indicator: 372
ETag: "43a32492f5f0cac9660c7ab9d28ced1f"
Last-Modified: Mon, 25 Sep 2023 09:52:43 GMT
Content-Disposition: attachment
x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCTvGCZyaDqNxOekMi7VbQeTQWbyb8U9L
X-CCDN-Expires: 1124513
via: CHN-AHhefei-AREACT5-CACHE20[1],CHN-AHhefei-AREACT5-CACHE33[0,TCP_HIT,0],CHN-SH-GLOBAL1-CACHE6[8],CHN-SH-GLOBAL1-CACHE32[0,TCP_HIT,3]
x-hcs-proxy-type: 1
X-CCDN-CacheTTL: 2592000
X-CCDN-REQ-ID-46B1: 9466fe4f50b7201fa23a0add73127a5c
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
Age: 1467502
Accept-Ranges: bytes
ocsp.sectigo.com/
471 B IP
Hash 70f18087857df1a29d072dde17f7c76b
601f546bc48318bf74635a63090c7c9ecf7f12ff
b295d5943152913fb7c5994d9bb69c543d2b849a3af3b35226389764f388a8f6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 12 Oct 2023 20:01:11 GMT
Expires: Thu, 19 Oct 2023 20:01:10 GMT
Etag: "601f546bc48318bf74635a63090c7c9ecf7f12ff"
Cache-Control: max-age=387921,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 81669433bf935693-OSL
status.rapidssl.com/
471 B IP
Hash cbf9501785948f6187273a09924c215e
3d62893598249b1a22d3cb48029a027a3c020520
f4c128ac7536bcedf186a0bcd895b12ee01c1ba793572c7eca955e5c4333e25b
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3303
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Sun, 15 Oct 2023 08:09:16 GMT
Last-Modified: Sun, 15 Oct 2023 07:14:13 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
555zz333zz.com/d07f9609254d460590d0a64283f30d8f.gif
200 OK 279 kB URL GET HTTP/1.1 555zz333zz.com/d07f9609254d460590d0a64283f30d8f.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerSectigo Limited
Subject555zz333zz.com
Fingerprint74:00:F7:09:5B:25:A0:E8:D8:8B:7B:B9:30:12:13:5E:74:1C:B4:27
ValiditySun, 10 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 279 kB (278872 bytes)
Hash 6d5d4cc6b400053edb7588c29d9630ed
a94eb6634e9e4a9150035a0d6a6af9601c1c5950
89e0dfe62a0150da0cbd38e5302c3ec77a33c0fb177df72059788dfecae4709d
GET /d07f9609254d460590d0a64283f30d8f.gif HTTP/1.1
Host: 555zz333zz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "652a35a1-44158"
Date: Sat, 14 Oct 2023 06:37:38 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sat, 14 Oct 2023 06:30:57 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-26
Content-Length: 278872
777zz666zz.com/50e41580c19940e297f4f31c3ebd4b99.gif
200 OK 348 kB URL GET HTTP/1.1 777zz666zz.com/50e41580c19940e297f4f31c3ebd4b99.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerSectigo Limited
Subject777zz666zz.com
Fingerprint41:08:AA:1A:8E:E9:11:B6:64:75:6D:B5:A9:F7:B0:7B:FC:9E:0D:F6
ValiditySun, 10 Sep 2023 00:00:00 GMT - Mon, 09 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 80\012- data
Size 348 kB (347972 bytes)
Hash 5f6bb7bf85fb6e55da13a55ad479f05f
05c71ad1a80e33aba0ccd4b479f723f5ca2cdb3b
5dab8c753c81ce87e136f1d33b294e7922a9ea5b9afc651069c99dcb248917ed
GET /50e41580c19940e297f4f31c3ebd4b99.gif HTTP/1.1
Host: 777zz666zz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "64e31772-54f44"
Date: Fri, 06 Oct 2023 20:19:34 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Mon, 21 Aug 2023 07:51:14 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-05
Content-Length: 347972
img.hgm3u8.com/upload/vod/20221126-1/3ccb2542de66433d857960accc779f8a.jpg
403 Forbidden 146 B URL GET HTTP/2 img.hgm3u8.com/upload/vod/20221126-1/3ccb2542de66433d857960accc779f8a.jpg
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerSectigo Limited
Subjectimg.hgm3u8.com
FingerprintEE:51:BE:BC:AF:CA:A8:C7:01:B9:26:87:C1:8D:6D:7E:BA:D2:C8:EF
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9fe3cb2b7313dc79bb477bc8fde184a7
4d7b3cb41e90618358d0ee066c45c76227a13747
32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
GET /upload/vod/20221126-1/3ccb2542de66433d857960accc779f8a.jpg HTTP/1.1
Host: img.hgm3u8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: nginx
date: Sun, 15 Oct 2023 08:09:16 GMT
content-type: text/html
content-length: 146
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.yeefx.cn/yeefxcount.js
200 OK 13 kB URL GET HTTP/1.1 cdn.yeefx.cn/yeefxcount.js
IP
ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested by http://ang2.juxiank85.top/
File type C source, ASCII text, with very long lines (35876), with no line terminators
Hash 20bd66dce51d1bda2721c59562c704b4
233e17c47e6f5a8f903925293f514c3ea17ad9fa
5b430e3d526adb0efbe8e9ffb4cd1140a32b5811f0fc6c8f9b024f368100790f
GET /yeefxcount.js HTTP/1.1
Host: cdn.yeefx.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Oct 2023 08:09:16 GMT
Content-Type: application/javascript
Last-Modified: Sat, 23 Sep 2023 02:25:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"650e4cb1-8c24"
Expires: Sun, 15 Oct 2023 09:09:16 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip
ocsp2.globalsign.com/gsorganizationvalsha2g3
1.5 kB URL ocsp2.globalsign.com/gsorganizationvalsha2g3
IP
Hash 1179e85bcaed0c10372b43065e356eac
8b42b74f397e3d3d7c1eeb2b7b27db1b4afed93a
8f362bb1a4616bfbdfffa8d990ae19d2719ece84b72bc11311408bc516599c58
POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Oct 2023 08:09:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Thu, 19 Oct 2023 08:01:44 GMT
ETag: "8b42b74f397e3d3d7c1eeb2b7b27db1b4afed93a"
Last-Modified: Sun, 15 Oct 2023 08:01:45 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81669434eeaf56c6-OSL
image.3001.net/images/20231001/1696148778_65192d2a65a1eb7451bf8.gif
200 OK 239 kB URL GET HTTP/2 image.3001.net/images/20231001/1696148778_65192d2a65a1eb7451bf8.gif
IP
ASN #135391 AOFEI DATA INTERNATIONAL COMPANY LIMITED
Requested by http://ang2.juxiank85.top/
Certificate IssuerTrustAsia Technologies, Inc.
Subject*.3001.net
Fingerprint3D:A3:96:52:B5:61:D4:FA:CD:A4:06:D1:BF:6A:7D:1A:BF:9E:1F:15
ValidityFri, 21 Oct 2022 00:00:00 GMT - Sat, 18 Nov 2023 23:59:59 GMT
File type GIF image data, version 89a, 640 x 350\012- data
Size 239 kB (239410 bytes)
Hash dfec5f8bd1740671cdafb097bca19328
3fc363fd6723bcf7d2026c50b0a68a1998b2e6b1
ba1e0703a1a8d6ac764f1703282c2ea8ee50f36790f05536fd71304ffab09a51
GET /images/20231001/1696148778_65192d2a65a1eb7451bf8.gif HTTP/1.1
Host: image.3001.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: marco/2.20
date: Sun, 15 Oct 2023 08:09:16 GMT
content-type: image/gif
content-length: 239410
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 86400
x-request-id: 38bcbcc6c364dcf71f8009d2934e30ea; 8ff096ffe1d57b667d2deb941aa74b28; 8ef12c5f5bf5b0826a28b6fa147ce11c
x-source: U/200
x-upyun-content-length: 239410
etag: "d64eea42ce737a9becd752acbe684a70-1"
last-modified: Sun, 01 Oct 2023 08:26:18 GMT
x-upyun-content-type: image/gif
expires: Tue, 17 Oct 2023 09:04:26 GMT
cache-control: max-age=691200
accept-ranges: bytes
age: 515090
via: T.209.M, V.403-zj-fud-202, S.pcw-cn-hkg-165, T.165.H, V.pcw-cn-hkg-163, T.132.H, M.gtt-de-fra2-132
X-Firefox-Spdy: h2
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/6564105775e94fcbac17fb1b40069913~noop.image
200 OK 103 kB URL GET HTTP/2 p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/6564105775e94fcbac17fb1b40069913~noop.image
IP
ASN #4837 CHINA UNICOM China169 Backbone
Requested by http://ang2.juxiank85.top/
Certificate IssuerDigiCert Inc
Subject*.toutiaoimg.com
FingerprintCB:21:8E:2E:42:E3:6B:FE:94:24:45:3C:0C:20:5A:F4:E4:EE:6D:66
ValidityFri, 30 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 103 kB (103177 bytes)
Hash 6f54c5d04bc8ea6a4a6ade3f4a6d2a16
d823a0141ec47e0df54a8b0f6591fe24f8bba49a
b61676a8595049b19424206055edb1e224e7b192a53c63bbe55b78f1f4f39672
GET /img/tos-cn-i-siecs4i2o7/6564105775e94fcbac17fb1b40069913~noop.image HTTP/1.1
Host: p26.toutiaoimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Oct 2023 08:09:16 GMT
content-type: image/gif
content-length: 103177
server: openresty
imagex-fmt: gif2gif
last-modified: Sat, 25 Dec 2021 17:15:36 GMT
nw-session-id: 202112260115360101510921014DE4BF70vgmm601tt
nw-session-trace: 2021-12-26T01:15:36.354937889+08:00 69
x-bdcdn-cache-status: TCP_MISS
x-length: 103177
x-powered-by: ImageX
x-response-date: Sun, 26 Dec 2021 01:15:36 GMT
x-response-lb: image
x-tt-logid: 202112260115360101510921014DE4BF70
server-timing: cdn-cache;desc=HIT, edge;dur=3
x-tt-trace-host: 01a00848563bbc715277b0e42967add4f9457733794cc372423f50f11ce3a0744da4f6edc76899949afad5b5aaa1a3d6e6a021e6be32dc87833909c6acc9647ba1cce5aefa4b381e45afd6c4d27c821d2159b66f8536f14c40fa55c1ec6d5b29bd26a933927f919eebad9d37dfbd99ae9e
x-tt-trace-tag: id=26;cdn-cache=hit;type=static
via: CHN-HEshijiazhuang-AREACUCC6-CACHE40[3],CHN-HEshijiazhuang-AREACUCC6-CACHE50[0,TCP_HIT,1],CHN-HEshijiazhuang-GLOBAL1-CACHE48[17],CHN-HEshijiazhuang-GLOBAL1-CACHE50[0,TCP_HIT,15],CHN-TJ-GLOBAL1-CACHE44[51],CHN-TJ-GLOBAL1-CACHE50[0,TCP_HIT,50]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 31536000
nginx-hit: 1
age: 2315551
cache-control: max-age=31536000
accept-ranges: bytes
access-control-allow-origin: *
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
X-Firefox-Spdy: h2
imgsrc.baidu.com/forum/pic/item/b8389b504fc2d562388c66dda11190ef76c66c7e.jpg
200 OK 154 kB URL GET HTTP/2 imgsrc.baidu.com/forum/pic/item/b8389b504fc2d562388c66dda11190ef76c66c7e.jpg
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1500 x 120\012- data
Size 154 kB (154113 bytes)
Hash 2d2267fec64c6f6d8cb3e202f2e2d66a
4b08171c89b8b3b33bd032dc631897a832c0b772
e0085ce3e27049325b88cefeca3d49f9ab411bd2b611b5db61cb2328c2a41169
GET /forum/pic/item/b8389b504fc2d562388c66dda11190ef76c66c7e.jpg HTTP/1.1
Host: imgsrc.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sun, 15 Oct 2023 08:09:16 GMT
content-type: image/gif
content-length: 154113
access-control-allow-origin: *
etag: 2d2267fec64c6f6d8cb3e202f2e2d66a
expires: Tue, 14 Nov 2023 08:09:16 GMT
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
8878qp.com/960x60.gif
200 OK 259 kB IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerLet's Encrypt
Subject8878qp.com
Fingerprint3A:C2:C6:C3:1A:A5:86:65:CF:72:CD:F8:29:F8:32:52:99:78:1F:AC
ValidityTue, 19 Sep 2023 06:25:52 GMT - Mon, 18 Dec 2023 06:25:51 GMT
File type GIF image data, version 89a, 960 x 60\012- data
Size 259 kB (259146 bytes)
Hash 7fb6cf180fdcff28123a41b7b1ac3935
3fc00c29da87350f4658e0b1ad72c0108973dfd1
c8fa6b9a3d1f3a89ab2917936f5e9f3fe694f7220070672082c0e3f732067eb9
GET /960x60.gif HTTP/1.1
Host: 8878qp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 15 Oct 2023 08:03:25 GMT
Content-Type: image/gif
Content-Length: 259146
Connection: keep-alive
Last-Modified: Thu, 21 Sep 2023 05:16:33 GMT
ETag: "650bd1b1-3f44a"
Expires: Sat, 21 Oct 2023 08:28:46 GMT
Cache-Control: max-age=2592000
Via: 162.218.31.58
CDN-Cache: HIT
Accept-Ranges: bytes
cdn.sm.cn/7f218f12b143040d1af3315b74e9f013/2131e8fc16877944156431319e8a44
200 OK 40 kB URL GET HTTP/2 cdn.sm.cn/7f218f12b143040d1af3315b74e9f013/2131e8fc16877944156431319e8a44
IP
Requested by http://ang2.juxiank85.top/
Certificate IssuerGlobalSign nv-sa
Subject*.sm.cn
Fingerprint54:F7:6B:F0:0F:3F:DA:03:67:2B:3D:A8:D3:16:AD:2A:17:AA:A4:2B
ValidityMon, 03 Jul 2023 03:31:21 GMT - Sat, 03 Aug 2024 03:31:20 GMT
File type GIF image data, version 89a, 250 x 160\012- data
Hash 64fc33a2b7af2022a4cd88466f3e6b71
6d7551a091c59387af8b390e7bc672449dbd2715
bf28a5d29dfc39325aa183ea1abcc299bd68ab69c478e7cd124aaac38eb349f2
GET /7f218f12b143040d1af3315b74e9f013/2131e8fc16877944156431319e8a44 HTTP/1.1
Host: cdn.sm.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 39805
date: Wed, 20 Sep 2023 17:42:26 GMT
x-oss-request-id: 650B2F02C3952C38319C5503
x-oss-cdn-auth: success
accept-ranges: bytes
etag: "7025EF9EB1AFFF493A76A945EEA24D80-1"
last-modified: Mon, 26 Jun 2023 15:47:06 GMT
x-oss-object-type: Multipart
x-oss-hash-crc64ecma: 8573572813685788681
x-oss-storage-class: Standard
x-oss-server-time: 124
ali-swift-global-savetime: 1695231746
via: cache18.l2cn3131[0,0,200-0,H], cache45.l2cn3131[1,0], ens-cache15.cn4354[0,0,200-0,H], ens-cache7.cn4354[1,0]
age: 2125611
x-cache: HIT TCP_MEM_HIT dirn:11:74687381
x-swift-savetime: Sat, 07 Oct 2023 18:38:49 GMT
x-swift-cachetime: 1119817
cache-control: max-age=2592000,s-maxage=2592000,public,immutable
access-control-allow-origin: *
timing-allow-origin: *
eagleid: dde5cb1b16973573571606372e
X-Firefox-Spdy: h2
rsth9.com/8640c212ed4b8873323ab3a1034d64f9.gif
0 B URL GET rsth9.com/8640c212ed4b8873323ab3a1034d64f9.gif
IP
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /8640c212ed4b8873323ab3a1034d64f9.gif HTTP/1.1
Host: rsth9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
0 B URL User Request GET www.aga-recovery.net/gotoUrl.php?url=http://bandlab.com/lanastewart
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gotoUrl.php?url=http://bandlab.com/lanastewart HTTP/1.1
Host: www.aga-recovery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
rsth9.com/24bff9fdc4c5f3d042055758e983c831.gif
0 B URL GET rsth9.com/24bff9fdc4c5f3d042055758e983c831.gif
IP
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /24bff9fdc4c5f3d042055758e983c831.gif HTTP/1.1
Host: rsth9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.linkpicture.com/q/%E6%BC%94%E5%87%BA300x200.gif
0 B URL GET www.linkpicture.com/q/%E6%BC%94%E5%87%BA300x200.gif
IP
Requested by http://ang2.juxiank85.top/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /q/%E6%BC%94%E5%87%BA300x200.gif HTTP/1.1
Host: www.linkpicture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ang2.juxiank85.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
156.237.143.76
23.36.79.10
120.234.70.132
0.0.0.0
122.10.15.178
103.170.15.75
23.90.149.106
128.140.63.114
185.232.59.134
47.246.44.226