r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3468
Expires: Sat, 26 Nov 2022 06:03:51 GMT
Date: Sat, 26 Nov 2022 05:06:03 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4754
Cache-Control: max-age=110665
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:03 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:50:28 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 04:17:30 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2913
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3206
Expires: Sat, 26 Nov 2022 05:59:29 GMT
Date: Sat, 26 Nov 2022 05:06:03 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DJUrrRw8rAoWobNZmGGbJRkA9ySNjFnnXKC5e/Xrpy3+qq+/9gGGEpZ684s0DjQ+54QGT+sWdxk=
x-amz-request-id: WR3RB4F2BH5RKX6Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 04:44:06 GMT
age: 1317
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 05:06:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 04:11:11 GMT
cache-control: public,max-age=3600
age: 3292
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
beshifted.com/
200 OK 13 kB IP
ASN #132839 POWER LINE DATACENTER
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (411), with CRLF line terminators
Hash a8b61419de4a169ea3f277fa808d41b6
7933acff4aa741058ef9f40c34e92137f4151296
5c81b2dc26324d9d7409acbb601bde5d8b67846b5bd5cce01a2fa8a84d070a49
GET / HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3070
Cache-Control: max-age=103917
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:04 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:58:01 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
beshifted.com/template/pc/css/js/swiper.min.css
200 OK 3.3 kB URL HTTP/1.1 beshifted.com/template/pc/css/js/swiper.min.css
IP
ASN #132839 POWER LINE DATACENTER
File type ASCII text, with very long lines (17459)
Hash e73a49e6a4e9772b6add191cf694bd34
00038fe32a6e97fbbeb281939adfb363cdd5f54f
5a1a24bd85867233f36de37f59b96bfeeb4290619781494713b8216902b30988
GET /template/pc/css/js/swiper.min.css HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: text/css
Last-Modified: Mon, 27 Jan 2020 07:05:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5e2e8bc2-455f"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y3FMYbkriat6BR26+qKnpQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: g2AxA4mcm+drstEGQQE8LEojI3Q=
beshifted.com/template/pc/css/bootstrap/3.3.7/css/bootstrap.min.css
200 OK 26 kB URL HTTP/1.1 beshifted.com/template/pc/css/bootstrap/3.3.7/css/bootstrap.min.css
IP
ASN #132839 POWER LINE DATACENTER
File type ASCII text, with very long lines (65371)
Hash b80754eb190a1156fc762402747233a9
56e2a3dd399649007ec9bbafccf5fa953642a2ff
f06c3ad2f6d916b560cc1f839f824cb5584e0c33298a9c6e5e864fdbf28ec9ac
GET /template/pc/css/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: text/css
Last-Modified: Sat, 13 Jun 2020 12:57:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5ee4cd3c-206c3"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
172.247.134.188/xin/gg.js
200 OK 3.6 kB URL HTTP/1.1 172.247.134.188/xin/gg.js
IP
ASN #132839 POWER LINE DATACENTER
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (388)
Hash 158d158e8838a9a098e6592d451999d4
88f445ec233b367a71cd0de7e7ef6df361c516e2
0df9163d2c927fb50818cb9d151cbb7898d61bec1302e9c6633f0f25e5d722ef
Analyzer Verdict Alert quad9 Sinkholed
GET /xin/gg.js HTTP/1.1
Host: 172.247.134.188
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: application/javascript
Last-Modified: Fri, 25 Nov 2022 20:29:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6381259e-4b21"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
beshifted.com/template/pc/css/bootstrap/3.3.7/js/bootstrap.min.js
200 OK 11 kB URL HTTP/1.1 beshifted.com/template/pc/css/bootstrap/3.3.7/js/bootstrap.min.js
IP
ASN #132839 POWER LINE DATACENTER
File type ASCII text, with very long lines (32033)
Hash 0797fd4cf1a20dd983b2ffdaa775dae2
1a056100dedfdf8be8e94ebdbbf4784ae1aafc58
3b118127467c9a703d7de7722bb8b8d0a602b3ff757b8dc22a76f4f20423b7c2
GET /template/pc/css/bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: application/javascript
Last-Modified: Mon, 27 Jan 2020 07:06:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5e2e8bfa-90b5"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
beshifted.com/template/pc/css/css/white.css
200 OK 3.2 kB URL HTTP/1.1 beshifted.com/template/pc/css/css/white.css
IP
ASN #132839 POWER LINE DATACENTER
File type assembler source, Unicode text, UTF-8 text, with very long lines (1086)
Hash 2ffd4be85ab079b8ebf4a55e896cdb9c
1636097631999e481f943e788dc15e9ebdb73cd0
5f1cc592221399407e4851ea5ec1564eb0398a077a2030d93d8ec0fba1fc7c38
GET /template/pc/css/css/white.css HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: text/css
Last-Modified: Mon, 27 Jan 2020 07:06:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5e2e8bde-2945"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
172.247.134.188/xin/gg1.js
200 OK 1.7 kB URL HTTP/1.1 172.247.134.188/xin/gg1.js
IP
ASN #132839 POWER LINE DATACENTER
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash df0cab93566bc0dbc68f36f2f0d3e31a
22bf3394f26bef6d95c69cfe2afcef8560e34050
c60b33afb7dd040abcd1d7b95024ad02fc56881078839cbcdaeeb81ac2f7b58c
Analyzer Verdict Alert quad9 Sinkholed
GET /xin/gg1.js HTTP/1.1
Host: 172.247.134.188
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: application/javascript
Last-Modified: Sun, 02 Oct 2022 14:11:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63399c04-1571"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
beshifted.com/template/pc/tpl/css/style.css
200 OK 11 kB URL HTTP/1.1 beshifted.com/template/pc/tpl/css/style.css
IP
ASN #132839 POWER LINE DATACENTER
File type Unicode text, UTF-8 (with BOM) text, with very long lines (355)
Hash 15e3562e594af87adbb977fee010f94f
d5121f60e1a1acc2708f8111f77f4ee949cf96be
c635e257d6a640491664075c84c9b15e7b4afbec3367c6bf1abaf75022b71b26
GET /template/pc/tpl/css/style.css HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: text/css
Last-Modified: Mon, 27 Jan 2020 07:07:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5e2e8c16-ca8e"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
172.247.134.188/xin/wz.js
200 OK 535 B URL HTTP/1.1 172.247.134.188/xin/wz.js
IP
ASN #132839 POWER LINE DATACENTER
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash ece9f0593f5dad5bdbd54d77a7d95b06
4631b2dd245458f5761ff49cb86f0eb2b19ca3eb
df7c3b138512ca2d6513698114c4f03c1bc990efabf9baf3a7730a356f2c3ffd
Analyzer Verdict Alert quad9 Sinkholed
GET /xin/wz.js HTTP/1.1
Host: 172.247.134.188
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: application/javascript
Last-Modified: Fri, 11 Nov 2022 13:36:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"636e4fcb-c4a"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
beshifted.com/template/pc/css/js/jquery-3.3.1.min.js
200 OK 34 kB URL HTTP/1.1 beshifted.com/template/pc/css/js/jquery-3.3.1.min.js
IP
ASN #132839 POWER LINE DATACENTER
File type ASCII text, with very long lines (65451)
Hash bf13a6b8435f80e19d7827f205845b59
44dbd2aadc6e3ad655f88d469ad53268443bf781
ddc9353b24962d31baeffabe4aa408e001f282ab19d15b2e887a0243fdf358d0
GET /template/pc/css/js/jquery-3.3.1.min.js HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: application/javascript
Last-Modified: Mon, 27 Jan 2020 07:20:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5e2e8f30-1538f"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
beshifted.com/template/pc/css/css/style.css
200 OK 16 kB URL HTTP/1.1 beshifted.com/template/pc/css/css/style.css
IP
ASN #132839 POWER LINE DATACENTER
File type assembler source, Unicode text, UTF-8 text, with very long lines (4526)
Hash 6618d75c7a32ccebd0d9d11f51d2b20f
a7332db120ca8ba673d7094922c54df0409d785f
56b664673c68756fbf263110229b786ce8b734eb46668b906662c23c9efa2733
GET /template/pc/css/css/style.css HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:04 GMT
Content-Type: text/css
Last-Modified: Mon, 15 Jun 2020 13:27:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5ee7774e-f3ae"
Expires: Sat, 26 Nov 2022 17:06:04 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
beshifted.com/template/pc/css/images/search.png
200 OK 3.7 kB URL HTTP/1.1 beshifted.com/template/pc/css/images/search.png
IP
ASN #132839 POWER LINE DATACENTER
File type PNG image data, 50 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash ec531db02fda9a0f0a202cef35de3968
fc43edd479c23fe8857627f08989200f6ac21122
b8e8fe98e9506ec7d3f2f44104fd04ef53d99ae3021039a170de45dc8b5a14a9
GET /template/pc/css/images/search.png HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: image/png
Content-Length: 3704
Last-Modified: Mon, 27 Jan 2020 13:43:58 GMT
Connection: keep-alive
ETag: "5e2ee91e-e78"
Expires: Mon, 26 Dec 2022 05:06:05 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 868d41191d383769a7b8c051c7213b70
c3f74c436cd890b40c32019230a50796d46ee2f3
578e14f0d32e45ea3b8918963b8f7e022fc869c68b1329c33e528218eaf77609
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "578E14F0D32E45EA3B8918963B8F7E022FC869C68B1329C33E528218EAF77609"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4873
Expires: Sat, 26 Nov 2022 06:27:18 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
ddcdn.pic-726-baidu.com/uptu/20221122/2lfQxPGv/1.jpg
200 OK 7.2 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/2lfQxPGv/1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1fc5ed8edf18a2c2e35cac61eadb2ec3
94bd822593a394c23818ccbb0bec4db26e77e554
c50007ffa67184711b02b93f6ccbdff9a6ff5eac001681c380c8e975a9506fe4
GET /uptu/20221122/2lfQxPGv/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/webp
content-length: 7244
access-control-allow-origin: *
cache-control: max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9285
content-disposition: inline; filename="1.webp"
etag: "637e1954-2445"
expires: Sun, 25 Dec 2022 04:12:15 GMT
last-modified: Wed, 23 Nov 2022 13:00:04 GMT
vary: Accept
access-control-allow-credentials: : true
cf-cache-status: HIT
age: 89630
accept-ranges: bytes
server: cloudflare
cf-ray: 770017bfbe00b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/seUyPWcg/1.jpg
200 OK 9.0 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/seUyPWcg/1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d671715963b849b1a4005e412022adb6
8d25c3931da29a70ea91cd05d0b70a3c0a4ee1f5
db4ed8d991449270cc3edb8bb76eacad98e34997dbb24b4d8adc59feb51ac0a9
GET /uptu/20221122/seUyPWcg/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/webp
content-length: 9024
access-control-allow-origin: *
cache-control: max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10186
content-disposition: inline; filename="1.webp"
etag: "637e1959-27ca"
expires: Sun, 25 Dec 2022 04:12:15 GMT
last-modified: Wed, 23 Nov 2022 13:00:09 GMT
vary: Accept
access-control-allow-credentials: : true
cf-cache-status: HIT
age: 89630
accept-ranges: bytes
server: cloudflare
cf-ray: 770017bfbdffb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221022/SaUrAtl5/1.jpg
200 OK 6.0 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221022/SaUrAtl5/1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 658cb4133dbcd45861f90bef16b9d462
3bbb655f06f2e1b86ac171d1510727bb24336d58
93554c5e7c93faf7d4e9afa8ba262cb271cd381fcfe0aaa8f6dd2c34dc95ca99
GET /uptu/20221022/SaUrAtl5/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/webp
content-length: 5978
access-control-allow-origin: *
cache-control: max-age=31536000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7288
content-disposition: inline; filename="1.webp"
etag: "635690e3-1c78"
expires: Sun, 25 Dec 2022 00:03:20 GMT
last-modified: Mon, 24 Oct 2022 13:19:31 GMT
vary: Accept
access-control-allow-credentials: : true
cf-cache-status: HIT
age: 104565
accept-ranges: bytes
server: cloudflare
cf-ray: 770017bfbe03b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/GjGQYbKL/1.jpg
200 OK 13 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/GjGQYbKL/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 2e1a0706da7b251bdd4d0c2f47144947
4c0ee8664a200759fef188d1bbe6319e6ebaeb87
8c7106daf8a76523b2876291140b883f0ee39c74d46992da915e24311ecaf344
GET /uptu/20221122/GjGQYbKL/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 12891
last-modified: Wed, 23 Nov 2022 13:00:06 GMT
etag: "637e1956-325b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc3b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/FCVQaHJ8/1.jpg
200 OK 9.1 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/FCVQaHJ8/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 54c264357183f9cbbcef401abf9509a7
6a66b1984535bc568e8893f9ac622a4273db3fe2
723f9875e2c440bdd2e6966556adbeed8d1f439f72752d6ed69b56397e2aeb92
GET /uptu/20221122/FCVQaHJ8/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 9052
last-modified: Wed, 23 Nov 2022 13:00:06 GMT
etag: "637e1956-235c"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc9b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/1uAc6Bpl/1.jpg
200 OK 8.1 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/1uAc6Bpl/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 0c876951367ef70eab0a51aa3433b8ab
d5d759166d0240d0ba0f3547513b57bbd6025dbd
aff20a7a39d4a00873c67cd2ff48580b6b4a9681f15031e0743d9e371cbc726f
GET /uptu/20221122/1uAc6Bpl/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 8058
last-modified: Wed, 23 Nov 2022 13:00:04 GMT
etag: "637e1954-1f7a"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc4b506-OSL
X-Firefox-Spdy: h2
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Sat, 26 Nov 2022 05:06:05 GMT
Etag: "4078521116"
Expires: Sun, 26 Nov 2023 05:06:05 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=CD80510D1DD6A6D5B687E3912976C1DC:FG=1; max-age=31536000; expires=Sun, 26-Nov-23 05:06:05 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
ddcdn.pic-726-baidu.com/uptu/20220908/A8mwmb83/1.jpg
200 OK 8.5 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20220908/A8mwmb83/1.jpg
IP
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 22d498bc68624da6ace442ee0d3279d5
9a47bb8f581dcc6985c964748d45741e1e2a2c92
f0e332763a31049acaaf41e45e7cdcc22f7a5246e886d5ba0f3e9c7d2f4e5190
GET /uptu/20220908/A8mwmb83/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 8493
last-modified: Thu, 08 Sep 2022 19:16:04 GMT
etag: "631a3f74-212d"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbe06b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/hNlQlskB/1.jpg
200 OK 9.7 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/hNlQlskB/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 00e1a995da88f427826504f9eaa14295
019d25bfe61ed6c7faefb65cbbedd6f3a011ca93
3fd17832a268bf3d620618e3a171ee7b997c544f7f779f6b5fa59dab5efd68b4
GET /uptu/20221122/hNlQlskB/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 9689
last-modified: Wed, 23 Nov 2022 13:00:06 GMT
etag: "637e1956-25d9"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bf9dbbb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/RzanahZR/1.jpg
200 OK 10 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/RzanahZR/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 9f53216b1316c227f94757a1de69b5b9
c8b3b78664944b21c536c2ad9d41bf04497ef404
6700b0f6199d602329624ba0ec2269689aca7d887462377aaf5011c03bc6f090
GET /uptu/20221122/RzanahZR/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 10136
last-modified: Wed, 23 Nov 2022 13:00:09 GMT
etag: "637e1959-2798"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc6b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/4QwKnI9C/1.jpg
200 OK 10 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/4QwKnI9C/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 1dcb027e9f02407f6ae658e0bc98b0a6
049955d47e76d78697090920c56f575e1c4fe337
efa23c1ccd5d459fa62162cdcd51f7c46d51b6df829ab7a31928ba19ecb88877
GET /uptu/20221122/4QwKnI9C/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 10156
last-modified: Wed, 23 Nov 2022 13:00:05 GMT
etag: "637e1955-27ac"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc8b506-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 868d41191d383769a7b8c051c7213b70
c3f74c436cd890b40c32019230a50796d46ee2f3
578e14f0d32e45ea3b8918963b8f7e022fc869c68b1329c33e528218eaf77609
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "578E14F0D32E45EA3B8918963B8F7E022FC869C68B1329C33E528218EAF77609"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4873
Expires: Sat, 26 Nov 2022 06:27:18 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
ddcdn.pic-726-baidu.com/uptu/20221122/mhseTRsv/1.jpg
200 OK 5.8 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/mhseTRsv/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 0357f80ea67f0ccf83ee1fbef215112f
c36b44ae333756c7a76ee1c1104060ee180bb354
87db15d9185a2eb94d658572c4c7082f41ea1534a6341362c321c38dbd8f8cea
GET /uptu/20221122/mhseTRsv/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 5767
last-modified: Wed, 23 Nov 2022 13:00:08 GMT
etag: "637e1958-1687"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbe08b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/0mH5qvmh/1.jpg
200 OK 11 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/0mH5qvmh/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash c66fddd2c865c7bba5758227c2ab7aec
074221839f0528f4188c6a312d3fa919aca7f54c
fe05870e34a307480be1307a232c9f32ee02b0e621429297d2eaf81a349f125c
GET /uptu/20221122/0mH5qvmh/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 11423
last-modified: Wed, 23 Nov 2022 13:00:03 GMT
etag: "637e1953-2c9f"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc5b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/tIuSUX3v/1.jpg
200 OK 8.5 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/tIuSUX3v/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 6ab4f084bad0e1a4378ce8949645097f
621a7f2174f8efb94d02ef4f74a1bed66b0d64f1
001b18a53a43ea019ec7025560eb29df9465adfa29d0ada10e2b4390bf5341a6
GET /uptu/20221122/tIuSUX3v/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 8453
last-modified: Wed, 23 Nov 2022 13:00:10 GMT
etag: "637e195a-2105"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadc7b506-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 868d41191d383769a7b8c051c7213b70
c3f74c436cd890b40c32019230a50796d46ee2f3
578e14f0d32e45ea3b8918963b8f7e022fc869c68b1329c33e528218eaf77609
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "578E14F0D32E45EA3B8918963B8F7E022FC869C68B1329C33E528218EAF77609"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4873
Expires: Sat, 26 Nov 2022 06:27:18 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 868d41191d383769a7b8c051c7213b70
c3f74c436cd890b40c32019230a50796d46ee2f3
578e14f0d32e45ea3b8918963b8f7e022fc869c68b1329c33e528218eaf77609
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "578E14F0D32E45EA3B8918963B8F7E022FC869C68B1329C33E528218EAF77609"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4873
Expires: Sat, 26 Nov 2022 06:27:18 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 868d41191d383769a7b8c051c7213b70
c3f74c436cd890b40c32019230a50796d46ee2f3
578e14f0d32e45ea3b8918963b8f7e022fc869c68b1329c33e528218eaf77609
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "578E14F0D32E45EA3B8918963B8F7E022FC869C68B1329C33E528218EAF77609"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4873
Expires: Sat, 26 Nov 2022 06:27:18 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 2722b03d75cdd015386f862f82cd14ca
5339cb9a62da5dd8edf06837c3a208f1b483d8c3
9b551f071b8ba244e135c6aff8f8169cb27803fa8f00850a75f314c4c54f908e
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=165
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
X-N: S
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 2722b03d75cdd015386f862f82cd14ca
5339cb9a62da5dd8edf06837c3a208f1b483d8c3
9b551f071b8ba244e135c6aff8f8169cb27803fa8f00850a75f314c4c54f908e
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=165
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
X-N: S
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7157
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96437d0cb1ceaffa77124f0dcfeb38cf
3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50
89244601b0a4bc150033e52dc56cf0fbe2846ebba7532c477146258a70783e05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7799
x-amzn-requestid: 4b3bf619-fb69-4cfe-b8e7-7de4ea127853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXADFOvoAMFXQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813866-77f561ae3496d84c75541300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:49:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lt_7H9W9LVUS5gKPrBF_vGiXg-anP_bGV5izsxPiGhiasy2eBnltuw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:39 GMT
age: 23546
etag: "3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de84d1f0137fc671cea29600bc2eb1f1
57e0e910838a086a5ecceb27c929be65a04a785a
62cc5e66ef3ee45f97e6d81791ffdb7b12e19d7edaca1fc476eedaed26a007b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62CC5E66EF3EE45F97E6D81791FFDB7B12E19D7EDACA1FC476EEDAED26A007B5"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3354
Expires: Sat, 26 Nov 2022 06:01:59 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c135ab961de12d926b94f9abae8adbe
139f48ea60880efc6d2977f4d3141809f22adfef
1578a994e7c4eef451f1c744116caa95e1aa995c4817a13832f1ac3487cea95d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2944
x-amzn-requestid: 8f1b2573-39ab-442e-8c6e-97538a28aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWXXEjJIAMFu1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813762-52f27ff536b0c3b84bdfba8e;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:45:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9hy8v_azPZzuVRv1VN61DoNWbfA83JPs4JcZfRyLo3j6HCtWv_gkNw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:03:27 GMT
age: 25358
etag: "139f48ea60880efc6d2977f4d3141809f22adfef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ff3e15-6cd5-46f6-800f-5ad08b71ffbc.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ff3e15-6cd5-46f6-800f-5ad08b71ffbc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56d1528e942a2aa2a7f3f6a85f71e277
475980dd8b123ad0acdd54c441271bacad56489f
01f9bd707598d6cb869856ad01d1087f5abc8298727805f61266f6e823814cb8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ff3e15-6cd5-46f6-800f-5ad08b71ffbc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10209
x-amzn-requestid: e6cf9a8b-bbdc-4978-a186-ffc82b369066
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWINF69oAMF5RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813701-35f60a7425e3617e672916c9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:43:29 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eq6JvA1Pf3M-JLZWNgHPo8sIGff8AYqLHpvVxCeu_-uLTQ4DCDN3NA==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:27:24 GMT
age: 23921
etag: "475980dd8b123ad0acdd54c441271bacad56489f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faaa084a5-6673-4918-8b26-e359fdbd5c53.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faaa084a5-6673-4918-8b26-e359fdbd5c53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cfec0de07b11c3b4b2bde82a9d85395
c6a37206ae6327b5626ee48675638fb3b79eaf2b
b5cd58f099675e96d8f28b633c18db2aab90f1e7e0f593cd38e654f1956c53c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faaa084a5-6673-4918-8b26-e359fdbd5c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10966
x-amzn-requestid: 9c8cca96-85d6-4256-9f64-e7ed26946e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVOLHMPoAMFTTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381358d-2857476f6bdd231525a041f8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RmHOIrJvsyjOKVoOMeV4yGpq4jNofO7-OB4PlhQyIcGEBlQWxBJMWw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:27 GMT
age: 25598
etag: "c6a37206ae6327b5626ee48675638fb3b79eaf2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7157
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7157
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 05:06:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 02:19:43 GMT
age: 9982
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 24490
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/nxT9tnWm/1.jpg
200 OK 9.7 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/nxT9tnWm/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 1f93a6ec4ee04423fbcdc82945904f0f
f25b346a57f9e6727ce800ab8ef327ee0424e29f
7d884ede1b3583ccecc5d826f8358073adce5767d315763238b3a05681baa3e4
GET /uptu/20221122/nxT9tnWm/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: image/jpeg
content-length: 9680
last-modified: Wed, 23 Nov 2022 13:00:08 GMT
etag: "637e1958-25d0"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017c20ecbb506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/2021-07-08/162571143319.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2021-07-08/162571143319.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/2021-07-08/162571143319.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ocsp.sectigo.com/
200 OK 472 B IP
Hash ecf0bdfff6c6179340efd1d009b6fd89
4c13755090b9acc34a54399213d60035ee8b3859
c90c4e1ffc7def6fbebd6986843a9a68d38a33a6b1449cbfe45043294c22ef3f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 16:37:55 GMT
Expires: Wed, 30 Nov 2022 16:37:54 GMT
Etag: "4c13755090b9acc34a54399213d60035ee8b3859"
Cache-Control: max-age=386508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770017c31955b4f1-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ee667b5babe7e6d60d670064c51af8d
f7dc3365543a3f890614ac251df0076af4709ce3
733185f6818e1aa0391f914ac2e28161e9cf35862051bfbcdeea18e600b53d84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "733185F6818E1AA0391F914AC2E28161E9CF35862051BFBCDEEA18E600B53D84"
Last-Modified: Fri, 25 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5521
Expires: Sat, 26 Nov 2022 06:38:07 GMT
Date: Sat, 26 Nov 2022 05:06:06 GMT
Connection: keep-alive
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10489.jpg
200 OK 75 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10489.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 811421c75b68d6fc1faa49fa50548ab6
0e5610b1dac9aca61409f59abb68ff0d2024e928
01cd75a469c66dcc6aef6281a45b568d69f1be6c8a93422bfb0b1cf5cc226602
GET /images/2022/11/24/guochan10489.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 75331
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-12643"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd5b506-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 91d2c05dcf25e00058c6d9819475b37a
a8b1336f319cc3accf3104b900c84258389aef81
daacb3a1012a41f6d76dae0357f19fdb58dc0b5a08169a60534525d59d510a32
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3015
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:06 GMT
Last-Modified: Sat, 26 Nov 2022 04:15:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 727
ddcdn.comtucdncom.com/upload/vod/20220106-1/c55ffbaa344ad2db38a1e1d96a676310.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20220106-1/c55ffbaa344ad2db38a1e1d96a676310.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20220106-1/c55ffbaa344ad2db38a1e1d96a676310.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10457.jpg
200 OK 67 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10457.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 75ef4a50d511009c5936b5e56404f000
a341d2e08083dbf68a312c5d541036875358c985
ef6a872ae3120e77ccbd0ef4bb240327e8c9e8b76cb31ca281607ac8ccd308ce
GET /images/2022/11/24/guochan10457.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 67435
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-1076b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadceb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10480.jpg
200 OK 79 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10480.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash c7a11f8a95197bd707113931247814d4
434fd30cf61fe1c6eba0c6ccb38a2e8a010a08c8
46532871bba2b35726e0a2e353fe374f95bcfdf66d6dad20f20f5f76f093281e
GET /images/2022/11/24/guochan10480.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 78729
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-13389"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd1b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10454.jpg
200 OK 68 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10454.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 2ad5765a9241e00460b14892d2c79209
f1096bea36ff7fc70b1270c1d223463ac0e0f352
d3c8f3857c3c35a08d89f822e18999e60ad4b8aa2385ee198b32972a49c2d92b
GET /images/2022/11/24/guochan10454.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 68268
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-10aac"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadccb506-OSL
X-Firefox-Spdy: h2
kveff.com/9ffb511f55a49640053f10d92db78ac8.gif
301 Moved Permanently 162 B URL HTTP/2 kveff.com/9ffb511f55a49640053f10d92db78ac8.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /9ffb511f55a49640053f10d92db78ac8.gif HTTP/1.1
Host: kveff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: text/html
content-length: 162
location: https://max002.top/9ffb511f55a49640053f10d92db78ac8.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10452.jpg
200 OK 78 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10452.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 97848fca5c52e0256c46c6bbca80321b
30064e59077c85283d608dd8e4cd1c18550b74ab
21843f7bfb20a351d721884a85b968fc16f0f1363f5f4a47eedf0636059bc7c5
GET /images/2022/11/24/guochan10452.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 77940
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-13074"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadcbb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/O1AKg9j7/1.jpg
200 OK 12 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/O1AKg9j7/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 2f470e820aa9a0bdf9929ae62617d01d
634bff0afc9ed609d54c3a633356d058ae31518d
516c5664023b867dcdaf2b21ddd67df023eb7df6d451b9a1cae0b7c85180c827
GET /uptu/20221122/O1AKg9j7/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 11764
last-modified: Wed, 23 Nov 2022 13:00:09 GMT
etag: "637e1959-2df4"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017c1eebbb506-OSL
X-Firefox-Spdy: h2
p3.douyinpic.com/obj/tos-cn-i-dy/0ae06829644f44fc8b80e40b98706d87
200 OK 535 kB URL HTTP/2 p3.douyinpic.com/obj/tos-cn-i-dy/0ae06829644f44fc8b80e40b98706d87
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type GIF image data, version 89a, 960 x 80\012- data
Size 535 kB (535439 bytes)
Hash a21ee15f67556b8ddd93cc5599c8662a
029e666140db499a325bbf9cf230748073d6f5d4
7ba974dafdcb2b32aea4f910856b4a9580fbca5ff4b25869c36b37fa8c23c6d5
GET /obj/tos-cn-i-dy/0ae06829644f44fc8b80e40b98706d87 HTTP/1.1
Host: p3.douyinpic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Tengine
content-type: image/gif
content-length: 535439
date: Tue, 22 Nov 2022 01:36:50 GMT
cache-control: max-age=31536000
imagex-fmt: gif2gif
last-modified: Mon, 21 Nov 2022 16:51:42 GMT
nw-session-id: 202211220051420102090950663E9F908A57lkg03dy
nw-session-trace: 2022-11-22T00:51:42.469987964+08:00 70
x-bdcdn-cache-status: TCP_HIT
x-length: 535439
x-powered-by: ImageX
x-response-date: Tue, 22 Nov 2022 00:51:42 GMT
x-tt-logid: 202211220051420102090950663E9F908A
via: n131-120-073, cache8.l2de2[0,0,206-0,H], cache14.l2de2[1,0], cache14.l2de2[1,0], cache7.se1[0,0,200-0,H], cache7.se1[1,0]
x-request-ip: fdbd:dc03:15:294::68
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-response-cinfo: 91.90.42.154
x-response-cache: edge_hit
server-timing: cdn-cache;desc=HIT,edge;dur=1
x-tt-trace-host: 018395fe1d5ff9fd934eb04de56bdcdc9d0b0493b11111141849558deada2687071755272d6f5adea8c9fa2647c7ae632fa0ab1e65a19d7647cf2a01179b1138e64749165b4b7ebd319177c7dd651062a212606e6230afa38bfdbe026835cbdb02
x-response-lb: image
ali-swift-global-savetime: 1669081010
age: 358156
x-cache: HIT TCP_MEM_HIT dirn:11:182597711 mlen:0
x-swift-savetime: Tue, 22 Nov 2022 12:14:29 GMT
x-swift-cachetime: 31497741
timing-allow-origin: *, *
access-control-allow-origin: *
eagleid: 2ff62c9b16694391660037766e
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/uptu/20221122/z0uLRRwv/1.jpg
200 OK 9.6 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/z0uLRRwv/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ce39ec96940bdd79f7296e171cdf6848
86dc699fb458aafd5d5e1be6023de010306079b9
c6ef87803e05f55d2b358811213f1f68c82c3d4a5b1c17d1f1af2098becc7396
GET /uptu/20221122/z0uLRRwv/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 9579
last-modified: Wed, 23 Nov 2022 13:00:11 GMT
etag: "637e195b-256b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017c1fec1b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/2021-05-31/162241938416.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2021-05-31/162241938416.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/2021-05-31/162241938416.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/upload/vod/20210801-1/7b13c83de9a4fc1b429701f0d1b5f7d8.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20210801-1/7b13c83de9a4fc1b429701f0d1b5f7d8.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20210801-1/7b13c83de9a4fc1b429701f0d1b5f7d8.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/upload/vod/20210816-1/97fdcd0a47033c64226ae106eb663c0e.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20210816-1/97fdcd0a47033c64226ae106eb663c0e.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20210816-1/97fdcd0a47033c64226ae106eb663c0e.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/upload/vod/20210928-1/7754b7dacfe0b57202459feef055077f.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20210928-1/7754b7dacfe0b57202459feef055077f.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20210928-1/7754b7dacfe0b57202459feef055077f.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
beshifted.com/template/pc/tpl/fonts/font_1397718713_957379.woff
200 OK 58 kB URL HTTP/1.1 beshifted.com/template/pc/tpl/fonts/font_1397718713_957379.woff
IP
ASN #132839 POWER LINE DATACENTER
File type Web Open Font Format, TrueType, length 58140, version 1.0\012- data
Hash 8fe3209d7bc86a7ce8ae254033949bda
e1b8c642de66669422499fe0748c8532a837f962
d690cf8e52ba4db42cb3ba29bee7ea2712a87c68318f66f07192ddca375ce801
GET /template/pc/tpl/fonts/font_1397718713_957379.woff HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://beshifted.com/template/pc/tpl/css/style.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: font/woff
Content-Length: 58140
Last-Modified: Mon, 27 Jan 2020 07:13:54 GMT
Connection: keep-alive
ETag: "5e2e8db2-e31c"
Accept-Ranges: bytes
ddcdn.comtucdncom.com/upload/vod/20210810-1/86b1203f5bc8cff6c266dfdf917cffb3.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20210810-1/86b1203f5bc8cff6c266dfdf917cffb3.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20210810-1/86b1203f5bc8cff6c266dfdf917cffb3.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10450.jpg
200 OK 73 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10450.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash e43735994e25218eb844de6ef1efc441
6f2b058b7fd43eb32d2e7faca875f22bfdcdf614
d890d7e5188eef4bfbcf90807631899ec57aaccf14604dbda6d098a43223414b
GET /images/2022/11/24/guochan10450.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 73387
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-11eab"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadcab506-OSL
X-Firefox-Spdy: h2
kvmaa.com/f0e76a5c8312a00241ad726bac0f2d0f.gif
301 Moved Permanently 162 B URL HTTP/2 kvmaa.com/f0e76a5c8312a00241ad726bac0f2d0f.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /f0e76a5c8312a00241ad726bac0f2d0f.gif HTTP/1.1
Host: kvmaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 26 Nov 2022 05:06:05 GMT
content-type: text/html
content-length: 162
location: https://nvhbbb.top/f0e76a5c8312a00241ad726bac0f2d0f.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10484.jpg
200 OK 103 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10484.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Size 103 kB (102923 bytes)
Hash 8f9bdf3dead720fe163fdb520b54ccb2
2283f4d88bbdb89588fc7c34b91d5fea3ab729ae
c074d8cebcd383ec988e53270e60b14b7c3e82191039f086da2a47f31955628b
GET /images/2022/11/24/guochan10484.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 102923
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-1920b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd4b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25985.jpg
200 OK 124 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25985.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3\012- data
Size 124 kB (124434 bytes)
Hash 665cf6ddb0d36ad7f253ba56d13165aa
2bae2f9c72783879201e7c72a3051bb6bc3c5aad
c0578eba100924c48295f3f81bbeaf945ac93e46cf3a29bb74596834beeb3553
GET /images/2022/11/24/jr25985.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 124434
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-1e612"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd8b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10456.jpg
200 OK 79 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10456.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash d5a3437d9a525ce28cf7382a5d0c4582
9cfe977443f8b731bb83f9fb467154f349e8b13b
ea4eecd07cad7c6cb0467d64cb4c66a2e3845cc91cfe7f0045815022687080f7
GET /images/2022/11/24/guochan10456.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 79036
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-134bc"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadcdb506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/20211124-1/9ef78912ba9c7bfde77a83679d7fa010.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20211124-1/9ef78912ba9c7bfde77a83679d7fa010.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20211124-1/9ef78912ba9c7bfde77a83679d7fa010.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ocsp.pki.goog/s/gts1p5/6NFsAw0VKxk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/6NFsAw0VKxk
IP
Hash 783391420a5e7aab947b2d44d96fb5a2
f277929d38caca52085af2d545f40666c9e08630
b4c16e0809d95b5d46f88e09fd3b0244e6ce9f500eb128e11b15e5b42a3f0658
POST /s/gts1p5/6NFsAw0VKxk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10491.jpg
200 OK 70 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10491.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash fdc67e3c4036d0c91ebb0b1bf902b1cb
d6ce6e751813f2c226861cc18dbd1c7296be97b7
43e9c0295bf0ca0c1b0d95b4da240ba3a6277bff101a3df44d7a26ea991963f1
GET /images/2022/11/24/guochan10491.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 69749
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-11075"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdfeb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10466.jpg
200 OK 126 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10466.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Size 126 kB (126223 bytes)
Hash e06c4a59811c711f5613ddb07966037f
c12107f0aa91703a9c4cbb4d23f005b4aaad9c6c
465ca29ca2682712e3b7b9740447e8915cb3272941487c40adaf6b4911bf8c2c
GET /images/2022/11/24/guochan10466.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 126223
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-1ed0f"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadcfb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10467.jpg
200 OK 74 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10467.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash b75e3c924f8a33e0df7c7ccca69ce792
a05d67ca270bd3aefce4812095b149a682a6d2b4
2a2399905a3b5bda57a23d97ffe09f2cb4da49ffa4e6ac471714ee342e0e3b0c
GET /images/2022/11/24/guochan10467.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 74225
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-121f1"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd0b506-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash dce8ee1fa8d1015fb532092abacc9359
169b07506a34587443ded2cb51fe798c9b3c9f97
62b436793a7f4f0171c15eac68dc2bf3c612349ef273d4c1d6d2d86a088d083f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 22:05:45 GMT
Expires: Tue, 29 Nov 2022 22:05:44 GMT
Etag: "169b07506a34587443ded2cb51fe798c9b3c9f97"
Cache-Control: max-age=319777,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770017c3b997b4f1-OSL
ddcdn.comtucdncom.com/upload/vod/20220208-1/38182e2651a4bb338c5315996a0ee318.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20220208-1/38182e2651a4bb338c5315996a0ee318.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20220208-1/38182e2651a4bb338c5315996a0ee318.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/uptu/20221122/1fMlM9Ok/1.jpg
200 OK 15 kB URL HTTP/2 ddcdn.pic-726-baidu.com/uptu/20221122/1fMlM9Ok/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 120x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 49ea6ec7a8764c04697c5d7643e6e884
286993893d83ee11b39a2fcebda9b197df790f0a
34a0b82c1044c291ca252caad17edb4db36c146876fef0bd937be762ed01cf7f
GET /uptu/20221122/1fMlM9Ok/1.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 14840
last-modified: Wed, 23 Nov 2022 13:00:04 GMT
etag: "637e1954-39f8"
expires: Mon, 26 Dec 2022 05:06:06 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017c1deb2b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/images/2022/03/24/siwa194.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/images/2022/03/24/siwa194.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /images/2022/03/24/siwa194.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/upload/vod/20211107-1/de612e93a8164d294e458171a6f1ffbc.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20211107-1/de612e93a8164d294e458171a6f1ffbc.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20211107-1/de612e93a8164d294e458171a6f1ffbc.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
45.120.81.50/xin/ip/100.gif
200 OK 290 kB URL HTTP/1.1 45.120.81.50/xin/ip/100.gif
IP
ASN #132839 POWER LINE DATACENTER
File type GIF image data, version 89a, 960 x 80\012- data
Size 290 kB (289521 bytes)
Hash b476cfdccfcdce5072d2002a35292565
1405d1e872eadad287f42624e0637af2d2c999ca
38dc020f93ab97e39718f6e4c224442d33887eefe3b9f30d92d1ba060402530a
Analyzer Verdict Alert quad9 Sinkholed
GET /xin/ip/100.gif HTTP/1.1
Host: 45.120.81.50
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: image/gif
Content-Length: 289521
Last-Modified: Wed, 26 Oct 2022 05:36:53 GMT
Connection: keep-alive
ETag: "6358c775-46af1"
Expires: Mon, 26 Dec 2022 05:06:05 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ddcdn.comtucdncom.com/upload/vod/20211210-1/dfc4f06f06433285fe288573bd16810d.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20211210-1/dfc4f06f06433285fe288573bd16810d.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20211210-1/dfc4f06f06433285fe288573bd16810d.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/upload/vod/2020-07-16/15948403666.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2020-07-16/15948403666.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/2020-07-16/15948403666.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
max002.top/9ffb511f55a49640053f10d92db78ac8.gif
200 OK 386 kB URL HTTP/2 max002.top/9ffb511f55a49640053f10d92db78ac8.gif
IP
File type GIF image data, version 89a, 750 x 160\012- data
Size 386 kB (386249 bytes)
Hash ef97cc08cbe343d2e5fd5342a2d4b006
4df9af45e4986045c13d01c0b8215fe4304dcbab
4eb154b6b563dbba54e7de6ec8326205a4da6d9b9fd3cb0f31a5aa232797609f
GET /9ffb511f55a49640053f10d92db78ac8.gif HTTP/1.1
Host: max002.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://beshifted.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/gif
content-length: 386249
last-modified: Fri, 02 Sep 2022 15:38:51 GMT
etag: "6312238b-5e4c9"
expires: Sun, 25 Dec 2022 12:41:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 59049
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ncYs3QUARC3W33xGltS5XBtlhUwnTYFxEv9F8bYUPr5Ia96CyYZ03kKRVTJ%2BSc7iy%2FtcMSNSfkFqZDiWHaRVCfOjRGGhBwzC0f%2Ble4916oY10O5O6DvH7ttMEL2E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017c4dc9ad188-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/6NFsAw0VKxk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/6NFsAw0VKxk
IP
Hash 783391420a5e7aab947b2d44d96fb5a2
f277929d38caca52085af2d545f40666c9e08630
b4c16e0809d95b5d46f88e09fd3b0244e6ce9f500eb128e11b15e5b42a3f0658
POST /s/gts1p5/6NFsAw0VKxk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:06 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ddcdn.pic-726-baidu.com/images/2022/11/24/youma26012.jpg
200 OK 187 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/youma26012.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size 187 kB (187254 bytes)
Hash 3748216a77c25c6658b1bd3742657d31
b587690e64189277f412ed54c7baf32bcf687479
721732dfc8066024cf0a1d3445bbda911e6dfc7e89e55cef00c7343ea4ed207b
GET /images/2022/11/24/youma26012.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 187254
last-modified: Wed, 23 Nov 2022 12:40:34 GMT
etag: "637e14c2-2db76"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf2b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25991.jpg
200 OK 205 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25991.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 205 kB (204554 bytes)
Hash 437305316e39b356afabd2e0a726fe12
eab91aacfe400010242f82dcede9dbd429c06920
051f9a151c46e3c4819701474976d54db280690b17a7833e14b751960979b38c
GET /images/2022/11/24/jr25991.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 204554
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-31f0a"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfaddcb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/kj26009.jpg
200 OK 198 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj26009.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x536, components 3\012- data
Size 198 kB (198486 bytes)
Hash 635e32739e43095f637c304d1a161229
b7f09bda5c17380c1417055c3c7a66e3bb5f3c4f
8d220fa5daf618bc180c3e926a3cab6231022203cfde8b5bae772c29455bb9f0
GET /images/2022/11/24/kj26009.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 198486
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-30756"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade8b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26033.jpg
200 OK 177 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26033.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 177 kB (176699 bytes)
Hash f4fe98523f12b5ac9e70cd8e625acf9a
61e6d611227232afe79eb3c534f3bbd50542841c
1dcfbec7907ef220e0ea055d93ee3174e12a5cd922e16f7fb1494a6a8ca91dec
GET /images/2022/11/24/siwa26033.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 176699
last-modified: Wed, 23 Nov 2022 12:40:33 GMT
etag: "637e14c1-2b23b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadedb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26571.jpg
200 OK 193 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26571.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 193 kB (192724 bytes)
Hash 6320dca39747f24cf9f552335df42af3
0c26fe3edea6306b2e97d841efdec0dd2f6edb12
5c68d993bdb332c895618172af98c90a56d66d75573dd0ffe8e6d9d2c3ea621f
GET /images/2022/11/24/zwzm26571.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 192724
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-2f0d4"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdfcb506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/20220120-1/6157163b3b77a386c38b1cb594ce495f.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20220120-1/6157163b3b77a386c38b1cb594ce495f.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20220120-1/6157163b3b77a386c38b1cb594ce495f.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ocsp.digicert.com/
200 OK 278 B IP
Hash 991ed12f9f142cd13d1114fe40a3560f
55135eb5d27c9170dda21e536597d24dc0c49996
e1e01d90ee139b5ac3d28d56124c95155a6b4f76656c0c8c62ade089d137711e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1700
Cache-Control: max-age=122693
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:06 GMT
Etag: "6380d45f-116"
Expires: Sun, 27 Nov 2022 15:10:59 GMT
Last-Modified: Fri, 25 Nov 2022 14:42:39 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 278
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25980.jpg
200 OK 255 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25980.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 255 kB (255209 bytes)
Hash 0dfde7145a3ad7275fc326e6059b4a81
146e246ea62a1b953055e2690feb5cf469323fd6
6d331282078beb09e94f41be2a408e80fab93e73b35d1842a6f8069a2a8ce8a0
GET /images/2022/11/24/jr25980.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 255209
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-3e4e9"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd7b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26566.jpg
200 OK 192 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26566.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 192 kB (192300 bytes)
Hash 763ce56d59d64064e189de51f880eab0
93e4d93ee6ac2dd291db466591b5f61cd99d6f9a
b86e7c274f16b72d3fd6491819917f5be3798bb69f574d9d9d5704f628ab0b90
GET /images/2022/11/24/zwzm26566.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 192300
last-modified: Wed, 23 Nov 2022 12:40:28 GMT
etag: "637e14bc-2ef2c"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf7b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/kj25996.jpg
200 OK 195 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj25996.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 195 kB (194874 bytes)
Hash 01f08e2aaf029ec4a0fd026655003de4
1e84ae75e310b4c1a039f48acaf3130c03242eb2
81b6e60edda8954d11ef3449116214cdabcf7cb9b4dd2b0f28eabdaa124990b7
GET /images/2022/11/24/kj25996.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 194874
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-2f93a"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade0b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26028.jpg
200 OK 178 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26028.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 178 kB (178006 bytes)
Hash 3200c5d8e561ebb6570bc12178354248
8cf61ea2fe67307b29bbfa699a3f34193ce215a0
e2ed662a3b6fa8b1e5c4206e8f98faf2d3be7fe481f53f408c546517388c0066
GET /images/2022/11/24/siwa26028.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 178006
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-2b756"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade9b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/10/16/wuma7119.jpg
200 OK 139 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/10/16/wuma7119.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x540, components 3\012- data
Size 139 kB (139120 bytes)
Hash 716bb424515ac7c9db8c9a843ae4b476
fd9e15134b59fefbebf61bbe6caa9ef04e6766be
4b324a0c6afaa57e392837f6033c52104f63fc8ade263723f102e85909173565
GET /images/2022/10/16/wuma7119.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 139120
last-modified: Sat, 15 Oct 2022 17:37:51 GMT
etag: "634aefef-21f70"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbe04b506-OSL
X-Firefox-Spdy: h2
api.share.baidu.com/s.gif?l=http://beshifted.com/
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://beshifted.com/
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://beshifted.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Sat, 26 Nov 2022 05:06:06 GMT
ddcdn.pic-726-baidu.com/images/2022/11/24/kj26007.jpg
200 OK 187 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj26007.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 187 kB (186587 bytes)
Hash f25a71ada5264a7e96acec4fb820bef8
4f7af4fd260034a1cdd3ac68b65fa5a50a3b9a45
de4ff7c885629fe85d45b1f04897b692f1397daceed219a3c6ce9c3f0a4a941d
GET /images/2022/11/24/kj26007.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 186587
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-2d8db"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade7b506-OSL
X-Firefox-Spdy: h2
nvhbbb.top/f0e76a5c8312a00241ad726bac0f2d0f.gif
200 OK 159 kB URL HTTP/2 nvhbbb.top/f0e76a5c8312a00241ad726bac0f2d0f.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 159 kB (158847 bytes)
Hash a497c1ae73df54fe08463b3342b8d1d0
73ce4da38e2826e033444992cff2a827eb474c97
e9f7f7dc820dc334c1cf0e7ccb151c7483c7a64cc7c28f50de03fa2f65c34957
GET /f0e76a5c8312a00241ad726bac0f2d0f.gif HTTP/1.1
Host: nvhbbb.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://beshifted.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/gif
content-length: 158847
last-modified: Wed, 10 Aug 2022 09:44:15 GMT
etag: "62f37def-26c7f"
expires: Fri, 23 Dec 2022 11:35:04 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 235862
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YpmQGcDPJkSZLC5k4tYJq6EwLRd4UrvvfieLC1LtLL%2F3ZeRgodvJwgMrOoMqQYgY%2F4bgyoLGF6kZlKbsXuRVRyvWapkIAHcXk%2FNyDdDFkErR%2FaHAUn6%2Fu7NP8ZeF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017c5ee4d0b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/kj26005.jpg
200 OK 123 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj26005.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x500, components 3\012- data
Size 123 kB (122745 bytes)
Hash 4a06c7ba52b8ec37df8beb2ca1b85600
002652596bcfb0efab7abcf5f0afed4c75256fe8
bf750401ff77299df497ae995469ef3726c892577bb4714fe12a28a6dfde35e9
GET /images/2022/11/24/kj26005.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 122745
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-1df79"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade6b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/images/2022/07/01/siwa23092.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/images/2022/07/01/siwa23092.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /images/2022/07/01/siwa23092.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10481.jpg
200 OK 92 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/guochan10481.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash 141cd440fe87fc1e5eeb98aa144837f1
b8ca3277df9ba6421acc63b57615e094d4e31728
1170be11774c485321db4ed7ecbe04c85c9c3c3c7be99d1ca422c30186eb4e92
GET /images/2022/11/24/guochan10481.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 92137
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-167e9"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd3b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26030.jpg
200 OK 173 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26030.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 795x537, components 3\012- data
Size 173 kB (173345 bytes)
Hash 667dfdd585709cd64ddaf790eca3c1a6
14bb0968a678ccda4ff04d5ff245f52ff5342422
bf9f6f25e93e7e9b514f8657b88ed40c3d094becf64952f93730e60a24cd4f1a
GET /images/2022/11/24/siwa26030.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 173345
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-2a521"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadebb506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/20220114-1/e8305d6e0fc854b171819b366fd02f5f.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20220114-1/e8305d6e0fc854b171819b366fd02f5f.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20220114-1/e8305d6e0fc854b171819b366fd02f5f.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/images/2022/05/29/jr20568.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/images/2022/05/29/jr20568.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /images/2022/05/29/jr20568.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/kj26001.jpg
200 OK 227 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj26001.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size 227 kB (227076 bytes)
Hash 92fd235b478df342ae5546520cf39ee1
dc0b392f9811fc3abcdaa1cd62c3252d61a9b92e
5e7079f27ff5728d61d4208ed218a4ddee70b634e081783098db55b57ebae93b
GET /images/2022/11/24/kj26001.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 227076
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-37704"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade3b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/images/2022/02/19/cc13321.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/images/2022/02/19/cc13321.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /images/2022/02/19/cc13321.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 473b0858e72fdc59360669f31782a5a7
5a76d8daaac4f2018978117e6985dde2dd4b4fd1
c33a04a8ff6db88280eefc34e6594b6e4f30fb3bd914182f15cf827ce4f80560
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 30 Nov 2022 02:47:55 GMT
ETag: "5a76d8daaac4f2018978117e6985dde2dd4b4fd1"
Last-Modified: Sat, 26 Nov 2022 02:47:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 26 Nov 2022 05:06:06 GMT
Age: 1393
X-Served-By: cache-qpg1274-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 9, 2
X-Timer: S1669439166.454650,VS0,VE0
ddcdn.comtucdncom.com/images/2022/03/16/zhubo186971.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/images/2022/03/16/zhubo186971.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /images/2022/03/16/zhubo186971.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ocsp.digicert.com/
200 OK 278 B IP
Hash 991ed12f9f142cd13d1114fe40a3560f
55135eb5d27c9170dda21e536597d24dc0c49996
e1e01d90ee139b5ac3d28d56124c95155a6b4f76656c0c8c62ade089d137711e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1700
Cache-Control: max-age=122693
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 05:06:06 GMT
Etag: "6380d45f-116"
Expires: Sun, 27 Nov 2022 15:10:59 GMT
Last-Modified: Fri, 25 Nov 2022 14:42:39 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
ddcdn.pic-726-baidu.com/images/2022/11/24/kj25998.jpg
200 OK 177 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj25998.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 177 kB (176683 bytes)
Hash bb8a9364bbde0cc3063962ff8e3e9700
d3eeaaf29213bf985b00ec38dfe5cf481f3ac0f1
665776de5fb4f61d6947e824f73843ffeb7cfa563408a081d33448b5afa55b67
GET /images/2022/11/24/kj25998.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 176683
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-2b22b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade1b506-OSL
X-Firefox-Spdy: h2
45.120.81.50/xin/ip/6.gif
200 OK 406 kB URL HTTP/1.1 45.120.81.50/xin/ip/6.gif
IP
ASN #132839 POWER LINE DATACENTER
File type GIF image data, version 89a, 960 x 60\012- data
Size 406 kB (406419 bytes)
Hash 91949a67089d61d1c111d50f6e101660
fab540d8a71b28159836bf995e398a9569314e47
35ede3c11832a2e4f6562a484535420d010601981e3b07fdc271f160b0a81507
Analyzer Verdict Alert quad9 Sinkholed
GET /xin/ip/6.gif HTTP/1.1
Host: 45.120.81.50
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 05:06:05 GMT
Content-Type: image/gif
Content-Length: 406419
Last-Modified: Sun, 16 Oct 2022 07:33:29 GMT
Connection: keep-alive
ETag: "634bb3c9-63393"
Expires: Mon, 26 Dec 2022 05:06:05 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ddcdn.pic-726-baidu.com/images/2022/11/24/youma26010.jpg
200 OK 217 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/youma26010.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 217 kB (216938 bytes)
Hash 91abd8b422d0c32de46f3177fe4b9267
6c7f7fdb7f328de61e810cd4851645a729b7dbf6
5c1527cf4f57e8f045e92cf051e738a9b108cea838a541d970009f82ecaef508
GET /images/2022/11/24/youma26010.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 216938
last-modified: Wed, 23 Nov 2022 12:40:34 GMT
etag: "637e14c2-34f6a"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf1b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26569.jpg
200 OK 166 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26569.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 166 kB (165823 bytes)
Hash d6dc9d64bcfc3ac929fb5046c863a06a
d0bdf5d6f1f6460a1d1359c0d1234eda8cae1462
bde1ae7ad20f39e55d077c05cf26d3d3ab025d9bce58f0bce0e9e4e2c31c07b9
GET /images/2022/11/24/zwzm26569.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 165823
last-modified: Wed, 23 Nov 2022 12:40:28 GMT
etag: "637e14bc-287bf"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf8b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25988.jpg
200 OK 209 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25988.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size 209 kB (209425 bytes)
Hash de1cb22dca55252b2f5998ff1203d728
ec40d94ab74474b23b292797eee2fa98185af101
c7919eeb1b55c695af51c9f7d3be23635a162c0726ee759cfbd0d7ab91b5b4cf
GET /images/2022/11/24/jr25988.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 209425
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-33211"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfaddab506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26038.jpg
200 OK 198 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26038.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x500, components 3\012- data
Size 198 kB (197702 bytes)
Hash 6d376b308986c9a856ec5dc36fd317d2
9c587a51e5eb433f9d081e77896ca903e715c5d4
1cc6e85b9dd982051e99f15ef4a7805b518c7bf4c8a0f75d3f364d9163a08392
GET /images/2022/11/24/siwa26038.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 197702
last-modified: Wed, 23 Nov 2022 12:40:33 GMT
etag: "637e14c1-30446"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf0b506-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 22b2ec8759bd86d946f9d5254d85b609
68b522fc4bde4a8e65f4e482f60c0d1c779b988c
3ee05d10de65f06c3347e726caa27619635b0eca1d46e49fa008c5d8e60cf8d4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 14:10:59 GMT
Expires: Thu, 01 Dec 2022 14:10:58 GMT
Etag: "68b522fc4bde4a8e65f4e482f60c0d1c779b988c"
Cache-Control: max-age=464091,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770017c3b8a6b4f9-OSL
ddcdn.pic-726-baidu.com/images/2022/11/09/oumei1004.jpg
200 OK 183 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/09/oumei1004.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 600x600, segment length 16, baseline, precision 8, 975x548, components 3\012- data
Size 183 kB (183272 bytes)
Hash c466680a032c195bfce002ae992e509a
7d3f39ee1d6c6619bb49a1a911427f6fb82ef438
e72351071e408047de52047659f0df372182947a482cb3c455b3d678f92d3777
GET /images/2022/11/09/oumei1004.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 183272
last-modified: Tue, 08 Nov 2022 10:14:15 GMT
etag: "636a2bf7-2cbe8"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbe02b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/12/kj19976.jpg
200 OK 226 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/12/kj19976.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x535, components 3\012- data
Size 226 kB (226151 bytes)
Hash 33fc6452c56096878f2a04edfa427023
eb150e72ea4e6adc84e54072a6a54ff650d4e472
56a558cccbcf32916b8f2b2a7aa57a12e74bdf34aa9eeb3c60bfb3ac387a6905
GET /images/2022/11/12/kj19976.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 226151
last-modified: Fri, 11 Nov 2022 11:12:20 GMT
etag: "636e2e14-37367"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbe01b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/2021-07-04/16253695431.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2021-07-04/16253695431.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/2021-07-04/16253695431.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/youma26014.jpg
200 OK 208 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/youma26014.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x539, components 3\012- data
Size 208 kB (207881 bytes)
Hash d0984888301e71c36106812eb49dc8f1
88bf91163167b47aed093559c7476d36581d6aa4
3d60f0b0d9e437de3e64feeb7c1ce8c1a1e3db3f73c53288fc67ad30d67a52d3
GET /images/2022/11/24/youma26014.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 207881
last-modified: Wed, 23 Nov 2022 12:40:34 GMT
etag: "637e14c2-32c09"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf3b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/youma26022.jpg
200 OK 176 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/youma26022.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 176 kB (176001 bytes)
Hash 35ff662778a3d7989b81e08c1f995abb
de99516963d0201632447643c1d9dd18b7b7c53e
8d8abfd965089c15739297725b81b1cd283b4a00d6d9e3b13953acdde05f0c00
GET /images/2022/11/24/youma26022.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 176001
last-modified: Wed, 23 Nov 2022 12:40:28 GMT
etag: "637e14bc-2af81"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdf5b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26580.jpg
200 OK 199 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26580.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 199 kB (198839 bytes)
Hash ecf1b2061810f513df4b93fa53611a20
87902640774aece28548d3891b281a07deda79d2
a4de21631007149fd3fc92225a988cb0aa8527fdd0511363744733c9ce6d91f8
GET /images/2022/11/24/zwzm26580.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 198839
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-308b7"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdfdb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25989.jpg
200 OK 195 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25989.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 195 kB (195040 bytes)
Hash 09972ef9b4f9d41d99dc0b4dc67e74cc
8a89d368487acda77ccb8029f279796c59c266dc
5d221e98cc6b493270f15eb6f2bcb40d2b422ac1d03d4b48532330fbe561ccc1
GET /images/2022/11/24/jr25989.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 195040
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-2f9e0"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfaddbb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/kj25995.jpg
200 OK 196 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj25995.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 196 kB (196013 bytes)
Hash a9787291ed8714a4827a25cec682a5cc
4c835bec1f44414cdc1989d61f6eb58e8d13adf3
1e3fe6e8dca4f0c013a6f54524f21e01285a7d2786c2d2ef7a5485f3e234070b
GET /images/2022/11/24/kj25995.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 196013
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-2fdad"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfaddfb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/kj25994.jpg
200 OK 201 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj25994.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 201 kB (200731 bytes)
Hash 8a9b050861439614dd538056bbd4266f
5e1a9d31f94f1c59d86573e7e6627791bed33115
45de9401a39fb8c2151f0cb2c6846b0df75e7444585273e8e186420ee075649b
GET /images/2022/11/24/kj25994.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 200731
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-3101b"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfaddeb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26032.jpg
200 OK 174 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26032.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x536, components 3\012- data
Size 174 kB (173598 bytes)
Hash 18540d53011efbfb46f9c3193c7a5833
fdc53f7f74ce32c12a13287d02096e392ae14392
7493141d082ce441fd63fef7d553cd7aa1874d53821eea41c8749b019d27a0e4
GET /images/2022/11/24/siwa26032.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 173598
last-modified: Wed, 23 Nov 2022 12:40:33 GMT
etag: "637e14c1-2a61e"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadecb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/09/22/jr25657.jpg
200 OK 199 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/09/22/jr25657.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x536, components 3\012- data
Size 199 kB (199352 bytes)
Hash 7b09fee627ff5408c1952e7569a752e8
605ea6c4ed049969aa273106ea8b8c0a91734336
225cb22a48e136acaad45866652862f55916f9ddd637b900d7bac838a64b5030
GET /images/2022/09/22/jr25657.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 199352
last-modified: Wed, 21 Sep 2022 13:51:39 GMT
etag: "632b16eb-30ab8"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbe05b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/kj25999.jpg
200 OK 180 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj25999.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 180 kB (179715 bytes)
Hash a104a244e135e87f26657be4fc41cfc6
01c66003fb6e92a3ddfbb096c68bf6fc09c286b2
aa2f7c48c4cbd8e66699617250a3a6b681734990196fecf7156b86689d64d768
GET /images/2022/11/24/kj25999.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 179715
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-2be03"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade2b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/images/2022/07/01/jr23740.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/images/2022/07/01/jr23740.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /images/2022/07/01/jr23740.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/kj26004.jpg
200 OK 237 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/kj26004.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 237 kB (237074 bytes)
Hash b5c9a5ec63d5b5ad2987e2730d12aedd
cb3f5b141650d52d50383f5b676e9d4f2d996036
66e380d28c957c8a1e0be522ceba926be887f528f66996c0000f4837a750cea2
GET /images/2022/11/24/kj26004.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 237074
last-modified: Wed, 23 Nov 2022 12:40:32 GMT
etag: "637e14c0-39e12"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfade4b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25987.jpg
200 OK 236 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25987.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size 236 kB (236351 bytes)
Hash a3633a52ca44fe37193c929464fac1b3
3ffac5cf68c8572cf76f93b7dff032662fb1152d
d06b95fa46cacb16f9c4dc9b8ff95578e63c759e4116ffb3564b23bf1bb60aea
GET /images/2022/11/24/jr25987.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 236351
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-39b3f"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd9b506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/20211127-1/9fe0f8bb7ae907cb5b44a586e8a010a7.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20211127-1/9fe0f8bb7ae907cb5b44a586e8a010a7.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20211127-1/9fe0f8bb7ae907cb5b44a586e8a010a7.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/uptu/20220601/xR8VG3QP/1.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/uptu/20220601/xR8VG3QP/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /uptu/20220601/xR8VG3QP/1.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.comtucdncom.com/upload/vod/2021-07-08/16257113828.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2021-07-08/16257113828.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/2021-07-08/16257113828.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1031dcd5959571008400be96c44bb14
3ef227bc7dfcd797124e34c9a96db7ba1ea57e9d
c3e5581ef9b10564243d1167ae0ec9c52e1efae77878e294f332903ed8c7f1d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C3E5581EF9B10564243D1167AE0EC9C52E1EFAE77878E294F332903ED8C7F1D7"
Last-Modified: Wed, 23 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4283
Expires: Sat, 26 Nov 2022 06:17:29 GMT
Date: Sat, 26 Nov 2022 05:06:06 GMT
Connection: keep-alive
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25979.jpg
200 OK 253 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25979.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 253 kB (252782 bytes)
Hash c441eb5181e9965319d45cb6c3c896d4
e62299143c4f4e6dd909f900f226d578e9c34d52
30f2debe6a290b15db0dcf7ff3ef65856b3b9e7e89b61d8922f7cf3daf9b8135
GET /images/2022/11/24/jr25979.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 252782
last-modified: Wed, 23 Nov 2022 12:40:30 GMT
etag: "637e14be-3db6e"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadd6b506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26035.jpg
200 OK 208 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/siwa26035.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 208 kB (208260 bytes)
Hash 0610b047f0351c653ca6983638726daa
1c58d12d225fbb666f7dfe0e5ed70434f1fe4e9a
ef8bdb579bfbd7bf4a7ea073311a4ec215797d477438d4f1827ca3ba09b18cb2
GET /images/2022/11/24/siwa26035.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 208260
last-modified: Wed, 23 Nov 2022 12:40:33 GMT
etag: "637e14c1-32d84"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadeeb506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/20210826-1/4fb60d24445175d006c8293c233d0e20.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20210826-1/4fb60d24445175d006c8293c233d0e20.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20210826-1/4fb60d24445175d006c8293c233d0e20.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26570.jpg
200 OK 220 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/zwzm26570.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x536, components 3\012- data
Size 220 kB (220002 bytes)
Hash 121ecb693b6b8ebf8b93fe84339ce6a4
8f8bb9aa34db2ec07515e8395726631bf6a5003a
b025549706bdbfbf2044d1f98a5fa4d1b221817c4c4a6a7a67402626a5bbf4b5
GET /images/2022/11/24/zwzm26570.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 220002
last-modified: Wed, 23 Nov 2022 12:40:29 GMT
etag: "637e14bd-35b62"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfbdfbb506-OSL
X-Firefox-Spdy: h2
ddcdn.pic-726-baidu.com/images/2022/11/24/jr25993.jpg
200 OK 180 kB URL HTTP/2 ddcdn.pic-726-baidu.com/images/2022/11/24/jr25993.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 180 kB (179765 bytes)
Hash d628b8ec42f1a76c3590802c1e6841f0
57060de930a5df527b62ffacc4bd54bfcd3df24e
2256690fd01f5be69ea113d307ee28e99d0e38597707acc042ebd6fc73a932d9
GET /images/2022/11/24/jr25993.jpg HTTP/1.1
Host: ddcdn.pic-726-baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 05:06:06 GMT
content-type: image/jpeg
content-length: 179765
last-modified: Wed, 23 Nov 2022 12:40:31 GMT
etag: "637e14bf-2be35"
expires: Mon, 26 Dec 2022 05:06:05 GMT
cache-control: max-age=31536000
access-control-allow-credentials: : true
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770017bfadddb506-OSL
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/20210809-1/31da7e8bde5dc751a835cfa0b7199ec9.jpg
502 Bad Gateway 324 B URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/20210809-1/31da7e8bde5dc751a835cfa0b7199ec9.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash acc3cd97f0ff6d2b11e02065b075e98a
f4ffaec95dfda2db8ba453362cbbea31035332da
3569d6a04241e5ceb890720e84c3aa6625c86422339817ced9fffce203d21dfc
GET /upload/vod/20210809-1/31da7e8bde5dc751a835cfa0b7199ec9.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: Tengine
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 324
Connection: keep-alive
ETag: "6356b0d5-144"
at.alicdn.com/t/font_593233_jsu8tlct5shpk3xr.woff
200 OK 13 kB URL HTTP/1.1 at.alicdn.com/t/font_593233_jsu8tlct5shpk3xr.woff
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
File type Web Open Font Format, TrueType, length 13408, version 1.0\012- data
Hash 99af6debcdaba3e7ffe01b4c3cbccacb
4efda64b06cd7c294f6214623bcb634f3def3bd1
1106aebd6819da7203324abc443186658c8f54180a460ccc5b83553c5ce34f72
GET /t/font_593233_jsu8tlct5shpk3xr.woff HTTP/1.1
Host: at.alicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://beshifted.com
Connection: keep-alive
Referer: http://beshifted.com/
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/octet-stream
Content-Length: 13408
Connection: keep-alive
Date: Sat, 26 Nov 2022 05:06:06 GMT
x-oss-request-id: 63819EBEE84D24323249486B
Vary: Origin
Accept-Ranges: bytes
ETag: "99AF6DEBCDABA3E7FFE01B4C3CBCCACB"
Last-Modified: Sat, 25 Dec 2021 02:40:00 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8994398345687750861
x-oss-storage-class: Standard
Cache-Control: max-age=63072000
Content-MD5: ma9t682ro+f/4BtMPLzKyw==
x-oss-server-time: 1
Ali-Swift-Global-Savetime: 1669439166
Via: cache25.l2us1[869,868,200-0,M], cache8.l2us1[872,0], cache5.se1[970,969,200-0,M], cache5.se1[971,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 26 Nov 2022 05:06:06 GMT
X-Swift-CacheTime: 31104000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9916694391659458578e
339282bdb.com/b599501762e54a49a7c27f6a389c4339.gif
200 OK 709 kB URL HTTP/1.1 339282bdb.com/b599501762e54a49a7c27f6a389c4339.gif
IP
File type GIF image data, version 89a, 960 x 80\012- data
Size 709 kB (708914 bytes)
Hash 81b52b9a83a90be8ae7e060ca470f9fd
e021e8764dfcaba6cf69c374c29f13b09c2c3f5e
b0e6924d24812d25d86ae15677857eea32a9dcd5ff6e5a00a8033986508d5526
Analyzer Verdict Alert quad9 Sinkholed
GET /b599501762e54a49a7c27f6a389c4339.gif HTTP/1.1
Host: 339282bdb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63808416-ad132"
Date: Fri, 25 Nov 2022 13:41:44 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 25 Nov 2022 09:00:06 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-27
Content-Length: 708914
hm.baidu.com/hm.js?ccc85ad207d86d71848eab69cba33ca8
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?ccc85ad207d86d71848eab69cba33ca8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (623)
Hash fe928bf311aa08c7ff9cdddf0ea2abf3
3984ae7ca455e4e3a94461ae3152988751fe9d69
1659de2de5f8f3797e098c196a36661c41d288f02fcebcbd41c488c8be4605ae
GET /hm.js?ccc85ad207d86d71848eab69cba33ca8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11261
Content-Type: application/javascript
Date: Sat, 26 Nov 2022 05:06:06 GMT
Etag: a78a1a49107bc9a39159711988caf619
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=514D9C06C4BE18D7; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
828239sam.com/7a63156361544a3eae8970bca9bd3fd1.gif
200 OK 746 kB URL HTTP/1.1 828239sam.com/7a63156361544a3eae8970bca9bd3fd1.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 746 kB (746035 bytes)
Hash 51a47f49002ea9dfdfcc5e6eaf3fab70
3a07e996231f93ee7c0426bb99e310e79ab861f4
a298680bd0a8897d02ad92bd0370aedbde69a6f6e52cb60feafde6e0a04bffea
Analyzer Verdict Alert quad9 Sinkholed
GET /7a63156361544a3eae8970bca9bd3fd1.gif HTTP/1.1
Host: 828239sam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63808451-b6233"
Date: Fri, 25 Nov 2022 09:20:44 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 25 Nov 2022 09:01:05 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-37
Content-Length: 746035
8644aaw.com/98080.gif
200 OK 84 kB IP
ASN #24154 Asia Pacific Broadband Fixed Lines Co., Ltd.
File type GIF image data, version 89a, 980 x 80\012- data
Hash e79fa2ccd7a14adca5cb488465d79878
2f87f9b3d8d7b06da8ab23689b9a88782bc988fc
75f15e775639d3e4853caf646dca25d6bdf5d2abd8c2dd444cc8bf45c9c8d237
GET /98080.gif HTTP/1.1
Host: 8644aaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 05:06:03 GMT
content-type: image/gif
content-length: 83635
last-modified: Mon, 21 Nov 2022 08:22:39 GMT
etag: "637b354f-146b3"
expires: Mon, 26 Dec 2022 05:06:03 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=846047035&si=ccc85ad207d86d71848eab69cba33ca8&v=1.3.0&lv=1&sn=577&r=0&ww=1280&u=http%3A%2F%2Fbeshifted.com%2F&tt=%E4%BF%84%E7%BD%97%E6%96%AF%E7%BE%8E%E5%A5%B3%E4%B8%80%E7%BA%A7a%E5%A4%A7%E7%89%87%2C%E4%B8%80%E7%BA%A7a%E5%81%9A%E4%B8%80%E7%BA%A7a%E5%81%9A%E7%89%87%E6%80%A7%E8%A7%86%E9%A2%91%2C%E5%85%8D%E8%B4%B9%E7%9C%8B%E4%B8%80%E7%BA%A7%E7%89%B9%E9%BB%84%E7%89%B9%E7%9C%9F%E4%BA%BA%E7%89%87%2C%E9%BB%84%20%E8%89%B2%20%E7%89%87%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B%2C%E5%85%8D%E8%B4%B9%E7%9C%8B%E4%B8%80%E7%BA%A7%E7%89%B9%E9%BB%84%E7%89%B2%E4%BA%A4%E5%A4%A7%E7%89%87%2C%E6%AC%A7%E7%BE%8E%E9%87%8E%E5%A4%96%E5%A4%9Ap%E7%BE%A4%E4%BD%93%E4%BA%A4%E4%B9%B1%E7%94%B5%E5%BD%B1%2C%E6%AF%9B%E7%89%87%E4%B8%80%E7%BA%A7%E5%81%9Aa%E7%88%B0%E7%89%87%E6%80%A7%E8%89%B2%2C%E4%B8%80%E7%BA%A7%E4%B8%80%E7%89%87%E4%B8%80_%E7%BA%A7%E4%B8%80%E7%89%87%E4%B8%80
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=846047035&si=ccc85ad207d86d71848eab69cba33ca8&v=1.3.0&lv=1&sn=577&r=0&ww=1280&u=http%3A%2F%2Fbeshifted.com%2F&tt=%E4%BF%84%E7%BD%97%E6%96%AF%E7%BE%8E%E5%A5%B3%E4%B8%80%E7%BA%A7a%E5%A4%A7%E7%89%87%2C%E4%B8%80%E7%BA%A7a%E5%81%9A%E4%B8%80%E7%BA%A7a%E5%81%9A%E7%89%87%E6%80%A7%E8%A7%86%E9%A2%91%2C%E5%85%8D%E8%B4%B9%E7%9C%8B%E4%B8%80%E7%BA%A7%E7%89%B9%E9%BB%84%E7%89%B9%E7%9C%9F%E4%BA%BA%E7%89%87%2C%E9%BB%84%20%E8%89%B2%20%E7%89%87%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B%2C%E5%85%8D%E8%B4%B9%E7%9C%8B%E4%B8%80%E7%BA%A7%E7%89%B9%E9%BB%84%E7%89%B2%E4%BA%A4%E5%A4%A7%E7%89%87%2C%E6%AC%A7%E7%BE%8E%E9%87%8E%E5%A4%96%E5%A4%9Ap%E7%BE%A4%E4%BD%93%E4%BA%A4%E4%B9%B1%E7%94%B5%E5%BD%B1%2C%E6%AF%9B%E7%89%87%E4%B8%80%E7%BA%A7%E5%81%9Aa%E7%88%B0%E7%89%87%E6%80%A7%E8%89%B2%2C%E4%B8%80%E7%BA%A7%E4%B8%80%E7%89%87%E4%B8%80_%E7%BA%A7%E4%B8%80%E7%89%87%E4%B8%80
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=846047035&si=ccc85ad207d86d71848eab69cba33ca8&v=1.3.0&lv=1&sn=577&r=0&ww=1280&u=http%3A%2F%2Fbeshifted.com%2F&tt=%E4%BF%84%E7%BD%97%E6%96%AF%E7%BE%8E%E5%A5%B3%E4%B8%80%E7%BA%A7a%E5%A4%A7%E7%89%87%2C%E4%B8%80%E7%BA%A7a%E5%81%9A%E4%B8%80%E7%BA%A7a%E5%81%9A%E7%89%87%E6%80%A7%E8%A7%86%E9%A2%91%2C%E5%85%8D%E8%B4%B9%E7%9C%8B%E4%B8%80%E7%BA%A7%E7%89%B9%E9%BB%84%E7%89%B9%E7%9C%9F%E4%BA%BA%E7%89%87%2C%E9%BB%84%20%E8%89%B2%20%E7%89%87%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B%2C%E5%85%8D%E8%B4%B9%E7%9C%8B%E4%B8%80%E7%BA%A7%E7%89%B9%E9%BB%84%E7%89%B2%E4%BA%A4%E5%A4%A7%E7%89%87%2C%E6%AC%A7%E7%BE%8E%E9%87%8E%E5%A4%96%E5%A4%9Ap%E7%BE%A4%E4%BD%93%E4%BA%A4%E4%B9%B1%E7%94%B5%E5%BD%B1%2C%E6%AF%9B%E7%89%87%E4%B8%80%E7%BA%A7%E5%81%9Aa%E7%88%B0%E7%89%87%E6%80%A7%E8%89%B2%2C%E4%B8%80%E7%BA%A7%E4%B8%80%E7%89%87%E4%B8%80_%E7%BA%A7%E4%B8%80%E7%89%87%E4%B8%80 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sat, 26 Nov 2022 05:06:07 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=5CEBD2C18D73B871; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
beshifted.com/favicon.ico
404 Not Found 2.0 kB URL HTTP/1.1 beshifted.com/favicon.ico
IP
ASN #132839 POWER LINE DATACENTER
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 4c35d6ce7dcf9153d13b0b5197c3d3f4
944bc71d8f28b0c847ff5124f4026d736bd76d9f
ec79a37eb93effaa7b41d3f2b06a5500cd5a2e61452dbe2598fad0bc279310b3
GET /favicon.ico HTTP/1.1
Host: beshifted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://beshifted.com/
Cookie: Hm_lvt_ccc85ad207d86d71848eab69cba33ca8=1669439167; Hm_lpvt_ccc85ad207d86d71848eab69cba33ca8=1669439167
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 26 Nov 2022 05:06:08 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
689782696.com/424806c8ad2c46678c939108994511f6.gif
200 OK 672 kB URL HTTP/1.1 689782696.com/424806c8ad2c46678c939108994511f6.gif
IP
ASN #45102 Alibaba US Technology Co., Ltd.
File type GIF image data, version 89a, 750 x 150\012- data
Size 672 kB (671569 bytes)
Hash fd22828da4db1f841d65df6165738ed1
352c20949b7d3886cd9021a39d92b0172aea7fa4
76d4594d3e4720fbc4597411b2d2d9a1d83abd099d5b9081cb0c0454a199a25a
GET /424806c8ad2c46678c939108994511f6.gif HTTP/1.1
Host: 689782696.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 26 Nov 2022 05:06:06 GMT
Content-Type: image/gif
Content-Length: 671569
Connection: keep-alive
x-oss-request-id: 63819EBE9DB5783036D0307D
Accept-Ranges: bytes
ETag: "FD22828DA4DB1F841D65DF6165738ED1"
Last-Modified: Sun, 06 Nov 2022 12:23:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2178577375571223780
x-oss-storage-class: Standard
Content-MD5: /SKCjaTbH4QdZd9hZXOO0Q==
x-oss-server-time: 2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 6488a687bc16a12befd279f68050a575
e84593353c738b02c79c60862309d9efd06eff3d
39b972d44c5f4c1b25c3c0e71242de3c13df652d0a5ab6a439dfa5417747fd8e
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 30 Nov 2022 03:35:20 GMT
ETag: "e84593353c738b02c79c60862309d9efd06eff3d"
Last-Modified: Sat, 26 Nov 2022 03:35:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 26 Nov 2022 05:06:09 GMT
Age: 5447
X-Served-By: cache-qpg1245-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 10, 1
X-Timer: S1669439169.009738,VS0,VE1
kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
200 OK 1.2 MB URL HTTP/2 kjimg10.360buyimg.com/ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif
IP
ASN #38283 CHINANET SiChuan Telecom Internet Data Center
File type GIF image data, version 89a, 960 x 80\012- data
Size 1.2 MB (1197751 bytes)
Hash 6938343bc2a842c4d2c9c96f4dde0298
00e2b1b902b196b3c005facb934c10e2a2ca1961
5ccc1726994dfc6d2667e13bf946785f79bb01401fedb59db1cbdf6942dbaee6
GET /ott/jfs/t1/189066/1/30475/1197751/6380d2d3E76f8142d/68bdb767b760041f.gif HTTP/1.1
Host: kjimg10.360buyimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 05:06:09 GMT
content-type: image/gif
content-length: 1197751
cache-control: max-age=315360000
expires: Mon, 22 Nov 2032 14:50:06 GMT
last-modified: Fri, 25 Nov 2022 14:36:03 GMT
age: 51363
via: http/1.1 ORI-CLOUD-HUN-MIX-117 (jcs [cRs f ]), http/1.1 SCchengdu-CT-11-MIX-21 (jcs [cRs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 200-1669387806409-0-0-0-35-35;200;200-1669388430478-0-0-0-1-1;200-1669439169172-0-0-0-1-1
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95101ded0fe92a85649a086992948008
afed98649590f2524a9e530c53eebbc1ba36da6a
7f754cb2105494045efe657c47313e77bb26361ca45a6f8cbce1fdb52a15ba01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9787
x-amzn-requestid: 51d9848a-868c-4e51-b1a8-30596d0108b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUfxHjToAMFeGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813464-749244df2aa06b23445d675c;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wkBPzz1thuM-Nm7rBY68psfSROU1fbCCO-TbpBBrYLQmH1ZxQEV1vg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:47:48 GMT
age: 26304
etag: "afed98649590f2524a9e530c53eebbc1ba36da6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img.1203555.com/images/63778a61d383e8d4961b98e2.gif
302 Found 0 B URL HTTP/2 img.1203555.com/images/63778a61d383e8d4961b98e2.gif
IP
ASN #134835 Starry Network Limited
GET /images/63778a61d383e8d4961b98e2.gif HTTP/1.1
Host: img.1203555.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://beshifted.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
referrer-policy: no-referrer
location: https://p3.douyinpic.com/obj/tos-cn-i-dy/0ae06829644f44fc8b80e40b98706d87
cache-control: max-age=3600
X-Firefox-Spdy: h2
160.124.253.215
34.160.144.191
182.61.240.101
47.246.44.251
47.75.19.145
103.170.15.107
23.36.76.226
104.21.233.253
45.89.208.114
93.184.220.29