r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13392
Expires: Thu, 19 Jan 2023 05:29:58 GMT
Date: Thu, 19 Jan 2023 01:46:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b36ef73c20dffb6bc10194bbd2d0dcfa
a67a4023dc8b4944debaeb92f3ba0f1402c079a6
05a7a4d832cf9e593ca44efea309edcbd80734583bada15fda3e740612eff991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05A7A4D832CF9E593CA44EFEA309EDCBD80734583BADA15FDA3E740612EFF991"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5049
Expires: Thu, 19 Jan 2023 03:10:55 GMT
Date: Thu, 19 Jan 2023 01:46:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 00:49:23 GMT
content-type: application/json
age: 3443
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
kidahora.net/focus/52.html
301 Moved Permanently 0 B URL HTTP/1.1 kidahora.net/focus/52.html
IP
ASN #398823 PEGTECHINC-AP-02
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /focus/52.html HTTP/1.1
Host: kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 19 Jan 2023 01:46:47 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.kidahora.net/focus/52.html
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12239
Expires: Thu, 19 Jan 2023 05:10:45 GMT
Date: Thu, 19 Jan 2023 01:46:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8SGEGG2CHiewU59y+/g3t7qxtYApdD+b4ESIj/rjOovSjcBnp24MWTC99/N77cEVQTqD4BMP67M=
x-amz-request-id: HK1SRCWM0Y6XNYPP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 01:45:41 GMT
age: 65
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:46 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.kidahora.net/focus/52.html
200 OK 706 B URL HTTP/1.1 www.kidahora.net/focus/52.html
IP
ASN #398823 PEGTECHINC-AP-02
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with very long lines (828), with CRLF line terminators
Hash 3d91d1e83ed9d13225ab1365beea3802
c0f97ffc2631b12726c71de6b7b3e7d6233edda3
94788fc4eccded6cdc68ce8369822f425e12e15ab2c0d0260d2b3e758c30aea2
GET /focus/52.html HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 01:46:47 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 79af32d8e279b4cfec147ab51cb6fcb3
d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6
bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 729
Cache-Control: max-age=113530
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 01:46:47 GMT
Etag: "63c7b6a8-1d7"
Expires: Fri, 20 Jan 2023 09:18:57 GMT
Last-Modified: Wed, 18 Jan 2023 09:06:48 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 19 Jan 2023 00:48:57 GMT
age: 3470
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.kidahora.net/common.js
200 OK 1.1 kB URL HTTP/1.1 www.kidahora.net/common.js
IP
ASN #398823 PEGTECHINC-AP-02
File type HTML document, ASCII text, with very long lines (389), with CRLF line terminators
Hash e76fa239f5b91e17b93cd981eefbe2e5
bc493da2145c33b1bfd03dad664e1a3d54a800dc
cfefe4e361499d352ca75b1be29f9dda7e59f058c01e88af7424e6d6383c13c1
GET /common.js HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/focus/52.html
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 01:46:47 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.kidahora.net/tj.js
200 OK 801 B IP
ASN #398823 PEGTECHINC-AP-02
File type ASCII text, with CRLF line terminators
Hash 49845246b5474410f84cc371860277be
e95c59cb06986e7604b3fd00940de0025a214213
16b39ec620fe9d8e17807a6248d8e14a2eb0b8eaa705ae03ec8ed023db214f65
GET /tj.js HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/focus/52.html
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 01:46:48 GMT
Content-Type: application/x-javascript
Content-Length: 801
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pjPGAj+EpaYZK38rRWnd7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VUhoXwwGs4HEzDcFXzFxydOd7Fg=
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 21a00317ffd0d0632989b2f91241de36
cc67cf1c99feadb5eefc2b5a094f952042decd54
8249ae54a81c1a0e643e59f98df63f0da951587cfc2cafb8fa505d1c17d485f0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "8249AE54A81C1A0E643E59F98DF63F0DA951587CFC2CAFB8FA505D1C17D485F0"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2809
Expires: Thu, 19 Jan 2023 02:33:36 GMT
Date: Thu, 19 Jan 2023 01:46:47 GMT
Connection: keep-alive
api.share.baidu.com/s.gif?l=http://www.kidahora.net/focus/52.html
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.kidahora.net/focus/52.html
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.kidahora.net/focus/52.html HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Thu, 19 Jan 2023 01:46:47 GMT
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 026f2389e4a1734cfc669f02d0b32f4b
e45845ba5db21bf8c4417cf501ed356d6ed95ee1
91fd503b2eac3d12f8b8ed9776a8b26d87167ffb47c21a13d66e9cfb512c0d99
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 22 Jan 2023 23:15:52 GMT
ETag: "e45845ba5db21bf8c4417cf501ed356d6ed95ee1"
Last-Modified: Wed, 18 Jan 2023 23:15:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3051
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78bbe612cc4ab52d-OSL
www.kidahora.net/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.kidahora.net/favicon.ico
IP
ASN #398823 PEGTECHINC-AP-02
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.kidahora.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.kidahora.net/focus/52.html
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 01:46:48 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Tue, 24 Jan 2023 01:46:48 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 21a00317ffd0d0632989b2f91241de36
cc67cf1c99feadb5eefc2b5a094f952042decd54
8249ae54a81c1a0e643e59f98df63f0da951587cfc2cafb8fa505d1c17d485f0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "8249AE54A81C1A0E643E59F98DF63F0DA951587CFC2CAFB8FA505D1C17D485F0"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2808
Expires: Thu, 19 Jan 2023 02:33:36 GMT
Date: Thu, 19 Jan 2023 01:46:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 873e3b5f52a98b2afcae02a69ee945eb
eb5210b04c3fb50af051db73bb035e77ebcec01f
ed5c1f1cf32f38b07886cebd107eb77fa4a95a14c4f36b4f6546f3c8f40b423d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED5C1F1CF32F38B07886CEBD107EB77FA4A95A14C4F36B4F6546F3C8F40B423D"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21533
Expires: Thu, 19 Jan 2023 07:45:41 GMT
Date: Thu, 19 Jan 2023 01:46:48 GMT
Connection: keep-alive
www.ppmvapi111.com/news/index.html
200 OK 238 B URL HTTP/2 www.ppmvapi111.com/news/index.html
IP
File type HTML document, Unicode text, UTF-8 text
Hash 7fc398d054c92ecc96ea732cd566d257
3735682603d9454ac67c15b5883cc9456f5fa0dd
791bfb7ac67f5a30e7ffc135d41e8799218ef8481295e27c3fa8d7d149b281d0
GET /news/index.html HTTP/1.1
Host: www.ppmvapi111.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:37 GMT
content-type: text/html
content-length: 238
last-modified: Wed, 18 Jan 2023 09:27:12 GMT
etag: "63c7bb70-ee"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5528
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5528
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5528
Expires: Thu, 19 Jan 2023 03:18:57 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee23b50996d59e5b3d4d99af0d0bc05f
76fbdbd85092cb841ca269206de46cc1b6e0f215
20e83f1e7f48eaee8f946958d4bd94d0c876dd2fdab85f3c4dfe088d7726e0eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6902
x-amzn-requestid: eac4818f-27cf-4e74-967f-ba9b761e236f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0uNuF0QIAMFUEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f724-3a8ae0ba482b10f04c90c3b5;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:05:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8uwQeDL64wUC-aQ8iITazLJGnwtiIxRyaXN1QXP5kmfT3f1w9RQ-2Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:36:04 GMT
age: 65445
etag: "76fbdbd85092cb841ca269206de46cc1b6e0f215"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1b47910c4f71976f73a884bcae6f9bc
26c0d42fddb2a02d9878c34a76874710c92a9d30
9c5ce4945939b126cd36202f5afb8009ce790a792270ec31cc22099e4cd12a24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3861
x-amzn-requestid: c8fbb2e1-9ec6-42c0-8030-9be785e8913e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9TegFNEoAMFwqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c865f6-04a9e7db684e88ed69e1bd43;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:34:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wTiBoiSa1euVzUKPwlAWWZD-fYwMQGxgvRRzr1ALkrFY5VV3zeL9Jg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:52:42 GMT
age: 14047
etag: "26c0d42fddb2a02d9878c34a76874710c92a9d30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2IG3g-p5UqubmvO-XNfNZVWz6OV4-gkk1rz4FljmJf-nVMIBI4BgEg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:53:03 GMT
age: 14026
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa848e8c9-5ea8-4948-a3e7-109001ff6cba.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa848e8c9-5ea8-4948-a3e7-109001ff6cba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13457311f170ebcd637e77aa48873488
a51ef5eb01736824f382541c5a4ad025ae35c09e
f57f95cc9f18b2e41951f1fcd9c278ca0f522e98dbf57aeb4c59b4b59deeb605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa848e8c9-5ea8-4948-a3e7-109001ff6cba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6235
x-amzn-requestid: 919a5e9d-11c0-4b12-a718-f5a256f4fda2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3RXBG8xoAMFW1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5fc2c-2398fc8910eb707e4c15b416;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 01:38:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WwmWT7zXborrCF7_Ul5LFV1EboOT5KBXf9TSATbFi01dpip5BGSQNQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:50:00 GMT
age: 14209
etag: "a51ef5eb01736824f382541c5a4ad025ae35c09e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b8f931fb5afe958e67fce9e1822dac4
5732887999b819f6facc6f4608a407b5a09adf75
3c6c787e700f8139ec0eeaad93923f647f9efa5ce60120fc0aab52fa9588efaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5005
x-amzn-requestid: 647dd62e-6b47-4298-9457-c7f37e653e0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e5qLKEX6IAMFX0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c6f0ad-3dc1396c1b3662fa4ec5f1fa;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 19:02:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ge_XozSe44BAhC-fFiu-u8Oa4jd8Uctn4O3fmdLCavhYpcSVrhNMww==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 17:42:33 GMT
age: 29056
etag: "5732887999b819f6facc6f4608a407b5a09adf75"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b015242ebdda9cc22cfe6741d2e926f1
76072223007cd11c6f7b9fda8f01818ab0fea740
b7a72c737cac91c83c39718de999bc6ff0ec4ede63342e86407190d95e60d9a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe34f344d-12b3-4719-9ecf-6191897f233e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6908
x-amzn-requestid: 5f0a0b3b-1d4c-450e-bcd5-481bda79f4e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1qQHwYIAMF-IQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1030e-62d053e35c8ab2374fd2fe35;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:06:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WdNoHBL4A3J_FHp8V9HLUMNKmEPIw-lstt0OdqYJtcUGfMRZJXPdwQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 11:34:07 GMT
age: 51162
etag: "76072223007cd11c6f7b9fda8f01818ab0fea740"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?1d17743632808b728a4c05b9d579a62a
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?1d17743632808b728a4c05b9d579a62a
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (620)
Hash c90c9664016253d87e7d833b638aec02
373cbe02cd1b5a01c35af175addc8288a66968dd
7dd2214cbe3b14ebf6f623c0c8d5614ad9d0aded589afda2f3d4e966f5f4cf20
GET /hm.js?1d17743632808b728a4c05b9d579a62a HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Thu, 19 Jan 2023 01:46:48 GMT
Etag: f0e0df413bf87747ee397c128874b1c6
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1B0D329C0AB30BDE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash b290e091cc75e16a0d09bbac0e5e34d8
e98eb261c54e91f478877d953ddfaf9645722a56
6c55359777391bc602abbc92bc48ff564018f7dfd64d3aeaa0cbb3f13810844b
GET /hm.js?52bdc5bfbf75ae45f0f06f1c2b94552b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Thu, 19 Jan 2023 01:46:48 GMT
Etag: c9a7b12a861955c2a26a37f44d7139c4
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F60C7F68DD258588; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e880d5d844b63853f66d14cfefdc1cf
b175ce2f0dfa52ea672b4f6209789fdda832db2f
6ea2140c376ee99694761ea579f9e634a93ef946b4fec6f15f5307f3a65ccad5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6EA2140C376EE99694761EA579F9E634A93EF946B4FEC6F15F5307F3A65CCAD5"
Last-Modified: Wed, 18 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4455
Expires: Thu, 19 Jan 2023 03:01:04 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=974451936&si=1d17743632808b728a4c05b9d579a62a&v=1.3.0&lv=1&sn=1234&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Ffocus%2F52.html&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=974451936&si=1d17743632808b728a4c05b9d579a62a&v=1.3.0&lv=1&sn=1234&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Ffocus%2F52.html&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=974451936&si=1d17743632808b728a4c05b9d579a62a&v=1.3.0&lv=1&sn=1234&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Ffocus%2F52.html&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 19 Jan 2023 01:46:49 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=01491EC6ADD1BC80; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=138129961&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=1234&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Ffocus%2F52.html&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=138129961&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=1234&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Ffocus%2F52.html&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=138129961&si=52bdc5bfbf75ae45f0f06f1c2b94552b&v=1.3.0&lv=1&sn=1234&r=0&ww=1280&u=http%3A%2F%2Fwww.kidahora.net%2Ffocus%2F52.html&tt=%E5%AE%9C%E9%83%BD%E7%9C%8B%E4%BE%97%E6%B1%BD%E8%BD%A6%E7%94%A8%E5%93%81%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 19 Jan 2023 01:46:49 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=AA998CEEC0D3AF67; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7e2dd8ba2eeff12419dae4a574bb30ab
789845d6aa0b3ef14ad21674f6e4d7d9fe632686
76d6789023269b818ab69c36d950476c4d48e7deead9b9443d1585ed8c728438
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76D6789023269B818AB69C36D950476C4D48E7DEEAD9B9443D1585ED8C728438"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6781
Expires: Thu, 19 Jan 2023 03:39:50 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7e2dd8ba2eeff12419dae4a574bb30ab
789845d6aa0b3ef14ad21674f6e4d7d9fe632686
76d6789023269b818ab69c36d950476c4d48e7deead9b9443d1585ed8c728438
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76D6789023269B818AB69C36D950476C4D48E7DEEAD9B9443D1585ED8C728438"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6781
Expires: Thu, 19 Jan 2023 03:39:50 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
cdn.bootscdn.net/ajax/libs/jquery/3.6.1/jquery.js
200 OK 9.6 kB URL HTTP/2 cdn.bootscdn.net/ajax/libs/jquery/3.6.1/jquery.js
IP
File type ASCII text, with no line terminators
Hash 5fab808c58326834f653c52ef08bb895
5c837614a1173e35f85b06030bfd4fc8c9ccc7d7
2e70136a37097c1597b00d97e334d418e3601866c8c8ad169e753eb05466b949
GET /ajax/libs/jquery/3.6.1/jquery.js HTTP/1.1
Host: cdn.bootscdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.kidahora.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
last-modified: Thursday, 19-Jan-2023 01:46:48 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1gwJ3ZytKLE%2FOwjoGG%2BtB6wfm59YGS85%2BqK56PwN7jHSRxq2v3Q411YItxC%2BowKvUowbrcVLkJ2YQBA%2BYsQRzuilELf5I30mL0jj6bHLFlUSGriUGKHUn2tk0ZfxgGoEYaLl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78bbe610e9ef730e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/1sma3lyyzeg.jpg
200 OK 17 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/1sma3lyyzeg.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 90x67, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 64503b9b0887b8236fe50ac9f21cbf5f
700800020a1325c7176f85ed869cf1814e233544
d9594411616e1f5be51439ca93a4d660ce07ef4893c7c61f669e131049d9a1f8
GET /upload/vod/2023/01/1sma3lyyzeg.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/jpeg
content-length: 16606
cf-bgj: imgq:85,h2pri
cf-polished: origSize=17565, status=webp_bigger
etag: "63c51815-449d"
last-modified: Mon, 16 Jan 2023 09:25:41 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e3a56b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/kztxvoulqk1.jpg
200 OK 8.0 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/kztxvoulqk1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0388283513cc77c84025542f0546ccd5
388427ffc36e10870157150c2d6ab4e04086073c
e9995121e8d5facba9fde22bcf27433a52222daaa3b17bae47ac84d7886f7f2f
GET /upload/vod/2023/01/kztxvoulqk1.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 8038
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9396
content-disposition: inline; filename="kztxvoulqk1.webp"
etag: "63c5180b-24b4"
last-modified: Mon, 16 Jan 2023 09:25:31 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a54b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/qicsafu2rcd.jpg
200 OK 6.4 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/qicsafu2rcd.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 29dee97769088bd9b70441c9b05416c2
19f35016919b9fd1617c278f3bfd5a14a353b2d1
585199c365d4c8e56c26368d65b7deed4bafb459cf36187921e551a03c150d17
GET /upload/vod/2023/01/qicsafu2rcd.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 6400
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7712
content-disposition: inline; filename="qicsafu2rcd.webp"
etag: "63c51807-1e20"
last-modified: Mon, 16 Jan 2023 09:25:27 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a53b51b-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7e2dd8ba2eeff12419dae4a574bb30ab
789845d6aa0b3ef14ad21674f6e4d7d9fe632686
76d6789023269b818ab69c36d950476c4d48e7deead9b9443d1585ed8c728438
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76D6789023269B818AB69C36D950476C4D48E7DEEAD9B9443D1585ED8C728438"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6781
Expires: Thu, 19 Jan 2023 03:39:50 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
fengmian.fhfhtutu.com/upload/vod/2023/01/ramqjflj55o.jpg
200 OK 6.7 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/ramqjflj55o.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5bde5db02432d031c2e3bc7e842f1e96
cfa4b8d5f98b6e0d3f3836a55c36112c2f95ce73
ada7faa00f857e67a9fe3db118671ff455b1b7a67237407bf8263aa532686534
GET /upload/vod/2023/01/ramqjflj55o.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 6694
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8208
content-disposition: inline; filename="ramqjflj55o.webp"
etag: "63c51831-2010"
last-modified: Mon, 16 Jan 2023 09:26:09 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a57b51b-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7e2dd8ba2eeff12419dae4a574bb30ab
789845d6aa0b3ef14ad21674f6e4d7d9fe632686
76d6789023269b818ab69c36d950476c4d48e7deead9b9443d1585ed8c728438
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76D6789023269B818AB69C36D950476C4D48E7DEEAD9B9443D1585ED8C728438"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6781
Expires: Thu, 19 Jan 2023 03:39:50 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
fengmian.fhfhtutu.com/upload/vod/2023/01/gqn5wn0sgm1.jpg
200 OK 5.6 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/gqn5wn0sgm1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8081c3554defe0cc918b0ff3c9358aee
6ee154cf65ccbad1b97be3996102f6a9424fff9a
16e380bbbfb6ef61886b0c6f74d5fa1d5da476919d0298c0e5f83bb24613dddc
GET /upload/vod/2023/01/gqn5wn0sgm1.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 5566
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7736
content-disposition: inline; filename="gqn5wn0sgm1.webp"
etag: "63c51839-1e38"
last-modified: Mon, 16 Jan 2023 09:26:17 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a59b51b-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7e2dd8ba2eeff12419dae4a574bb30ab
789845d6aa0b3ef14ad21674f6e4d7d9fe632686
76d6789023269b818ab69c36d950476c4d48e7deead9b9443d1585ed8c728438
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76D6789023269B818AB69C36D950476C4D48E7DEEAD9B9443D1585ED8C728438"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6781
Expires: Thu, 19 Jan 2023 03:39:50 GMT
Date: Thu, 19 Jan 2023 01:46:49 GMT
Connection: keep-alive
fengmian.fhfhtutu.com/upload/vod/2023/01/uybkqymexma.jpg
200 OK 11 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/uybkqymexma.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash 64660d02219a8c6f979f2f044b1f609d
69bedbe052f8d1b8e0484f3c4f1106924b9b7b0f
06011551ae4780eb79355680250e758f0aad08c68557728bd6a3e18ee5e1f507
GET /upload/vod/2023/01/uybkqymexma.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/jpeg
content-length: 10705
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11283, status=webp_bigger
etag: "63c5183e-2c13"
last-modified: Mon, 16 Jan 2023 09:26:22 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2225
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e3a5ab51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/ccoqht5o4mz.jpg
200 OK 4.3 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/ccoqht5o4mz.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dc1a53dbe96a2dd9f564285988d3f099
a209b3cc4afde515021b4ae8826084f9f0a23d6a
58152e0356c99eb3553f2d9fce5eb27ada94f6f0973a0156f5c1c5fd97869b1b
GET /upload/vod/2023/01/ccoqht5o4mz.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 4322
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=5992
content-disposition: inline; filename="ccoqht5o4mz.webp"
etag: "63c51836-1768"
last-modified: Mon, 16 Jan 2023 09:26:14 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a58b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/mi1com5hmeu.jpg
200 OK 7.2 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/mi1com5hmeu.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b4d9fd80a826c8118c92ff58247c9f42
9e688c5f57f7b975b00336f3e100b7bed1972d37
39c4d9ed7f04b4110dfc8015579c0fac2ccce8c7b5f3e877e7c2dd0e6af71933
GET /upload/vod/2023/01/mi1com5hmeu.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 7212
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8500
content-disposition: inline; filename="mi1com5hmeu.webp"
etag: "63c51b7e-2134"
last-modified: Mon, 16 Jan 2023 09:40:14 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a5db51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/x1vhosmdjoh.jpg
200 OK 9.1 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/x1vhosmdjoh.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5d7d2319e287da0a46fcb10754d7622d
ec8e1cf45c1590dde48baf1ad2126bf25d00cc52
78c346600b48bbcd359a189f5abc9e7db0a8b9774fa18f58f32ea7250127b023
GET /upload/vod/2023/01/x1vhosmdjoh.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 9124
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9861
content-disposition: inline; filename="x1vhosmdjoh.webp"
etag: "63c51b83-2685"
last-modified: Mon, 16 Jan 2023 09:40:19 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e3a5eb51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/jmxjqcstxnw.jpg
200 OK 12 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/jmxjqcstxnw.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash de64aa25ba392522e821f54bd4106ff3
4b797846f4694f3de061980e86e603318ddb10a8
cda180b939d916883813ef07eeb2445cbb32172151b1da40abfab4b3606bed74
GET /upload/vod/2023/01/jmxjqcstxnw.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/jpeg
content-length: 11646
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=12392, status=webp_bigger
etag: "63c51842-3068"
last-modified: Mon, 16 Jan 2023 09:26:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e3a5bb51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/x50vwysuj2h.jpg
200 OK 8.8 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/x50vwysuj2h.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash ffea01544cdc5a681e03d464905a61c7
d9f751dfb5aee0850dc2be6e9d4873c1b7dbc64e
cd7b271a02af51b09dc356f8e6ef8590154947c92428869c3e5d7dad00078f6b
GET /upload/vod/2023/01/x50vwysuj2h.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/jpeg
content-length: 8804
cf-bgj: imgq:85,h2pri
cf-polished: origSize=9247, status=webp_bigger
etag: "63c51b88-241f"
last-modified: Mon, 16 Jan 2023 09:40:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e3a5fb51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/fma5ih5z5is.jpg
200 OK 7.3 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/fma5ih5z5is.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bcdb51fae2615a1422deb59a2cd7af32
c6fb98763253042414d58b939e5c4b15baf970d2
2dc046bbf7629c82bffc0185a4af7ec7053991285f358f8fcf6bc7b7b9bd32e3
GET /upload/vod/2023/01/fma5ih5z5is.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 7318
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=8434
content-disposition: inline; filename="fma5ih5z5is.webp"
etag: "63c51b91-20f2"
last-modified: Mon, 16 Jan 2023 09:40:33 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e4a65b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/odbgkosqv0j.jpg
200 OK 6.7 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/odbgkosqv0j.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 534ca03846fa8f1fd38f72c63e2328ba
722a5aecdac2d4aa342443aee9c5cb1cbff3cbee
a7a07367a185c516ca8001b8549acbaa075295b90a5e1eb05545065bb0f3d645
GET /upload/vod/2023/01/odbgkosqv0j.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 6660
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7749
content-disposition: inline; filename="odbgkosqv0j.webp"
etag: "63c51b8d-1e45"
last-modified: Mon, 16 Jan 2023 09:40:29 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e4a64b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/hft3ejg2uaq.jpg
200 OK 5.4 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/hft3ejg2uaq.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 57baf9c79e26ad0ac14059ee6ae0fe5a
cd08877ed40927c23ae24fe46874f855e30bed6d
81a5809c5f759d34136e74ca870208a0f42c8db8e217715fc3a1cadadc1c60bb
GET /upload/vod/2023/01/hft3ejg2uaq.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 5354
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=7491
content-disposition: inline; filename="hft3ejg2uaq.webp"
etag: "63c51b95-1d43"
last-modified: Mon, 16 Jan 2023 09:40:37 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e4a67b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/dvzq5uli0vx.jpg
200 OK 8.6 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/dvzq5uli0vx.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 68a9993e27a85b6141bc2daa7e1dd893
d91800d42237f6f525c4202d6a25653a8551e7b7
e3925ccb580346e89a42168f085cc024132a66d5016ea51549fe784034bf5e0c
GET /upload/vod/2023/01/dvzq5uli0vx.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 8612
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10105
content-disposition: inline; filename="dvzq5uli0vx.webp"
etag: "63c51b98-2779"
last-modified: Mon, 16 Jan 2023 09:40:40 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e4a6bb51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/rbfppln13ny.jpg
200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/rbfppln13ny.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash 549c65524b30046e10de3f189fcc99c0
1f51b6d081b9b4ee628041307299078d5a9b7089
9815f41408c9ff8ae8d389e284f7a9335405b264a67ec5ef463faa53938f47d8
GET /upload/vod/2023/01/rbfppln13ny.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/jpeg
content-length: 10052
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10544, status=webp_bigger
etag: "63c51845-2930"
last-modified: Mon, 16 Jan 2023 09:26:29 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e5a70b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/i33wefslqxv.jpg
200 OK 8.5 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/i33wefslqxv.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 663d98577be154d8f8526b0365e23786
24438b1e0064bafe42315da4c2a89e382df666fb
60c5217dd6da39723694a50fe650c86526d4a225dc3dab720b5ec453f2fe5cc0
GET /upload/vod/2023/01/i33wefslqxv.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:49 GMT
content-type: image/webp
content-length: 8488
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=9401
content-disposition: inline; filename="i33wefslqxv.webp"
etag: "63c5184a-24b9"
last-modified: Mon, 16 Jan 2023 09:26:34 GMT
vary: Accept
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3362
accept-ranges: bytes
server: cloudflare
cf-ray: 78bbe61e5a72b51b-OSL
X-Firefox-Spdy: h2
www.ppmv025.xyz/static/images/1.gif
200 OK 254 B URL HTTP/2 www.ppmv025.xyz/static/images/1.gif
IP
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /static/images/1.gif HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: image/gif
content-length: 254
last-modified: Tue, 15 Nov 2022 08:35:43 GMT
etag: "63734f5f-fe"
expires: Sat, 18 Feb 2023 01:46:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/ofvzrqc32zf.jpg
200 OK 8.1 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/ofvzrqc32zf.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash e4c9fbcf0efa79b41c16b982b8afe634
632fc6fa887795df3116d4a1fde680808bf24c8a
614849dc48b783893b948be4ee9a2ed3ae8ebbe43869eb3efd8bbbdd544e8a86
GET /upload/vod/2023/01/ofvzrqc32zf.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 8059
cf-bgj: imgq:85,h2pri
cf-polished: origSize=8539, status=webp_bigger
etag: "63c517fb-215b"
last-modified: Mon, 16 Jan 2023 09:25:15 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e6a79b51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/nrbwvsgz43f.jpg
200 OK 11 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/nrbwvsgz43f.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 304x405, segment length 16, progressive, precision 8, 240x320, components 3\012- data
Hash 404289de382f38eaf0305141e7313076
61e1168eb7232d46cfb843a62cd9b3ae29539215
b96b00643e6e7206e56a683823f62a57005802e34ea64db80219bf1afc8ac300
GET /upload/vod/2023/01/nrbwvsgz43f.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 10665
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11202, status=webp_bigger
etag: "63c51802-2bc2"
last-modified: Mon, 16 Jan 2023 09:25:22 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e6a7bb51b-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/omzh03werfh.jpg
200 OK 12 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/omzh03werfh.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, progressive, precision 8, 320x240, components 3\012- data
Hash eaa091add87dc86028aeef84c950f7d1
885de4986d7da7dbf7a7a0e4ac32fa59ad0aa741
eaedabc742cdc103dd87d7e822cf3d8766ee59aa2f4f3f1d9ef94b995815ee31
GET /upload/vod/2023/01/omzh03werfh.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 11636
cf-bgj: imgq:85,h2pri
cf-polished: origSize=12214, status=webp_bigger
etag: "63c517f8-2fb6"
last-modified: Mon, 16 Jan 2023 09:25:12 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e5a76b51b-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/qrg1tidsk4r.jpg
200 OK 6.9 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/qrg1tidsk4r.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 52ea98ddb5d50233032db3a795545339
82800115f16c90eb31b5f2155f92d746592c5a41
fc0dd3885f47132e1be4ebcde492bc4860309418d372725452599599f5de2736
GET /upload/vod/2023/01/qrg1tidsk4r.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 6949
last-modified: Thu, 12 Jan 2023 08:09:02 GMT
etag: "63bfc01e-1b25"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e2df9b4ed-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/rpgnkgvviis.jpg
200 OK 7.8 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/rpgnkgvviis.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash b6dcc9093a32ed30f9d2524912afc3b8
97ea3160381bb25615b343da79f5e24fa44de446
9538ea449c0f0c9631d1ab77ded2be31d49f9cdb86762230fd28b3b114191301
GET /upload/vod/2023/01/rpgnkgvviis.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 7824
last-modified: Thu, 12 Jan 2023 08:09:19 GMT
etag: "63bfc02f-1e90"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e2dfab4ed-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/0yrdxx5o1sc.jpg
200 OK 10 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/0yrdxx5o1sc.jpg
IP
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 71eaf2d5be5914d3d6d3a0028fbe77f1
8acd992a2050e9188c967747c0bbd87efe6d1648
56b77960b84d8b648db5b1171340b7d710259a9860ca9722169049fabeb096bf
GET /upload/vod/2023/01/0yrdxx5o1sc.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 10150
last-modified: Mon, 16 Jan 2023 09:25:03 GMT
etag: "63c517ef-27a6"
cache-control: max-age=31536000
cf-cache-status: EXPIRED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e3a52b51b-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/y2fz2ydjc45.jpg
200 OK 10 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/y2fz2ydjc45.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 2dd5888bfb644deb6388e358f6a9e5e6
862aa4a9accad1ba419b6f6c488601cce05a8f80
d6ffac553d7929f05e2fdf7fc44054fbfa43f97b7a11fc20d3e5474f21199c29
GET /upload/vod/2023/01/y2fz2ydjc45.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 10055
last-modified: Thu, 12 Jan 2023 08:09:10 GMT
etag: "63bfc026-2747"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e3e01b4ed-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/ejjr2efdwyf.jpg
200 OK 14 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/ejjr2efdwyf.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash e7085e7862b08e9652418268f2898475
3724a62b1fb5c3d7eb77480bdf7ab56473b1038c
c3738fe470006dce843d31535044e54c7c78d1c937ec2f64cfd88de8712fa3f9
GET /upload/vod/2023/01/ejjr2efdwyf.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 13890
last-modified: Thu, 12 Jan 2023 08:09:05 GMT
etag: "63bfc021-3642"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e8e1cb4ed-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/so15ls15bm2.jpg
200 OK 8.5 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/so15ls15bm2.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash bfce95861203affc8fe90b0bac3aa6fd
63295b069323de7d1a3b059236efd135b26e7c09
37c1b33a897e79f19af08a7ca9b5e5e9d72cdf65edf2e1b6fa2a6e24007d110d
GET /upload/vod/2023/01/so15ls15bm2.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 8518
last-modified: Thu, 12 Jan 2023 08:08:52 GMT
etag: "63bfc014-2146"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e8e18b4ed-OSL
X-Firefox-Spdy: h2
www.ppmv025.xyz/
200 OK 17 kB IP
Hash 1bcd745c10bd2e10df6f6c7295978142
b43dc08abaa6ab4d833e51f8161be4511de98e91
dc2244193658473837b3e9ae5cadf42322f3b2df9769da4b7abcfc4af2ae3c89
GET / HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmvapi111.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/lna0p44tlh0.jpg
200 OK 13 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/lna0p44tlh0.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ebbfd64ce69b2c2d101b520919a97778
387784127128b9d35e5b7c470eb28a96d3184d5a
5056ffef8f08b61135fb6d13e0c3351748ff3f60c488a50719baae9476de8418
GET /upload/vod/2023/01/lna0p44tlh0.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 13106
last-modified: Thu, 12 Jan 2023 08:09:14 GMT
etag: "63bfc02a-3332"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e7e17b4ed-OSL
X-Firefox-Spdy: h2
lbfm.lbpictupian.com/upload/vod/2023/01/mejfmi2kpp5.jpg
200 OK 15 kB URL HTTP/2 lbfm.lbpictupian.com/upload/vod/2023/01/mejfmi2kpp5.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 05b5c36637daf2293e87a1dcf0432f74
a63652b7990eb121eae8852afd80358ff32ce69a
81e4bf036d712ae588793fc98a67c6a7934416f92611f413a72d2b0a3b4a6d2c
GET /upload/vod/2023/01/mejfmi2kpp5.jpg HTTP/1.1
Host: lbfm.lbpictupian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 14666
last-modified: Thu, 12 Jan 2023 08:08:49 GMT
etag: "63bfc011-394a"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e8e1bb4ed-OSL
X-Firefox-Spdy: h2
fengmian.fhfhtutu.com/upload/vod/2023/01/czkpcvdeozt.jpg
200 OK 7.4 kB URL HTTP/2 fengmian.fhfhtutu.com/upload/vod/2023/01/czkpcvdeozt.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f38f091a3e92abc90034019af7fdec47
3b979ad6583b4c0e23d97154fffe746e0bf8bb06
f029a4b877b70f3d0e44dde1c987d37fd5ddebd7830016ff7455311bbc802518
GET /upload/vod/2023/01/czkpcvdeozt.jpg HTTP/1.1
Host: fengmian.fhfhtutu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:50 GMT
content-type: image/jpeg
content-length: 7406
last-modified: Mon, 16 Jan 2023 09:25:08 GMT
etag: "63c517f4-1cee"
cache-control: max-age=31536000
cf-cache-status: EXPIRED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78bbe61e5a78b51b-OSL
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/top.js?adv=0.7092695580340178
200 OK 588 B URL HTTP/2 www.ppmv025.xyz/js/top.js?adv=0.7092695580340178
IP
File type HTML document, Unicode text, UTF-8 text
Hash add2d43fff1c9780af62656ec0de51f9
64adda4327ef9df8a60df4e760c19089370dc028
eb83c04e1e660929de5d79020e70557b8bb2e7783d100e72faa7ce2e3aff45e6
GET /js/top.js?adv=0.7092695580340178 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: application/javascript
content-length: 588
last-modified: Sat, 31 Dec 2022 06:13:26 GMT
etag: "63afd306-24c"
expires: Thu, 19 Jan 2023 13:46:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/xx1.js?adv=0.7060542189938165
200 OK 409 kB URL HTTP/2 www.ppmv025.xyz/js/xx1.js?adv=0.7060542189938165
IP
Size 409 kB (408896 bytes)
Hash 9d1721162a676bab858799fd5c8a217e
3b2fb9550c401d54b462a78560a40249358cc699
cad21d8cd318a9ab61a42ebf832d184285df67e78d5785d37f7c648527398e16
GET /js/xx1.js?adv=0.7060542189938165 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:40 GMT
content-type: application/javascript
last-modified: Thu, 12 Jan 2023 13:56:31 GMT
vary: Accept-Encoding
etag: W/"63c0118f-f79"
expires: Thu, 19 Jan 2023 13:46:40 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/wz.js?adv=0.23380281200518216
200 OK 1.2 kB URL HTTP/2 www.ppmv025.xyz/js/wz.js?adv=0.23380281200518216
IP
Hash a8816aa9def6e9b5e2a491b7e7c7c354
81fb7d08de3db71f52f8d29e9c58e941123a6aba
06ea9399a505fabca1bff227b703309443382c94c30db7bb8b613077b61a1f66
GET /js/wz.js?adv=0.23380281200518216 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:40 GMT
content-type: application/javascript
last-modified: Sat, 19 Nov 2022 10:18:43 GMT
vary: Accept-Encoding
etag: W/"6378ad83-d33"
expires: Thu, 19 Jan 2023 13:46:40 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
xinchacha2dv.ocsp-certum.com/
200 OK 1.5 kB URL HTTP/1.1 xinchacha2dv.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 9389448206527294b1bf18274c5605e4
2b570cdabc94967f13aae9a98aff107a77d9dff7
2e637686212824aa46ce72be6efc28a2016b27a7e76574a39467f6a7d050bcb8
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=453
Date: Thu, 19 Jan 2023 01:46:51 GMT
Connection: keep-alive
X-N: S
ocsp.sectigo.com/
200 OK 472 B IP
Hash 32e37f68d69e03e105c8d8be330d3695
5b971c174cc2823109a38f131964c5fab8a985db
ae842fca3aaba9e10080c681272e1f76ea51681a9571a2b00c08fe684b1ff0ac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:51 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 23:24:26 GMT
Expires: Mon, 23 Jan 2023 23:24:25 GMT
Etag: "5b971c174cc2823109a38f131964c5fab8a985db"
Cache-Control: max-age=422853,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bbe6275e71b527-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash fc7e19339d2cf53757446192058c3efa
72a51ab371f5752de7860fa086b2dcc8eb5d07ef
a52a1b6a9e60d17f16ff14927d1a79e782f52082bef31eb248329987ab325de9
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 23 Jan 2023 01:42:37 GMT
ETag: "72a51ab371f5752de7860fa086b2dcc8eb5d07ef"
Last-Modified: Thu, 19 Jan 2023 01:42:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 51
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78bbe6287ed6b527-OSL
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 9b055431072e5f3d4f34ce455ae62668
6c8cb3dc22a211088f052f62bf6324ec285a4ac4
4293c1802702ddc85264f039caf1f889d261e1c68a6efd12bdb503716a4b4eb3
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:51 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 08:13:22 GMT
Expires: Wed, 25 Jan 2023 08:13:21 GMT
Etag: "6c8cb3dc22a211088f052f62bf6324ec285a4ac4"
Cache-Control: max-age=540989,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bbe6289b5f0b4d-OSL
sv1.stor.petaexpress.com/dfegfegeg/1.jpg
200 OK 14 kB URL HTTP/1.1 sv1.stor.petaexpress.com/dfegfegeg/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 650x96, components 3\012- data
Hash db2dbdc216703ec86bc6d75d652e7007
a2610252e80c359f3026f6bf3b744c23c3d4cb98
48dc2e5f86c223bdcfdf820eeb1ddef2840c9789dabd79ef2cf8bd67b0f22eb8
GET /dfegfegeg/1.jpg HTTP/1.1
Host: sv1.stor.petaexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Jan 2023 01:46:51 GMT
Content-Type: image/jpeg
Content-Length: 14485
Connection: keep-alive
Accept-Ranges: bytes
Etag: "db2dbdc216703ec86bc6d75d652e7007"
Last-Modified: Fri, 23 Dec 2022 09:12:12 GMT
x-qs-request-id: 11d4d0fa56a5d29a
x-qs-storage-class: STANDARD
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b498c9107f18a732d424d0cc2feec923
3d504d7fddd5ef51228c6a9456e1000d14baaecc
b37867d6af61465ee72ed5c69e26820c40af5826bb383f033859f2256db6e014
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B37867D6AF61465EE72ED5C69E26820C40AF5826BB383F033859F2256DB6E014"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7178
Expires: Thu, 19 Jan 2023 03:46:29 GMT
Date: Thu, 19 Jan 2023 01:46:51 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash ac38bfb2d6c13f67febd75b622a78355
541fb7c0aa6128a1923cdb1c501da691a19e3d98
8df93dbce861b90f04cf34c5d26904fa748a23efa8f181c0dc502108fd7e3a5f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 17 Jan 2023 22:05:43 GMT
Expires: Tue, 24 Jan 2023 22:05:42 GMT
Etag: "541fb7c0aa6128a1923cdb1c501da691a19e3d98"
Cache-Control: max-age=504529,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bbe62a7fa6b527-OSL
www.ppmv025.xyz/template/m1938pc/images/video-mask.png
200 OK 107 B URL HTTP/2 www.ppmv025.xyz/template/m1938pc/images/video-mask.png
IP
File type PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Hash 6a5ee87ff75437cb480df839f36004fd
eac66370f99601cb7febef320c9540d4593cd856
c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa
GET /template/m1938pc/images/video-mask.png HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:41 GMT
content-type: image/png
content-length: 107
last-modified: Tue, 04 Jan 2022 15:14:24 GMT
etag: "61d46450-6b"
expires: Sat, 18 Feb 2023 01:46:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv025.xyz/template/m1938pc/images/video-play.png
200 OK 1.6 kB URL HTTP/2 www.ppmv025.xyz/template/m1938pc/images/video-play.png
IP
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/m1938pc/images/video-play.png HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/template/m1938pc/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:41 GMT
content-type: image/png
content-length: 1567
last-modified: Tue, 04 Jan 2022 15:14:22 GMT
etag: "61d4644e-61f"
expires: Sat, 18 Feb 2023 01:46:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/250/1.js?adv=0.8113213164969596
200 OK 948 B URL HTTP/2 www.ppmv025.xyz/js/250/1.js?adv=0.8113213164969596
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (355)
Hash 494dd5f806d626fe98bf1807ff7534fe
066140a0274bbe3e57c2681b79fcd40aeaed7909
74b855f6342804cfc93e683252e5d820748d692ca91c6139312a1c1e2fc67ef8
GET /js/250/1.js?adv=0.8113213164969596 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:41 GMT
content-type: application/javascript
content-length: 948
last-modified: Sun, 01 Jan 2023 07:12:06 GMT
etag: "63b13246-3b4"
expires: Thu, 19 Jan 2023 13:46:41 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d69d88ad63588a4de444e3ec5ccbc806
eaa2466a9eaa28372836271cff9a3895bb5db975
acfc03ea2d27ce13b604970d3415748415bbc0794362c4829cc88fa4b14f6f3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ACFC03EA2D27CE13B604970D3415748415BBC0794362C4829CC88FA4B14F6F3A"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9660
Expires: Thu, 19 Jan 2023 04:27:52 GMT
Date: Thu, 19 Jan 2023 01:46:52 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/P7Q7skpuqPQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/P7Q7skpuqPQ
IP
Hash 39992769208b2d60575fe5feeb318d52
cd6a210def2cc8a1db09329ceb099728fa73da8b
30a479a766387647be7ca2d3aea1bba506e4e7a567c21fbb2068380aad52fd91
POST /s/gts1p5/P7Q7skpuqPQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 01:46:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 402f791e577330d187550084d7b38c0b
9b285b848a89bfe383a92ad861fe5effbcb8183a
0b8c25343c4035a18a87986440d3004f0295d149ca50753fb05257ce3cfbe72e
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:52 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 17 Jan 2023 10:45:43 GMT
Expires: Tue, 24 Jan 2023 10:45:42 GMT
Etag: "9b285b848a89bfe383a92ad861fe5effbcb8183a"
Cache-Control: max-age=463729,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bbe62cdc860b4d-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 67980963b587eac8b99e81e362c83d01
56c82c6e53693eb4933a411162b1729ea6aa5c90
fdf9cdaa089740b89f7a55f2f7a640fc1a7a966726bf13e0ac4a2d03ca9d1101
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 04:32:33 GMT
Expires: Mon, 23 Jan 2023 04:32:32 GMT
Etag: "56c82c6e53693eb4933a411162b1729ea6aa5c90"
Cache-Control: max-age=354939,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bbe62da8eab4fa-OSL
ldbbs.ldmnq.com/bbs/topic/images/2022-12/fe8be621-0064-4f6b-a049-12a9383fb388.gif
200 OK 118 kB URL HTTP/1.1 ldbbs.ldmnq.com/bbs/topic/images/2022-12/fe8be621-0064-4f6b-a049-12a9383fb388.gif
IP
ASN #133119 China Unicom IP network
File type GIF image data, version 89a, 960 x 60\012- data
Size 118 kB (118121 bytes)
Hash caaa592fad00ee9d8db810c6fdf0741d
90c218822bb4e8237f8d7ba5ddf73e63ce80fd13
d8307cc1c162ce82416d8dcc966b31fbe2e6834c0e7eaecf021a98baf1a16083
GET /bbs/topic/images/2022-12/fe8be621-0064-4f6b-a049-12a9383fb388.gif HTTP/1.1
Host: ldbbs.ldmnq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:51 GMT
Content-Type: image/gif
Content-Length: 118121
Connection: keep-alive
Server: openresty
Age: 2488020
CloudServiceDiscount: CDN
Content-Encoding: utf-8
ETag: "caaa592fad00ee9d8db810c6fdf0741d"
Last-Modified: Wed, 21 Dec 2022 06:06:06 GMT
X-CCDN-CacheTTL: 2592000
nginx-hit: 1
via: CHN-HElangfang-AREACUCC1-CACHE58[5],CHN-HElangfang-AREACUCC1-CACHE7[0,TCP_HIT,2],CHN-TJ-GLOBAL1-CACHE97[13],CHN-TJ-GLOBAL1-CACHE7[0,TCP_HIT,9]
x-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCTyHQVjTG8D2o6c582FA8t4+ZByaQ0HW
x-amz-request-id: 00000185334A066E90100F774C8E3CB5
x-amz-storage-class: STANDARD_IA
x-hcs-proxy-type: 1
x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
Accept-Ranges: bytes
www.ppmv025.xyz/js/250/2.js?adv=0.9698246731754151
200 OK 532 B URL HTTP/2 www.ppmv025.xyz/js/250/2.js?adv=0.9698246731754151
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (382)
Hash 06b1ee73f663b814b7d1acd3b01ec79f
6b5bdadc6d66e9fdcb8b9b8dc5ea1a0deb4dbb56
854e5c909093d5ab6e0c91203af3ed6021d249b3d5e2eed417ef0b132ec694c3
GET /js/250/2.js?adv=0.9698246731754151 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:41 GMT
content-type: application/javascript
content-length: 532
last-modified: Sat, 19 Nov 2022 10:19:26 GMT
etag: "6378adae-214"
expires: Thu, 19 Jan 2023 13:46:41 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59b5f2ae7840c24c570ef2b2e27c5388
672f2566adf97cf6e91df7b4fe3514c1b261b316
1e8f68e0c1a0954140829f024a872220e827b7fd0cf4cd0b31a519a4b9389bf5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1E8F68E0C1A0954140829F024A872220E827B7FD0CF4CD0B31A519A4B9389BF5"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12367
Expires: Thu, 19 Jan 2023 05:12:59 GMT
Date: Thu, 19 Jan 2023 01:46:52 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash 981d57c60cf52ddb6de918940a60d63f
9de3d137ea97b6eba2c427abaa2e2a88a97af5f1
6a5c75990fec9cd1fa22d5fe9aae8dd9bca6dd8be839caacd24f3d85217d672c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 20:47:59 GMT
Expires: Mon, 23 Jan 2023 20:47:58 GMT
Etag: "9de3d137ea97b6eba2c427abaa2e2a88a97af5f1"
Cache-Control: max-age=413465,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78bbe62bf86fb527-OSL
www.ppmv025.xyz/template/m1938pc/static/js/jquery.min.js
200 OK 517 kB URL HTTP/2 www.ppmv025.xyz/template/m1938pc/static/js/jquery.min.js
IP
Size 517 kB (517040 bytes)
Hash 4ff1cc8cbb92240c5b2616bde5d955b2
05a2b52457cb10e9fd4e2d9a2438c56c9754cc2b
a681e9c6a8091ed73d779c1afd4e63a1884682167e4ff46e8b5d08a4749d6e1d
GET /template/m1938pc/static/js/jquery.min.js HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: application/javascript
last-modified: Sat, 08 Jan 2022 14:07:34 GMT
vary: Accept-Encoding
etag: W/"61d99aa6-17b8b"
expires: Thu, 19 Jan 2023 13:46:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv025.xyz/template/m1938pc/css/ate.css
200 OK 34 kB URL HTTP/2 www.ppmv025.xyz/template/m1938pc/css/ate.css
IP
Hash da9e492bfdec5221294b3d6b890d790b
0fb4f4bfaca50ad6233d9a6c327370d97cf2a8ca
e270c0c6ec548cce1811b3a7caf04bb75f0667e8e7a20da3a01c8ffacbe533e9
GET /template/m1938pc/css/ate.css HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: text/css
last-modified: Tue, 04 Jan 2022 15:13:26 GMT
vary: Accept-Encoding
etag: W/"61d46416-126e4"
expires: Thu, 19 Jan 2023 13:46:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/250/3.js?adv=0.6852869521778636
200 OK 486 B URL HTTP/2 www.ppmv025.xyz/js/250/3.js?adv=0.6852869521778636
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (369)
Hash 4ce206cd22ea1ac05c3d229b392d2896
a8ca9dd8fb48bce78ccb44933d0c722401419fb3
c03b31145986256c54d4bcbfc2a0de7d1c5592b4ffb0517311bd0228ea4e39d9
GET /js/250/3.js?adv=0.6852869521778636 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:42 GMT
content-type: application/javascript
content-length: 486
last-modified: Sat, 19 Nov 2022 10:19:33 GMT
etag: "6378adb5-1e6"
expires: Thu, 19 Jan 2023 13:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
qp.ezfxpuo.cn/960X60.gif
200 OK 254 kB IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 254 kB (253519 bytes)
Hash f744e995971941b6a95fcd2636f5a545
ac9c1230e04eab9e31512d2afe440fe5f0367dc5
59b1a138fa72df587e61916179965cbd819f91aec53ce6ab606949a7e06b3063
GET /960X60.gif HTTP/1.1
Host: qp.ezfxpuo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NgxFence
date: Thu, 19 Jan 2023 01:46:51 GMT
content-type: image/gif
content-length: 253519
x-oss-request-id: 63A4A4F1B374843830BBB976
etag: "F744E995971941B6A95FCD2636F5A545"
last-modified: Tue, 29 Nov 2022 08:27:54 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17987192695826819902
x-oss-storage-class: Standard
x-oss-server-side-encryption: AES256
content-md5: 90TplZcZQbapX80mNvWlRQ==
x-oss-server-time: 1
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2
fadacaitp.com/68-960-120.gif
200 OK 288 kB URL HTTP/1.1 fadacaitp.com/68-960-120.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 120\012- data
Size 288 kB (287519 bytes)
Hash 3d5e731d6365175f812cb186a1194fda
802d04669847c469ac67e6d5f36878f8fe85bf63
f21ad6b7f851d2128d3762bb073466153b7accddbfbd140444e6f282da42a75d
GET /68-960-120.gif HTTP/1.1
Host: fadacaitp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:51 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 25 Dec 2022 07:04:53 GMT
ETag: W/"63a7f615-6befc"
Expires: Fri, 17 Feb 2023 12:10:53 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
www.ppmv025.xyz/js/xx3.js?adv=0.702299098154465
200 OK 360 B URL HTTP/2 www.ppmv025.xyz/js/xx3.js?adv=0.702299098154465
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 3e24852309978d1690e8c4809f989280
f590486d685ac8d4d2eba4f5fe1f3bf0beb723e7
a503f4a1ccd24a5e31dbfbbf18825476012481b775f1606f01275c0af15d1e58
GET /js/xx3.js?adv=0.702299098154465 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:42 GMT
content-type: application/javascript
content-length: 360
last-modified: Sat, 19 Nov 2022 10:18:53 GMT
etag: "6378ad8d-168"
expires: Thu, 19 Jan 2023 13:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
587tuchuang.com/587z80.gif
200 OK 139 kB URL HTTP/1.1 587tuchuang.com/587z80.gif
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 139 kB (139025 bytes)
Hash 4751af930c8c7b33a61958356ca554f0
c0cfc5b499211aa4f43c5815630738d36013c1aa
68f1f41464e84af0d6078d951d3a3f479e6865bb641a6eed4ba969bb7067bb18
GET /587z80.gif HTTP/1.1
Host: 587tuchuang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:52 GMT
Content-Type: image/gif
Content-Length: 139025
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 13:30:32 GMT
ETag: "63a30a78-21f11"
Expires: Wed, 15 Feb 2023 09:33:58 GMT
Cache-Control: max-age=2592000
Strict-Transport-Security: max-age=31536000
Server: cdn
X-Cache-Status: HIT
Accept-Ranges: bytes
339282bdb.com/3a6d5b19ebe640c2aa3a0d954584e13d.gif
200 OK 577 kB URL HTTP/1.1 339282bdb.com/3a6d5b19ebe640c2aa3a0d954584e13d.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 577 kB (577413 bytes)
Hash f64cbeb43b40a06a467d403c4ee8f584
87df926cfc971f9af3784707b24eaf97a7acdf2a
0b374b57ebcf263193d88c13eddb10aecc4e3e9ce6b0bba17fc9cb0b053bf438
Analyzer Verdict Alert quad9 Sinkholed
GET /3a6d5b19ebe640c2aa3a0d954584e13d.gif HTTP/1.1
Host: 339282bdb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63a2e8c4-8cf85"
Date: Wed, 21 Dec 2022 11:06:48 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 21 Dec 2022 11:06:44 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-11
Content-Length: 577413
8499583.com/8499/320x180.gif
200 OK 189 kB URL HTTP/2 8499583.com/8499/320x180.gif
IP
File type GIF image data, version 89a, 320 x 185\012- data
Size 189 kB (188752 bytes)
Hash b509f2dc9b21ae7425713b0313a9e0ae
f8d9ab2e41c442872a8193cdefbfd24972c25d49
9ca2b0643406090c29973b82953032ca7f0027b0ae2d871e5de77e89ce2f1c21
GET /8499/320x180.gif HTTP/1.1
Host: 8499583.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:52 GMT
content-type: image/gif
content-length: 188752
last-modified: Wed, 28 Dec 2022 08:15:26 GMT
etag: "2e150-5f0def882a9b5"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/250/4.js?adv=0.6841392168667257
200 OK 486 B URL HTTP/2 www.ppmv025.xyz/js/250/4.js?adv=0.6841392168667257
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (369)
Hash 4ce206cd22ea1ac05c3d229b392d2896
a8ca9dd8fb48bce78ccb44933d0c722401419fb3
c03b31145986256c54d4bcbfc2a0de7d1c5592b4ffb0517311bd0228ea4e39d9
GET /js/250/4.js?adv=0.6841392168667257 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:42 GMT
content-type: application/javascript
content-length: 486
last-modified: Sat, 19 Nov 2022 10:19:41 GMT
etag: "6378adbd-1e6"
expires: Thu, 19 Jan 2023 13:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
99883aaa.com/c0aaf969549441f3bca72296bf90ec44.gif
200 OK 245 kB URL HTTP/1.1 99883aaa.com/c0aaf969549441f3bca72296bf90ec44.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 245 kB (244932 bytes)
Hash 433a6acbee7487fdfe64b06f5ab6c7a4
f69ed0f48baa9067b3657c02ab44ad80b10d6c09
54613a2d466fdfafeda33bfcb6726d2d3dbba765da415b603d471bfc77968ee7
GET /c0aaf969549441f3bca72296bf90ec44.gif HTTP/1.1
Host: 99883aaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63a2e912-3bcc4"
Date: Wed, 21 Dec 2022 11:42:39 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 21 Dec 2022 11:08:02 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-06
Content-Length: 244932
taiwtp1.com/xin/96080.gif
200 OK 122 kB URL HTTP/2 taiwtp1.com/xin/96080.gif
IP
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 960 x 80\012- data
Size 122 kB (122193 bytes)
Hash 4293cc73ff1bcc11cfb9a5582a08c8f5
a3307ecff7a2be9d0740c530d6325ff1ed355b8c
ee86f9a233f1b754a8c67ec8b9120f4c5b4df290396ca690d41d54e5b2d528b5
GET /xin/96080.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:40:00 GMT
content-type: image/gif
content-length: 122193
last-modified: Thu, 20 Oct 2022 07:11:02 GMT
etag: "6350f486-1dd51"
expires: Sat, 18 Feb 2023 01:40:00 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
88669aaa.com/25420bf1633f415a98bf08adad739b1d.gif
200 OK 256 kB URL HTTP/1.1 88669aaa.com/25420bf1633f415a98bf08adad739b1d.gif
IP
File type GIF image data, version 89a, 250 x 250\012- data
Size 256 kB (255489 bytes)
Hash ca7313d6365f58f3a63a7ec7b0b03bd7
cca6d995add65c025f00daae985d27956556ea31
edeff7a7abec5e23a0a8a5ec5a35698a2a3aa22293df373b85d15813e7fd8155
Analyzer Verdict Alert quad9 Sinkholed
GET /25420bf1633f415a98bf08adad739b1d.gif HTTP/1.1
Host: 88669aaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "63a2eee7-3e601"
Date: Thu, 19 Jan 2023 01:46:52 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Wed, 21 Dec 2022 11:32:55 GMT
Accept-Ranges: bytes
X-Cache: MISS from cloud-us2-cdnb-21
Content-Length: 255489
www.ppmv025.xyz/js/250/5.js?adv=0.40578956005941336
200 OK 429 B URL HTTP/2 www.ppmv025.xyz/js/250/5.js?adv=0.40578956005941336
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (345)
Hash b091ecd1c842b0f03f7c9898274a3bf9
4cfd13aebfcf6101c639e255b252a4993056b2d6
5fc0828eaba80bdde4e6d053fbe4007fa3b5a3400e82e43f0e08033998fad7a4
GET /js/250/5.js?adv=0.40578956005941336 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:42 GMT
content-type: application/javascript
content-length: 429
last-modified: Sat, 19 Nov 2022 10:19:48 GMT
etag: "6378adc4-1ad"
expires: Thu, 19 Jan 2023 13:46:42 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dimg04.c-ctrip.com/images/0101c120009texk0w2379.gif?proc=autoorient
200 OK 1 B URL HTTP/2 dimg04.c-ctrip.com/images/0101c120009texk0w2379.gif?proc=autoorient
IP
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
GET /images/0101c120009texk0w2379.gif?proc=autoorient HTTP/1.1
Host: dimg04.c-ctrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 1
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=3459770
expires: Tue, 28 Feb 2023 02:49:43 GMT
date: Thu, 19 Jan 2023 01:46:53 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/250/6.js?adv=0.4466200624439818
200 OK 454 B URL HTTP/2 www.ppmv025.xyz/js/250/6.js?adv=0.4466200624439818
IP
File type HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (366)
Hash fb969bfaceb99f1da30a8eeef7ef3f9c
d30202994b3fbd393bfa93cea12ddc7cf445ac0a
befa9bb57dc5ce8dce7d72153b95becb0b1408e127d7d4ccfe122da80928a2e6
GET /js/250/6.js?adv=0.4466200624439818 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:43 GMT
content-type: application/javascript
content-length: 454
last-modified: Sat, 19 Nov 2022 10:19:55 GMT
etag: "6378adcb-1c6"
expires: Thu, 19 Jan 2023 13:46:43 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/xx4.js?adv=0.5904769375546943
200 OK 916 B URL HTTP/2 www.ppmv025.xyz/js/xx4.js?adv=0.5904769375546943
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash bd5e3af6c592753239f355e60ce2f3ef
6ace16da2fe5b94a940410f05e2152e09a5b3e3a
b5e6dd7d88f403621cff37dfd07e02a503e07bf6e77120afe138923e9f066c97
GET /js/xx4.js?adv=0.5904769375546943 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:43 GMT
content-type: application/javascript
content-length: 916
last-modified: Sat, 19 Nov 2022 10:23:56 GMT
etag: "6378aebc-394"
expires: Thu, 19 Jan 2023 13:46:43 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0
200 OK 1.4 MB URL HTTP/2 p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 640 x 200\012- data
Size 1.4 MB (1362871 bytes)
Hash b43c54ced7fcd33ebd9405eb26d533b7
05e5eb23ef5a79364bc8f8fd778d54a9fa335174
7db80c626560b0016fd427d864bb6116a44a858eb7968728cd872814939a24b2
GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZSJJkZNBPXDBGibpXqaicajKqyibnCUUUEomk/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Thu, 19 Jan 2023 01:46:52 GMT
content-type: image/gif
content-length: 1362871
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:47 GMT
cache-control: max-age=2592000
x-delay: 118203 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1362871
chid: 0
fid: 0
x-nws-log-uuid: 475ad62f-8150-4029-b686-f021e80ca7c2
X-Firefox-Spdy: h2
www.ppmv025.xyz/template/m1938pc/static/js/jquery.lazyload.min.js
200 OK 256 kB URL HTTP/2 www.ppmv025.xyz/template/m1938pc/static/js/jquery.lazyload.min.js
IP
Size 256 kB (256018 bytes)
Hash 1800f914933dcc0537e092babd41f96d
82adc25adedaa3cae4ec7dd3b28634c90488b154
847695c4c574b43283208cc0d3db121076e4a39f75e7a97af43c4679bfb6fbae
GET /template/m1938pc/static/js/jquery.lazyload.min.js HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: application/javascript
last-modified: Sat, 08 Jan 2022 14:08:24 GMT
vary: Accept-Encoding
etag: W/"61d99ad8-d35"
expires: Thu, 19 Jan 2023 13:46:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/piaofu.js?adv=0.8168606263549205
200 OK 230 kB URL HTTP/2 www.ppmv025.xyz/js/piaofu.js?adv=0.8168606263549205
IP
Size 230 kB (230470 bytes)
Hash e50754e9efc0a7d33bf4dceef7220b80
49731e0e2eab63ce6952ff63e5fad53bb4109d74
66bdbf1ba5e527db6333a62135258ab89cb7b0c391b5ab472e6a6d2925cd68e6
GET /js/piaofu.js?adv=0.8168606263549205 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:43 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 06:04:22 GMT
vary: Accept-Encoding
etag: W/"63afd0e6-1594"
expires: Thu, 19 Jan 2023 13:46:43 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 0c78d720ca4d39d6e23cfa7fdc7b5a8d
0d4687cfaf32f3fa7713374b2d6fe331e2dc9301
4bbf3686b47fa5f3619784e0ee9266a9eafb16e5f1b70e622439e8867b185f8f
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Jan 2023 01:46:54 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "8B177E049593FFC62B39D8258E4B6DC79331C629"
Expires: Thu, 19 Jan 2023 13:00:00 GMT
Last-Modified: Thu, 19 Jan 2023 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2626
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78bbe63ab8b8b52d-OSL
www.ppmv025.xyz/ads/piaofu.js?adv=0.5419398649871725
404 Not Found 146 B URL HTTP/2 www.ppmv025.xyz/ads/piaofu.js?adv=0.5419398649871725
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /ads/piaofu.js?adv=0.5419398649871725 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 19 Jan 2023 01:46:43 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
8499583.com/8499/s200x200.gif
200 OK 248 kB URL HTTP/2 8499583.com/8499/s200x200.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Size 248 kB (248099 bytes)
Hash 761862416e1a2ae8b95e67e823ee7e5a
05c3fd100ac5801602b15243bb49e31b063ea7b5
69f49182c975f54c14c7f88bbd74ddd97f9b87a294147b26f1a2bf83000971e2
GET /8499/s200x200.gif HTTP/1.1
Host: 8499583.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:54 GMT
content-type: image/gif
content-length: 248099
last-modified: Wed, 28 Dec 2022 09:29:16 GMT
etag: "3c923-5f0e000943a64"
server: qq.com
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
200 OK 1.6 MB URL HTTP/2 p.qlogo.cn/qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 640 x 200\012- data
Size 1.6 MB (1607696 bytes)
Hash 9c26f4dcfdfa72ecdcbe3ea854547b4c
fed85b90734400d6810be2b07403f5c8a194a507
ebd842d015d6684a6995a73f1e81f0dea219815318f8993501da9ca79cca74d2
GET /qqmail_head/ajNVdqHZLLBTqF8e2kN78G9Zt8uAv6By0U3zmELvuZTee7pdNQtTmNRpGbcuGVd3R5dJqQ2WeTg/0 HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Thu, 19 Jan 2023 01:46:54 GMT
content-type: image/gif
content-length: 1607696
vary: Accept,Origin
last-modified: Sat, 10 Jul 2021 16:21:45 GMT
cache-control: max-age=2592000
x-delay: 99309 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1607696
chid: 0
fid: 0
x-nws-log-uuid: 8b0fc666-3978-467e-9688-a508ebdb6b33
X-Firefox-Spdy: h2
www.ppmv025.xyz/js/tongji.js?adv=0.14675561332502318
200 OK 254 B URL HTTP/2 www.ppmv025.xyz/js/tongji.js?adv=0.14675561332502318
IP
Hash 33bfe88fe108264906550fc71fee999b
ffcdd93706a63369148ac4df56096976d2540d5c
9d2d61329c0baa529f4d56116bf456f787f01d0194ff9c711afb6280a739562e
GET /js/tongji.js?adv=0.14675561332502318 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:44 GMT
content-type: application/javascript
content-length: 254
last-modified: Sun, 01 Jan 2023 09:06:32 GMT
etag: "63b14d18-fe"
expires: Thu, 19 Jan 2023 13:46:44 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash cd5386af071f403e96c3bd4e4e0c3108
f10fa0f81e50255ab52d21958a8540c91aecf2e6
0e693c35d5dbecb3b175d77e6be02d12473ce29c675b3e4a13f605fd7d9b2076
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Thu, 19 Jan 2023 01:46:54 GMT
Last-Modified: Thu, 19 Jan 2023 00:18:50 GMT
ETag: "63c88c6a-1d7"
Expires: Sat, 21 Jan 2023 00:18:50 GMT
Cache-Control: max-age=167516
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1674092815
Via: cache20.l2de2[476,476,200-0,M], cache20.l2de2[477,0], cache1.se1[499,498,200-0,M], cache1.se1[501,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 19 Jan 2023 01:46:55 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9516740928145564220e
si1.go2yd.com/get-image/0xmAGT9KS9C
200 OK 118 kB URL HTTP/2 si1.go2yd.com/get-image/0xmAGT9KS9C
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 640 x 200\012- data
Size 118 kB (117593 bytes)
Hash c4caa37b717580e8594587f32ca86470
a645ec82581a0b18f67444b62a062059adf78aa6
208bafb1df6fa8b7929896b30415514e2dc59312332ec26aff058767fa81f269
GET /get-image/0xmAGT9KS9C HTTP/1.1
Host: si1.go2yd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 01:46:55 GMT
content-type: image/gif
content-length: 117593
server: Tengine
x-application-context: application
x-kss-request-id: 9a211df897c146b99866a236ff549e2f
etag: "c4caa37b717580e8594587f32ca86470"
content-md5: xMqje3F1gOhZRYfzLKhkcA==
last-modified: Thu, 10 Feb 2022 15:30:06 GMT
accept-ranges: bytes
age: 1
x-via: 1.1 PSbjwjBGP2ih137:4 (Cdn Cache Server V2.0), 1.1 PSzjnbsxkx232:7 (Cdn Cache Server V2.0), 1.1 tb118:13 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1cc96:12 (Cdn Cache Server V2.0)
x-ws-request-id: 63c8a10f_PShlamstdAMS1cc96_46845-22751
access-control-allow-origin: *
ws-s2h-acc-level: 1
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?889fe9c05f7b0f2db8ba49f0651b6f40
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?889fe9c05f7b0f2db8ba49f0651b6f40
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 67463240532b3bdc39210540c5f0704e
a3baa50d6fb49d74db958bf87cbd02c47318a8e7
61d35cc8875f0dd4763e84d9e54d4fe0fa31ba7d0f1c7fe757dc56f0eda7576e
GET /hm.js?889fe9c05f7b0f2db8ba49f0651b6f40 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Thu, 19 Jan 2023 01:46:54 GMT
Etag: 6594409593a8a65040e4197c1b5db9e1
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=319DFA455A9F1A9D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?6391490fe039c3b8b30b2a81c74234a1
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?6391490fe039c3b8b30b2a81c74234a1
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (621)
Hash 2e3721526923f5c26dfba2ac44c07038
8a812f1e5e32bc34e8ff23005d2bc00bce75ff20
e5bd1b45c65d186fe1ccbe42f6b321b5b1d6c3c2b808ef6e185b27979075a670
GET /hm.js?6391490fe039c3b8b30b2a81c74234a1 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11259
Content-Type: application/javascript
Date: Thu, 19 Jan 2023 01:46:54 GMT
Etag: 1e3a66a441ab9241db061f844c53662e
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=2468696B97EC08C2; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1781828331&si=889fe9c05f7b0f2db8ba49f0651b6f40&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=1240&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv025.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1781828331&si=889fe9c05f7b0f2db8ba49f0651b6f40&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=1240&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv025.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1781828331&si=889fe9c05f7b0f2db8ba49f0651b6f40&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=1240&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv025.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 19 Jan 2023 01:46:55 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=1CCAB9B78AABE381; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=57405661&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=1240&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv025.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=57405661&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=1240&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv025.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=57405661&si=6391490fe039c3b8b30b2a81c74234a1&su=https%3A%2F%2Fwww.ppmvapi111.com%2F&v=1.3.0&lv=1&sn=1240&r=0&ww=1280&u=https%3A%2F%2Fwww.ppmv025.xyz%2F&tt=ppMV%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 19 Jan 2023 01:46:55 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=D4E138C686E465A1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp.digicert.com/
200 OK 727 B IP
Hash ad78f458c17458601d543fc4a1c1ca9e
ebb277c199fd3098352c2d56ea560a1689afb136
e3dd513e6017034f628b8782f9f6ff6b7216edaca83b20245e88bc509280ea2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 180
Cache-Control: max-age=127379
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 01:46:55 GMT
Etag: "63c7eeee-2d7"
Expires: Fri, 20 Jan 2023 13:09:54 GMT
Last-Modified: Wed, 18 Jan 2023 13:06:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 727
www.ppmv025.xyz/js/wz2.js?adv=0.4869624437066681
200 OK 0 B URL HTTP/2 www.ppmv025.xyz/js/wz2.js?adv=0.4869624437066681
IP
GET /js/wz2.js?adv=0.4869624437066681 HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:40 GMT
content-type: application/javascript
last-modified: Wed, 18 Jan 2023 10:36:47 GMT
vary: Accept-Encoding
etag: W/"63c7cbbf-d64"
expires: Thu, 19 Jan 2023 13:46:40 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv025.xyz/template/m1938pc/css/zui.css
200 OK 0 B URL HTTP/2 www.ppmv025.xyz/template/m1938pc/css/zui.css
IP
GET /template/m1938pc/css/zui.css HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: text/css
last-modified: Sun, 13 Nov 2022 12:08:14 GMT
vary: Accept-Encoding
etag: W/"6370de2e-15b6c"
expires: Thu, 19 Jan 2023 13:46:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.ppmv025.xyz/template/m1938pc/static/js/base1.js
200 OK 0 B URL HTTP/2 www.ppmv025.xyz/template/m1938pc/static/js/base1.js
IP
GET /template/m1938pc/static/js/base1.js HTTP/1.1
Host: www.ppmv025.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ppmv025.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 01:46:39 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 07:21:11 GMT
vary: Accept-Encoding
etag: W/"63afe2e7-153a"
expires: Thu, 19 Jan 2023 13:46:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
38.53.112.198
23.36.77.32
104.22.16.247
120.52.95.234
103.170.15.81
93.184.220.29
163.171.140.79
103.235.46.191
20.196.220.243
43.154.254.32
47.246.44.205