Overview

URLwww.residentialroofingvancouver.com/index.php
IP 172.121.87.112 (United States)
ASN#18779 EGIHOSTING
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-06 14:07:19 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (44)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-06 10:46:34 UTC 143.204.55.36
www.jxys47.site (9) 0 2022-01-15 02:05:44 UTC 2022-09-01 14:57:19 UTC 173.231.38.5 Unknown ranking
www.yssydh.top (1) 0 2022-08-05 15:26:13 UTC 2022-09-06 11:01:01 UTC 172.67.209.49 Unknown ranking
fmlb.netlbtu.com (30) 187701 2021-09-14 11:57:06 UTC 2022-09-06 05:37:21 UTC 104.21.235.173
si1.go2yd.com (1) 325918 2017-02-02 11:37:19 UTC 2022-09-06 11:41:07 UTC 163.171.140.79
79181531227.com (1) 0 2022-08-17 07:21:40 UTC 2022-09-06 11:01:01 UTC 45.61.212.219 Unknown ranking
884352.com (1) 0 2021-01-28 20:39:57 UTC 2022-09-06 07:30:48 UTC 47.75.19.14 Unknown ranking
885364.com (1) 0 2022-06-25 14:41:13 UTC 2022-09-06 11:01:01 UTC 47.75.19.14 Unknown ranking
www.residentialroofingvancouver.com (4) 0 No data No data 172.121.87.112 Unknown ranking
r3.o.lencr.org (17) 344 2020-12-02 08:52:13 UTC 2022-09-06 04:41:22 UTC 23.36.77.32
ocsp.globalsign.com (2) 2075 2012-05-25 06:20:55 UTC 2022-09-06 04:47:03 UTC 104.18.20.226
e1.o.lencr.org (6) 6159 2021-08-20 07:36:30 UTC 2022-09-06 04:54:53 UTC 23.36.77.32
kzecc.com (1) 0 2017-01-29 04:39:36 UTC 2022-09-06 11:01:01 UTC 104.143.94.110 Unknown ranking
n7326.com (1) 0 2022-07-03 13:21:27 UTC 2022-09-06 11:01:11 UTC 103.170.15.94 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-06 05:16:49 UTC 143.204.55.110
hm.baidu.com (6) 8254 2012-05-26 08:38:45 UTC 2022-09-06 06:31:35 UTC 103.235.46.191
www.jxys88.net (3) 0 2022-01-15 01:49:35 UTC 2022-09-06 11:00:58 UTC 173.231.12.68 Unknown ranking
ocsp2.globalsign.com (7) 1544 2012-05-21 07:12:19 UTC 2022-09-06 04:47:03 UTC 104.18.21.226
kzeaa.com (1) 0 2022-05-22 06:40:48 UTC 2022-09-06 10:29:11 UTC 66.150.130.123 Unknown ranking
ocsp.sectigo.com (8) 487 2018-12-17 11:31:55 UTC 2022-09-06 07:27:18 UTC 172.64.155.188
taiwtp1.com (2) 0 2022-04-08 07:06:08 UTC 2022-09-06 05:31:58 UTC 220.128.218.220 Unknown ranking
aliyun-static-oss.oss-cn-hongkong.aliyuncs.com (1) 0 2022-06-02 10:46:58 UTC 2022-09-06 11:01:01 UTC 47.56.33.17 Domain (aliyuncs.com) ranked at: 1959
aixuntupiana.oss-cn-hongkong.aliyuncs.com (2) 0 2022-08-21 17:29:45 UTC 2022-09-05 20:18:50 UTC 47.57.203.161 Domain (aliyuncs.com) ranked at: 1959
fsadcx1.com (1) 0 2022-06-05 22:49:50 UTC 2022-09-06 11:01:01 UTC 23.225.3.254 Unknown ranking
dimg04.c-ctrip.com (1) 139731 2014-05-08 16:11:10 UTC 2022-09-06 06:52:49 UTC 104.110.17.24
acoossi.top (1) 489936 2022-01-13 05:50:58 UTC 2022-09-06 14:02:50 UTC 104.21.234.200
acooss.com (1) 600820 2021-10-22 09:35:10 UTC 2022-09-06 11:01:01 UTC 104.21.235.95
93533557591.com (1) 0 2022-08-10 13:54:43 UTC 2022-09-06 08:21:18 UTC 45.61.212.224 Unknown ranking
p.qlogo.cn (7) 48578 2014-01-15 11:11:45 UTC 2022-09-06 05:33:37 UTC 43.129.255.47
kn.pflmkj.cn (2) 0 2020-07-28 10:12:50 UTC 2022-09-06 11:01:01 UTC 138.113.141.2 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-06 04:40:31 UTC 34.117.237.239
tupaiyy.oss-cn-hongkong.aliyuncs.com (2) 0 2022-07-04 14:15:20 UTC 2022-09-05 20:18:50 UTC 47.75.19.80 Domain (aliyuncs.com) ranked at: 1959
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-06 12:27:00 UTC 93.184.220.29
kvezz.com (1) 237784 2021-10-17 08:32:09 UTC 2022-09-06 04:59:29 UTC 45.154.215.92
nvhaaa.top (2) 0 2022-04-10 08:45:14 UTC 2022-09-06 01:22:36 UTC 104.21.234.41 Unknown ranking
ocsp.digicert.cn (2) 37572 2020-03-20 17:45:56 UTC 2022-09-06 07:27:00 UTC 47.246.44.205
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-06 04:43:30 UTC 35.165.41.15
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-09-06 08:08:24 UTC 34.120.237.76
kvhaa.com (1) 0 2021-10-19 13:10:21 UTC 2022-09-06 07:42:57 UTC 78.46.107.74 Unknown ranking
acoossu.top (1) 425872 2022-05-12 10:22:11 UTC 2022-09-06 05:37:21 UTC 104.21.33.223
87193776899.com (2) 0 2022-08-09 09:39:23 UTC 2022-09-06 11:01:01 UTC 45.61.212.116 Unknown ranking
taiyangchengjituantupian.oss-cn-hongkong.aliyuncs.com (1) 0 2022-08-02 09:48:02 UTC 2022-09-05 19:05:44 UTC 47.75.19.175 Domain (aliyuncs.com) ranked at: 1959
push.zhanzhang.baidu.com (1) 57139 2015-07-22 05:44:02 UTC 2022-09-06 04:58:45 UTC 112.34.113.148
api.share.baidu.com (1) 44629 2013-04-25 14:45:11 UTC 2022-09-06 04:58:46 UTC 112.34.113.148

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-06 2 87193776899.com Sinkholed
2022-09-06 2 87193776899.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 172.121.87.112
Date UQ / IDS / BL URL IP
2022-09-06 14:07:19 +0000 0 - 0 - 2 www.residentialroofingvancouver.com/index.php 172.121.87.112


Last 5 reports on ASN: EGIHOSTING
Date UQ / IDS / BL URL IP
2023-03-25 21:31:49 +0000 0 - 0 - 14 honeat.com/ 104.164.25.170
2023-03-25 20:38:25 +0000 0 - 1 - 4 parkparkgoose.com/ 205.164.63.211
2023-03-25 20:31:32 +0000 0 - 0 - 3 lk5lj.hc-yc.com/ 136.0.62.55
2023-03-25 20:29:49 +0000 0 - 2 - 4 123bg.cn/ 107.165.72.201
2023-03-25 19:20:08 +0000 0 - 0 - 19 lwbqyvn.com/ 107.164.166.197


Last 1 reports on domain: residentialroofingvancouver.com
Date UQ / IDS / BL URL IP
2022-09-06 14:07:19 +0000 0 - 0 - 2 www.residentialroofingvancouver.com/index.php 172.121.87.112


No other reports with similar screenshot

JavaScript

Executed Scripts (11)

Executed Evals (1)
#1 JavaScript::Eval (size: 479) - SHA256: 454dd31026eb0e9bb676f700310a8c65a5909fcaa5ffe386fb8544d540ecd728
document.write('<title>a9_�~��	P#�l�</title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="https://www.jxys88.net/news/index.php"></iframe></div><style type="text/css">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>');

Executed Writes (4)
#1 JavaScript::Write (size: 460) - SHA256: a125fde4d190fb9c1a3cf806a3c2af47ff0eb298f345bb841f117db95705c06f
< title > a9_�~��P #� l� < /title><div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" height="100%" src="https:/ / www.jxys88.net / news / index.php "></iframe></div><style type="
text / css ">html{width:100%;height:100%;}body {width:100%;height:100%;}</style>
#2 JavaScript::Write (size: 201) - SHA256: 2d7d346bf62ff160f8d7d20318bedeb9dc7c79d0e2845f6061de5beabda471ca
< style > # o63092 {
    animation - duration: 10000 ms;
    animation - iteration - count: infinite;
    animation - timing - function: linear;
}@
keyframes spin {
    from {
        transform: rotate(0 deg);
    }
    to {
        transform: rotate(360 deg);
    }
} < /style>
#3 JavaScript::Write (size: 322) - SHA256: f03e2f7be3776755af00a0f4a5ee7efc25f217ce32ef2f271cdf36eb0dfce61e
< div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 52%; z-index: 19999 !important; right: 2px;" > < a target = "_blank"
href = "https://zzfdslkjkc111.com/e01/jxy.html" > < img src = "https://taiwtp1.com/img/200200.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>
#4 JavaScript::Write (size: 352) - SHA256: 19d699d6c47ec4decebcc705cdbf76085e6949530980ed9e0874941b56e75e12
< div class = "f63092"
id = "o63092"
style = "position: fixed; bottom: 35%; z-index: 19999 !important; right: 2px;" > < a target = "_blank"
href = "https://axdytz24c.com" > < img src = "https://www.yssydh.top/upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif"
style = "margin:10px;border-radius: 15px;border: solid 2px red;"
width = "90px"
height = "90px"
"></a></div>


HTTP Transactions (144)


Request Response
                                        
                                            GET /index.php HTTP/1.1 
Host: www.residentialroofingvancouver.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.121.87.112
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 06 Sep 2022 14:07:07 GMT
Content-Length: 787
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Size:   787
Md5:    0c69e48f769bb32dc5bcb27218c51ddd
Sha1:   c6f1ee6bd185b689d7cb7f36b3b94617257f7335
Sha256: a54fa83bde3c9fe096fa7d4466861bee4936ab958ac4c2d78d01269fe7b02015
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3687
Expires: Tue, 06 Sep 2022 15:08:35 GMT
Date: Tue, 06 Sep 2022 14:07:08 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 14:04:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aGs-CQnGJaU9azdumV8agYbMO1VLVcwH7ftxrK8EmyQNH8dOG-ey7Q==
Age: 170


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TZbBOfXjaokMDMZ92iFAIfL7S-tMGFI7Kxwk2GlZqbHhjKtHGZIGiA==
age: 46311
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:08 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /tj.js HTTP/1.1 
Host: www.residentialroofingvancouver.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/index.php

search
                                         172.121.87.112
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 06 Sep 2022 14:07:07 GMT
Content-Length: 520
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   520
Md5:    c641843bbee2dbe645c9de13d8f953ed
Sha1:   1a93b5d7b8540d5acbaae9c8bc00c16926a23588
Sha256: 4604c89ab81e21b0a8e7e762b60c0190dd44643056504ae5c28ebd2b4e739ed7
                                        
                                            GET /common.js HTTP/1.1 
Host: www.residentialroofingvancouver.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/index.php

search
                                         172.121.87.112
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 06 Sep 2022 14:07:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (438), with CRLF line terminators
Size:   738
Md5:    70670d0986c3d241b2799f9b5ae5e100
Sha1:   e0a9285c476b9339f8ee575c4cbc26ecfc4d0a8b
Sha256: 788c72241a91da39f72a02d61ea2da8aa6a57d0db6b1118e583ad166b61b1ea6
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 06 Sep 2022 13:38:18 GMT
Expires: Tue, 06 Sep 2022 14:36:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ddtwZH4OgdtSsDFNER9VNTP04FYQqyaZva-69bECKDbJNiAwgwFMWw==
Age: 1731


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "23799F897E01D5E2D9BC8CF3EDEAB11C60301F00A96874136A0F09F07988BF4C"
Last-Modified: Tue, 06 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10422
Expires: Tue, 06 Sep 2022 17:00:51 GMT
Date: Tue, 06 Sep 2022 14:07:09 GMT
Connection: keep-alive

                                        
                                            GET /push.js HTTP/1.1 
Host: push.zhanzhang.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/

search
                                         112.34.113.148
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Date: Tue, 06 Sep 2022 14:07:09 GMT
Etag: "4078521116"
Expires: Wed, 06 Sep 2023 14:07:09 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=C747E6B2EE6105D6090672BB6551B9B1:FG=1; max-age=31536000; expires=Wed, 06-Sep-23 14:07:09 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   227
Md5:    e548b6ce15bb616c2bfba36e9cfbf307
Sha1:   a348285d9928a6548a57569f1fb9d62bdd747f33
Sha256: 7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.residentialroofingvancouver.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/index.php

search
                                         172.121.87.112
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Tue, 06 Sep 2022 14:07:08 GMT
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Sun, 11 Sep 2022 14:07:08 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    7ef1f0a0093460fe46bb691578c07c95
Sha1:   2da3ffbbf4737ce4dae9488359de34034d1ebfbd
Sha256: 4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5091
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 14:07:09 GMT
Last-Modified: Tue, 06 Sep 2022 12:42:18 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:09 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 10 Sep 2022 12:00:28 GMT
ETag: "ae854250b89cc8d51c86f068123e3943011235db"
Last-Modified: Tue, 06 Sep 2022 12:00:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2645
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c4f62f23b4f7-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4768c7c87c32d084f2f3afab3f5ad0ad
Sha1:   ae854250b89cc8d51c86f068123e3943011235db
Sha256: c1e4608d1fe0974989a7f349182c6cf74ef56107066fd5d9a2c16539c3645ad5
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:09 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 10 Sep 2022 12:00:28 GMT
ETag: "ae854250b89cc8d51c86f068123e3943011235db"
Last-Modified: Tue, 06 Sep 2022 12:00:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2645
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c4f64f59b4f7-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4768c7c87c32d084f2f3afab3f5ad0ad
Sha1:   ae854250b89cc8d51c86f068123e3943011235db
Sha256: c1e4608d1fe0974989a7f349182c6cf74ef56107066fd5d9a2c16539c3645ad5
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Yl1hAqU08hE6+svKGFvKzA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.165.41.15
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zP2lpXzwJIUvofJfjFf53jFrVIo=

                                        
                                            GET /s.gif?l=http://www.residentialroofingvancouver.com/index.php HTTP/1.1 
Host: api.share.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/

search
                                         112.34.113.148
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Content-Length: 0
Date: Tue, 06 Sep 2022 14:07:09 GMT

                                        
                                            GET /hm.js?ac926d0332f02f4f5a734812940af824 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11340
Date: Tue, 06 Sep 2022 14:07:10 GMT
Etag: bb68a29856661955f911a945aea8301d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=2A97B53B02BD2552; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (627)
Size:   11340
Md5:    b64a82502e358ae4545d75bba51c45aa
Sha1:   899e244a2d7c4f30266c57c11298b0807c048aec
Sha256: e5a28eec636d333242535ca3155f21cff695ecd7dcf80cf364ae81c4862adc49
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3898
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 14:07:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3898
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 14:07:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3898
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 14:07:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3898
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 14:07:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3898
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 14:07:11 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12573
x-amzn-requestid: 92e03b26-883b-41e2-9033-379a6d02210c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYCdGy8oAMFQZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d42-1c4ea2f74b796623574bde87;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: u1hKGB5UKEuuIVqcQ_Lx5wfBjy_hB32Jnp7_mDnF2BrsN4a6Mj_WJQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:46:16 GMT
etag: "3f3aad2cc71226b39549db1a9baa6837d4f1d897"
age: 58855
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12573
Md5:    3fe4a321dcd6a94a637a528d74f9321a
Sha1:   3f3aad2cc71226b39549db1a9baa6837d4f1d897
Sha256: a19b6749429e8ecaeac8fc0849abc4d891bfc628489762b1619a3ee3064536e3
                                        
                                            GET /news/index.php HTTP/1.1 
Host: www.jxys88.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         173.231.12.68
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:09 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7243
Md5:    ab06cd17a227dbcb1fa5ae5536291a56
Sha1:   1b17e1bd604d0caa6648a87e34f8bf9839e3c903
Sha256: cf5af0045bbcd9fca0a1fcbc330ac263f518c81c3f09f4d8e234d781f638c82c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf271bbd-cebf-41d8-a0c3-8f16d4423a79.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7152
x-amzn-requestid: 2571ff54-e2f8-4072-8a26-3d0dd4cd3523
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsfHz_IAMFaXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-6a598849314cdc433f9f82f7;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XjbO8y9D7PhQcN0XaBkmhcjzWCMRczO80wxAJa4gUFQZPrS6eb3Z3A==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:48:59 GMT
age: 58692
etag: "b1685694999272feb4d9fc39296418cd95480678"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7152
Md5:    8ce50dfa23e7f34ff68cc6426c2823f7
Sha1:   b1685694999272feb4d9fc39296418cd95480678
Sha256: 4df89827b1b34bb577f28f281ed85067a2e34dd48923b9bae1561e81f67be49b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4426
x-amzn-requestid: b5b68557-e46d-41cd-9b11-d996aabc0de7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzfYTHHFIAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631145ce-1d3504367cf6ef724a345564;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 23:52:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bSBSzzRMdrVdoV3Ld8hYWq2AwO7Mswcwa8Tk_AKa44j1SlrFugNqpg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:48:06 GMT
age: 58745
etag: "fc766bca874a352a4acb569577d4cf6527f4f074"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4426
Md5:    c81f3df885bdee8cac46ea9495e6b63b
Sha1:   fc766bca874a352a4acb569577d4cf6527f4f074
Sha256: e21473f88c613ca33ba6bbe1e0cab338274a06744cdcb088f14873c972445b36
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed40d152-6303-4f00-ad80-054a81ea5425.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6482
x-amzn-requestid: 5e5b342b-0224-4916-8656-237b4c90ae66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-5FaYIAMFzjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-412f897b451130af70026eab;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8UExY-3ojiqMEfyXXKG6kJcB5CRiNnfgG5JQS3gWnd4t4bbKNzbsYA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:45:43 GMT
age: 58888
etag: "f8589eb3907582137d8b9373af745d80eddbf1bb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6482
Md5:    0efc32eccbf76ac0d89f324d09a7fd1f
Sha1:   f8589eb3907582137d8b9373af745d80eddbf1bb
Sha256: ee0f5e56c97e50e1c20801ad0a5379982feef16a11137f784f404d14e9c65824
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:36:52 GMT
age: 34219
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12683
Md5:    ec466c0d472e43c11d36bf6fce068205
Sha1:   720d3624a76d060b8e2699e9aa7a320e3efd4878
Sha256: 5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
                                        
                                            GET /hm.js?fec0eaa8fc52795617f18f518d42aaab HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11337
Date: Tue, 06 Sep 2022 14:07:10 GMT
Etag: 87c25fd729e0eee4cc4f47d072c052d1
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=DBFA2419C20E1D5E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (624)
Size:   11337
Md5:    b4817de584a82205dcb5923e692d2662
Sha1:   fc1f28ae49d9f494a9760fc9ac55968459c1af4b
Sha256: 22fbfffd987023234aaf806e82bfe8df6c20299b103bff3a2acebaa3711a1aee
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=644376774&si=ac926d0332f02f4f5a734812940af824&v=1.2.97&lv=1&sn=46880&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.residentialroofingvancouver.com%2Findex.php&tt=%E7%89%A1%E4%B8%B9%E6%B1%9F%E6%97%B1%E8%95%BE%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E8%B4%A3%E4%BB%BB%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 06 Sep 2022 14:07:11 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=50EC9B0C6FB85947; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "68309C4C9F9BFEBD1E23EB3950F1439E93026DF51D538B753984FDE4244B1F93"
Last-Modified: Tue, 06 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Tue, 06 Sep 2022 20:06:24 GMT
Date: Tue, 06 Sep 2022 14:07:11 GMT
Connection: keep-alive

                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=389757451&si=fec0eaa8fc52795617f18f518d42aaab&v=1.2.97&lv=1&sn=46881&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.residentialroofingvancouver.com%2Findex.php&tt=%E7%89%A1%E4%B8%B9%E6%B1%9F%E6%97%B1%E8%95%BE%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E8%B4%A3%E4%BB%BB%E5%85%AC%E5%8F%B8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.residentialroofingvancouver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 06 Sep 2022 14:07:11 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=62B1EB1AAAD16D3B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /template/m1938pc/html9/ads/1.gif HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:11 GMT
content-length: 254
last-modified: Sat, 02 Apr 2022 12:20:12 GMT
etag: "62483f7c-fe"
expires: Thu, 06 Oct 2022 14:07:11 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 17\012- data
Size:   254
Md5:    b013f8fa3ec997fe20dc80b82af0ad0a
Sha1:   e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
Sha256: 119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3BD97C471B349BED1E0752660F949C76B229374EB320F2DFCC611CA14A4A0797"
Last-Modified: Mon, 05 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9924
Expires: Tue, 06 Sep 2022 16:52:36 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            GET /df0515659c031251093942922779f350.gif HTTP/1.1 
Host: kvhaa.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         78.46.107.74
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 162
location: https://nvhaaa.top/df0515659c031251093942922779f350.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /template/m1938pc/static/css/swiper.min.css HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:11 GMT
last-modified: Fri, 14 Jan 2022 04:46:06 GMT
vary: Accept-Encoding
etag: W/"61e1000e-456d"
expires: Wed, 07 Sep 2022 02:07:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3453
Md5:    bb8199764b3ce5966334fd8041875109
Sha1:   6a8985b27e69e28c9a11e33ab2615bc2671f599f
Sha256: 03f879a66f1d3792ee1d18c584675521a3744db4969214bd90fc75f69445a36d
                                        
                                            GET /images/0102y120009tf26vrA1E9.gif?proc=autoorient HTTP/1.1 
Host: dimg04.c-ctrip.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.110.17.24
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 151061
access-control-allow-origin: *
last-modified: Tue, 12 May 2015 01:00:00 GMT
cache-control: max-age=15380761
expires: Fri, 03 Mar 2023 14:33:13 GMT
date: Tue, 06 Sep 2022 14:07:12 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   151061
Md5:    89c820a186cb325d9979cdae663875eb
Sha1:   e9dbc77e9d46e03ebec28aaca2bf5e302767064f
Sha256: 9116f460b6f4c7d03cf9be95d414ba83d6bcba145a4f1eddd9decec6127e0ade
                                        
                                            GET /template/m1938pc/static/fonts/font_593233_jsu8tlct5shpk3xr.woff HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.jxys47.site/template/m1938pc/static/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 13408
last-modified: Fri, 14 Jan 2022 04:47:30 GMT
etag: "61e10062-3460"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 13408, version 1.0\012- data
Size:   13408
Md5:    99af6debcdaba3e7ffe01b4c3cbccacb
Sha1:   4efda64b06cd7c294f6214623bcb634f3def3bd1
Sha256: 1106aebd6819da7203324abc443186658c8f54180a460ccc5b83553c5ce34f72
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C9652D84768B493AA73D8BF5B826094D17369F8C1E8781365C6E3544CBAD4CBD"
Last-Modified: Mon, 05 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=495
Expires: Tue, 06 Sep 2022 14:15:27 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A23F19AAC386608EC487F2103895D6F3952AA95E628F3969373D1985831D6D1A"
Last-Modified: Tue, 06 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10429
Expires: Tue, 06 Sep 2022 17:01:01 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A23F19AAC386608EC487F2103895D6F3952AA95E628F3969373D1985831D6D1A"
Last-Modified: Tue, 06 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10429
Expires: Tue, 06 Sep 2022 17:01:01 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 11:41:30 GMT
ETag: "4f619398c4e61640e81f3c6f96e91019bb9bff12"
Last-Modified: Tue, 06 Sep 2022 11:41:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 265
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c5087efa1c0e-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    1f9b2d2783f33078462e63f03b6b74c9
Sha1:   4f619398c4e61640e81f3c6f96e91019bb9bff12
Sha256: 11091731063433fc79ff7a19d9694d9e5126b8d56cef10833ad2c20323f4b379
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 11:41:30 GMT
ETag: "4f619398c4e61640e81f3c6f96e91019bb9bff12"
Last-Modified: Tue, 06 Sep 2022 11:41:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 265
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c5087dc90b31-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    1f9b2d2783f33078462e63f03b6b74c9
Sha1:   4f619398c4e61640e81f3c6f96e91019bb9bff12
Sha256: 11091731063433fc79ff7a19d9694d9e5126b8d56cef10833ad2c20323f4b379
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "7D58E511345A7177425885DB0B2176CDB8F9A9326E254F74CD65E112E840F78E"
Last-Modified: Sun, 04 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10396
Expires: Tue, 06 Sep 2022 17:00:28 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 11:41:30 GMT
ETag: "4f619398c4e61640e81f3c6f96e91019bb9bff12"
Last-Modified: Tue, 06 Sep 2022 11:41:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 265
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c5087f3efac8-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    1f9b2d2783f33078462e63f03b6b74c9
Sha1:   4f619398c4e61640e81f3c6f96e91019bb9bff12
Sha256: 11091731063433fc79ff7a19d9694d9e5126b8d56cef10833ad2c20323f4b379
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 11:41:30 GMT
ETag: "4f619398c4e61640e81f3c6f96e91019bb9bff12"
Last-Modified: Tue, 06 Sep 2022 11:41:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 265
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c5087e25b503-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    1f9b2d2783f33078462e63f03b6b74c9
Sha1:   4f619398c4e61640e81f3c6f96e91019bb9bff12
Sha256: 11091731063433fc79ff7a19d9694d9e5126b8d56cef10833ad2c20323f4b379
                                        
                                            GET /800a83efcf662b60b2ec0c6bb37ce110.gif HTTP/1.1 
Host: kvezz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.154.215.92
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 162
location: https://acoossu.top/800a83efcf662b60b2ec0c6bb37ce110.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2E23CFCDB5645702A7CF27F63BE79BC93983746D84B1F4EDB36457C6B0661E34"
Last-Modified: Sun, 04 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=611
Expires: Tue, 06 Sep 2022 14:17:23 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8013D203E4BAC90F25EE212215C5281D45718DF18EC062869FF92F619D6B5E9C"
Last-Modified: Sun, 04 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6145
Expires: Tue, 06 Sep 2022 15:49:37 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            GET /upload/vod/20220727-1/216a680fcabdc4f622130059f8ea82da.gif HTTP/1.1 
Host: www.yssydh.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.209.49
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 47538
last-modified: Wed, 27 Jul 2022 08:34:24 GMT
etag: "62e0f890-b9b2"
expires: Tue, 04 Oct 2022 01:11:43 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 219329
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KAt%2BBsQqYYEjdBrFm5R3hBru02U7kioZOMEW94He8KpPwQYlJNacFfB4lmI0sj9dSO%2BWVLXrZF3F1Svcoj4KVD%2FRan247ycylOQgQTW7Ja7Nqcuu3gkm024stvZ1182GLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c508bd560b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 150 x 150\012- data
Size:   47538
Md5:    238e06fae36a60963dd217adc895c9e4
Sha1:   feb1b8c405b5e162fb23a7727aedb83eae0a9e9f
Sha256: 321e056f1cd521d36cde0b3579d208fd0118f423b07b92622a215ca551639fce
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8622752192615128AAB507E4133A002C5C098325FF6B01AEFFCC0076916A9F40"
Last-Modified: Sun, 04 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6096
Expires: Tue, 06 Sep 2022 15:48:48 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8622752192615128AAB507E4133A002C5C098325FF6B01AEFFCC0076916A9F40"
Last-Modified: Sun, 04 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6096
Expires: Tue, 06 Sep 2022 15:48:48 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            GET /template/m1938pc/static/css/style.css HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:11 GMT
last-modified: Fri, 14 Jan 2022 04:46:10 GMT
vary: Accept-Encoding
etag: W/"61e10012-10aff"
expires: Wed, 07 Sep 2022 02:07:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   173102
Md5:    12173bd5a6212259ab7df155f36c150d
Sha1:   875047e30def42844cb24a2f372c381d6ab90565
Sha256: fa51bacb6598e0551b389791530b3d15df79c0f09d57804cd06fd117e421f651
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 10:23:49 GMT
ETag: "1d74a164a2b6062d24bfdf2247c3ee80bdf75c8e"
Last-Modified: Tue, 06 Sep 2022 10:23:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3121
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c508ef9f1c0e-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    066e6e4d560c98bfd52b8d889990efe9
Sha1:   1d74a164a2b6062d24bfdf2247c3ee80bdf75c8e
Sha256: 888fb909568e5df54eb3008867191aff3092d108c58642ef8dcf894e3e14a50b
                                        
                                            GET /template/m1938pc/static/css/white.css HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:11 GMT
last-modified: Fri, 14 Jan 2022 04:46:10 GMT
vary: Accept-Encoding
etag: W/"61e10012-29d9"
expires: Wed, 07 Sep 2022 02:07:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   150303
Md5:    2eb6c5239ebeab1c523ec9328205e48e
Sha1:   bbefe7652a68cb9bc5abc172311995b99ccd9810
Sha256: 2228cf9ac428793c557df870e7f3a2407a00da9ea49da0279a9a2b418befb4ca
                                        
                                            GET /hm.js?2ac4a2d34c34a270e029b4996d351332 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11339
Date: Tue, 06 Sep 2022 14:07:12 GMT
Etag: afe1a05f5a9d5a111adeef603558627e
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=710BD36B744E3B9B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (626)
Size:   11339
Md5:    3436ed340b494e5de434f4deba000147
Sha1:   cfec42bcdf5b5eb9dbe6ffad45e74c4674d442af
Sha256: 7119d68716c10ff24c8beb23659d3dc334f4778363c7e0de173ef3265d1d04a2
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 10:23:49 GMT
ETag: "1d74a164a2b6062d24bfdf2247c3ee80bdf75c8e"
Last-Modified: Tue, 06 Sep 2022 10:23:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3121
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c5091e4a0b31-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    066e6e4d560c98bfd52b8d889990efe9
Sha1:   1d74a164a2b6062d24bfdf2247c3ee80bdf75c8e
Sha256: 888fb909568e5df54eb3008867191aff3092d108c58642ef8dcf894e3e14a50b
                                        
                                            GET /upload/vod/2022/08-25/12/fnwnzck4rmh1242fnwnzck4rmh5220641.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 8816
cf-bgj: h2pri
etag: "f28eb7223db8d81:0"
last-modified: Thu, 25 Aug 2022 04:42:52 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y7MD%2Fw8E1U3TUTQGZAv4x6%2BCmXEk4b3co%2FBDDZNZXeM2SBtArUyHpGgDDW6q29lU1bcAuWnK%2F%2Bw0BxWpFADhgWIMjv6heRtVUzZxRbpt77BfCxCxjsW37%2BA5GWBgifmUdhy3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091df672bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8816
Md5:    37d53d478b274e76e9cb9f9d45056897
Sha1:   17e082e2982add2172f586268789d193ffa8bf65
Sha256: 329cb55c0065ab1e9176fb434011f9a690429f0030b70328e673a432f54eee50
                                        
                                            GET /upload/vod/2022/07-08/10/y21pp0ji2ri1048y21pp0ji2ri372131.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 9283
cf-bgj: h2pri
etag: "d94238397592d81:0"
last-modified: Fri, 08 Jul 2022 02:48:37 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YuRZowRKveydCpmg8gGDgmPqdhy3ZPlKeOQVITx69qmQsLhYzfU2Cke6OTZcseAwypPD5%2Fsk4ObaRt6uB3SxXE%2B25xPIFyVwF1JoCHA%2B%2Few8vIgISiPRLXwHPOHBcw8hKE84"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0272bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9283
Md5:    1b3950442f67dcdc09082d46339c6559
Sha1:   5ddcfba342e9f6c7b04c4c4d7b60feb0a585a8b3
Sha256: c9278ff92ccef88872e7cd1b5a681e3bc409b05f4f87b7d181f69afceba62af6
                                        
                                            POST /gsorganizationvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:12 GMT
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 10 Sep 2022 10:23:49 GMT
ETag: "1d74a164a2b6062d24bfdf2247c3ee80bdf75c8e"
Last-Modified: Tue, 06 Sep 2022 10:23:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3121
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467c5092fbffac8-OSL


--- Additional Info ---
Magic:  data
Size:   1459
Md5:    066e6e4d560c98bfd52b8d889990efe9
Sha1:   1d74a164a2b6062d24bfdf2247c3ee80bdf75c8e
Sha256: 888fb909568e5df54eb3008867191aff3092d108c58642ef8dcf894e3e14a50b
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "7D58E511345A7177425885DB0B2176CDB8F9A9326E254F74CD65E112E840F78E"
Last-Modified: Sun, 04 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10396
Expires: Tue, 06 Sep 2022 17:00:28 GMT
Date: Tue, 06 Sep 2022 14:07:12 GMT
Connection: keep-alive

                                        
                                            GET /upload/vod/2020/04-23/18/foeezy05xhd1806foeezy05xhd4811653.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 10916
cf-bgj: h2pri
etag: "d52ccbe65619d61:0"
last-modified: Thu, 23 Apr 2020 10:06:48 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4045
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6WeSXhONijVmdBXWxHCR9UZIc8ysB%2FSRxRY3yk2MQxVB1DVjjr0jo5PUGFKqyYNH1c9ncgWQm2ITt6ABX6yv6BtJmdsPzi%2BFT39R25d7gK6pKzdhiLLnFy3j3awx%2BZjP3EtH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0b72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10916
Md5:    75c25e1130e543301a2ce21207b138de
Sha1:   41330f061d526d70715758aeca8c2ab0260e4360
Sha256: fdf89e1aba41a197e95962d6556b52a7aeea570577a99d64a7cb0becee3ed0bf
                                        
                                            GET /upload/vod/2020/04-23/18/gqkuo5gvhw01806gqkuo5gvhw04711651.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 9604
cf-bgj: h2pri
etag: "19314fe65619d61:0"
last-modified: Thu, 23 Apr 2020 10:06:47 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4045
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4qeXeDEDplosVamN%2F6DulKQbX0XhRalrk5061IKMIdv6RP52j55ZmWxQo%2FEAptkFsYwUC0%2BL%2FpgMngFb2oQvLvGxiWA0gNzDr51HkFrtdUDXAycnl2StNS2cYZTWTgS9VC5W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0d72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9604
Md5:    aa3b2b61a8bdb5048085788dff766828
Sha1:   d81729b24e28eed15778dd97f2b526d78c943d35
Sha256: 7a2f20e96825fa39f771e65d1c4d1141b34df8bbee5fba3d3876cba29400e933
                                        
                                            GET /upload/vod/2020/02-27/19/05ekspbihox194005ekspbihox222755.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 6422
cf-bgj: h2pri
etag: "793925b262edd51:0"
last-modified: Thu, 27 Feb 2020 11:40:22 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5672
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BdVdBnUlIKQ2gQaqVjGDSNMpX74wC%2FhwvazWlILSEBhjLUa9N%2F6qZkrIHI3Z1Mmv4k%2F0utQecMoKP2ClCnfNCVa5mXTZ3Qr5SS3aT5X0dEstkeBzSdIA0RKOFYC1Gmfmqa%2BE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e1172bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   6422
Md5:    6359c963898679a6e9c1ad194eb1827f
Sha1:   9cda6c9c3b493966d27be7dd0dd035aee5d16ff2
Sha256: b9af399f8b253af1a9e5359ea90f5f500baff8fdbb4a8e6a9cf54ae980353c5a
                                        
                                            GET /upload/vod/2020/04-23/18/l4rdj5dg2i31806l4rdj5dg2i34611649.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 10756
cf-bgj: h2pri
etag: "b198d5e55619d61:0"
last-modified: Thu, 23 Apr 2020 10:06:46 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4044
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rk29PCihhBM0OptjTXRxtulC2UQsWqF0ADpNhzUEK4L6U%2FCWb8n4BA0VHyjjJyqHgCLRSjZWXUVCv%2FhuLQZdwXuPxjO11nQjkR%2BN7rzkdnlfhl2foTHriDnY13Gp7z0EhfRp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0772bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10756
Md5:    616d1dcc1484216ded65accd8ccb98c9
Sha1:   89081f2a6ccbbbdca7f72cbf6c8dfa1b76e7fbb0
Sha256: bfa6eb0d8de0d2cb6004a448e957c5b5fef4908f968a0934e871d82cd319e8c4
                                        
                                            GET /upload/vod/2020/02-27/19/girzn1k2set1940girzn1k2set382757.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 8417
cf-bgj: h2pri
etag: "b237cebb62edd51:0"
last-modified: Thu, 27 Feb 2020 11:40:39 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5890
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BuNqXw8SwSgq%2BMg30mBms4EKCE%2F0AtH7suwXrDt0VkP2zaRiqbvvhsyAqxT5xIV2gQs4lX5Y5uiW7ZaWcwNeTb7HE%2BnbVAd57p1p6rV7u0zSNCsoHU03u5lbpSz3cKG%2B6b9i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0f72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8417
Md5:    ce67d4a7a6c35810dbb5eb3a77e87780
Sha1:   effa17c40c7bf96024cec62aca803770db51c32a
Sha256: 37dcf8e675afd36f33794d3d8f75aae2688cc50735ec6943a577734fcb059c89
                                        
                                            GET /upload/vod/2020/04-23/18/adir5upepi11806adir5upepi14511647.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 9467
cf-bgj: h2pri
etag: "45b854e55619d61:0"
last-modified: Thu, 23 Apr 2020 10:06:45 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4044
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F8ZK61%2FIhpaVWbSLOjygyT0iNIdREfoZSZqv7wTb13LKBwENOVjUmUu6MUX5ubrbCFVdzTsdEswBTe0EBsJ13LnEBWhyQecI7ILUbUxVkrx6PfVqUJBuDwWyLHlLSaQxxbE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0972bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9467
Md5:    2451042c032f90acc5d2fc703aeb140d
Sha1:   3d94c4e4ac738cb623e54fded28cc2d8dceada46
Sha256: 46cd56895e6f54802cdc80bbea481d32021832a1ef8ae4126dbdba944a47eedc
                                        
                                            GET /upload/vod/2020/02-27/19/k4uxiqelja41941k4uxiqelja4112761.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 8653
cf-bgj: h2pri
etag: "d6c04ccf62edd51:0"
last-modified: Thu, 27 Feb 2020 11:41:11 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6144
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QeNlqcpKQx4%2Fj%2FOixPeQRwvn7dwv0MndFk%2BMh84DB7SLxo65SyyDZBlsXQEjInl0%2FK9c%2BP5axLTvPkljIIWEq4vEL7R25lSOW6%2FoBUljLjBvcljG9W49WHEIng9Jl2usD0io"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e2e72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8653
Md5:    c3d456a58918067b1b04eaba890eb8ab
Sha1:   d41aad32ce81be72e4bf8ee14ce3a351b527f90f
Sha256: 264562b5881c9de089d09840858656369a46c6283bb65f134ae55a96bb7a6c9b
                                        
                                            GET /upload/vod/2020/02-27/19/0eneiz0fwlb19400eneiz0fwlb552759.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 11110
cf-bgj: h2pri
etag: "623565c562edd51:0"
last-modified: Thu, 27 Feb 2020 11:40:55 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6146
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lz9WxV8MCOUeVqIbLS9T%2F4fF3SZ%2F0xXKggco%2FcAu3%2Bu4kFSDSXfomo0TOP5DjCVmzoVg2K4DlzTaGeIIoczCF9bbKg50zyiTc5na4R6hsH9A52izOesqb%2FuE9%2BnhTPrGhx3d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e2f72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11110
Md5:    cafeb460cadba158770baa63568b1c28
Sha1:   3d5724651bdef982adab93b4c4c0518b0834d108
Sha256: b84b8d3b81919aeb2025c5e055f47e6cebb4f7d303bb82d0738587663500eebc
                                        
                                            GET /upload/vod/2020/02-27/19/dn3ks3ehl0b1942dn3ks3ehl0b272769.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 7895
cf-bgj: h2pri
etag: "8d9b0fc62edd51:0"
last-modified: Thu, 27 Feb 2020 11:42:27 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3400
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zve%2FuAZzcAc1ScBtxJRF4yZoOYnN4c7O2QVDhyU%2BEikuZBZ9ajupx%2F3bb%2Fdmmq7bKqyPQAM%2BMihzfUpUcY%2Fb6RKSFxXt2kgkrc4I7BaMCt6fNA%2BL8rHPQUwf76oBelr5oonj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e3172bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7895
Md5:    02baa5bb73e1ba436b6665d59e00b5a8
Sha1:   ee45f27ad955f2ea795e5f2c2a2d318e4f207820
Sha256: af48d15d0b7c6a382800d91236ab03c273a3b30c9b79bc176986c12ebdf5c5f4
                                        
                                            GET /upload/vod/2020/02-27/19/cc3lpqantm11942cc3lpqantm1112767.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 9522
cf-bgj: h2pri
etag: "4c6739f362edd51:0"
last-modified: Thu, 27 Feb 2020 11:42:12 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3653
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b7M8yqyVogpJxgYZuuHdpwxpOl8jRcmCv5wxork8jnxTkViRgp02BADMxk9h8Ou5viatZNPLSgonF4Sw23rLSRVI3GGNGDbEla64M7UosCaYXgq5KHagHyhHsOlGyhnxkX0X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e3272bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   9522
Md5:    2705c62151d22cbeacb2a82ce7f6dcf2
Sha1:   ce30141f61a3346c1784e77e5d2aa60775a1a76e
Sha256: d55a2cb6b9b1b540e47f5da9d9212ef2b42071ab2c2dea2da60c803237b4b38a
                                        
                                            GET /upload/vod/2020/03-28/06/lhrscdncf1g0603lhrscdncf1g47765.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 6884
cf-bgj: h2pri
etag: "90ee1c97834d61:0"
last-modified: Fri, 27 Mar 2020 22:03:47 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3380
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DnZhgiqx5J5GcUfUbukP3FLKSvYg2edVFq%2Fi%2BAsG%2BUS%2Bt2wPTUs3hM2%2B3y1L2958oePX%2BhRYby0EJLLYoianp1u7dv%2B0f9YFum9AfhW7miKm0hPoU63BHr2hfIP0dy%2Bhm%2B3P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e3372bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   6884
Md5:    b3e7a6843ed0231c610d24f89bf21557
Sha1:   aaace87179709d7c740572b6a12150c5c186f269
Sha256: aa4b4ba9f67787b3b841c89d0cfad2400e246f4e9259128960a5073267311d3c
                                        
                                            GET /upload/vod/2020/03-28/06/bkxge523frl0603bkxge523frl46757.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 8287
cf-bgj: h2pri
etag: "8da59296834d61:0"
last-modified: Fri, 27 Mar 2020 22:03:46 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3400
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2BRI37j0BsXzGAdJUaigT3jCdS0GM7z5BDJJSvEgGhS0iE2x4hK2mDKKYePBs9NtLVvEHKB19k4uSmvGoJampyxKORgh2uU9lmflftyp1irLbKXp4PZuoG9Bk9nNc4rx5qSU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e3472bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8287
Md5:    1f65f59e340a1a261e4430e1fe11a042
Sha1:   8b46d835ffeea506a5a5d07433d5df0fa12c10b5
Sha256: dc8079a2841590e8da53f109911ed1a866b7fd1f5a5062431e5d2685a24c063f
                                        
                                            GET /upload/vod/2022/07-29/11/5000yqfstlj11335000yqfstlj5510563.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 13639
cf-bgj: h2pri
etag: "3634a17fca2d81:0"
last-modified: Fri, 29 Jul 2022 03:33:55 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LRA2BQM%2FuMXyf11P4C33dlQ34ikFDAJf8NkkUsZFy4oQZmrWdynIC1r2d6ZMvMSMca33oN0ftxI42YNMzo65mpr%2FR2t8H8hESJBhPvM6nnvk%2BEp8cBEGq1obr0tQXc9TZr6Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5093e5372bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   13639
Md5:    66ad1a9e3498b0c8aea1dfc7dc134ebf
Sha1:   9afeb4a06eb7a614dd3fe56eab917500ae3b30e6
Sha256: 25fc845d7813ece47e76f0bec2d681b11b0cd75e038c6534d99e5ee5e80ada08
                                        
                                            GET /upload/vod/2020/02-27/19/qclmcv2poa51941qclmcv2poa5452765.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 7195
cf-bgj: h2pri
etag: "2b7366e362edd51:0"
last-modified: Thu, 27 Feb 2020 11:41:45 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5890
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kG8jXib7EZ8oFSpLNsufT589TTtdZOo78vnbPwjK8blVWbjFdb9vG2EtGUA6vNaELQPvVL6WTEIluPoEzxdVBr%2FtwxBSlTC%2BCcTuibBMX%2Blbde252ALn8q%2FqtbwEAvAb8xkm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5092e3072bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7195
Md5:    d84241b3af7bb56223a133b0b53b30d0
Sha1:   1eb02ce33e92c3d5b865cff1787ada2675e1da6b
Sha256: 8f125d5d1f654a3f89a4fcabf686bc193d4e7b7078a622a66f35880caac93820
                                        
                                            GET /8fdce7479dd03f1ee73805e8d2e9bab8.gif HTTP/1.1 
Host: kzecc.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.143.94.110
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 162
location: https://acooss.com/8fdce7479dd03f1ee73805e8d2e9bab8.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /92f0c144d76dd785f7c04f84ae149b33.gif HTTP/1.1 
Host: kzeaa.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         66.150.130.123
HTTP/2 301 Moved Permanently
content-type: text/html
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 162
location: https://acoossi.top/92f0c144d76dd785f7c04f84ae149b33.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /upload/vod/2020/05-22/06/isxumod44si0602isxumod44si315499.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 11115
cf-bgj: h2pri
etag: "767e6b86bb2fd61:0"
last-modified: Thu, 21 May 2020 22:02:31 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DB7MqT%2BubGGtDiMbVp%2FOSKjcrxB%2BP0970Hb3jeU1sBmRKtjgqU%2FxErqsi9J55eZKSsApg7beB4pV3ZMlo7vaWoGBGIwQM82eekX9Z2allOjOUfm6bCTLmaA%2FjASEhD%2B4yUIS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5093e4172bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11115
Md5:    84cdf376aca38535d31baa57f566fdf5
Sha1:   c3fb6f9b7fe9d1e26ee0bca9d6af04f4960ff2f9
Sha256: 5ab0bd8108192488970b8be2552dbc0b18048cdf9e7b78eea5a1f4455237057b
                                        
                                            GET /upload/vod/2020/03-28/06/lqa3b2tpmh00603lqa3b2tpmh051805.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 7822
cf-bgj: h2pri
etag: "b4e75d99834d61:0"
last-modified: Fri, 27 Mar 2020 22:03:51 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3380
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D9%2Br8mEq64%2BVM97Wkm2XLYM8z6tnvmrjv5wEwZgTKWaNpuj3na05X7UC7Dz55rW9jP2bTC57GNH85xwJD03M%2B1P9K0AQ40Mpm8z%2FKHJOHXrc%2B5MtN4D0kIU6TKzt%2B8JCk0ez"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5093e5172bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7822
Md5:    ffbb62deab2f847fb9e0cbf1748e211a
Sha1:   3fd82bcbcb22c556f09177c83821ad7759b94161
Sha256: c422f5638fd6a5751dfcad145b226ffd1dce1a99270b04fa8ec019dfa16b9578
                                        
                                            GET /upload/vod/2022/08-03/12/e0klawjnksm1252e0klawjnksm2712661.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 9568
cf-bgj: h2pri
etag: "9e447bd4f4a6d81:0"
last-modified: Wed, 03 Aug 2022 04:52:27 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R85YaBzSdVrIvZSTIIYi05tKKiu7ArvM8S%2Fd2hbWCFW%2BuJWDEwlZyxZR7s89VkjQ1LodaomhYFtOHatdzaiDqDw7fzUZrgs5t094vrmoGEE%2FIpdKDx4KT82%2F1J%2FImu8tjK7f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5094e6872bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Size:   9568
Md5:    ab2d140a99eefd840872ab3460b6eb3d
Sha1:   9cc04d812b06aa0a8b35b843feb95e08bea1e713
Sha256: fd9593d4050745df89650568c75935a3f9efa2f7fb6584f66b7be68f5df6e1f6
                                        
                                            GET /upload/vod/2022/08-05/09/agq51f4uom20943agq51f4uom23912911.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 11928
cf-bgj: h2pri
etag: "90bca1c96ca8d81:0"
last-modified: Fri, 05 Aug 2022 01:43:40 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XHRxKnR0gLK05eqIX6KmAS4q3MK7huggnqOJ4QXpTA5tYuDQ9gfUy966qMKZMlCw18DVKX7G%2FWvjcmhEAcSi1WLTes49BnLZ7Lg8ZkGxHopoyhidWi9TCPuFMY2xPle13%2Fy0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5097ea672bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11928
Md5:    59b8d9b74e2f8d9998a15bbaf993a329
Sha1:   f8b17359f7e3b8a2b3d95dca5ecc81da85e43cc4
Sha256: 672e78a754dac2cf7410abdd8a1bcbee94ef26edb2d092991d8ac8563b7dffac
                                        
                                            GET /upload/vod/2022/07-17/11/wopwvnixakc1113wopwvnixakc315737.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 12128
cf-bgj: h2pri
etag: "2c7535318b99d81:0"
last-modified: Sun, 17 Jul 2022 03:13:31 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9EWGD4yeZG64%2BG8DNTvwUuDBFphCfUU30X93u%2BsB8K%2FToBaSSs3%2FtZS5ZP32tytIUGP93jn8PtXvul8tnU6gfeZpU9mJ3KvpJDg5C7KNtNW6xJB9XKUdQ6NqXo7m8MkChF6n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5098ecf72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 90x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   12128
Md5:    9287ba9ade54b4db145339642ef0ce6f
Sha1:   06037e4406b6ae3a3faccd34321e52629a42f583
Sha256: bbd780e4fbe6dab22abf3c975474b5e02b8c2ca85ee71f04d3cfdf648699c45a
                                        
                                            GET /upload/vod/2022/07-20/01/pknycfzsm0e0150pknycfzsm0e096829.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 10645
cf-bgj: h2pri
etag: "202e5bfd979bd81:0"
last-modified: Tue, 19 Jul 2022 17:50:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OL5Y7VqT1Dunr8Y1pePMqsHkCFYX1bZXNNwHTjyulL%2FSyTrHP%2BBORWIMR8rS%2FeIQBfHe4SI31aXGJG1zqpmvfujI7NrQpTc6n2FZwl3Sd6QrIpI%2Blua4orQo1gNOjf8qW%2F1L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509aeeb72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10645
Md5:    4539a1894800311e3a3527f0bdb390fe
Sha1:   a5b64596b6de6bb31c89e23ce0a0f94ed5ca5c0b
Sha256: 642626194e2523a143e5597404e6ceccace5022a05b4847411c196e0621429d2
                                        
                                            GET /upload/vod/2022/07-18/11/d0unbto0ngv1155d0unbto0ngv296191.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 11793
cf-bgj: h2pri
etag: "6176e6385a9ad81:0"
last-modified: Mon, 18 Jul 2022 03:55:29 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YBDI6zMbf3dy%2BuYF6e0YY0CI72hhJV6i2Gce5T3N9d%2B2eHhdUVs6ixR4CmKUCd5%2Bh5GYzO6Ci5gtje%2Bfk2nQxVPKp3HgTYiVsif1O6eSmlHL%2BhLikVwj%2Bah1oNN7zpujbIpK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509aeea72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11793
Md5:    b582a4af9231cc88d8f68f2e0d404fcc
Sha1:   7b0ea3d20b788d237ba30994e75b6755532a66b9
Sha256: 264171cd50909148db302ce297972ab863634383a272c0e725ef22924cb2e4d1
                                        
                                            GET /upload/vod/2022/08-31/13/2yrr0wod3wh13232yrr0wod3wh3122907.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 8805
cf-bgj: h2pri
etag: "f0d146cff9bcd81:0"
last-modified: Wed, 31 Aug 2022 05:23:31 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4805
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tjRm4mNORqACGKCVgx1T2P5LGSgKgz38F0qdisk5t28u%2BiEhPsvMO3%2FrQ5su%2Fthqwbm%2B6f1KYwoeHr6pDi3Ey%2FHZCOmD%2FdSlTbngDWGwu6UvsZbS77CzaCBVPIayxb82JqoC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509cf1772bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8805
Md5:    30ed76a00c6ba5a0743421c79a85a456
Sha1:   84ab818e94afb878dd64e354b69cbb2eb0bdbb22
Sha256: 09df0ec846ddca07df9c60f975436a9ffc469f260fad2fa5cd731b686d01500d
                                        
                                            GET /800a83efcf662b60b2ec0c6bb37ce110.gif HTTP/1.1 
Host: acoossu.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jxys47.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.33.223
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 739561
last-modified: Mon, 02 May 2022 19:20:49 GMT
etag: "62702f11-b48e9"
expires: Sat, 01 Oct 2022 20:29:27 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 409065
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uti45u0XcUioZCAwaOXatjQuP569syRxwqrmhff8LTuiv8WXqV99v8CtTMBX9sl67dFaGc4GKaGLd381MMmKTTaviPYPZBRyUYaIBqLhbyBsNJsSA10TfUyb99dbfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509fa2db51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   739561
Md5:    5318e42d25e6b9b53726d8166248cc33
Sha1:   762b03c16562865a9a58a02dba471f78608376db
Sha256: b632e7a04d032c4853a8460e9d636ac032f697db8f50cfee6a6016587ed8f62c
                                        
                                            GET /upload/vod/2022/08-09/11/4emvz4chswy11054emvz4chswy4314401.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 7762
cf-bgj: h2pri
etag: "87d821ea9cabd81:0"
last-modified: Tue, 09 Aug 2022 03:05:43 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xenTY5NU6aVtR1UD1s3BeuSOYq0Pv2qorflByAYwZr8Jw45e8%2Fad0oh%2FWrsRZGdwEMsRDJryFSDZgVHF2H4bmuYeeUJWHmrxXFVXrWPPMB7GM6WhNqvMd%2ByzO10BoRrTdJ%2Bt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509df3872bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7762
Md5:    89f5866e452889bce1a70741d1a18ffe
Sha1:   7bb9ec22f0bf782ae37657a6ccef85700d25055f
Sha256: b511dabc217b91d814c2d041c66bb5635cf64bd00f084e2692c96c7ef753ea6a
                                        
                                            GET /upload/vod/2020/01-05/17/r2pp3jv0apa1755r2pp3jv0apa122511.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 11011
cf-bgj: h2pri
etag: "ee56df38aec3d51:0"
last-modified: Sun, 05 Jan 2020 09:55:12 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Fk2TL253J93UrweLjK9%2BYEcFpJm7PxGbaMV3cNhNIwBUrtrTq1gGzgHtvvoCPCwQKbxuf4XzjsZoWvyiOmZDkXA5Uzc4vGD3fNpI0vC%2BFH1TnrDeLnTfwuROz0%2FIHFcFE1y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509df3972bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   11011
Md5:    bde5197cbef45807a46e8ea1f48b9c24
Sha1:   4bb26bf05a79955276c6d8834253818e2125e9b5
Sha256: f3f1ca5c751f8893b6d05edc5b233cf823260a5afc7a3096254f2aa4bb806159
                                        
                                            GET /upload/vod/2020/02-27/19/2rvjmp5bj1d19412rvjmp5bj1d292763.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 13198
cf-bgj: h2pri
etag: "c7cdf5d962edd51:0"
last-modified: Thu, 27 Feb 2020 11:41:29 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5145
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sHlCV51nutkzuiHqSiD9qMBJV72mPw3DnAWGuJPBt7GuGdtVjbT%2FaXr4yrWsNgKAbl62mqqepyrvzGgI%2FtiQtGza2S0JCCmA6MWycfDqZZluetgFR8wt9THSVGkh2cpgSLMl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509ff6672bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   13198
Md5:    2bf65def29403655980b538bf770044e
Sha1:   7686935a8ce0fc910d549510b3177c5068a1673d
Sha256: 587e3ed3d894140b05a5b34954a43cbf210c6ebde885555ba89f26b9b050ae14
                                        
                                            GET /upload/vod/2022/08-15/12/ukv4amj1scx1243ukv4amj1scx2916719.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 7399
cf-bgj: h2pri
etag: "2bcb99061b0d81:0"
last-modified: Mon, 15 Aug 2022 04:43:29 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qRmeJaHUFt6dqZzGbu%2BkY%2FYUJXNj8oVfNwTtEY7uW8mHAJnyFzZy%2BmsaFw1S545c4D9p3s6hWCOo2q6OarBD8StzFJqbi8r3PVjupTS7%2BV%2F7JQ4dlliP9fxZ1iCbBEnzA7%2FH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c509ff6872bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   7399
Md5:    eb6eb28aa2989226ff0d61488ebecebc
Sha1:   038fcdec42032906de63c1c6a3ef242dde0b7f8f
Sha256: 648d71776f6fff48456dc291e9e74011cbf04ad07eef0078f51604464c051003
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "AC3EF2403BDEE2BFDFE677A6D7C3824C32B27CB3DFA01DFE61E666A83701689F"
Last-Modified: Mon, 05 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10504
Expires: Tue, 06 Sep 2022 17:02:17 GMT
Date: Tue, 06 Sep 2022 14:07:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "38DEA82CAB192640A86A6F220435CFA39C05747636D1398FB5CAC66264566CE4"
Last-Modified: Tue, 06 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21406
Expires: Tue, 06 Sep 2022 20:03:59 GMT
Date: Tue, 06 Sep 2022 14:07:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 07:20:03 GMT
Expires: Sun, 11 Sep 2022 07:20:02 GMT
Etag: "23859c316292446ac1e7b39cd62f8428a43dc6a8"
Cache-Control: max-age=406968,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c5098c12b521-OSL

                                        
                                            GET /f48264215dede17305bafebb5c86200c.gif HTTP/1.1 
Host: nvhaaa.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jxys47.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.234.41
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 474816
last-modified: Mon, 11 Jul 2022 05:51:20 GMT
etag: "62cbba58-73ec0"
expires: Wed, 05 Oct 2022 15:02:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 83107
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FpLZu9bU9G2avkXr%2Fu8xfXbI6HCoEpYiuXv5XrOY7rrS2isZ2QGP2a3GULyztpb26u8L65H%2F8rZQdUZo4YkcXgVFxhK2jOMQnYm7AGaqRIs5B9BCeuUHqjl0tCvy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c50a0ec6731e-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 750 x 300\012- data
Size:   474816
Md5:    5b9eeb2dbda56fe2c5d70a3ae26ebeb5
Sha1:   f9e16d4fbab1502a1484d8236a47d9ee867734f9
Sha256: 0439010081ec4a589fd13ef97768bf8e485df83f28bc81c4b4c18fb508cbbc16
                                        
                                            GET /df0515659c031251093942922779f350.gif HTTP/1.1 
Host: nvhaaa.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jxys47.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.234.41
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:12 GMT
content-length: 417605
last-modified: Mon, 04 Jul 2022 12:16:06 GMT
etag: "62c2da06-65f45"
expires: Wed, 05 Oct 2022 21:57:33 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 58179
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhXEoTVpla1B0nwUqiP4RP7RzVe4sNhM6%2B9x5NfwrRevueoRAtksZM%2BIrZr5fDnBXCgqtgK2%2BT7RRxl85sO5%2BTLc8CD6ahoXg91X6E9FrkRDt8Epa2sNi4TtwIwO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c50a0ec2731e-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 120\012- data
Size:   417605
Md5:    fb08ecbf43e86fb896554c765a146f05
Sha1:   7d73395cfd69d9025fc65e742f812a9ee739f072
Sha256: 6051c428622f29877786c097c50417643f91cd4942529192961604762dd40981
                                        
                                            GET /upload/vod/2022/07-09/12/otbt3jn52vv1201otbt3jn52vv462503.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:13 GMT
content-length: 8193
cf-bgj: h2pri
etag: "693fdf9b4893d81:0"
last-modified: Sat, 09 Jul 2022 04:01:46 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=00ZjM2CWH%2B4U%2Br3L4ftux9QknqEwPtt7tTAxqvRSZDfdWb6tQfYoqz%2FX79weBohaywc6zYV3Zi845MzM8EU75G2u55yvTCE4AwOYlkLIGrJki8uh%2BpRfb54b6ed7TXfqQVtn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091dff72bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 90x67, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   8193
Md5:    4886b124faa9490c0b311dba40a053c2
Sha1:   22104b77fbe96a3475497743ad62a70d9da8e105
Sha256: 03e8e680e80d6deb8787e89b5e69ac07cd58145a02479e2917b3bca365164464
                                        
                                            GET /upload/vod/2020/04-23/18/iaklx01b0pe1804iaklx01b0pe4311413.jpg HTTP/1.1 
Host: fmlb.netlbtu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.235.173
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 06 Sep 2022 14:07:13 GMT
content-length: 10811
cf-bgj: h2pri
etag: "5061979c5619d61:0"
last-modified: Thu, 23 Apr 2020 10:04:43 GMT
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7opGHeUF1CX7Tdft1nmlbOoW5QvtcOkcCcLlKcmx0nQXg1Hj2qNFirCBhOXJ5JbOYmmZTyMLt8RaUty4JFVFQ%2BABsl4rkoHIV7pMjWjkH25t7%2FDoC1Bw1sQxL8Ehq9mK2FtU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c5091e0572bb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Size:   10811
Md5:    67cd5b028a7eff2a6a1b9210d2e01270
Sha1:   b767f43ce400bedadceb3e688ebe0db54a37df53
Sha256: 4ca646184d98b782c7b5928304f1ea76dffaeae6c0835ca5bf0927f06d8e1594
                                        
                                            GET /92f0c144d76dd785f7c04f84ae149b33.gif HTTP/1.1 
Host: acoossi.top
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jxys47.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.234.200
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:13 GMT
content-length: 1024160
last-modified: Wed, 25 May 2022 13:49:10 GMT
etag: "628e33d6-fa0a0"
expires: Wed, 05 Oct 2022 18:16:12 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 71461
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4aym4QsHhOp1rLC1xrDCOLuVZXV4sV0oy3lnhWoBT%2BTpHVbX%2ByL4VWrBb7i%2FIgmtBAszWQ3dq%2B1C3fFJVC532wz1UVPXkjhXDNau%2BZwAWAHuz%2F%2FTsTppXGKp%2Fu67A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c50ab94971fb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   1024160
Md5:    52748c8ca30fe48c822541046bceafc0
Sha1:   8640926f83b9c0d635fb28403505a7c0f0753857
Sha256: 2e292531362f37bf7a1cd01330efb234450b1f836e975c55f2b2179c0be32ae6
                                        
                                            GET /8fdce7479dd03f1ee73805e8d2e9bab8.gif HTTP/1.1 
Host: acooss.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jxys47.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.235.95
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:13 GMT
content-length: 864004
last-modified: Sun, 04 Sep 2022 09:11:53 GMT
etag: "63146bd9-d2f04"
expires: Thu, 06 Oct 2022 09:47:25 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 15588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9rJzJ7VSbBe74c15ud5tazFxRZBtdPzA2Qy102me98HT2ZR0NVa52XclBYojsh6o3tJ8Dl81JvYpXxUmoONW7Bn0yDMvtTe05ZdLbWtRH4CpgjYOHWzzRmU2tFmf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7467c50aafcf88c2-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   864004
Md5:    d2c820747a9b9b8c3abaab0775436ab7
Sha1:   99651afd10bd3874fb84d7973845482cd2c81f23
Sha256: 8aa3c7b05ba9bb5176a7155ead2a0ea562b07fb0dd7b27a9cf91c38e95ed43ed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:48:18 GMT
Expires: Tue, 13 Sep 2022 04:48:17 GMT
Etag: "cfb0b8084c37ad2e349b1e49a1da3a4fda26cde9"
Cache-Control: max-age=570663,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c50b2ef8b521-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 07:20:03 GMT
Expires: Sun, 11 Sep 2022 07:20:02 GMT
Etag: "23859c316292446ac1e7b39cd62f8428a43dc6a8"
Cache-Control: max-age=406968,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c50a78a4b503-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 06:51:12 GMT
Expires: Sun, 11 Sep 2022 06:51:11 GMT
Etag: "db53b2fb799900c48d647c1459040cb0e3b7a829"
Cache-Control: max-age=405237,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c50bcab6b503-OSL

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "38DEA82CAB192640A86A6F220435CFA39C05747636D1398FB5CAC66264566CE4"
Last-Modified: Tue, 06 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21406
Expires: Tue, 06 Sep 2022 20:03:59 GMT
Date: Tue, 06 Sep 2022 14:07:13 GMT
Connection: keep-alive

                                        
                                            GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=927&et=0&ja=0&ln=en-us&lo=0&rnd=412545912&si=2ac4a2d34c34a270e029b4996d351332&su=https%3A%2F%2Fwww.jxys88.net%2F&v=1.2.97&lv=1&sn=46882&r=0&ww=1268&ct=!!&u=https%3A%2F%2Fwww.jxys47.site%2F&tt=%E8%81%9A%E9%91%AB%E5%BD%B1%E8%A7%86 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Tue, 06 Sep 2022 14:07:13 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=B051F27DACC0016A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /template/m1938pc/static/css/1.css HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:11 GMT
last-modified: Sun, 16 Jan 2022 07:31:51 GMT
vary: Accept-Encoding
etag: W/"61e3c9e7-50e"
expires: Wed, 07 Sep 2022 02:07:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   57926
Md5:    f1857b88abe556aab74cd607fd3c3ac3
Sha1:   d86ef7af41c0c6897231e150ae78a6eb82fb2e55
Sha256: 92e40bc87fe5e908d4641f8f26ae20cad0eca016415e9059cdde66e55b1916c7
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "AC3EF2403BDEE2BFDFE677A6D7C3824C32B27CB3DFA01DFE61E666A83701689F"
Last-Modified: Mon, 05 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10504
Expires: Tue, 06 Sep 2022 17:02:17 GMT
Date: Tue, 06 Sep 2022 14:07:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 03:02:51 GMT
Expires: Tue, 13 Sep 2022 03:02:50 GMT
Etag: "9bf714ebb6d4440dbfaba18bb6301247842c6c04"
Cache-Control: max-age=564336,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c50b3ed9b509-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 16:29:52 GMT
Expires: Sun, 11 Sep 2022 16:29:51 GMT
Etag: "ae991af1fd5020d318fd8275b8a9a6465b882b15"
Cache-Control: max-age=439957,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c50b4d7cb511-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 15:50:32 GMT
Expires: Sat, 10 Sep 2022 15:50:31 GMT
Etag: "5c42aaeb2f6fa1801f731827fbcdf72671bf14b9"
Cache-Control: max-age=351197,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c50bcfddb521-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "296EB5699FD3BBB32459EFCA830C0423361F448ED990C77BD9B5FECBF69AD5B6"
Last-Modified: Mon, 05 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6085
Expires: Tue, 06 Sep 2022 15:48:38 GMT
Date: Tue, 06 Sep 2022 14:07:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 14:07:13 GMT
Ali-Swift-Global-Savetime: 1662473233
Via: cache1.l2de2[195,195,200-0,M], cache1.l2de2[196,0], cache1.se1[217,217,200-0,M], cache4.se1[218,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 06 Sep 2022 14:07:13 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816624732333692451e

                                        
                                            GET /get-image/0yFVWR9AM6k HTTP/1.1 
Host: si1.go2yd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         163.171.140.79
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 06 Sep 2022 14:07:13 GMT
content-length: 140259
x-application-context: application
x-kss-request-id: 42be03856f37421d8d1834ac0d22900d
etag: "4125d9bf66b1a755f42abaea805ee9af"
content-md5: QSXZv2axp1X0KrrqgF7prw==
last-modified: Mon, 28 Feb 2022 07:48:08 GMT
accept-ranges: bytes
server: KS3
age: 1
x-via: 1.1 PSbjwjBGP2vu136:9 (Cdn Cache Server V2.0), 1.1 PSzjnbsxsy229:10 (Cdn Cache Server V2.0), 1.1 PS-KHH-015lO119:3 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1se91:17 (Cdn Cache Server V2.0)
x-ws-request-id: 63175411_PShlamstdAMS1vj92_753-24913
access-control-allow-origin: *
ws-s2h-acc-level: 1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 750 x 376\012- data
Size:   140259
Md5:    4125d9bf66b1a755f42abaea805ee9af
Sha1:   17232f64827beb19e2a717d1bdbf384b3e938249
Sha256: d3c1b29a4d2c0fa6fc41d308d6c110eeb868276c2a74697766283838ebe1f732
                                        
                                            GET /137dd6d87688482eb020c1c774325059.185.gif HTTP/1.1 
Host: 87193776899.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.61.212.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "62f2795c-24659"
Date: Wed, 31 Aug 2022 06:08:58 GMT
Server: nginx
Last-Modified: Tue, 09 Aug 2022 15:12:28 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-16
Content-Length: 149081


--- Additional Info ---
Magic:  GIF image data, version 89a, 320 x 185\012- data
Size:   149081
Md5:    ca110f84ebcc10dd498b26dc6c90087b
Sha1:   cfaf975d43693cfc7c2e05305068b0d933748d98
Sha256: 04dff307dc6fdc4da149bad386613e102c1f0e6d2b26974c5666505c7d97ef2e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /5d290bfde1f54fff880e9553e702bbbb.jpg HTTP/1.1 
Host: 79181531227.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.61.212.219
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Cache-Control: max-age=604800
ETag: "630db366-1ac85"
Date: Tue, 30 Aug 2022 17:25:52 GMT
Server: nginx
Last-Modified: Tue, 30 Aug 2022 06:51:18 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-19
Content-Length: 109701


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 380x200, components 3\012- data
Size:   109701
Md5:    8e887859b22620e1b57d94d7db4a5a59
Sha1:   a8221eb24b4d49072cd5fc9d715357b492db6b58
Sha256: ace8f023527467099bfe159e5fb84637a71d6afd1e4282ac8f9fe6bb58428dcf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 14:07:13 GMT
Ali-Swift-Global-Savetime: 1662473233
Via: cache16.l2de2[478,478,200-0,M], cache16.l2de2[480,0], cache7.se1[501,501,200-0,M], cache8.se1[503,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 06 Sep 2022 14:07:13 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c16624732333672836e

                                        
                                            GET /img/200200.gif HTTP/1.1 
Host: taiwtp1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         220.128.218.220
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 06 Sep 2022 14:05:39 GMT
content-length: 75259
last-modified: Wed, 09 Mar 2022 04:51:10 GMT
etag: "6228323e-125fb"
expires: Thu, 06 Oct 2022 14:05:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   75259
Md5:    03c13356e00c2033df2c88cb919251eb
Sha1:   f3a334a0366ddda6a87034f7d6c889c4d159dc8d
Sha256: 0c184e206259e8d0c54d3fc12d3d5332e9f6ff5f0404630fcb2daefe65fe1bfe
                                        
                                            GET /img/960240.gif HTTP/1.1 
Host: taiwtp1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         220.128.218.220
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 06 Sep 2022 14:05:39 GMT
content-length: 223879
last-modified: Wed, 09 Mar 2022 04:06:14 GMT
etag: "622827b6-36a87"
expires: Thu, 06 Oct 2022 14:05:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 240\012- data
Size:   223879
Md5:    a39bb27f09ccd6961fe1c0f3074a8b97
Sha1:   0e914bc58abc78e7275d3c639e2aeb548313d627
Sha256: 269a642190139efcc044a53f3194f196e79d8e981d3e8cf0184ce4e8eb134020
                                        
                                            GET /db431bafa2474156b9fddc3d9c277b4d.gif HTTP/1.1 
Host: n7326.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.170.15.94
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "62da66b6-2b350"
Date: Sat, 20 Aug 2022 09:05:00 GMT
Server: nginx
Last-Modified: Fri, 22 Jul 2022 08:58:30 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-24
Content-Length: 176976


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 140\012- data
Size:   176976
Md5:    5c383b781891f009bfe7545eb03e78d9
Sha1:   75d4973454dc1243aeb3e10c8f58033b904f55a0
Sha256: 3fcb048f35db216dd311386f685b6dd7ed68384951f09cc018287cdb49d1d35b
                                        
                                            GET /template/m1938pc/html9/ads/zxf.js HTTP/1.1 
Host: www.jxys47.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.38.5
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:11 GMT
last-modified: Sun, 04 Sep 2022 07:16:27 GMT
vary: Accept-Encoding
etag: W/"631450cb-502"
expires: Wed, 07 Sep 2022 02:07:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   280190
Md5:    9c2d7a1d053daae2137f1e4c761c4304
Sha1:   e05264afc10e034fcab9ba9307f9ae1bb8d0077a
Sha256: 6e76e42cc20d2a6e404a60d59dcb1d6f30035684415b887c4892cd8caf49b17f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 06 Sep 2022 14:07:14 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 13:28:29 GMT
Expires: Sat, 10 Sep 2022 13:28:28 GMT
Etag: "704daf42a65583b731621ff798e3851fc82f5725"
Cache-Control: max-age=342673,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467c510f957b503-OSL

                                        
                                            GET /sezhantuiguang2/220X145.gif HTTP/1.1 
Host: taiyangchengjituantupian.oss-cn-hongkong.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.75.19.175
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 34177
Connection: keep-alive
x-oss-request-id: 63175411DD75B73833AEA4B7
Accept-Ranges: bytes
ETag: "DA841EBF9FDB1EECFD2A87209745CE34"
Last-Modified: Sun, 07 Aug 2022 04:58:17 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17999182063302881669
x-oss-storage-class: Standard
Content-MD5: 2oQev5/bHuz9Kocgl0XONA==
x-oss-server-time: 2


--- Additional Info ---
Magic:  GIF image data, version 89a, 220 x 145\012- data
Size:   34177
Md5:    da841ebf9fdb1eecfd2a87209745ce34
Sha1:   ab76c119e1f65a511d4af51231248a1c8637369a
Sha256: 16c1ac8470a3909d1c979035df23a03043e17d6a28f7a1315b652431e58d12e5
                                        
                                            GET /news/data.php HTTP/1.1 
Host: www.jxys88.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys88.net/news/list.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         173.231.12.68
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:10 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   758735
Md5:    ca365fa31d894fdefeaaa744140e3961
Sha1:   bc818cd4bf3eeb4058611cd15d54d7171ea36139
Sha256: bb779d7baf3638c3a7f782d19edbc6343840b68795cea4cc128cef6cd6f3494e
                                        
                                            GET /7c572867c08941819e5390af65418338.gif HTTP/1.1 
Host: 93533557591.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.61.212.224
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "6310a377-12120f"
Date: Sat, 03 Sep 2022 02:57:51 GMT
Server: nginx
Last-Modified: Thu, 01 Sep 2022 12:20:07 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us3-cdnb-24
Content-Length: 1184271


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 100\012- data
Size:   1184271
Md5:    a0d9c3776a1e7616e6c1471d4378e348
Sha1:   1958e68d4544d881c08e58ba3fb7f921db78b212
Sha256: a49fb807e3e7d520fc3dfe9c6031159266a6083ee708f623259e0158060c58f0
                                        
                                            GET /b5/f554e2887180883376a154c0d49550.gif?attname=899E8306-3565-4974-AD46-916F3A0C3E17.gif HTTP/1.1 
Host: aliyun-static-oss.oss-cn-hongkong.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.56.33.17
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 294418
Connection: keep-alive
x-oss-request-id: 63175411D0409B3430BE9B26
Vary: Origin
Accept-Ranges: bytes
ETag: "B5F554E2887180883376A154C0D49550"
Last-Modified: Tue, 25 Jan 2022 08:46:16 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7927258656666560621
x-oss-storage-class: Standard
Content-Disposition: inline;filename=899E8306-3565-4974-AD46-916F3A0C3E17.gif
Content-MD5: tfVU4ohxgIgzdqFUwNSVUA==
x-oss-server-time: 2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1000 x 120\012- data
Size:   294418
Md5:    b5f554e2887180883376a154c0d49550
Sha1:   054d301265d3dcfae8744965a1ecd81c39d938c9
Sha256: 07cb8aac7eb97f735999f176016eb0f26e1b4958acfb3924d22c9ff901250b2a
                                        
                                            GET /dongtu/wwwsss.gif HTTP/1.1 
Host: aixuntupiana.oss-cn-hongkong.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.57.203.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 513520
Connection: keep-alive
x-oss-request-id: 631754112A67CA3336A9C127
Content-Disposition: attachment; filename="wwwsss.gif"
x-oss-force-download: true
Accept-Ranges: bytes
ETag: "EE450336C78FC101D2D7205E82D9EFC9"
Last-Modified: Thu, 18 Aug 2022 09:20:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7942705136501946339
x-oss-storage-class: Standard
Content-MD5: 7kUDNsePwQHS1yBegtnvyQ==
x-oss-server-time: 2


--- Additional Info ---
Magic:  GIF image data, version 89a, 220 x 145\012- data
Size:   513520
Md5:    ee450336c78fc101d2d7205e82d9efc9
Sha1:   95f23c71ca954de5625ebc0c8cef043d329a19f7
Sha256: 61ef0f377860af7919f42403fd97cf9b1449ad52f35d4b30a25131e429e456d9
                                        
                                            GET /df99068335a545579920310eb24705ff.gif HTTP/1.1 
Host: 884352.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.75.19.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 423997
Connection: keep-alive
x-oss-request-id: 631754119DB5783039AAD5A4
Accept-Ranges: bytes
ETag: "E1A71FED14E92C07C2E10086C3F8AD63"
Last-Modified: Wed, 20 Jul 2022 08:31:02 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18376862633552853608
x-oss-storage-class: Standard
Content-MD5: 4acf7RTpLAfC4QCGw/itYw==
x-oss-server-time: 1


--- Additional Info ---
Magic:  GIF image data, version 89a, 750 x 240\012- data
Size:   423997
Md5:    e1a71fed14e92c07c2e10086c3f8ad63
Sha1:   aa5d034602b33fc99e8611326ab13612f6240c29
Sha256: b26d4de107c13bfceff216d745f7fa588dfe81e1908d392934e69ac5d4b1f15b
                                        
                                            GET /af487946377641ea8b2db51483f4b919.gif HTTP/1.1 
Host: 885364.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.75.19.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Tue, 06 Sep 2022 14:07:14 GMT
Content-Length: 33267
Connection: keep-alive
x-oss-request-id: 63175412B3748430362C4619
Accept-Ranges: bytes
ETag: "BC3F27F450AD0EBD19370D3737FC2E07"
Last-Modified: Tue, 02 Aug 2022 10:36:32 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2465277436600690179
x-oss-storage-class: Standard
Content-MD5: vD8n9FCtDr0ZNw03N/wuBw==
x-oss-server-time: 1


--- Additional Info ---
Magic:  GIF image data, version 89a, 250 x 150\012- data
Size:   33267
Md5:    bc3f27f450ad0ebd19370d3737fc2e07
Sha1:   f1ac03dc00b5370bafdfdc604cea7f8bbdb3d75b
Sha256: f76a84ddee61f9d582915900d7074fbb4c989b9669c3f871fd9fbf465895cbe1
                                        
                                            GET /dongtu/dddsssss.gif HTTP/1.1 
Host: aixuntupiana.oss-cn-hongkong.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.57.203.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: AliyunOSS
Date: Tue, 06 Sep 2022 14:07:13 GMT
Content-Length: 840357
Connection: keep-alive
x-oss-request-id: 631754112A67CA3338A8C127
Content-Disposition: attachment; filename="dddsssss.gif"
x-oss-force-download: true
Accept-Ranges: bytes
ETag: "9E160C09997E69EA8413677F7D663904"
Last-Modified: Thu, 18 Aug 2022 09:20:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12978963347354480605
x-oss-storage-class: Standard
Content-MD5: nhYMCZl+aeqEE2d/fWY5BA==
x-oss-server-time: 2


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   840357
Md5:    9e160c09997e69ea8413677f7d663904
Sha1:   2b75b4fe8a10a1941b6338448912428e4a93c7c9
Sha256: 73786a3a6eccefa740ef4201b8421389acb2737796c24dac77aaeddd9acddbc5
                                        
                                            GET /73f23e1f7ead40baa32cf579a4bb735b.gif HTTP/1.1 
Host: 87193776899.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.61.212.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: max-age=604800
ETag: "62f27ac4-86f72"
Date: Fri, 02 Sep 2022 22:55:11 GMT
Server: nginx
Last-Modified: Tue, 09 Aug 2022 15:18:28 GMT
Accept-Ranges: bytes
X-Cache: HIT from cloud-us2-cdnb-16
Content-Length: 552818


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 60\012- data
Size:   552818
Md5:    097e6fa9314192dc3dd55cb1c5023ee5
Sha1:   c30366c4c910616f1a3c1b773ffb4af967e20eb5
Sha256: db020d7293807326453f5848c0bf219e2b835f2530468a9d816a3c1c7941023a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /tututu/yue.gif HTTP/1.1 
Host: fsadcx1.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.225.3.254
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 06 Sep 2022 14:07:13 GMT
content-length: 3960978
last-modified: Thu, 29 Jul 2021 12:00:20 GMT
etag: "61029854-3c7092"
expires: Thu, 06 Oct 2022 14:07:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 540 x 260\012- data
Size:   3960978
Md5:    d8cb43dc553102ce0f6f051f33c1e801
Sha1:   2129e8cc2a17aed95bf77d70074cd779125f88ae
Sha256: 21e3ff28623e466cb2d36e805b1f47a83292022a9e98266a05960b62e95b67e0
                                        
                                            GET /huazidongtu/ddwq.gif HTTP/1.1 
Host: tupaiyy.oss-cn-hongkong.aliyuncs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jxys47.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         47.75.19.80
HTTP/1.1 200 OK
Content-Type: image/gif